Edit tour

Windows Analysis Report
http://www.1040now.net

Overview

General Information

Sample URL:	http://www.1040now.net
Analysis ID:	1428545
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1772 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4340 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1880 --field-trial-handle=1884,i,916011695703265351,17086815413262995248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1712 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7540 --field-trial-handle=1884,i,916011695703265351,17086815413262995248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6608 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7468 --field-trial-handle=1884,i,916011695703265351,17086815413262995248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6668 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.1040now.net" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.1040now.net/partner.html	HTTP Parser: No favicon
Source: https://www.1040now.net/mobile/1040Now%20Privacy%20Statement%201.htm#warranty	HTTP Parser: No favicon
Source: https://www.1040now.net/partnerpp.htm	HTTP Parser: No favicon
Source: https://www.1040now.net/mobile/Federal%20Tax%20Forms.htm	HTTP Parser: No favicon
Source: https://www.1040now.net/mobile/1040Now%20Pricing.html	HTTP Parser: No favicon
Source: https://www.1040now.net/mobile/1040Now%20Year.html	HTTP Parser: No favicon
Source: https://www.1040now.net/mobile/1040now%20FAQ.htm	HTTP Parser: No favicon
Source: https://www.irs.gov/filing/e-file-options	HTTP Parser: No favicon
Source: https://www.irs.gov/filing/e-file-options	HTTP Parser: No favicon
Source: https://www.irs.gov/filing/e-file-options	HTTP Parser: No favicon
Source: https://www.irs.gov/filing/e-file-options	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/s09YWoGtftM?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/yiQ-C7lGw0o?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/zmUPHj3AvZc?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/qP5c-ZOMct4?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov	HTTP Parser: No favicon
Source: https://www.1040now.net/mobile/sslgeotrust.html	HTTP Parser: No favicon
Source: https://secure.trust-guard.com/privacy/12081	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.4:49778 version: TLS 1.2

Source:	Binary string: g.k.setPlaybackQualityRange=function(a,b,c){var d=g.OT(this.app,this.playerType);d&&g.Pdb(d,g.jP(a,b\|\|a,!0,"m"),!0,c)}; source: chromecache_321.2.dr
Source:	Binary string: g.Pdb=function(a,b,c,d){a.videoData.Qz=b;if(a.Lf&&c){c=a.pk;var e=a.Lf;if(e.j.j){var f=fP(),h=e.j.videoInfos[0].video.j;if(!(f>h&&0!==h&&b.j===h)){var l;f=gbb(c,null==(l=e.j)?void 0:l.videoInfos);l=c.oa.getPlaybackRate();1<l&&f&&(l=zRa(c.W.G,e.j.videoInfos,l),0!==b.j&&l<b.j&&c.oa.setPlaybackRate(1));var m,n;b=g.wK[mP(b)];e=(null==(m=e.videoData.B)?void 0:null==(n=m.video)?void 0:n.j)\|\|0;g.qC("yt-player-quality",{quality:b,previousQuality:e},31104E3);c.W.schedule.policy.C=480<=fP();if(c.L("html5_exponential_memory_for_sticky")){m= source: chromecache_321.2.dr

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /partner.html HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: http://www.1040now.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles-ez.css?reload HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.1040now.net/partner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/top-left.jpg HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/partner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/secured.gif HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/partner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/index_01.jpg HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/partner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/index_02.jpg HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/partner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/index_05.jpg HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/partner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /seals/privacy/12081-mini.gif HTTP/1.1Host: dw26xg4lubooo.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/bg.jpg HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/styles-ez.css?reloadAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/table-bg.jpg HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/styles-ez.css?reloadAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/button-no-free.jpg HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/partner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/index_04.jpg HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/partner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/index_07.jpg HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/partner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/nav-user.jpg HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/partner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/secured.gif HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/index_05.jpg HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/index_02.jpg HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/efile-logo.jpg HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/partner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/nav-previous.jpg HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/partner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/nav-privacy.jpg HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/partner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/block-tops.jpg HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/partner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/nav-pricing.jpg HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/partner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/nav-federal.jpg HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/partner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/nav-online.jpg HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/partner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/index_03.jpg HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/partner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/top-left.jpg HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/index_01.jpg HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/bg.jpg HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/table-bg.jpg HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/button-no-free.jpg HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/index_04.jpg HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /seals/privacy/12081-mini.gif HTTP/1.1Host: dw26xg4lubooo.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/partner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /images-ez/index_07.jpg HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/nav-user.jpg HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/efile-logo.jpg HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/nav-previous.jpg HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/block-tops.jpg HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/nav-privacy.jpg HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/nav-federal.jpg HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/nav-pricing.jpg HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/nav-online.jpg HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images-ez/index_03.jpg HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.aspx?code=2 HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main.aspx?code=2 HTTP/1.1Host: www.1040now.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix
Source: global traffic	HTTP traffic detected: GET /1040.css HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.1040now.net/main.aspx?code=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /main.css HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.1040now.net/main.aspx?code=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /menutax.css HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.1040now.net/main.aspx?code=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /menuco.css HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.1040now.net/main.aspx?code=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /js/IRS_fingerprint2.js HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.1040now.net/main.aspx?code=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /js/sha1.js HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.1040now.net/main.aspx?code=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /images/1040.gif HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/main.aspx?code=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /images/IRS%20Logo.bmp HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/main.aspx?code=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /main.css HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.1040now.net/main.aspx?code=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /images/Next.bmp HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/main.aspx?code=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /js/jquery.min.js HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.1040now.net/main.aspx?code=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /main_.js HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.1040now.net/main.aspx?code=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /main.js HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.1040now.net/main.aspx?code=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /images/1040.gif HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /images/IRS%20Logo.bmp HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /menutax.js HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.1040now.net/main.aspx?code=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /images/Next.bmp HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /menuco.js HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.1040now.net/main.aspx?code=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /1040now/1040Now%20Privacy%20Statement%201.htm HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /mobile/1040Now%20Privacy%20Statement%201.htm HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.1040now.net/1040now/1040Now%20Privacy%20Statement%201.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /mobile/css/owl.carousel.min.css HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.1040now.net/mobile/1040Now%20Privacy%20Statement%201.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /seals/privacy/12081-header.gif HTTP/1.1Host: dw26xg4lubooo.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mobile/css/style.css HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.1040now.net/mobile/1040Now%20Privacy%20Statement%201.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /mobile/font/font.css HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.1040now.net/mobile/1040Now%20Privacy%20Statement%201.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /bootstrap/3.2.0/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.1040now.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ionicons/1.5.2/css/ionicons.min.css HTTP/1.1Host: code.ionicframework.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.1040now.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /seals/privacy/12081-header.gif HTTP/1.1Host: dw26xg4lubooo.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /partnerpp.htm HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /images-ez/footer.jpg HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/partnerpp.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /images-ez/footer.jpg HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /1040now/Federal%20Tax%20Forms.htm HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /mobile/Federal%20Tax%20Forms.htm HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.1040now.net/1040now/Federal%20Tax%20Forms.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /index.aspx?req1=email HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /main.aspx?req1=email HTTP/1.1Host: www.1040now.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /main.css HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.1040now.net/main.aspx?req1=emailAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /images/Done.bmp HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/main.aspx?req1=emailAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /images/Done.bmp HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /privacy-seal/1040Now/asc?rid=202ca784-86d2-499e-8585-821c00075510 HTTP/1.1Host: privacy-policy.truste.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.1040now.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1040now/1040Now%20Pricing.htm HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /1040now/images/1040header2004-01.gif HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/1040now/1040Now%20Pricing.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /mobile/1040Now%20Pricing.html HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.1040now.net/1040now/1040Now%20Pricing.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /1040now/images/1040header2004-01.gif HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /1040now/1040Now%20Year.htm HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /mobile/1040Now%20Year.html HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.1040now.net/1040now/1040Now%20Year.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /1040now/1040now%20FAQ.htm HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /mobile/1040now%20FAQ.htm HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.1040now.net/1040now/1040now%20FAQ.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /1040now/1040Now%20FAQ.htm HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /menu/page.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.irs.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/s09YWoGtftM?autoplay=0&start=0&rel=0 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.irs.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.irs.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/yiQ-C7lGw0o?autoplay=0&start=0&rel=0 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.irs.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/zmUPHj3AvZc?autoplay=0&start=0&rel=0 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.irs.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/qP5c-ZOMct4?autoplay=0&start=0&rel=0 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.irs.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/0af6e327/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=guGxIDTBzds; VISITOR_INFO1_LIVE=HF_l3ckmeBg; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/0af6e327/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /iframe_api HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.irs.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/0af6e327/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/0af6e327/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /menu/modules/core.BRQnzO8v.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.irs.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.irs.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /menu/sm.25.html HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.irs.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/s09YWoGtftM?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.irs.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.irs.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /embed/yiQ-C7lGw0o?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.irs.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/0af6e327/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.irs.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /embed/zmUPHj3AvZc?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.irs.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /Universal-Federated-Analytics-Min.js?agency=IRS HTTP/1.1Host: dap.digitalgov.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.irs.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /menu/svg/icons/facebook.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.irs.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://static.addtoany.com/menu/modules/core.BRQnzO8v.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /menu/svg/icons/twitter.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.irs.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://static.addtoany.com/menu/modules/core.BRQnzO8v.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /menu/svg/icons/linkedin.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.irs.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://static.addtoany.com/menu/modules/core.BRQnzO8v.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/qP5c-ZOMct4?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.irs.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /vi_webp/s09YWoGtftM/default.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/0af6e327/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/s09YWoGtftM?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.govAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /js/th/suXtyypHr-kmcDv8BLab_zSS-cnpn4GzxWV-_PefaIU.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/8hmgK-BHqGc/default.jpg?sqp=-oaymwEkCHgQWvKriqkDGvABAfgB_gmAAtAFigIMCAAQARhlIFsoUDAP&rs=AOn4CLBKgLX8rib9_UCRiNMtON9Lcz84_Q HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_l7EQrwAPBISw10QVF36IsB-cpyKQ4weQOea7p4iPxQj3U=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/yiQ-C7lGw0o/default.jpg?sqp=-oaymwEkCHgQWvKriqkDGvABAfgB_gmAAtAFigIMCAAQARhlIFQoUDAP&rs=AOn4CLB0FmWsdr7EhIr7OHcDeM_-hZKOgA HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/zmUPHj3AvZc/default.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/rNOiIBWn_DQS_hHEFtHtv97eBjsLLf3CcRgHQ0Jgy0I.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?D0IFaA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/s09YWoGtftM?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.govAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?XwLgIQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.govAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204?ZY1s1g HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/yiQ-C7lGw0o?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.govAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/qP5c-ZOMct4/default.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?_OqtvQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/zmUPHj3AvZc?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.govAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204?RU8WWA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/qP5c-ZOMct4?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.govAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/s09YWoGtftM/default.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/8hmgK-BHqGc/default.jpg?sqp=-oaymwEkCHgQWvKriqkDGvABAfgB_gmAAtAFigIMCAAQARhlIFsoUDAP&rs=AOn4CLBKgLX8rib9_UCRiNMtON9Lcz84_Q HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/yiQ-C7lGw0o/default.jpg?sqp=-oaymwEkCHgQWvKriqkDGvABAfgB_gmAAtAFigIMCAAQARhlIFQoUDAP&rs=AOn4CLB0FmWsdr7EhIr7OHcDeM_-hZKOgA HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/zmUPHj3AvZc/default.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/qP5c-ZOMct4/default.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_l7EQrwAPBISw10QVF36IsB-cpyKQ4weQOea7p4iPxQj3U=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=JkyQnUrYhhi1J_KvhBtN6WrUgrFAFmobRgsTukfk4EX0PiXmK72IGpKl8qENHDHK0aibAthpYjZ9AlUFssR4LHOGLAK5oiC7zLU5UlmgOFKPuarYF7qRplWBl4newUdoorhVr1fQgFTY0fuh0jmdttwwgbL-gkZ6LVDwoQAMs3M
Source: global traffic	HTTP traffic detected: GET /nr-rum-1.256.1.min.js HTTP/1.1Host: js-agent.newrelic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.irs.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.irs.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=JkyQnUrYhhi1J_KvhBtN6WrUgrFAFmobRgsTukfk4EX0PiXmK72IGpKl8qENHDHK0aibAthpYjZ9AlUFssR4LHOGLAK5oiC7zLU5UlmgOFKPuarYF7qRplWBl4newUdoorhVr1fQgFTY0fuh0jmdttwwgbL-gkZ6LVDwoQAMs3M
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=JkyQnUrYhhi1J_KvhBtN6WrUgrFAFmobRgsTukfk4EX0PiXmK72IGpKl8qENHDHK0aibAthpYjZ9AlUFssR4LHOGLAK5oiC7zLU5UlmgOFKPuarYF7qRplWBl4newUdoorhVr1fQgFTY0fuh0jmdttwwgbL-gkZ6LVDwoQAMs3M
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/b67fc6a152?a=70700070&v=1.256.1&to=blMHY0AHDUcDUEZQWFcZJFRGDwxaTXdATEdYWjlTUxICWANKV0trfVcRVl4HGlEQf1NDTntDDFtWAxFHTw1eWE1AZQZFWxYXYANU&rst=10063&ck=0&s=ca762eb62dd64914&ref=https://www.irs.gov/filing/e-file-options&hr=0&qt=2&ap=503&be=1421&fe=7923&dc=2608&at=QhQEFQgdHkk%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1713504734081,%22n%22:0,%22f%22:929,%22dn%22:930,%22dne%22:930,%22c%22:930,%22s%22:930,%22ce%22:1156,%22rq%22:1156,%22rp%22:1422,%22rpe%22:1750,%22di%22:3983,%22ds%22:3983,%22de%22:4029,%22dc%22:9342,%22l%22:9342,%22le%22:9344%7D,%22navigation%22:%7B%7D%7D&fp=2814&fcp=2814 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /sslgeotrust.htm HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /images/1040header2004-01.gif HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.1040now.net/sslgeotrust.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /mobile/sslgeotrust.html HTTP/1.1Host: www.1040now.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.1040now.net/sslgeotrust.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /images/1040header2004-01.gif HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /privacy/12081 HTTP/1.1Host: secure.trust-guard.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page/css/split-cert.css HTTP/1.1Host: secure.trust-guard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secure.trust-guard.com/privacy/12081Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
Source: global traffic	HTTP traffic detected: GET /page/smarty/jquery.js?v=1-4 HTTP/1.1Host: secure.trust-guard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.trust-guard.com/privacy/12081Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
Source: global traffic	HTTP traffic detected: GET /page/smarty/ajax.js?v=1-4 HTTP/1.1Host: secure.trust-guard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.trust-guard.com/privacy/12081Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
Source: global traffic	HTTP traffic detected: GET /page/smarty/tools.js?v=1-4 HTTP/1.1Host: secure.trust-guard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.trust-guard.com/privacy/12081Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
Source: global traffic	HTTP traffic detected: GET /page/js/certificates.js HTTP/1.1Host: secure.trust-guard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.trust-guard.com/privacy/12081Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
Source: global traffic	HTTP traffic detected: GET /page/templates/certificates/images/trustguard-logo.jpg HTTP/1.1Host: secure.trust-guard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.trust-guard.com/privacy/12081Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
Source: global traffic	HTTP traffic detected: GET /certificates/newimages/privacy-12081.png HTTP/1.1Host: secure.trust-guard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.trust-guard.com/privacy/12081Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
Source: global traffic	HTTP traffic detected: GET /page/templates/certificates/images/white-box_mid.png HTTP/1.1Host: secure.trust-guard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.trust-guard.com/page/css/split-cert.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
Source: global traffic	HTTP traffic detected: GET /page/templates/certificates/images/ssl-img.jpg HTTP/1.1Host: secure.trust-guard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.trust-guard.com/privacy/12081Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
Source: global traffic	HTTP traffic detected: GET /page/templates/certificates/images/trustguard-logo.jpg HTTP/1.1Host: secure.trust-guard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
Source: global traffic	HTTP traffic detected: GET /page/templates/certificates/images/white-box_bot.png HTTP/1.1Host: secure.trust-guard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.trust-guard.com/page/css/split-cert.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
Source: global traffic	HTTP traffic detected: GET /page/templates/certificates/images/thumbs-up.png HTTP/1.1Host: secure.trust-guard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.trust-guard.com/privacy/12081Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
Source: global traffic	HTTP traffic detected: GET /page/templates/certificates/images/thumbs-dn.png HTTP/1.1Host: secure.trust-guard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.trust-guard.com/privacy/12081Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
Source: global traffic	HTTP traffic detected: GET /page/templates/certificates/images/ssl-img.jpg HTTP/1.1Host: secure.trust-guard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
Source: global traffic	HTTP traffic detected: GET /page/templates/certificates/images/tg-shield.png HTTP/1.1Host: secure.trust-guard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.trust-guard.com/privacy/12081Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
Source: global traffic	HTTP traffic detected: GET /page/templates/certificates/images/white-box_mid.png HTTP/1.1Host: secure.trust-guard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
Source: global traffic	HTTP traffic detected: GET /page/templates/certificates/images/white-box_bot.png HTTP/1.1Host: secure.trust-guard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
Source: global traffic	HTTP traffic detected: GET /certificates/newimages/privacy-12081.png HTTP/1.1Host: secure.trust-guard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5; __utma=132071693.2137845622.1713504753.1713504753.1713504753.1; __utmc=132071693; __utmz=132071693.1713504753.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=132071693.1.10.1713504753
Source: global traffic	HTTP traffic detected: GET /page/templates/certificates/images/thumbs-up.png HTTP/1.1Host: secure.trust-guard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5; __utma=132071693.2137845622.1713504753.1713504753.1713504753.1; __utmc=132071693; __utmz=132071693.1713504753.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=132071693.1.10.1713504753
Source: global traffic	HTTP traffic detected: GET /page/templates/certificates/images/thumbs-dn.png HTTP/1.1Host: secure.trust-guard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5; __utma=132071693.2137845622.1713504753.1713504753.1713504753.1; __utmc=132071693; __utmz=132071693.1713504753.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=132071693.1.10.1713504753
Source: global traffic	HTTP traffic detected: GET /page/templates/certificates/images/tg-shield.png HTTP/1.1Host: secure.trust-guard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5; __utma=132071693.2137845622.1713504753.1713504753.1713504753.1; __utmc=132071693; __utmz=132071693.1713504753.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=132071693.1.10.1713504753
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secure.trust-guard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.trust-guard.com/privacy/12081Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5; __utma=132071693.2137845622.1713504753.1713504753.1713504753.1; __utmc=132071693; __utmz=132071693.1713504753.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=132071693.1.10.1713504753
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secure.trust-guard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5; __utma=132071693.2137845622.1713504753.1713504753.1713504753.1; __utmc=132071693; __utmz=132071693.1713504753.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=132071693.1.10.1713504753
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.1040now.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.1040now.net/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /partner.htm HTTP/1.1Host: www.1040now.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://www.1040now.net/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles-ez.css?reload HTTP/1.1Host: www.1040now.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.1040now.net/partner.htmAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_145.2.dr	String found in binary or memory: tag.src = "https://www.youtube.com/iframe_api"; equals www.youtube.com (Youtube)
Source: chromecache_317.2.dr	String found in binary or memory: <a href="https://www.facebook.com/IRS" aria-label="fa-facebook-square"> equals www.facebook.com (Facebook)
Source: chromecache_317.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/irs" aria-label="fa-linkedin"> equals www.linkedin.com (Linkedin)
Source: chromecache_317.2.dr	String found in binary or memory: <a href="https://www.twitter.com/IRSnews" aria-label="fa-twitter-square"> equals www.twitter.com (Twitter)
Source: chromecache_317.2.dr	String found in binary or memory: <a href="https://www.youtube.com/user/irsvideos" aria-label="fa-youtube-play"> equals www.youtube.com (Youtube)
Source: chromecache_317.2.dr	String found in binary or memory: <div class="field field--name-field-media-video-embed-field field--type-video-embed-field field--label-hidden field--item"><div class="video-embed-field-provider-youtube video-embed-field-responsive-video form-group"><iframe width="854" height="480" frameborder="0" allowfullscreen="allowfullscreen" title="Choose a Tax Preparer Wisely" src="https://www.youtube.com/embed/qP5c-ZOMct4?autoplay=0&start=0&rel=0"></iframe> equals www.youtube.com (Youtube)
Source: chromecache_317.2.dr	String found in binary or memory: <div class="field field--name-field-media-video-embed-field field--type-video-embed-field field--label-hidden field--item"><div class="video-embed-field-provider-youtube video-embed-field-responsive-video form-group"><iframe width="854" height="480" frameborder="0" allowfullscreen="allowfullscreen" title="File Your IRS Tax Return Electronically for Free" src="https://www.youtube.com/embed/yiQ-C7lGw0o?autoplay=0&start=0&rel=0"></iframe> equals www.youtube.com (Youtube)
Source: chromecache_317.2.dr	String found in binary or memory: <div class="field field--name-field-media-video-embed-field field--type-video-embed-field field--label-hidden field--item"><div class="video-embed-field-provider-youtube video-embed-field-responsive-video form-group"><iframe width="854" height="480" frameborder="0" allowfullscreen="allowfullscreen" title="Free Help Preparing Your Tax Return" src="https://www.youtube.com/embed/zmUPHj3AvZc?autoplay=0&start=0&rel=0"></iframe> equals www.youtube.com (Youtube)
Source: chromecache_317.2.dr	String found in binary or memory: <div class="field field--name-field-media-video-embed-field field--type-video-embed-field field--label-hidden field--item"><div class="video-embed-field-provider-youtube video-embed-field-responsive-video form-group"><iframe width="854" height="480" frameborder="0" allowfullscreen="allowfullscreen" title="Six Reasons Why You Should File Your Taxes Electronically" src="https://www.youtube.com/embed/s09YWoGtftM?autoplay=0&start=0&rel=0"></iframe> equals www.youtube.com (Youtube)
Source: chromecache_321.2.dr	String found in binary or memory: (g.Ko(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.Ko(c,"www.youtube.com"),d=c.toString()):(c=DBa(d),yJ(c)&&(d=c));c=new g.yP(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_317.2.dr	String found in binary or memory: <a data-entity-substitution="pup_linkit_media" data-entity-type="media" data-entity-uuid="104b4dd2-84c8-483f-88eb-912a96559893" href="https://www.youtube.com/watch?v=YRI30K2uwgc" title="Free Help Preparing Your Tax Return (ASL) - YouTube video"><strong>ASL</strong></a></p> equals www.youtube.com (Youtube)
Source: chromecache_317.2.dr	String found in binary or memory: <a data-entity-substitution="pup_linkit_media" data-entity-type="media" data-entity-uuid="697cd1c8-7797-46bd-8b1f-c7a5e06d7113" href="https://www.youtube.com/watch?v=P3uqyCO0P_8" title="File Your IRS Tax Return Electronically for Free (ASL) - YouTube video"><strong>ASL</strong></a></p> equals www.youtube.com (Youtube)
Source: chromecache_317.2.dr	String found in binary or memory: <a data-entity-substitution="pup_linkit_media" data-entity-type="media" data-entity-uuid="96137318-cd59-41e9-9665-114fe6215f01" href="https://www.youtube.com/watch?v=bVfRAUYKusg&feature=youtu.be" title="Six Reasons Why You Should File Your Taxes Electronically (ASL) - YouTube video">ASL</a></strong></p> equals www.youtube.com (Youtube)
Source: chromecache_317.2.dr	String found in binary or memory: <p><strong><a data-entity-substitution="canonical" data-entity-type="node" data-entity-uuid="c1181896-f671-464a-96f5-b229ec95c62f" href="/newsroom/choose-a-tax-preparer-wisely-2016-youtube-video-text-script" title="Choose a Tax Preparer Wisely - 2016 - YouTube video text script">Transcript</a> <a data-entity-substitution="pup_linkit_media" data-entity-type="media" data-entity-uuid="282a23c1-5588-4159-9080-ae94e7262271" href="https://www.youtube.com/watch?v=YyS9mxUdG_U" title="Choose a Tax Preparer Wisely - 2016 - (ASL) - YouTube video">ASL</a></strong></p> equals www.youtube.com (Youtube)
Source: chromecache_198.2.dr, chromecache_335.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Ij:function(){e=zb()},pd:function(){d()}}};var dc=ia(["data-gtm-yt-inspected-"]),xC=["www.youtube.com","www.youtube-nocookie.com"],yC,zC=!1; equals www.youtube.com (Youtube)
Source: chromecache_321.2.dr	String found in binary or memory: a))):this.Jd(g.NV(a.errorMessage)):this.Jd(PV(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Jn(c,{hl:a})),this.Jd(PV(this,"GENERIC_WITH_LINK_AND_CPN",c,!0)),d.lc&&!d.D&&RYa(this,function(e){if(g.tU(e,b.api,!VR(b.api.U()))){e={as3:!1,html5:!0,player:!0,cpn:b.api.getVideoData().clientPlaybackNonce};var f=b.api;f.vc("onFeedbackArticleRequest",{articleId:3037019,helpContext:"player_error", equals www.youtube.com (Youtube)
Source: chromecache_321.2.dr	String found in binary or memory: a.BASE_YT_URL)\|\|"")\|\|uBa(this.Af)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";"adunit"===h?d=this.D?"embedded":"detailpage":"embedded"===h\|\|this.N?d=VB(d,h,bSa):h&&(d="embedded");this.La=d;cua();h=null;d=b?b.playerStyle:a.ps;f=g.Fb(cSa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.qa=(this.K=g.Fb(cSa,this.playerStyle))&&"play"!==this.playerStyle&&"jamboard"!==this.playerStyle;this.So=!this.qa;this.Qa=UB(!1,a.disableplaybackui);this.disablePaidContentOverlay=UB(!1, equals www.youtube.com (Youtube)
Source: chromecache_321.2.dr	String found in binary or memory: a.severity,e,mK(a.details),f)}else this.oa.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.oe(a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.YC)(),FX(a,"manifest",function(h){b.G=!0;b.ma("pathprobe",h)},function(h){b.oe(h.errorCode,h.details)}))}}; equals www.youtube.com (Youtube)
Source: chromecache_321.2.dr	String found in binary or memory: aRa=function(a,b){if(!a.j["0"]){var c=new BK("0","fakesb",{video:new xK(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new BQ(new g.yP("http://www.youtube.com/videoplayback"),c,"fake"):new MQ(new g.yP("http://www.youtube.com/videoplayback"),c,new lQ(0,0),new lQ(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_335.2.dr	String found in binary or memory: c(S[ka],E.xe)){mI("https://www.youtube.com/iframe_api");t=!0;break}})}}else I(u.vtp_gtmOnSuccess)}var p=["www.youtube.com","www.youtube-nocookie.com"],q={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},r,t=!1;(function(u){Z.__ytl=u;Z.__ytl.C="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1;Z.__ytl.runInSiloedMode=!1})(function(u){u.vtp_triggerStartOption?n(u):ww(function(){n(u)})})}(); equals www.youtube.com (Youtube)
Source: chromecache_198.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Tg:d,Rg:e,Sg:f,Dh:g,Eh:h,xe:m,zb:b},p=D.YT,q=function(){FC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(IC(w,"iframe_api")\|\|IC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!zC&&GC(x[A],n.xe))return Ic("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_352.2.dr	String found in binary or memory: function Qr(a,b,c){this.o=this.g=this.h=null;this.i=0;this.G=!1;this.u=[];this.l=null;this.O={};if(!a)throw Error("YouTube player element ID required.");this.id=Qa(this);this.K=c;c=document;if(a="string"===typeof a?c.getElementById(a):a)if(c="iframe"===a.tagName.toLowerCase(),b.host\|\|(b.host=c?mc(a.src):"https://www.youtube.com"),this.h=new Kr(b),c\|\|(b=Rr(this,a),this.o=a,(c=a.parentNode)&&c.replaceChild(b,a),a=b),this.g=a,this.g.id\|\|(this.g.id="widget"+Qa(this.g)),Er[this.g.id]=this,window.postMessage){this.l= equals www.youtube.com (Youtube)
Source: chromecache_321.2.dr	String found in binary or memory: g.TR=function(a){a=RR(a.Ga);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_321.2.dr	String found in binary or memory: g.Va("Goog_AdSense_Lidar_getUrlSignalsList",yjb);var mBa=pa(["//tpc.googlesyndication.com/sodar/",""]);var fNa={G5a:0,D5a:1,A5a:2,B5a:3,C5a:4,F5a:5,E5a:6};var upa=(new Date).getTime();var Oka="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Pka=/\bocr\b/;var Rka=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;g.y(Uu,g.Kd);Uu.prototype.dispose=function(){window.removeEventListener("offline",this.C);window.removeEventListener("online",this.C);this.Nn.Nj(this.G);delete Uu.instance}; equals www.youtube.com (Youtube)
Source: chromecache_321.2.dr	String found in binary or memory: g.eS=function(a){var b=g.TR(a);rSa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_321.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=g.TR(this);e="www.youtube.com"===c;!f&&d&&e?f="https://youtu.be/"+a:g.NR(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),nD&&(a=jpa())&&(b.ebc=a));return g.Jn(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_279.2.dr	String found in binary or memory: if(oCONFIG.YOUTUBE){var tag=document.createElement("script");tag.src=document.location.protocol+"//www.youtube.com/iframe_api";var firstScriptTag=document.getElementsByTagName("script")[0];firstScriptTag.parentNode.insertBefore(tag,firstScriptTag);var videoArray=[],playerArray=[],_buckets=[],_milestoneController=oCONFIG.YT_MILESTONE,ytUtils=[];onYouTubeIframeAPIReady=function(){for(var a=0;a<videoArray.length;a++)playerArray[a]=new YT.Player(videoArray[a],{events:{onReady:onPlayerReady,onStateChange:onPlayerStateChange, equals www.youtube.com (Youtube)
Source: chromecache_321.2.dr	String found in binary or memory: r;this.lj=b?b.hl\|\|"en_US":XB("en_US",a.hl);this.region=b?b.contentRegion\|\|"US":XB("US",a.cr);this.hostLanguage=b?b.hostLanguage\|\|"en":XB("en",a.host_language);this.Mo=!this.Dc&&Math.random()<g.WI(this.experiments,"web_player_api_logging_fraction");this.Za=!this.Dc;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(null==b\|\|!b.deviceIsAudioOnly);this.Gd=WB(this.Gd,a.ismb);this.So?(r=a.vss_host\|\|"s.youtube.com","s.youtube.com"===r&&(r=RR(this.Ga)\|\|"www.youtube.com")):r="video.google.com";this.Um= equals www.youtube.com (Youtube)
Source: chromecache_227.2.dr, chromecache_253.2.dr	String found in binary or memory: return b}vC.H="internal.enableAutoEventOnTimer";var dc=ia(["data-gtm-yt-inspected-"]),xC=["www.youtube.com","www.youtube-nocookie.com"],yC,zC=!1; equals www.youtube.com (Youtube)
Source: chromecache_317.2.dr	String found in binary or memory: s What to Know About IRS Free File Guided Tax Software" src="https://www.youtube.com/embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0"></iframe> equals www.youtube.com (Youtube)
Source: chromecache_195.2.dr	String found in binary or memory: tag.src = document.location.protocol + "//www.youtube.com/iframe_api"; equals www.youtube.com (Youtube)
Source: chromecache_321.2.dr	String found in binary or memory: this.W.Ba&&(a.authuser=this.W.Ba);this.W.pageId&&(a.pageid=this.W.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.oc()))?e[1]:"";"ATV"===e&&(a.cdt=e);this.G=a;this.G.session_id=d;this.qa=!0;"widevine"===this.B.flavor&&(this.G.hdr="1");"playready"===this.B.flavor&&(b=Number(oR(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&0<=b&&(this.G.mfpe=""+b),this.qa=!1);b="";g.hR(this.B)?gR(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_321.2.dr	String found in binary or memory: var G3={};var Bfb=/[&\?]action_proxy=1/,Afb=/[&\?]token=([\w-])/,Cfb=/[&\?]video_id=([\w-])/,Dfb=/[&\?]index=([\d-])/,Efb=/[&\?]m_pos_ms=([\d-])/,Gfb=/[&\?]vvt=([\w-]*)/,sfb="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),Ffb="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),vfb={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_331.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/0af6e327\/www-widgetapi.vflset\/www-widgetapi.js';window['yt_embedsEnableIframeDefaultReferrerPolicy'] = true ;try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: www.1040now.net

Source: unknown

HTTP traffic detected: POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 586sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-Type: application/x-www-form-urlencoded;charset=UTF-8X-Goog-AuthUser: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffStrict-Transport-Security: max-age=31536000Date: Fri, 19 Apr 2024 05:31:41 GMTConnection: closeContent-Length: 1245
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffStrict-Transport-Security: max-age=31536000Date: Fri, 19 Apr 2024 05:31:42 GMTConnection: closeContent-Length: 1245
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffStrict-Transport-Security: max-age=31536000Date: Fri, 19 Apr 2024 05:31:57 GMTConnection: closeContent-Length: 1245

Source: chromecache_195.2.dr	String found in binary or memory: http://apps.irs.gov/app/scripts/exit.jsp?dest=http://www.usa.gov/)
Source: chromecache_344.2.dr	String found in binary or memory: http://code.ionicframework.com/ionicons/1.5.2/css/ionicons.min.css
Source: chromecache_344.2.dr	String found in binary or memory: http://fonts.googleapis.com/css?family=Nova
Source: chromecache_278.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: http://individuals.marylandtaxes.com/refundstatus/default.asp
Source: chromecache_162.2.dr	String found in binary or memory: http://ionicons.com/
Source: chromecache_297.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_297.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_224.2.dr	String found in binary or memory: http://jsfiddle.net/NDYV8/16/
Source: chromecache_224.2.dr	String found in binary or memory: http://jsfiddle.net/NDYV8/19/
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: http://revenue.ky.gov/refund.htm
Source: chromecache_191.2.dr	String found in binary or memory: http://secure.trust-guard.com/privacy/12081
Source: chromecache_352.2.dr, chromecache_300.2.dr, chromecache_321.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_211.2.dr, chromecache_191.2.dr, chromecache_237.2.dr	String found in binary or memory: http://www.1040now.com/
Source: chromecache_237.2.dr	String found in binary or memory: http://www.1040now.net/1040now/1040Now%20Pricing
Source: chromecache_237.2.dr	String found in binary or memory: http://www.1040now.net/1040now/1040Now%20Privacy%20Statement%201.htm
Source: chromecache_237.2.dr	String found in binary or memory: http://www.1040now.net/1040now/1040Now%20Year.htm
Source: chromecache_237.2.dr	String found in binary or memory: http://www.1040now.net/1040now/1040now%20FAQ.htm
Source: chromecache_237.2.dr	String found in binary or memory: http://www.1040now.net/1040now/Federal%20Tax%20Forms.htm
Source: chromecache_174.2.dr	String found in binary or memory: http://www.1040now.net/2014/index.aspx
Source: chromecache_237.2.dr	String found in binary or memory: http://www.1040now.net/geotrust.htm
Source: chromecache_174.2.dr	String found in binary or memory: http://www.1040now.net/index.aspx
Source: chromecache_307.2.dr	String found in binary or memory: http://www.1040now.net/partner.htm
Source: chromecache_266.2.dr	String found in binary or memory: http://www.atap.arkansas.gov
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: http://www.azdor.gov/Refunds%20and%20Credits/refundinquiry.htm
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: http://www.ct.gov/drs/cwp/view.asp?a=1462&q=266274&drsPNavCtr=
Source: chromecache_266.2.dr	String found in binary or memory: http://www.ct.gov/myrefund
Source: chromecache_211.2.dr, chromecache_191.2.dr, chromecache_237.2.dr	String found in binary or memory: http://www.domain.com
Source: chromecache_266.2.dr	String found in binary or memory: http://www.dornc.com/electronic/refundprocess.html
Source: chromecache_337.2.dr	String found in binary or memory: http://www.google-analytics.com
Source: chromecache_237.2.dr	String found in binary or memory: http://www.irs.gov
Source: chromecache_191.2.dr	String found in binary or memory: http://www.irs.gov/efile
Source: chromecache_224.2.dr	String found in binary or memory: http://www.lalit.org/lab/javascript-css-font-detect/
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: http://www.nd.gov/tax/indincome/refundinfo/
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: http://www.nj.gov/treasury/taxation/index.html?refinfo.htm~mainFrame
Source: chromecache_224.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_266.2.dr	String found in binary or memory: http://www.revenue.nebraska.gov/refund/refunds.html
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: http://www.revenue.wi.gov/faqs/inquiry.html
Source: chromecache_266.2.dr	String found in binary or memory: http://www.state.nj.us/treasury/taxation/individuals.shtml
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: http://www.state.wv.us/taxdiv/
Source: chromecache_224.2.dr	String found in binary or memory: http://www.stucox.com/blog/you-cant-detect-a-touchscreen/
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: http://www.tax.ok.gov/refund.html
Source: chromecache_321.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_321.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_321.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_321.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_321.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_321.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_227.2.dr, chromecache_198.2.dr, chromecache_253.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_227.2.dr, chromecache_198.2.dr, chromecache_253.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_226.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_216.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_219.2.dr	String found in binary or memory: https://apps.irs.gov
Source: chromecache_266.2.dr	String found in binary or memory: https://azdor.gov/individual-income-tax-filing-assistance/wheres-my-refund
Source: chromecache_224.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=781447
Source: chromecache_227.2.dr, chromecache_198.2.dr, chromecache_335.2.dr, chromecache_253.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_266.2.dr, chromecache_276.2.dr, chromecache_167.2.dr, chromecache_199.2.dr, chromecache_247.2.dr	String found in binary or memory: https://code.ionicframework.com/ionicons/1.5.2/css/ionicons.min.css
Source: chromecache_224.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/MediaDevices/enumerateDevices
Source: chromecache_352.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: chromecache_317.2.dr	String found in binary or memory: https://directfile.irs.gov/
Source: chromecache_321.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_266.2.dr	String found in binary or memory: https://dor.georgia.gov/wheres-my-refund
Source: chromecache_266.2.dr	String found in binary or memory: https://dor.mo.gov/personal/individual
Source: chromecache_266.2.dr	String found in binary or memory: https://dor.sc.gov/tax/individual-income
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://dors.mo.gov/tax/taxinq/welcome.jsp
Source: chromecache_266.2.dr, chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://dorweb.revenue.delaware.gov/scripts/refinq/refinq.dll
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://eservices.dor.nc.gov/wheresmyrefund/selection.jsp
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://eservices.idrf.state.ia.us/taxrefund/LogoffUser?view=logonUser
Source: chromecache_263.2.dr	String found in binary or memory: https://feedback-form.truste.com/watchdog/request
Source: chromecache_224.2.dr	String found in binary or memory: https://fingerprintjs.com)
Source: chromecache_266.2.dr, chromecache_276.2.dr, chromecache_167.2.dr, chromecache_199.2.dr, chromecache_247.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Nova
Source: chromecache_221.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/novasquare/v24/RrQUbo9-9DV7b06QHgSWsahHT4I.woff2)
Source: chromecache_297.2.dr	String found in binary or memory: https://git.drupalcode.org/project/once/-/raw/v1.0.1/LICENSE.md
Source: chromecache_166.2.dr	String found in binary or memory: https://github.com/JJJ/chosen/blob/master/LICENSE.md
Source: chromecache_224.2.dr	String found in binary or memory: https://github.com/Modernizr/Modernizr/blob/master/feature-detects/canvas/winding.js
Source: chromecache_224.2.dr	String found in binary or memory: https://github.com/Modernizr/Modernizr/issues/548
Source: chromecache_224.2.dr	String found in binary or memory: https://github.com/cozylife/audio-fingerprint
Source: chromecache_162.2.dr	String found in binary or memory: https://github.com/driftyco/ionicons
Source: chromecache_224.2.dr	String found in binary or memory: https://github.com/fingerprintjs/fingerprintjs
Source: chromecache_224.2.dr	String found in binary or memory: https://github.com/fingerprintjs/fingerprintjs#upgrade-guide-from-182-to-200
Source: chromecache_224.2.dr	String found in binary or memory: https://github.com/fingerprintjs/fingerprintjs/issues/375
Source: chromecache_224.2.dr	String found in binary or memory: https://github.com/fingerprintjs/fingerprintjs/issues/405
Source: chromecache_224.2.dr	String found in binary or memory: https://github.com/fingerprintjs/fingerprintjs/issues/66
Source: chromecache_297.2.dr	String found in binary or memory: https://github.com/focus-trap/tabbable/blob/master/LICENSE
Source: chromecache_166.2.dr	String found in binary or memory: https://github.com/harvesthq/chosen/blob/master/LICENSE.md
Source: chromecache_224.2.dr	String found in binary or memory: https://github.com/karanlyons/murmurHash3.js)
Source: chromecache_335.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_352.2.dr, chromecache_300.2.dr, chromecache_321.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_278.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_317.2.dr	String found in binary or memory: https://home.treasury.gov/footer/no-fear-act
Source: chromecache_321.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_266.2.dr	String found in binary or memory: https://incometax.utah.gov/refunds
Source: chromecache_266.2.dr	String found in binary or memory: https://interactive.marylandtaxes.com/INDIV/refundstatus/home.aspx
Source: chromecache_321.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_317.2.dr	String found in binary or memory: https://jobs.irs.gov/
Source: chromecache_266.2.dr, chromecache_276.2.dr, chromecache_344.2.dr, chromecache_167.2.dr, chromecache_199.2.dr, chromecache_247.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.min.css
Source: chromecache_266.2.dr	String found in binary or memory: https://myalabamataxes.alabama.gov
Source: chromecache_266.2.dr	String found in binary or memory: https://mytax.dc.gov
Source: chromecache_266.2.dr	String found in binary or memory: https://mytaxes.wvtax.gov/?link=refund
Source: chromecache_266.2.dr	String found in binary or memory: https://myvtax.vermont.gov/_/
Source: chromecache_253.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_227.2.dr, chromecache_198.2.dr, chromecache_335.2.dr, chromecache_253.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_321.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_266.2.dr	String found in binary or memory: https://portal.maine.gov/refundstatus
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://portalx.bisoex.state.me.us/jav/RefundStatus_prod/
Source: chromecache_297.2.dr	String found in binary or memory: https://raw.githubusercontent.com/focus-trap/tabbable/v6.1.2/LICENSE
Source: chromecache_297.2.dr	String found in binary or memory: https://raw.githubusercontent.com/jashkenas/underscore/1.13.6/LICENSE
Source: chromecache_297.2.dr, chromecache_296.2.dr	String found in binary or memory: https://raw.githubusercontent.com/jquery/jquery-ui/1.13.2/LICENSE.txt
Source: chromecache_297.2.dr	String found in binary or memory: https://raw.githubusercontent.com/jquery/jquery/3.7.0/LICENSE.txt
Source: chromecache_166.2.dr	String found in binary or memory: https://raw.githubusercontent.com/muicss/loadjs/4.2.0/LICENSE.txt
Source: chromecache_321.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_321.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_321.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_321.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_266.2.dr	String found in binary or memory: https://refund.ky.gov/
Source: chromecache_266.2.dr	String found in binary or memory: https://revenueonline.dor.oregon.gov/tap/?Link=WMR
Source: chromecache_317.2.dr	String found in binary or memory: https://s.go-mpulse.net/boomerang/
Source: chromecache_317.2.dr	String found in binary or memory: https://s2.go-mpulse.net/boomerang/
Source: chromecache_317.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://secure.dor.state.or.us/refund/index.cfm
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://secure.in.gov/apps/dor/tax/refund/refundStatusQuery.jsp
Source: chromecache_276.2.dr	String found in binary or memory: https://secure.trust-guard.com/privacy/12081
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://secure.vermont.gov/TAX/refund/
Source: chromecache_337.2.dr	String found in binary or memory: https://ssl.google-analytics.com
Source: chromecache_337.2.dr	String found in binary or memory: https://ssl.google-analytics.com/j/__utm.gif
Source: chromecache_224.2.dr	String found in binary or memory: https://stackoverflow.com/questions/46363048/onaudioprocess-not-called-on-ios11#46534088
Source: chromecache_159.2.dr	String found in binary or memory: https://static.addtoany.com/menu/
Source: chromecache_317.2.dr	String found in binary or memory: https://static.addtoany.com/menu/page.js
Source: chromecache_159.2.dr	String found in binary or memory: https://static.addtoany.com/menu/sm.25.html#type=core&event=load
Source: chromecache_227.2.dr, chromecache_198.2.dr, chromecache_253.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_227.2.dr, chromecache_198.2.dr, chromecache_253.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_226.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_337.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect?
Source: chromecache_321.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_321.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_321.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_321.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_226.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_266.2.dr	String found in binary or memory: https://tap.dor.mt.gov
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tap.dor.mt.gov/MT_xwTapRfn.aspx
Source: chromecache_266.2.dr	String found in binary or memory: https://tax.ehawaii.gov/hoihoi/refund.html
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tax.ehawaii.gov/hoihoi/refund.html;jsessionid=CCA8640FC8B168AB414F77CF00019CD0.www01
Source: chromecache_266.2.dr	String found in binary or memory: https://tax.idaho.gov/
Source: chromecache_266.2.dr	String found in binary or memory: https://tax.illinois.gov/Individuals/Refunds.htm
Source: chromecache_266.2.dr	String found in binary or memory: https://tax.iowa.gov/
Source: chromecache_266.2.dr	String found in binary or memory: https://tax.ohio.gov/refund
Source: chromecache_227.2.dr, chromecache_198.2.dr, chromecache_335.2.dr, chromecache_253.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://treas-secure.treas.state.mi.us/eservice_enu/start.swe?SWECmd=GotoView&_sn=kaPdpH9.IItxLM
Source: chromecache_162.2.dr	String found in binary or memory: https://twitter.com/benjsperry
Source: chromecache_162.2.dr	String found in binary or memory: https://twitter.com/ionicframework
Source: chromecache_297.2.dr	String found in binary or memory: https://underscorejs.org
Source: chromecache_321.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://webapp.ftb.ca.gov/common/privacy.aspx?Submit=Check
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://webtax2.rev.louisiana.gov/status/refund/
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://wfb.dor.state.ma.us/webfile/wsi/
Source: chromecache_263.2.dr	String found in binary or memory: https://www.1040now.net
Source: chromecache_276.2.dr, chromecache_263.2.dr	String found in binary or memory: https://www.1040now.net.
Source: chromecache_199.2.dr	String found in binary or memory: https://www.1040now.net/2022/index.aspx
Source: chromecache_199.2.dr	String found in binary or memory: https://www.1040now.net/index.aspx
Source: chromecache_276.2.dr	String found in binary or memory: https://www.1040now.net/main.aspx?req1=emailprefer&online=yes&req=freefile
Source: chromecache_211.2.dr, chromecache_191.2.dr	String found in binary or memory: https://www.1040now.net/mobile/partner.html
Source: chromecache_237.2.dr	String found in binary or memory: https://www.1040now.net/mobile/partnerpp.html
Source: chromecache_147.2.dr	String found in binary or memory: https://www.1040now.net/mobile/sslgeotrust.html
Source: chromecache_211.2.dr	String found in binary or memory: https://www.1040now.net/partner.html
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.accessidaho.org/secure/istc/refund/status.html
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.alabamainteractive.org/cgi-bin/ador/income_tax_lookup/search.cgi
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.ark.org/dfa_ri/app/login.html
Source: chromecache_224.2.dr	String found in binary or memory: https://www.browserleaks.com/canvas#how-does-it-work
Source: chromecache_266.2.dr	String found in binary or memory: https://www.colorado.gov/pacific/tax/refund
Source: chromecache_266.2.dr	String found in binary or memory: https://www.dor.ms.gov/Individual/Pages/default.aspx
Source: chromecache_266.2.dr	String found in binary or memory: https://www.doreservices.state.pa.us/Individual/RefundDefault.htm
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.doreservices.state.pa.us/individual/RefundDefault.htm
Source: chromecache_317.2.dr	String found in binary or memory: https://www.drupal.org)
Source: chromecache_166.2.dr, chromecache_296.2.dr	String found in binary or memory: https://www.drupal.org/about/licensing
Source: chromecache_166.2.dr, chromecache_206.2.dr, chromecache_297.2.dr, chromecache_154.2.dr, chromecache_234.2.dr, chromecache_296.2.dr, chromecache_314.2.dr, chromecache_220.2.dr	String found in binary or memory: https://www.drupal.org/licensing/faq
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.etax.dor.ga.gov/WMRefund/index.aspx
Source: chromecache_266.2.dr	String found in binary or memory: https://www.ftb.ca.gov/refund/index.asp
Source: chromecache_335.2.dr, chromecache_279.2.dr, chromecache_145.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_226.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_226.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_226.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_337.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences?
Source: chromecache_253.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_226.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_337.2.dr	String found in binary or memory: https://www.google.com/analytics/web/inpage/pub/inpage.js?
Source: chromecache_227.2.dr, chromecache_198.2.dr, chromecache_335.2.dr, chromecache_253.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_321.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_227.2.dr, chromecache_198.2.dr, chromecache_335.2.dr, chromecache_253.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_290.2.dr, chromecache_226.2.dr, chromecache_279.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_291.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_317.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-KV978ZL
Source: chromecache_328.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_321.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_266.2.dr	String found in binary or memory: https://www.in.gov/dor/4339.htm
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.individual.tax.virginia.gov/RefundStatus.jhtml
Source: chromecache_317.2.dr	String found in binary or memory: https://www.instagram.com/irsnews
Source: chromecache_219.2.dr, chromecache_317.2.dr	String found in binary or memory: https://www.irs.gov
Source: chromecache_317.2.dr	String found in binary or memory: https://www.irs.gov/es
Source: chromecache_317.2.dr	String found in binary or memory: https://www.irs.gov/es/filing/e-file-options
Source: chromecache_317.2.dr	String found in binary or memory: https://www.irs.gov/filing/e-file-options
Source: chromecache_317.2.dr	String found in binary or memory: https://www.irs.gov/ht
Source: chromecache_317.2.dr	String found in binary or memory: https://www.irs.gov/ht/filing/e-file-options
Source: chromecache_317.2.dr	String found in binary or memory: https://www.irs.gov/ko
Source: chromecache_317.2.dr	String found in binary or memory: https://www.irs.gov/ko/filing/e-file-options
Source: chromecache_317.2.dr	String found in binary or memory: https://www.irs.gov/pub/image/logo_small.jpg
Source: chromecache_266.2.dr	String found in binary or memory: https://www.irs.gov/refunds
Source: chromecache_317.2.dr	String found in binary or memory: https://www.irs.gov/ru
Source: chromecache_317.2.dr	String found in binary or memory: https://www.irs.gov/ru/filing/e-file-options
Source: chromecache_317.2.dr	String found in binary or memory: https://www.irs.gov/vi
Source: chromecache_317.2.dr	String found in binary or memory: https://www.irs.gov/vi/filing/e-file-options
Source: chromecache_317.2.dr	String found in binary or memory: https://www.irs.gov/zh-hans
Source: chromecache_317.2.dr	String found in binary or memory: https://www.irs.gov/zh-hans/filing/e-file-options
Source: chromecache_317.2.dr	String found in binary or memory: https://www.irs.gov/zh-hant
Source: chromecache_317.2.dr	String found in binary or memory: https://www.irs.gov/zh-hant/filing/e-file-options
Source: chromecache_266.2.dr	String found in binary or memory: https://www.kdor.ks.gov/Apps/kcsc/increfundstatus.aspx
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.kdor.org/refundstatus/default.asp
Source: chromecache_317.2.dr	String found in binary or memory: https://www.linkedin.com/company/irs
Source: chromecache_266.2.dr	String found in binary or memory: https://www.mass.gov/how-to/check-the-status-of-your-tax-refund
Source: chromecache_227.2.dr, chromecache_198.2.dr, chromecache_253.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_266.2.dr	String found in binary or memory: https://www.michigan.gov/taxes/0
Source: chromecache_266.2.dr	String found in binary or memory: https://www.mndor.state.mn.us/tp/OnlineServices/_/?link=WheresMyRefund
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.mndor.state.mn.us/wm/servlets/TaxReturnsServlet
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.mstc.state.ms.us/IncomeInquiry/index.jsp
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.myincometax.state.co.us/status/login.asp
Source: chromecache_266.2.dr	String found in binary or memory: https://www.nd.gov/tax/refund
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.nebraska.gov/revenue/refund/refundstat.html
Source: chromecache_266.2.dr	String found in binary or memory: https://www.ok.gov/tax/Individuals/Income_Tax/Filing_Information/How_to_Check_on_a_Refund
Source: chromecache_266.2.dr	String found in binary or memory: https://www.revenue.louisiana.gov/
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.revenue.state.il.us/app/refund/servlet/RefundStatus
Source: chromecache_266.2.dr	String found in binary or memory: https://www.revenue.wi.gov/Pages/Apps/TaxReturnStatus.aspx
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.ri.gov/cgi-bin/taxation/refund/status.cgi
Source: chromecache_266.2.dr	String found in binary or memory: https://www.ri.gov/taxation/refund
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.sctax.org/refundstatus/refund.aspx
Source: chromecache_266.2.dr	String found in binary or memory: https://www.tax.newmexico.gov/individuals/online-services-overview/where-is-my-refund/
Source: chromecache_266.2.dr	String found in binary or memory: https://www.tax.ny.gov/pit/file/refund.htm
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.tax.state.oh.us/PROD/WheresMyRefundWeb/wheresmyrefund.jsp
Source: chromecache_266.2.dr	String found in binary or memory: https://www.tax.virginia.gov/wheres-my-refund
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.taxpayerservicecenter.com/individual/Ind_RefundStatus_Logon.jsp
Source: chromecache_317.2.dr	String found in binary or memory: https://www.treasury.gov/
Source: chromecache_317.2.dr	String found in binary or memory: https://www.treasury.gov/tigta/
Source: chromecache_317.2.dr	String found in binary or memory: https://www.twitter.com/IRSnews
Source: chromecache_317.2.dr	String found in binary or memory: https://www.usa.gov/
Source: chromecache_317.2.dr	String found in binary or memory: https://www.usaspending.gov
Source: chromecache_352.2.dr, chromecache_331.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_321.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_317.2.dr	String found in binary or memory: https://www.youtube.com/embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0
Source: chromecache_317.2.dr	String found in binary or memory: https://www.youtube.com/embed/qP5c-ZOMct4?autoplay=0&start=0&rel=0
Source: chromecache_317.2.dr	String found in binary or memory: https://www.youtube.com/embed/s09YWoGtftM?autoplay=0&start=0&rel=0
Source: chromecache_317.2.dr	String found in binary or memory: https://www.youtube.com/embed/yiQ-C7lGw0o?autoplay=0&start=0&rel=0
Source: chromecache_317.2.dr	String found in binary or memory: https://www.youtube.com/embed/zmUPHj3AvZc?autoplay=0&start=0&rel=0
Source: chromecache_321.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_198.2.dr, chromecache_335.2.dr, chromecache_145.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_317.2.dr	String found in binary or memory: https://www.youtube.com/user/irsvideos
Source: chromecache_317.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=P3uqyCO0P_8
Source: chromecache_317.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=YRI30K2uwgc
Source: chromecache_317.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=YyS9mxUdG_U
Source: chromecache_317.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=bVfRAUYKusg&feature=youtu.be
Source: chromecache_338.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www7.nystax.gov/PRIS/prisHome
Source: chromecache_321.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_321.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_321.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_321.2.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900

Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.4:49778 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@38/362@76/28

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1880 --field-trial-handle=1884,i,916011695703265351,17086815413262995248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.1040now.net"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7540 --field-trial-handle=1884,i,916011695703265351,17086815413262995248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7468 --field-trial-handle=1884,i,916011695703265351,17086815413262995248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1880 --field-trial-handle=1884,i,916011695703265351,17086815413262995248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7540 --field-trial-handle=1884,i,916011695703265351,17086815413262995248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7468 --field-trial-handle=1884,i,916011695703265351,17086815413262995248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: g.k.setPlaybackQualityRange=function(a,b,c){var d=g.OT(this.app,this.playerType);d&&g.Pdb(d,g.jP(a,b\|\|a,!0,"m"),!0,c)}; source: chromecache_321.2.dr
Source:	Binary string: g.Pdb=function(a,b,c,d){a.videoData.Qz=b;if(a.Lf&&c){c=a.pk;var e=a.Lf;if(e.j.j){var f=fP(),h=e.j.videoInfos[0].video.j;if(!(f>h&&0!==h&&b.j===h)){var l;f=gbb(c,null==(l=e.j)?void 0:l.videoInfos);l=c.oa.getPlaybackRate();1<l&&f&&(l=zRa(c.W.G,e.j.videoInfos,l),0!==b.j&&l<b.j&&c.oa.setPlaybackRate(1));var m,n;b=g.wK[mP(b)];e=(null==(m=e.videoData.B)?void 0:null==(n=m.video)?void 0:n.j)\|\|0;g.qC("yt-player-quality",{quality:b,previousQuality:e},31104E3);c.W.schedule.policy.C=480<=fP();if(c.L("html5_exponential_memory_for_sticky")){m= source: chromecache_321.2.dr

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://www.1040now.net	0%	Virustotal		Browse

Source	Detection	Scanner	Link
fastly-tls12-bam.nr-data.net	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
s.go-mpulse.net	0%	Virustotal	Browse
c.go-mpulse.net	0%	Virustotal	Browse
bam.nr-data.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	URL Reputation	safe
https://s2.go-mpulse.net/boomerang/	0%	URL Reputation	safe
https://s2.go-mpulse.net/boomerang/	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	0%	URL Reputation	safe
https://interactive.marylandtaxes.com/INDIV/refundstatus/home.aspx	0%	Virustotal		Browse
http://www.state.nj.us/treasury/taxation/individuals.shtml	0%	Virustotal		Browse
https://raw.githubusercontent.com/jquery/jquery-ui/1.13.2/LICENSE.txt	1%	Virustotal		Browse
https://www.doreservices.state.pa.us/individual/RefundDefault.htm	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	0%, Virustotal, Browse	unknown
secure.trust-guard.com	104.25.241.91	true	false		high
i.ytimg.com	64.233.176.119	true	false		high
d27f3qgc9anoq2.cloudfront.net	3.161.136.58	true	false		high
js-agent.newrelic.com	162.247.243.39	true	false		high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false		high
d2pj9rkatqbt38.cloudfront.net	3.161.163.32	true	false		high
static.doubleclick.net	142.250.105.148	true	false		high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	0%, Virustotal, Browse	unknown
1040now.net	107.144.122.203	true	false		high
youtube-ui.l.google.com	173.194.219.93	true	false		high
googleads.g.doubleclick.net	173.194.219.155	true	false		high
play.google.com	142.250.105.102	true	false		high
static.addtoany.com	104.22.71.197	true	false		high
photos-ugc.l.googleusercontent.com	64.233.176.132	true	false		high
www.google.com	64.233.176.106	true	false		high
code.ionicframework.com	104.26.6.173	true	false		high
dw26xg4lubooo.cloudfront.net	13.32.66.19	true	false		high
yt3.ggpht.com	unknown	unknown	false		high
www.1040now.net	unknown	unknown	false		high
resources.digital-cloud-gov.medallia.com	unknown	unknown	false		high
dap.digitalgov.gov	unknown	unknown	false		high
s.go-mpulse.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.irs.gov	unknown	unknown	false		high
bam.nr-data.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.youtube.com	unknown	unknown	false		high
c.go-mpulse.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
privacy-policy.truste.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Reputation
https://www.youtube.com/s/player/0af6e327/www-widgetapi.vflset/www-widgetapi.js	false	high
https://www.1040now.net/styles-ez.css?reload	false	high
https://secure.trust-guard.com/page/templates/certificates/images/trustguard-logo.jpg	false	high
https://www.1040now.net/images-ez/index_04.jpg	false	high
https://www.youtube.com/embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0	false	high
https://secure.trust-guard.com/page/js/certificates.js	false	high
https://www.youtube.com/embed/yiQ-C7lGw0o?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov	false	high
https://www.1040now.net/images-ez/bg.jpg	false	high
https://www.1040now.net/main.aspx?code=2	false	high
https://www.1040now.net/images-ez/nav-privacy.jpg	false	high
https://www.1040now.net/menutax.css	false	high
https://secure.trust-guard.com/page/templates/certificates/images/thumbs-dn.png	false	high
https://yt3.ggpht.com/ytc/AIdro_l7EQrwAPBISw10QVF36IsB-cpyKQ4weQOea7p4iPxQj3U=s68-c-k-c0x00ffffff-no-rj	false	high
https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	false	high
https://secure.trust-guard.com/page/smarty/tools.js?v=1-4	false	high
https://www.1040now.net/images-ez/secured.gif	false	high
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false	high
https://www.youtube.com/embed/yiQ-C7lGw0o?autoplay=0&start=0&rel=0	false	high
https://www.1040now.net/1040now/1040Now%20FAQ.htm	false	high
https://www.1040now.net/1040now/1040now%20FAQ.htm	false	high
https://www.1040now.net/1040now/images/1040header2004-01.gif	false	high
http://www.1040now.net/styles-ez.css?reload	false	high
https://www.youtube.com/embed/qP5c-ZOMct4?autoplay=0&start=0&rel=0	false	high
https://secure.trust-guard.com/certificates/newimages/privacy-12081.png	false	high
https://www.1040now.net/js/jquery.min.js	false	high
https://www.youtube.com/generate_204?XwLgIQ	false	high
https://www.1040now.net/images-ez/index_07.jpg	false	high
https://www.1040now.net/main.css	false	high
https://www.1040now.net/images-ez/nav-pricing.jpg	false	high
https://privacy-policy.truste.com/privacy-seal/1040Now/asc?rid=202ca784-86d2-499e-8585-821c00075510	false	high
https://www.youtube.com/generate_204?RU8WWA	false	high
https://www.youtube.com/s/player/0af6e327/www-embed-player.vflset/www-embed-player.js	false	high
https://secure.trust-guard.com/page/css/split-cert.css	false	high
https://www.1040now.net/partner.html	false	high
https://www.1040now.net/index.aspx?code=2	false	high
https://www.1040now.net/images-ez/top-left.jpg	false	high
https://www.1040now.net/images-ez/index_03.jpg	false	high
https://i.ytimg.com/vi/8hmgK-BHqGc/default.jpg?sqp=-oaymwEkCHgQWvKriqkDGvABAfgB_gmAAtAFigIMCAAQARhlIFsoUDAP&rs=AOn4CLBKgLX8rib9_UCRiNMtON9Lcz84_Q	false	high
https://secure.trust-guard.com/page/templates/certificates/images/white-box_bot.png	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://secure.trust-guard.com/privacy/12081	chromecache_191.2.dr	false		high
https://interactive.marylandtaxes.com/INDIV/refundstatus/home.aspx	chromecache_266.2.dr	false	0%, Virustotal, Browse	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_227.2.dr, chromecache_198.2.dr, chromecache_253.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_321.2.dr	false	URL Reputation: safe	unknown
http://www.tax.ok.gov/refund.html	chromecache_338.2.dr, chromecache_157.2.dr	false		high
https://www.dor.ms.gov/Individual/Pages/default.aspx	chromecache_266.2.dr	false		high
https://s2.go-mpulse.net/boomerang/	chromecache_317.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
http://apps.irs.gov/app/scripts/exit.jsp?dest=http://www.usa.gov/)	chromecache_195.2.dr	false		high
https://twitter.com/benjsperry	chromecache_162.2.dr	false		high
https://github.com/cozylife/audio-fingerprint	chromecache_224.2.dr	false		high
https://secure.in.gov/apps/dor/tax/refund/refundStatusQuery.jsp	chromecache_338.2.dr, chromecache_157.2.dr	false		high
https://tap.dor.mt.gov	chromecache_266.2.dr	false		high
https://www.tax.newmexico.gov/individuals/online-services-overview/where-is-my-refund/	chromecache_266.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_226.2.dr	false		high
https://www.ri.gov/taxation/refund	chromecache_266.2.dr	false		high
https://www.1040now.net/mobile/partnerpp.html	chromecache_237.2.dr	false		high
https://www.youtube.com/user/irsvideos	chromecache_317.2.dr	false		high
https://www.youtube.com	chromecache_352.2.dr, chromecache_331.2.dr	false		high
https://tax.ehawaii.gov/hoihoi/refund.html	chromecache_266.2.dr	false		high
http://www.state.nj.us/treasury/taxation/individuals.shtml	chromecache_266.2.dr	false	0%, Virustotal, Browse	unknown
https://admin.youtube.com	chromecache_321.2.dr	false		high
https://www.nebraska.gov/revenue/refund/refundstat.html	chromecache_338.2.dr, chromecache_157.2.dr	false		high
http://getbootstrap.com)	chromecache_278.2.dr	false		low
https://tax.illinois.gov/Individuals/Refunds.htm	chromecache_266.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_321.2.dr	false	URL Reputation: safe	unknown
https://www.doreservices.state.pa.us/individual/RefundDefault.htm	chromecache_338.2.dr, chromecache_157.2.dr	false	0%, Virustotal, Browse	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_226.2.dr	false		high
https://www.irs.gov	chromecache_219.2.dr, chromecache_317.2.dr	false		high
https://github.com/fingerprintjs/fingerprintjs	chromecache_224.2.dr	false		high
http://www.irs.gov	chromecache_237.2.dr	false		high
https://yurt.corp.google.com	chromecache_321.2.dr	false		high
https://www.1040now.net	chromecache_263.2.dr	false		high
https://www.youtube.com/generate_204?cpn=	chromecache_321.2.dr	false		high
https://webapp.ftb.ca.gov/common/privacy.aspx?Submit=Check	chromecache_338.2.dr, chromecache_157.2.dr	false		high
http://www.1040now.net/1040now/Federal%20Tax%20Forms.htm	chromecache_237.2.dr	false		high
https://schema.org	chromecache_317.2.dr	false		high
http://www.azdor.gov/Refunds%20and%20Credits/refundinquiry.htm	chromecache_338.2.dr, chromecache_157.2.dr	false		high
https://jobs.irs.gov/	chromecache_317.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php)	chromecache_224.2.dr	false		high
https://secure.vermont.gov/TAX/refund/	chromecache_338.2.dr, chromecache_157.2.dr	false		high
https://stats.g.doubleclick.net/j/collect?	chromecache_337.2.dr	false		high
http://tools.ietf.org/html/rfc1950	chromecache_352.2.dr, chromecache_300.2.dr, chromecache_321.2.dr	false		high
https://www.youtube.com/embed/s09YWoGtftM?autoplay=0&start=0&rel=0	chromecache_317.2.dr	false		high
http://revenue.ky.gov/refund.htm	chromecache_338.2.dr, chromecache_157.2.dr	false		high
https://treas-secure.treas.state.mi.us/eservice_enu/start.swe?SWECmd=GotoView&_sn=kaPdpH9.IItxLM	chromecache_338.2.dr, chromecache_157.2.dr	false		unknown
https://www.youtube.com/embed/zmUPHj3AvZc?autoplay=0&start=0&rel=0	chromecache_317.2.dr	false		high
https://www.michigan.gov/taxes/0	chromecache_266.2.dr	false		high
https://raw.githubusercontent.com/jquery/jquery-ui/1.13.2/LICENSE.txt	chromecache_297.2.dr, chromecache_296.2.dr	false	1%, Virustotal, Browse	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_278.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_227.2.dr, chromecache_198.2.dr, chromecache_253.2.dr	false		high
https://www.drupal.org/about/licensing	chromecache_166.2.dr, chromecache_296.2.dr	false		high
https://github.com/fingerprintjs/fingerprintjs/issues/375	chromecache_224.2.dr	false		high
https://github.com/Modernizr/Modernizr/blob/master/feature-detects/canvas/winding.js	chromecache_224.2.dr	false		high
https://www.irs.gov/vi/filing/e-file-options	chromecache_317.2.dr	false		high
https://stackoverflow.com/questions/46363048/onaudioprocess-not-called-on-ios11#46534088	chromecache_224.2.dr	false		high
https://www.drupal.org/licensing/faq	chromecache_166.2.dr, chromecache_206.2.dr, chromecache_297.2.dr, chromecache_154.2.dr, chromecache_234.2.dr, chromecache_296.2.dr, chromecache_314.2.dr, chromecache_220.2.dr	false		high
https://www.irs.gov/zh-hant/filing/e-file-options	chromecache_317.2.dr	false		high
https://feedback-form.truste.com/watchdog/request	chromecache_263.2.dr	false		high
http://www.ct.gov/drs/cwp/view.asp?a=1462&q=266274&drsPNavCtr=	chromecache_338.2.dr, chromecache_157.2.dr	false		high
https://support.google.com/youtube/?p=report_playback	chromecache_321.2.dr	false		high
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_352.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.32.66.19	dw26xg4lubooo.cloudfront.net	United States	7018	ATT-INTERNET4US	false
173.194.219.155	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
173.194.219.93	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
172.67.39.148	unknown	United States	13335	CLOUDFLARENETUS	false
64.233.176.132	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
3.161.163.32	d2pj9rkatqbt38.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.9.132	unknown	United States	15169	GOOGLEUS	false
104.25.241.91	secure.trust-guard.com	United States	13335	CLOUDFLARENETUS	false
172.253.124.136	unknown	United States	15169	GOOGLEUS	false
142.251.15.155	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
64.233.176.99	unknown	United States	15169	GOOGLEUS	false
104.22.71.197	static.addtoany.com	United States	13335	CLOUDFLARENETUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false
64.233.176.119	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.9.138	unknown	United States	15169	GOOGLEUS	false
142.250.105.102	play.google.com	United States	15169	GOOGLEUS	false
107.144.122.203	1040now.net	United States	33363	BHN-33363US	false
3.161.136.58	d27f3qgc9anoq2.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.105.148	static.doubleclick.net	United States	15169	GOOGLEUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
173.194.219.119	unknown	United States	15169	GOOGLEUS	false
104.26.6.173	code.ionicframework.com	United States	13335	CLOUDFLARENETUS	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
64.233.176.106	www.google.com	United States	15169	GOOGLEUS	false
142.251.15.136	unknown	United States	15169	GOOGLEUS	false
13.32.66.84	unknown	United States	7018	ATT-INTERNET4US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428545
Start date and time:	2024-04-19 07:30:34 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.1040now.net
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@38/362@76/28
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.1040now.net/index.aspx?code=2 Browse: https://www.1040now.net/1040now/1040Now%20Privacy%20Statement%201.htm#warranty Browse: https://www.1040now.net/partnerpp.htm Browse: https://www.1040now.net/1040now/Federal%20Tax%20Forms.htm Browse: https://www.1040now.net/index.aspx?req1=email Browse: https://www.1040now.net/1040now/1040Now%20Privacy%20Statement%201.htm Browse: https://www.1040now.net/1040now/1040Now%20Pricing.htm Browse: https://www.1040now.net/1040now/1040Now%20Year.htm Browse: https://www.1040now.net/1040now/1040now%20FAQ.htm Browse: https://www.1040now.net/1040now/1040Now%20FAQ.htm#Testimonials Browse: http://www.irs.gov/efile Browse: https://www.1040now.net/sslgeotrust.htm Browse: http://secure.trust-guard.com/privacy/12081

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.15.94, 142.250.105.84, 142.251.15.139, 142.251.15.113, 142.251.15.102, 142.251.15.138, 142.251.15.100, 142.251.15.101, 34.104.35.123, 20.12.23.50, 72.21.81.240, 192.229.211.108, 20.242.39.171, 108.177.122.95, 74.125.138.94, 13.95.31.18, 23.223.135.219, 23.79.188.236, 142.250.105.97, 184.30.115.237, 23.195.0.177, 23.47.160.128, 74.125.138.95, 142.251.15.95, 172.217.215.95, 142.250.9.95, 172.253.124.95, 64.233.185.95, 142.250.105.95, 64.233.176.95, 173.194.219.95, 64.233.177.95, 74.125.136.95, 64.233.176.101, 64.233.176.100, 64.233.176.139, 64.233.176.138, 64.233.176.113, 64.233.176.102, 64.233.185.113, 64.233.185.101, 64.233.185.102, 64.233.185.138, 64.233.185.100, 64.233.185.139, 3.19.8.217, 142.250.9.97, 173.194.219.97
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, www.irs.gov.edgekey.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, glb.sls.prod.dcat.dsp.trafficmanager.net, e4518.dscx.akamaiedge.net, www.google-analytics.com, ip46.go-mpulse.net.edgekey.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, jnn-pa.googleapis.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, resources.digital-cloud-gov.medallia.com.edgekey.net, e15080.a.akamaiedge.net, ssl.google-analytics.com, e4518.dscapi7.akamaiedge.net, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, wildcard46.go-mpulse.net.edgeke
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 100 x 40
Category:	dropped
Size (bytes):	3207
Entropy (8bit):	7.720573905988614
Encrypted:	false
SSDEEP:	96:w3HeU+gvdcyzHAV6o4lqDC243Z1emf3SU:pgvd3giqf4J15
MD5:	4F733E55044E6A04B4C5030F2042CBB9
SHA1:	33D3B48BAFDD4132C9DAD402EF4FFA2DEC1BB6C5
SHA-256:	E32045E76A36C815E15695BAFD9A5167B17E293B14AED93A914402FE4FB6C66D
SHA-512:	A403605272850B37920586600D389F3659BFD56E036556384E1DFD36D2BED57A1D5AD04BE089FB55FE6B16B0482EF99E12FECFCCC303019D81AAFA49C17909D5
Malicious:	false
Reputation:	low
Preview:	GIF89ad.(................f.r2.?(m3FxB.X&.R#7.D4.A..v.#..])1\|=q6"b,i\|n.x:.'..C..H.-u8B.Q3[8u.j.9..M!8.Fu.o$f/...S.]u.l.T'...n.d.)..5'8g;>.LZ.S...V.MD.SW``.=.<.J&j1.1.#[-.4.;.Hu.n...@.N...g.\......",....m.p.....\|....K....t.Ri.u.5.................o.{...>.......[.b..v.....\|....t.w..p..[y......\.......1cf-..e..\|..k..x.T....g.......`..q\|.Q..w............s..k..V..v.......d....o..s..{...!.......,....d.(.............................F..F....NFN..NWWU..UO.O..O..........<.........B._BBJ._........U<.<...<.].....W%%..8..8......-.--$......"..).BHAE....u.BE1]8...i.....:....F..0P.X.#...1..@..=!.lb.R...~.. T..3'-.(Q.PG...n......XEh...k.Zm....$..):(X.....'.k..re.........6u.v..'..R.}..E..O... ....6.z..v.Gv!.L..v...kS.].w...XZb.....x..c............D...n..u..Gw(@.......@.O.R.....p<.B.c.&.Kp.IuT&...X.\.kpn.Y.S.....>P.u........J...k.qW^8....8,%..9..T.W.1..Ryt.r....!S(@...LP ...( v.m..u..S....>.....Sd...~...Yt2N....@pA..hyA.5......h...0X.vp..RIC.9....N.>..c...u.dA..

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 441 x 10, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	407
Entropy (8bit):	7.1300559400645565
Encrypted:	false
SSDEEP:	12:6v/7XzRbF8Tk3TnRvsZ9NfjvBy9Rlj8Y+/qKQcc:O1F8mn949NLc18VRBc
MD5:	35955645892BA536E5AD86549B620BFE
SHA1:	BAFA7A126BFEEA7A2F5F0E636038EC3BEEE54FF4
SHA-256:	61BF06BC79E865B805B7A3E6C89E822B47C2783E228B8B9B6B2CE16465C185D8
SHA-512:	5CFA6F049879EE50429E9D4B30EC08169E81CEFF88141D0E6768CBA50539FE7765B7C25FDD57AD376A32E0C40F8D552A149E4DE8984009D6E27FDCA5C027EBA6
Malicious:	false
Reputation:	low
URL:	https://secure.trust-guard.com/page/templates/certificates/images/white-box_bot.png
Preview:	.PNG........IHDR.............)} G....tEXtSoftware.Adobe ImageReadyq.e<...9IDATx...AJ.@....Dp%Hr.....n.. x..&..B.+.+A(]x..$4.U.:...ZK...4B......2.d.o>&d.....8.......d2...u..n....7.^+l.<....7.^3...Y.1..@o4...%..^..Ns.....l..~.%....8f2...k.l.....'.,M..r.t...e{L.l*.7.....(......@y.....P..2..j5.....v.}J.e..~4.]..C...r]......n.SEQ..f..$yU?.(..=.....Jn$..@r.8....Mb$.G)........:.p..@......IEND.B`.

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text
Category:	downloaded
Size (bytes):	30368
Entropy (8bit):	5.510418102260918
Encrypted:	false
SSDEEP:	768:g+btOvh0CidnyJ+upfDdtpum7c1cdIasHELS1UWvVGiZc:gyjCidnyJ+upfDdtpd7c1cvsHELS1UWC
MD5:	1C4C554565169BCCBC2A963147AAF76E
SHA1:	513C6FFA26D6FB342CD4989593AE8F544D69639D
SHA-256:	1738C913329381B2C2B22EEC671C8B6E5878688B9194A1F018E587AEEE9A1583
SHA-512:	D9C40650FE7304BB27082A800559FC3BB142531193E279216FA2B2EAD978ED8FB3FC5DFDEC69D7CD6EC9A7AF053AEEA025BF6333A9901AD87447276699E25118
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/static_assets/js/reporting/federated-analytics.js?agency=Treasury&subagency=IRS&sdor=true
Preview:	/* ..... .ooooo. ooo. .oo. .ooooo. oooo d8b..... d88" `88b `888P"Y88b d88" `88b `888""8P..... 888888888 88888 888 888 888 888 888..... 888 88888 888 888 888 888 888 ..... `"88888" o888o o888o `Y8bod8P" d888b ..*********************************************************************************************************.Universal Federated Analytics: Google Analytics Government Wide Site Usage Measurement..Author: Ahmed Awwad.05/20/2016 Version: 3.1.********************************************************************************************************/../. * oConfig holds all settings with default values.. * Most of the settings can be changed by passing a new value. * in the query string when referencing this file.. /.var oCONFIG = {. GWT_UAID: ['UA-33523145-1'],./ hard coded cannot be configured by query string /. FORCE_SSL: true,..../ hard coded cannot be configured by query string

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 270x42, components 3
Category:	downloaded
Size (bytes):	5925
Entropy (8bit):	7.903515058610915
Encrypted:	false
SSDEEP:	96:6S10RuNQZFDPBzYUlEsc1MY2G9bTIZGBxfdAcGmUYKL08t2k1+uq:6hRu2ZFqvLp6ZKxfdA+7aeuq
MD5:	7B8BEBBF69C2CB09A1A2EB95CFB334DE
SHA1:	E6FE377BCC98EC6CC4072A9D7CBA0054918AAC38
SHA-256:	6D4EB18AB8456168656FE904CE1675B5A575F60A817755BD1FC32944105FC774
SHA-512:	684A143519F258DE8DD1482123D722869035046A1AD49627BDCB5ECD77B7D916ED4F5C093D846D54EFE7CC45DDB0AAE9F99535F3297EAC0E6B87201BDD8C3222
Malicious:	false
Reputation:	low
URL:	https://secure.trust-guard.com/page/templates/certificates/images/trustguard-logo.jpg
Preview:	......JFIF.....d.d......Ducky.......F......Adobe.d...............................................................................................................................................................................................................................................!1...A"Q.aq2#3...8.RrCS4.u.7..Bb..$dt.%56v......................!1..A.Qaq.."2.......Br....Rb.$4.............?.......4....h.@.....4........>......7.,f...fH..0.yrp......]..l.2......qJ.B5[I....obZ."..i.Vd.A@.`..S..sp..(c!.\l.,+.....1.,.@S.2Q.n..t7.=Tan.4....&.\.=....a..K..C...<?.......#-.VC.X..}b.+m.H.{\.v-..p..<......k%.#e....6P.&._j.5.....h.@.....4....h.@..............'....(...~V.w!D2Os........d...c.~a..oL.C.\|}...\|.....DM.../.BEE.....I..L..3.4.;....f(...&..yh.{....l....v@.S..c...f\......H..E..\......'e.T..H.a"..T.!G....Bd.H\=A......w.sl.?W..vG...^.)..e.}....?......,:.,._.]..........8..s.#.........I\|.....n.!.].c..q@......O.$.>~.G/..n).....BH..N..b..y....yh.......

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1548
Entropy (8bit):	5.059250567478273
Encrypted:	false
SSDEEP:	48:m8pVuniB8+t5pNV0MdXeDNPg+/HRerVgHReze9Jj2dK+/HReXRTY3YIoHgMI+/Hl:pAiBDxV0MABfa6Ef3o0MJfCwz
MD5:	9FE9E2D5BF683E432029A9CDE6D96386
SHA1:	F18B927CEC57ECD0C55299C8A4D996B5B4C03317
SHA-256:	8BE45DA411B65028DB75B5B7DCE9244BD1196E43B2754A98A1AE6117B02FAED7
SHA-512:	CE56BF88F026CDB3E94F8CC4A370F5D5F04388D735B540A76EA00195DC77DDCE6B2AC2867CD1843BBB5FA19BA893218AD2D316C7DE9BCF8C9200B1E0F472DA3F
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/sslgeotrust.htm
Preview:	<html>...<head>....<title>1040Now User Guide</title>...<script type="text/javascript" >... var tabValue = document.URL;... var url = "";... if (tabValue.lastIndexOf("#") >= 0).. url = tabValue.substring(tabValue.lastIndexOf("#"));.. document.location = "https://www.1040now.net/mobile/sslgeotrust.html"+url; ...</script>...</script>......</head>...<body>....<table id="Table2" height="20" cellSpacing="0" cellPadding="0" width="95%" align="center".....border="0">.....<font size="4"><b>.......<TBODY>........<tr>.........<td>..........<img src="images/1040header2004-01.gif" align="left">.........</td>........</tr>........<tr>.........<td height="20" bgcolor="#990000"></td>........</tr>........<tr>.........<td height="17"><BR>..........1040Now.net secured by GeoTrust EV certificates thereby offering the ..........highest level of encryption or security possible. This means you can rest ..........assured that communications between your browser

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.358694969562841
Encrypted:	false
SSDEEP:	3:mSMGNCkuSPjEonuSTBu+Yn:mS3uSXPTB9Yn
MD5:	516C256837935694CDFA575BDA69A11B
SHA1:	5311E843521C1A6541FA93EE40B821AC6AD133A0
SHA-256:	8349C63E4F8B3D6999E3C0C47EB3315BF98E7E944015ABFD727CB2D1D826F079
SHA-512:	C120DFDC203BE97304A79E5EB1954444D3B34C24C3A18DD8B10F50C18EABA7B031E64F034A3B161E079919807D6FA21FF2B4CFFFCCEAC433FA717697C8AB575A
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmJKQXamELZghIFDWdns_4SBQ2ffFaPEgUN6nSn8w==?alt=proto
Preview:	ChsKBw1nZ7P+GgAKBw2ffFaPGgAKBw3qdKfzGgA=

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51541)
Category:	downloaded
Size (bytes):	52826
Entropy (8bit):	5.740575687059873
Encrypted:	false
SSDEEP:	1536:j3KsLQi61icuvtSFZnFyOWkB19u5k1CBS5f+N2p:rpQacUcFZ0OWORCBuS2p
MD5:	61B0A17D5AAA9D795952810A76145C39
SHA1:	791EDF71AE8BEBD85609225BB7E96336E294C229
SHA-256:	B2E5EDCB2A47AFE926703BFC04B69BFF3492F9C9E99F81B3C5657EFCF79F6885
SHA-512:	F5117FCDD60BB12E0D919721E3D7434F18F7B92850E6EDD27BD58982D58CF5DE228421C97AA6D4BF0BB413ADA3B80EBF06A1EBB5A665E66D6ED5E916532BDD7D
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/suXtyypHr-kmcDv8BLab_zSS-cnpn4GzxWV-_PefaIU.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function F(E){return E}var k=function(E,m,b,V,r,d,U,z,L,Z,O,x){for(x=(Z=19,95);;)try{if(Z==E)break;else if(23==Z)x=95,Z=m;else if(Z==m)Z=w.console?b:20;else if(93==Z)x=81,z=L.createPolicy(r,{createHTML:B,createScript:B,createScriptURL:B}),Z=20;else if(83==Z)Z=L&&L.createPolicy?93:V;else if(19==Z)z=d,L=w.trustedTypes,Z=83;else{if(20==Z)return x=95,z;if(Z==b)w.console[U](O.message),Z=20;else if(Z==V)return z}}catch(l){if(95==x)throw l;81==x&&(O=l,Z=23)}},B=function(E){return F.call(this,E)},w=this\|\|self;(0,eval)(function(E,m){return(m=k(80,74,46,61,"ad",null,"error"))&&1===E.eval(m.createScript("1"))?function(b){return m.createScript(b)}:function(b){return""+b}}(w)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:appl

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 21, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	288
Entropy (8bit):	6.873351411840123
Encrypted:	false
SSDEEP:	6:6v/lhPimvnDspnmA2pFfYrSxNMRcKVX6KtKjFO2jGN15bcgpyA5jp:6v/7qfJmAQBNMRcKs9rjG9VN
MD5:	4FE0F9D1C2D633128FB56D94206DEB6F
SHA1:	08A0CB20DD0613C413A2796CB92E00C88BA3588D
SHA-256:	A9A9DCBF2560550DF3F293A9B5E32E2FFCE6E41040C2D435F4BF48872ECFBBC6
SHA-512:	A7A4E62CDCD6F824A650FF100E7E23B6FCCC33202D720AF5E32003161209F0433AFCEE5DF93684F526114AC51AE228D03C9A42167DF9E9180BF0A64F64DA3893
Malicious:	false
Reputation:	low
URL:	https://secure.trust-guard.com/page/templates/certificates/images/thumbs-up.png
Preview:	.PNG........IHDR.............K......tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.>...*..........R..@........S..E@.H...@....=\|.1.1..H..b! .H.......P.&......H.#...2......H... .4............7.qX.$..I...kR....K-.....0..U..2....u.c.&..`6.....?.0.d.,...)`..h.@.....C..S......IEND.B`.

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 87a, 461 x 37
Category:	dropped
Size (bytes):	3885
Entropy (8bit):	7.564536507096807
Encrypted:	false
SSDEEP:	96:w2wSNVtO9F9XAQwIkNvbTdqjss1Tfz+1042DvdS2XI:Xwz9FZAPlnU7+YS
MD5:	A681FD2A05AD1D08BB3AE359A1C35248
SHA1:	2CE1718A7FAD8BD41C825864D8AC87E29C46F833
SHA-256:	7ABE924747E4547F472D8C75C959FA229DE43C43904C9408F4897AD4F9709E1D
SHA-512:	197B82FD7B16A5FA8327A2D99E9E7CB39A4D862B601657CE6FC40E5FF7BD9657E2A9EAC916EFF278EDB121C0193B558AA0F66D99CC3DD73C11D32905056B70A1
Malicious:	false
Reputation:	low
Preview:	GIF87a..%.........................................U............*.U.......U..U.UU.U..U..U........U................U................U............U.......*U...U.U*UUU.U.U....*.U.........*.U.........*.U.....U..U.U.UU..U..U..U.U*UUU.U.U.UU.UUUUUUU.UU.UU.U..U.U.UU..U..U..U..U.U.UU..U..U..U..U.U.UU..U.U.........U.............U.......U..U.UU.U..U..U........U................U................U..............U............U......U..U.UU.U..U..U.......U...............U...............U...............U.............U.......U..U.UU.U..U..U........U.............U.............U.................&&&333???LLLYYYfffrrr..........................................................!.......,......%........H......\....#J.H....3j..#.[ C..yK..'.\9...y.b.G.&M.8s.....@.bdD..QF..&%.$Jy,_.y..Jz=..-HO.Hy..K...G.].t.S._......a..%.....2.g...[.....7p.z\|..N,Y......e.X.z..U...]e1y........

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (624)
Category:	downloaded
Size (bytes):	716
Entropy (8bit):	5.2368725597776615
Encrypted:	false
SSDEEP:	12:qTjxS1BKFaGCGT9MTkKqqzi8EmpGe3whGe3OgyGhlzUNBfgxy02sUf0OPv4S:0jE+FaGCTTqq2Vmce3wUe3gBkFUFXf
MD5:	41B7ED0CBE240173EEA85148FCBA633E
SHA1:	39ACD5FE099974486A1C9BA11BA0FE7BE6BC97CA
SHA-256:	274D4116239B63097BB7C16E56E27CBB5A77BE20392FB8E2317C0A0235185CAD
SHA-512:	1EE1D21B138A9F55F823B93D809B3BC58453DDFC3B3EE4D00A1010BBD4EC296546277C6777819CFB744C393BA93FE7578B60CCF0259FD17901F4542714D6C06F
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/sm.25.html
Preview:	<!doctype html><html><head><title>A2A</title><meta name="robots" content="noindex"><script>.!function(e){var o=document.cookie,t=0<o.length;var n,a={feed:[],page:[]};t&&["feed","page"].forEach(function(e){var t=e+"_services",n=o.indexOf(t+"=");-1!=n&&(-1==(t=o.indexOf(";",n=n+t.length+1))&&(t=o.length),n=decodeURIComponent(o.substring(n,t)),a[e]=n.split(","))}),n={a2a:!0,h1:(t=!1,"function"==typeof performance.getEntriesByType&&(n=(n=performance.getEntriesByType("navigation")[0])&&n.nextHopProtocol?n.nextHopProtocol:"",t=/^http\/1/.test(n)),t),user_services:{feed:a.feed,page:a.page}},e.postMessage&&e.parent.postMessage(n,"*")}(window);</script></head><body style="background-color:transparent"></body></html>

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (758)
Category:	downloaded
Size (bytes):	832
Entropy (8bit):	5.026338998942596
Encrypted:	false
SSDEEP:	24:a+qSqKHU2UNEiiRW+fujjXSqHfKsGiRW+fudjw:a+qS5UBiwtjXSefKiw3jw
MD5:	ADD8F733D8392837BFF8666BC57CDB8A
SHA1:	5965B40BD35A7E36A89DE97CC463A1D6EC3601DC
SHA-256:	DE70C783D7CAE38A807E04352DD44F5A4443F31CAA78E1E845E85FCB67C52515
SHA-512:	7A36AC938B484D5416B1C528F101F7DE6B80EC6527F88E5D7E614EC33A842C660F80D8ED1B88AE309FD2CABC987221497FA41B251BEE5737646B7A196DD78F30
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/pub/js/js_hS1VPzzwcnYDRXtlJPoRLwsCXm21arzwnNnryS7zczU.js?scope=header&delta=0&language=en&theme=pup_irs&include=eJxtkuF2wyAIhV9I4yN5iFLDZsQjJFvefiZpu3XpP-4HIl6EGJWhbA7uwXBrXNREUMiwYXMjTrASNzGyieLsRhA0dal-D1zKPEK2Qor2hqBLQzmy1OSZ1C1TSRccGlW9Vr9tBQXyphTkcmzGBHbGsjyJILQwXXvsRW8oaC-ekNKkBr-1j_rpYlsq5OEuTWJOGb1CcknnVwnpvx7gA76P_uETIyk3X_OSqIh7B83IrKINqqtcecX2hyhzVqqmQoPUwSSP2X7JsJS6jJlkwmgif5XMEP0-uM8wYu5bfFC7U3unViec0awUkT3OI0Z_I8zRdXsqF6EV7ZH8XXfhiLYrC60vI-PTxUsCQuAWiYvfbe8LfNX-i2JCPc4LzbXbty9-7k9-lX43pPUp5M9dxR7f1NZG5exxfh4v2FYKeBr9j5kwsWB5-HeqO-xuje4MhyDyAxxlNrw
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */.include_js('/static_assets/js/reporting','google-analytics.js');include_js('/static_assets/js/leftnav','height.js');include_js('/static_assets/js','https.js');function include_js(path,filename){var location=path+"/"+filename;var head_dom=document.getElementsByTagName('head').item(0);var js=document.createElement('script');js.type='text/javascript';js.src=location;head_dom.appendChild(js);}include_fed('/static_assets/js/reporting','federated-analytics.js?agency=Treasury&subagency=IRS&sdor=true');function include_fed(path,filename){var location=path+"/"+filename;var head_dom=document.getElementsByTagName('head').item(0);var js=document.createElement('script');js.id='_fed_an_ua_tag';js.type='text/javascript';js.src=location;head_dom.appendChild(js);};.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 208x35, components 3
Category:	downloaded
Size (bytes):	3550
Entropy (8bit):	7.672747388875095
Encrypted:	false
SSDEEP:	96:UvWCcYyvBpY/g7eSCCOV9zJyX/HOktOYx:aeP8/AeSCCOTtyX/NtZ
MD5:	006E9D59B3172B7E1295DE7183F03E65
SHA1:	2132926C4F39B9AEA85F8C3B82AB6A3F11107704
SHA-256:	1F5060C2D41AC80D9CAB26AA7A7DBC21B41787FE61589173868E210CCAC8A738
SHA-512:	0F3266586E9A68034EA8EA0551699E04B8CFA0F79F959248FAAE3944E6284A7048C37106482A0C9F8150C72FD9F6A5ED75BF0ED12C7ECEC55EF69CCB1902D8B9
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images-ez/nav-user.jpg
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d................-...N...Q................................................................................................................................................#.......................................................................................".....%. 0!1..@P4............................4E.!1..AQaq"2B3. 0..RCbr#....................1B...0.!Aa...PpQq......................!1a.AQ..q... 0.@P...............................N...s.4...).....Q4.G3.1n.......[+g?...{..q0[Y.k..4..y..T...m.pG.z6....G$h.......4b.AT.$h9+......m......................6.1.9...m.cls.c......6.1.9...m.cls.c......6.1.9...m.cls.c......6.1..~l..5..q.J.J.)cW.\.F.E_.........j.........tZ...[.h.F.GU..2.....5.....X...n....].....?....v>...O..&F~L?O..R....gD..XV.]..T+e..z=i.i.i.i.i.i.i.i.i.i.i.i.i.............REH..".T..REH..".T..REH..".T.._J.hz./.....0 \|....4B.................L-0....L-0....L-0....L-0....L-0....L-0...<.d.#.EX..D.`}..d.Q.X.n.

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.2727801090429285
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8x/S8f:3qD+2+pUAew85zsaA
MD5:	78FD7C1A980B9162702E6F984A25B7A6
SHA1:	E832ABE897CDAA5E36131733AF619F174AD0F9C5
SHA-256:	1C5A3539A6FBE5420A519540FF6662EFEACB0BB1B9B8314C74064694A0D52C0B
SHA-512:	06B0C9A98D1F6B5BCF81D81574258B7D479579CD80FC51105C58B99263D802EFD64ECF6B5A9A3105C1046FB7EE3F776547E1593436AFC3E6C0820D149C0913BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Non-ISO extended-ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	44001
Entropy (8bit):	5.273562324383193
Encrypted:	false
SSDEEP:	384:50XfBSgSVnpCSSPjTgV1U1m4XWU1SBU1f9FTS/1+xHi7DJMU02ZTbeZAwuSEXAbT:50mOgiSD7DYonfbIuqVPk8vWwNq15k5
MD5:	87E09B76ADAE8663EDC311805ED56D88
SHA1:	DB0DC906420A119BFBFAC6A4F1C74BD9D63E85A9
SHA-256:	D925940E4A3D92063813262767B66C64060C59195389B19DD00CE1D04B30065E
SHA-512:	4232B9E43B5BE8ED09B79AEB1BCCD1D1128ABF4CDBCF201D7E922EC6701419AA73E253121B605BEB61283EF09C297695A4943AB566AD0236E1D72338A89F304A
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/1040now/1040Now%20FAQ.htm
Preview:	<html>...<head>...<script type="text/javascript" >... var tabValue = document.URL;... var url = "";... if (tabValue.lastIndexOf("#") >= 0).. url = tabValue.substring(tabValue.lastIndexOf("#"));.. document.location = "../mobile/1040now FAQ.htm"+url; ...</script>....<title>1040Now User Guide</title>...</head>...<body>....<table id="Table2" height="20" cellSpacing="0" cellPadding="0" width="95%" align="center".....border="0">.....<b><font size="4">.......<TBODY>........<tr>.........<td><img src="images/1040header2004-01.gif" align="left" width="573" height="41">.........</td>........</tr>........<tr>.........<td height="20" bgcolor="#990000"></td>........</tr>........<tr>.........<td align="left"><font size="3"><em><strong><br>.............User Guide Table Of Content</strong></em></font><ul>...........<li>............<em><strong><a href="#1">General Information</a></strong></em>...........<li>............<em><strong><a href="#2">Tax Preparation</a></

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PC bitmap, Windows 3.x format, 55 x 48 x 24, image size 8064, resolution 3780 x 3780 px/m, cbSize 8118, bits offset 54
Category:	dropped
Size (bytes):	8118
Entropy (8bit):	4.405247139235593
Encrypted:	false
SSDEEP:	96:6z6BbdR+fzvexqc71H4YnsGd1nXB8LXdpR:6z6Bdq1c754YsGddXi7nR
MD5:	63A4DC9BBC3E15E163A9BEEF36288964
SHA1:	3BD1CA1CAA47A5681BFBEC7FFB96C665DF9334D5
SHA-256:	05322F7F29C9E8F414B74CE9E58F9C7758391B39487B7310C2DEF121FB210496
SHA-512:	AAC14693F239CA2EE74331B7F49BFCD1883AFF0C9FD1831B1DBEE282AC74489956EDD9670CF79CAC647E3BCB7EEB5AA00D77852F7A35D3A01791806EE71ACB33
Malicious:	false
Reputation:	low
Preview:	BM........6...(...7...0.........................................................................................................................................................................................................................................................................................................................................................................................................x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x......................................x...................................................................................................................................x................................x....................................................................................................................................................................\|Q....................................................................................

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3003), with no line terminators
Category:	downloaded
Size (bytes):	3003
Entropy (8bit):	5.167974738136301
Encrypted:	false
SSDEEP:	48:hTaJfy+hiQFNB7GEGTbTzLEoPpKkVr54TH4y3yXHlrMPbEz2gqGC7samDw8//yYZ:hTsiQFNBGEGLco7DiH4eyXHhMPMoxm8o
MD5:	5F984FDD1D3384220C67422C1F544A95
SHA1:	79C8A48B5FAB47972DD69CE7DFD08CEE895006B5
SHA-256:	6E0CC78C402CBC02FDFD41CD77C5FD6FFBD8066CC07935EA8EB5F3FCC59744A3
SHA-512:	213D46E642971BE740CE74EE1F4B05835F11B88A05E89045BA6869391C40E871150ED22D96C9865203A767E45B5FBB09E879FE605D82E0E7B59CC8CF4BE3019A
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/page.js
Preview:	!function(o,i){function r(){}var n,d,s,l,c,u,f,m,e,a,t,p,y,v,h=".BRQnzO8v",_=o.head;"function"==typeof[].indexOf&&_&&(i.a2a=i.a2a\|\|{},n=i.a2a_config=i.a2a_config\|\|{},e=(d=o.currentScript)&&d.src?d.src:"",NodeList&&NodeList.prototype.forEach&&(i.a2a.init=function(e,a){void 0===a&&(a=n);var t=":not([data-a2a-url]):not(.a2a_target)";o.querySelectorAll(".a2a_dd"+t+",.a2a_kit"+t).forEach(function(e){e.matches(".a2a_kit .a2a_dd");e.a2a_index\|\|null!==e.getAttribute("data-a2a-url")\|\|e.matches(".a2a_kit .a2a_dd")\|\|(e.dataset.a2aUrl=a.linkurl\|\|"",a.linkname&&(e.dataset.a2aTitle=a.linkname))}),delete n.linkurl,delete n.linkname},i.a2a_init=i.a2a.init,!d\|\|d.async\|\|d.defer\|\|i.a2a.init("page",{linkurl:n.linkurl,linkname:n.linkname})),i.a2a.page\|\|(i.a2a.page=!0,s=[],["init_all","svg_css"].forEach(function(t){i.a2a[t]=function(){for(var e=[],a=0;a<arguments.length;a++)e[a]=arguments[a];s.push([t,e])}}),t=(v=n.static_server)?v+"/":"https://static.addtoany.com/menu/",a=e&&-1!==e.split("/")[2].indexOf("a

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2492), with CRLF line terminators
Category:	downloaded
Size (bytes):	13103
Entropy (8bit):	5.546299013209738
Encrypted:	false
SSDEEP:	192:KP9TbUfm2ScBQBwmmH/jWuoAV+57dlHXlDFTxvNAkspJTXT6s8:ECUcBQ2+uod3FTxv4px2
MD5:	9419FAA4EE6101AD7404C9BA47570A27
SHA1:	CBB67AF63314EFDC3B89B02D073395C62477A13B
SHA-256:	2FF891FE9E518576D61EB72F0D12538B2466F9ABEAE1644660DB1A308A0690D1
SHA-512:	D65EC32E0F745D11F3376CC86383106403C28E0E76757CCF5DC3462AC3474C7F3E279C12FC09639831E5B044463C7A5FEA39185811821420E7504C64FF421084
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/main.aspx?req1=email
Preview:	..<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" >..<html xsl:version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns="http://www.w3.org/TR/xhtml1/strict" xmlns:msxml="urn:schemas-microsoft-com:xslt" xmlns:asp="Remove">..<head>..<title>1040Now Online Tax Preparation & Electronic Filing</title>.. <meta http-equiv="X-UA-Compatible" content="IE=edge"/>.. <meta name="viewport" content="width=device-width, initial-scale=1"/>.. <link rel="shortcut icon" type="image/x-icon" href="favicon.ico">.. <script type="text/javascript" src="js/IRS_fingerprint2.js"></script>.. <script type="text/javascript" src="js/sha1.js"></script>.. <link rel="stylesheet" type="text/css" href="1040.css"/>.. <link rel="stylesheet" type="text/css" href="main.css" />.. <link rel="stylesheet" type="text/css" href="menutax.css"/>.. <link rel="stylesheet" type="text/css" href="menuco.css"/> ...<meta content="Microsoft Visual Studio 7.0" name="GENERATOR"/>...<meta content

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 18, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1848
Entropy (8bit):	7.294498611958225
Encrypted:	false
SSDEEP:	48:kqQvnLinFD7YrJ3En0z9Z313XStf4GbNFwvTzRupQSjc:9QGSa0z9qtlFwv3RIDA
MD5:	5209C2C239D139C068F75BC18F0FAD0E
SHA1:	FC9CA21C242E67C37A7C17DD473AE2023114E1FC
SHA-256:	DAD3E705F396F119FEB37090C79DB1CCD1D5BFD729B8F1554281D516877BF5F0
SHA-512:	C27BA954EEA98832475E096CEB8E4FD1CB33124E131CCA774257CE90BF0A999FB3A9D85F9AC7B6425E237E474740B95D4A6BDA13E5E2294C3733709648C54B31
Malicious:	false
Reputation:	low
URL:	https://secure.trust-guard.com/favicon.ico
Preview:	.PNG........IHDR...............5T....tEXtSoftware.Adobe ImageReadyq.e<...^iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="uuid:80A265A9CC53DF119B668112F49224F1" xmpMM:DocumentID="xmp.did:305E4FF4FF1C11E4B4CBD697B9216E6D" xmpMM:InstanceID="xmp.iid:305E4FF3FF1C11E4B4CBD697B9216E6D" xmp:CreatorTool="Adobe Photoshop CS4 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:070B86A443AEE011A9D6F3253D680165" stRef:documentID="uuid:80A265A9CC53DF119B668112F49224F1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......pIDATx..kh.U...3;;....$m...)mP0m-(..X_.%`.A..(...(..

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42783)
Category:	downloaded
Size (bytes):	42998
Entropy (8bit):	4.6144656425006465
Encrypted:	false
SSDEEP:	192:F4ZfCBNyQptjBKTSbyVocIKLwchbitERvL78qxVuqPvjMMD+SZWoVecYyIjtu03d:F4w+QpnntsxYAjMMfW7FX4PB57dsL
MD5:	F548BE81E66571144A91A9EBEA982BF6
SHA1:	56C9E490B25CD847F8B0B555863C5B9CB516DA39
SHA-256:	268ECF688828CFDCE59659A476AB0913B4E92556395EC549F12CF8194A6F8669
SHA-512:	92F84F56EEF56C73A37285D767D901558613EAEF090A4585020B15DC35962EEBF6E998921EA7432CFB809BC150EA0340CD8DF67E46465C8FDB00E1E28422BF16
Malicious:	false
Reputation:	low
URL:	https://code.ionicframework.com/ionicons/1.5.2/css/ionicons.min.css
Preview:	/!. Ionicons, v1.5.2. Created by Ben Sperry for the Ionic Framework, http://ionicons.com/. https://twitter.com/benjsperry https://twitter.com/ionicframework. MIT License: https://github.com/driftyco/ionicons./@font-face{font-family:"Ionicons";src:url("../fonts/ionicons.eot?v=1.5.2");src:url("../fonts/ionicons.eot?v=1.5.2#iefix") format("embedded-opentype"),url("../fonts/ionicons.ttf?v=1.5.2") format("truetype"),url("../fonts/ionicons.woff?v=1.5.2") format("woff"),url("../fonts/ionicons.svg?v=1.5.2#Ionicons") format("svg");font-weight:normal;font-style:normal}.ion,.ion-loading-a,.ion-loading-b,.ion-loading-c,.ion-loading-d,.ion-looping,.ion-refreshing,.ion-ios7-reloading,.ionicons,.ion-alert:before,.ion-alert-circled:before,.ion-android-add:before,.ion-android-add-contact:before,.ion-android-alarm:before,.ion-android-archive:before,.ion-android-arrow-back:before,.ion-android-arrow-down-left:before,.ion-android-arrow-down-right:before,.ion-android-arrow-forward:before,.ion-android

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 87a, 573 x 41
Category:	downloaded
Size (bytes):	4256
Entropy (8bit):	7.603257370529179
Encrypted:	false
SSDEEP:	96:P2wYu+lyhdmTjS4CxHyvwAvwMK7oYBPbfc9n/rCD+WO:uwJTvmPIAoMK7ogc9n/rCa
MD5:	1C4F697992982125786EB808C20BDF6D
SHA1:	ECE7208277755422703B741EBD3EC5CF5FF50AE2
SHA-256:	32BD3569EB76F9D87DE99827674B343AED8FA0E11730D15253C3ADAD8052E3C3
SHA-512:	C11417ED79C6DFBC13D4C77A125AD4F06A6E70F9237C24B64B10FC3F97D4EE98E7C6B5B762F9B0D53DB702F4AE8838D9314211BEDE9FE997B29AE21481DF2529
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/1040now/images/1040header2004-01.gif
Preview:	GIF87a=.).........................................U............*.U.......U..U.UU.U..U..U........U................U................U............U.......*U...U.U*UUU.U.U....*.U.........*.U.........*.U.....U..U.U.UU..U..U..U.U*UUU.U.U.UU.UUUUUUU.UU.UU.U..U.U.UU..U..U..U..U.U.UU..U..U..U..U.U.UU..U.U.........U.............U.......U..U.UU.U..U..U........U................U................U..............U............U......U..U.UU.U..U..U.......U...............U...............U...............U.............U.......U..U.UU.U..U..U........U.............U.............U.................&&&333???LLLYYYfffrrr..........................................................,....=.)........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.*]...w..J.J....X....u.....[...L.]...p...eD........V.]..%..!Wz$...'o..yn#K....\1w3..........W..eo....5#...,...

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3
Category:	downloaded
Size (bytes):	2515
Entropy (8bit):	7.781387328374556
Encrypted:	false
SSDEEP:	48:BQSu1RqBa8IN3SeFwp5pK60LnahNWFmUmwk3g6JCqlNQS:BTARqBtAClhNWFmtw6g6JbN5
MD5:	55CB5F4F73F7B3E452D6EE73E3133949
SHA1:	F36339780E797A55EB0DFA0856A656D7E833EBE5
SHA-256:	687AF93080832D3D0A90128BBF466A957E72B14F7075BFC7B60621FD00C8BC31
SHA-512:	46AE2DFDEC5EAD45C11C40D1D6336C759D5CC99CB100EBD9D33FC1B62A1C79D560FF45FE81E4BA5DE4C916CD176E7C4DBFB85404CC316BCAD38FEB510B3411AE
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/8hmgK-BHqGc/default.jpg?sqp=-oaymwEkCHgQWvKriqkDGvABAfgB_gmAAtAFigIMCAAQARhlIFsoUDAP&rs=AOn4CLBKgLX8rib9_UCRiNMtON9Lcz84_Q
Preview:	......JFIF..................................................."... ...(-. %'(,(..-1-(0"((&...........&..!'&&)&&&&&&&&.&32&).&&&&2'-+22&&2&&&2&&&&&2.&3&&&&......Z.x.."........................................J........................!..1"AQa...dq.........23BRb.CS.........#$4Tc..................................#.....................!..1Q.Aa.#..............?....ao...z.=.4.+,D..f.n...b.w.y..i.#....=.B..!..........a..(......a./.O...}@...s...w.........Q@R.U..>.w.....z...G...H.W......./.......L.6........i)....5.7._..\...\.5K...c.i.`R.U.>-.O._.o.Er.....u....2...B<..mr....!..!....>.Z....i.Y....9.....fcE.y... . .9..R..b.n!..zu*}......R;.{+d%iv@..j7n...[.D....=U%.J.7.i...^M.QGL....n.%f...I\|..O......Y....j...x1..N.:....(.WG..N.......ul...A>H.^.....U.j.F......9...K..x...=.{T.]3..V..$^......@\| oJl.........C......$....l\|..5N\|`-.`..`...9...\... .......[.0[..mZ.cn.s.w..R.i....>..... .`.....+..w....[w3[rU.2LrD...&@....7'k".m[ki6..r..!..K.r..J.LphBH.]......k-..BJ.E...... .

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2575
Entropy (8bit):	5.028197235155486
Encrypted:	false
SSDEEP:	48:8ivAfmQEi4X4tKmLDL59LKx/QuJZcZgvN278VGICEivrEirAdQIz+x3gIfxZlFO2:dAfmQb4X4tjLDL59LKxIuJ2ZgvN272GT
MD5:	460434D53FC1DC8BB4E7CB80990DD48C
SHA1:	2A9F895A8331D13E75A268A2A2CE9C6C4B87D6B7
SHA-256:	41F45798C1A5497257A4DA2009F692C8B7921AAC746A5E23F748C52D8DDDDB61
SHA-512:	6664142CD49DF737FA89B9D2C75B7E5BEBC6AD7FA72D42F9B5F80C3C0BF674859C739427D9773FEF50E7F33BBE660D3BA7EC7FE91297254A246B5A99EE7CC868
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/styles-ez.css?reload
Preview:	html, body { ...margin-left: 0px;...margin-top: 0px;...margin-right: 0px;...margin-bottom: 0px;......border: 0px;...padding: 0px;...text-align: left;......background: url(images-ez/bg.jpg) repeat-x #001e5a;..}.....blocks {font-size: 11px; line-height: 14px; color: #ffffff;}.....blocks2 {font-size: 11px; line-height: 14px; color: #010101;}...blocks2 a:link {color: #001e5a; text-decoration: none;}...blocks2 a:visited {color: #001e5a; text-decoration: none;}...blocks2 a:hover {color: #0337a0; text-decoration: underline;}...blocks2 a:active {color: #001e5a; text-decoration: none;}.....address { ...background-color: #001e5a;...padding-top: 15px;...font-family: Verdana, Arial, Helvetica, sans-serif; ...font-size: 11px; ...line-height: 14px; ...color: #ffffff;..}.....address a:link {color: #b53e1f; text-decoration: none;}...address a:visited {color: #b53e1f; text-decoration: none;}...address a:hover {color: #746c5d; text-decoration: underline;}...address a:active {color: #b53e1f; text-decor

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32629)
Category:	downloaded
Size (bytes):	147787
Entropy (8bit):	5.183741757160429
Encrypted:	false
SSDEEP:	3072:OK6acg+0SVz/ajWQ/jMdpYZpdxZYshbIKYs:OK6D90SVz/ajWQ/jMdpYZpdxZYsKc
MD5:	102BE531E81D3D7F783ACC647B0A26AE
SHA1:	9F99D2967923CC47F45D71501CC7C51201519B61
SHA-256:	BFA87AD5BE76954C4C10BD775017319D233DB572BE22DC634754BC88818148A6
SHA-512:	F954AA29CFBD62EA38FA44E5F8FCF6D896489F648513E54E705475529D01AB87C4F9DC5F18E86572F3E436CA511552CA161698C159412F1205F9457DCD441CD7
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/pub/js/js_nvLhMKiuLiOXAI26eAyAsdymbltiJwhczBdBPKcqXJ8.js?scope=footer&delta=5&language=en&theme=pup_irs&include=eJxtkuF2wyAIhV9I4yN5iFLDZsQjJFvefiZpu3XpP-4HIl6EGJWhbA7uwXBrXNREUMiwYXMjTrASNzGyieLsRhA0dal-D1zKPEK2Qor2hqBLQzmy1OSZ1C1TSRccGlW9Vr9tBQXyphTkcmzGBHbGsjyJILQwXXvsRW8oaC-ekNKkBr-1j_rpYlsq5OEuTWJOGb1CcknnVwnpvx7gA76P_uETIyk3X_OSqIh7B83IrKINqqtcecX2hyhzVqqmQoPUwSSP2X7JsJS6jJlkwmgif5XMEP0-uM8wYu5bfFC7U3unViec0awUkT3OI0Z_I8zRdXsqF6EV7ZH8XXfhiLYrC60vI-PTxUsCQuAWiYvfbe8LfNX-i2JCPc4LzbXbty9-7k9-lX43pPUp5M9dxR7f1NZG5exxfh4v2FYKeBr9j5kwsWB5-HeqO-xuje4MhyDyAxxlNrw
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */.(function($,Drupal){Drupal.theme.progressBar=function(id){return (`<div id="${id}" class="progress" aria-live="polite">`+'<div class="progress__label"> </div>'+'<div class="progress__track"><div class="progress__bar"></div></div>'+'<div class="progress__percentage"></div>'+'<div class="progress__description"> </div>'+'</div>');};Drupal.ProgressBar=function(id,updateCallback,method,errorCallback){this.id=id;this.method=method\|\|'GET';this.updateCallback=updateCallback;this.errorCallback=errorCallback;this.element=$(Drupal.theme('progressBar',id));};$.extend(Drupal.ProgressBar.prototype,{setProgress(percentage,message,label){if(percentage>=0&&percentage<=100){$(this.element).find('div.progress__bar').css('width',`${percentage}%`);$(this.element).find('div.progress__percentage').html(`${percentage}%`);}$('div.progress__description',this.element).html(message);$('div.progress__label',this.element).html(label)

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1382), with CRLF line terminators
Category:	downloaded
Size (bytes):	69023
Entropy (8bit):	4.995159517536886
Encrypted:	false
SSDEEP:	384:/4G0QjdWARdWOVUW0UsDdIZnChl4YFI4B+0zlSFkyeZzom+ER9HQox1WvTex54+H:/Q0kikcKnx8q1
MD5:	AF5177B251035F081D4B83CD664247A6
SHA1:	8A1719CB08C6521E4B0B4D2DDF51F3ABEE33B4B4
SHA-256:	357C6C977C0197C14B127FBEAB22D175AC8AB45EDD7F176932950A7B4DB0CB0B
SHA-512:	F0196918B8F120972BEAF08982CEBDCEAEAC37730EE4DF09512C9AF02EE68FDC1A4E14FEEDF3BADED0519E187B1ABCB7E22F78093BC390D54034788D8970F11F
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/mobile/Federal%20Tax%20Forms.htm
Preview:	.<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN".."http://www.w3.org/TR/html4/loose.dtd">..<html>.. <head>.. <meta name="viewport" content="width=device-width, initial-scale=1">.. <title>1040NOW</title>.... CSS -->.. <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.min.css">.. <link rel="stylesheet" href="https://code.ionicframework.com/ionicons/1.5.2/css/ionicons.min.css">.. <link rel="stylesheet" href="css/owl.carousel.min.css">.. <link rel="stylesheet" href="css/style.css">.... font -->.. <link href='https://fonts.googleapis.com/css?family=Nova+Square' rel='stylesheet'>.. <link rel="stylesheet" href="font/font.css">.. .<style type="text/css">.....auto-style1 {.....margin-top: 7px;.....font-family: "Bookman Old Style";.....font-size: x-large;.....color: #FFFFFF;....}....</style>.. </head>.. <body id="p-our-team">.. <div id="wrap

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 87a, 573 x 41
Category:	dropped
Size (bytes):	4256
Entropy (8bit):	7.603257370529179
Encrypted:	false
SSDEEP:	96:P2wYu+lyhdmTjS4CxHyvwAvwMK7oYBPbfc9n/rCD+WO:uwJTvmPIAoMK7ogc9n/rCa
MD5:	1C4F697992982125786EB808C20BDF6D
SHA1:	ECE7208277755422703B741EBD3EC5CF5FF50AE2
SHA-256:	32BD3569EB76F9D87DE99827674B343AED8FA0E11730D15253C3ADAD8052E3C3
SHA-512:	C11417ED79C6DFBC13D4C77A125AD4F06A6E70F9237C24B64B10FC3F97D4EE98E7C6B5B762F9B0D53DB702F4AE8838D9314211BEDE9FE997B29AE21481DF2529
Malicious:	false
Reputation:	low
Preview:	GIF87a=.).........................................U............*.U.......U..U.UU.U..U..U........U................U................U............U.......*U...U.U*UUU.U.U....*.U.........*.U.........*.U.....U..U.U.UU..U..U..U.U*UUU.U.U.UU.UUUUUUU.UU.UU.U..U.U.UU..U..U..U..U.U.UU..U..U..U..U.U.UU..U.U.........U.............U.......U..U.UU.U..U..U........U................U................U..............U............U......U..U.UU.U..U..U.......U...............U...............U...............U.............U.......U..U.UU.U..U..U........U.............U.............U.................&&&333???LLLYYYfffrrr..........................................................,....=.)........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.*]...w..J.J....X....u.....[...L.]...p...eD........V.]..%..!Wz$...'o..yn#K....\1w3..........W..eo....5#...,...

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 441 x 282, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	186610
Entropy (8bit):	7.984975037419794
Encrypted:	false
SSDEEP:	3072:DZxQc2kEpU3AbijHO4EU0cV/V/JS87Cs5K40Mx8PoHh29ntfuAuwJ:DbX2HUQk/xJnOss4d842ttmAu6
MD5:	BBEE1A8D1375121D07825EA27DB6AAE3
SHA1:	D92E0F7B810AC83F0BE72BC856882359B3285C35
SHA-256:	B457617868AE66214BC0474C3A96E9755E92EBC8170C73A742245BCAE79E92E0
SHA-512:	F3F5B5C294AD1CB871F327F54F4A3C25C1157843947BADC95BB15364B6C9C7FBE22BEA2C561B4B09BE5D023031154A870B7A0ADADC2E8B1EEA24FE6ED797F693
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................?.. .IDATx..y.eWy'.....r...- .E..,.`.B2-.2v.`..#..7.M....=41.0c.h.........{....FX.a-@i+.....\|...u.8.w_.JMt;.#....w.s~.[~.w..5......X.PJ.e....C...%B~...#;.#... .RJ)%..R.e.@..B.B.7_....;.#;rA.Zk...y.....ph...$IB.YZZ...w].RJ.y.#..c...............J.V.g..h....px.....<x..+.....Z..a_.?..`......<y. ............+.x..^7;;..b..y..@.y.W.V+..Bhss....^....G....j......w.rGv..ZVVV..........$..[n...+.....;77....mu...aj...`~~>.C............./]ZZr].E..;X.#;..+.?...>.!......M7.t..c.k3...6.T.......i..j---a.O.8q...F.q........r.+wdG~L.....>...;.c.....(...7.9r.a.....^...~-....h.sg.O.8a..Z..8p..r...G.6../.x.}....\.`.....?~.....6......_o.....O.....L0.h..:.....}...T......8q.g....>t..].^4........._-......0!..}....\r.%...v.gi..Bc.FC.S.S2..R.N.h.px7....8~..g.R.]t...l.....NGJ..P.v..;.#?v.O}M. ...%!$......fggja.#b..L.]6...A..Y...B...\.gJ.my..4M.9s..........O.d}}=..J.." ].`.....;v..G..}..4...W_M).V.z.....Lc..D...A.;(.~.].:....

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 208x34, components 3
Category:	downloaded
Size (bytes):	3823
Entropy (8bit):	7.7499826034021355
Encrypted:	false
SSDEEP:	96:fuiKkIiazHtttr6p+s9IRgqpMddObBGhuzAw+vh:W2Z4Ffs9DmcObvUw+vh
MD5:	7323059BAACECAF6DF3FCDB9330DFBB7
SHA1:	5E0003A4E4D06670C2A52DC9A846581A5FFDB25D
SHA-256:	4F713DD441C46684EE4FF22E974129F2EE0001ACD0A5C0182DE65ECA9519FB5D
SHA-512:	FDE2C7211D50454233F163DA2814FC9C66E44B350589C339FEAB2116B20A08716226247988A206150CDE40B87B53E7F798F423F9D2AF3F21FC5ED7CB587E1694
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images-ez/nav-pricing.jpg
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d................G........................................................................................................................................................"..............................................................................................01. @P"24%........................!1...4AQ.aq"3....2C0R P.Bbr..#.....................1..P!Qa0Aq.... @.....................!1Aa.Q..q..0.P.. @..................G.`........... .:. .k.XJ..;G...E........].f...zt._.R.eW.G.....l.o$.2.....tk..e..1......$D._....]+a.N..{..o4...).9B...........................6.q.;...m..lw.c......6.q.;...m..lw.c......6.q.;...m..lw.c......6.q....DEr..2.'...N<]..............6.\|L..l<9...X3$.k..._..cb..[...8.3_&._....#..4..H.:........v..........7;...A.\|ol.2d...?:e.c..F.w.....s^......c.+%..s..vlN."y.$..$.-..nf[...&................R.UJ.U.T..R.UJ.U.T..R.UJ.U*.T.._.AxR.Pr"...x..).{....J..W...J................L-0....L-0....L-0....L-0....L-0....L

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 208x34, components 3
Category:	downloaded
Size (bytes):	3634
Entropy (8bit):	7.724554105018517
Encrypted:	false
SSDEEP:	48:rXn13itpRjso9rTTxwaNtPMwX++qrpUTBHsCxJYcbY+bpB3Pzh/00XSAe4Q:rF3iDRp9rTTZLp+pFuBhHYsZbptPzHXM
MD5:	5498D0B3057E9431BA5EE80250E27D05
SHA1:	10B44703E0BAE6CCD1C59BD3BF78F01A588FD790
SHA-256:	9435A05D4B7B5AEE895D70B55E9685C39CE3091644C9869FBE388DB1B674452C
SHA-512:	E3F2D4F385587C675C64A2D9094D64B60267348943E64AFD88A8184F7143F90109112D4F82E24DF2517D6619DBCFAB8F14D4DBD2592D8725372B9178F40A3498
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images-ez/nav-federal.jpg
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d............................0............................................................................................................................................"............................................................................................ .01.@P!A.B........................!...41.AQ"..aq.2R0#3 @.s$...................1.!A.P. 0@`.Qq.......................!1AaQ...q... 0@.P................................. .z.Q..f.....9.E.&&...k..l.W@..^.Wg:...z...aly../..[..ew.>..UN.....~../..c.v.y.cA...s.w...d.L.Z..F."...@$.H ......................6...cl....6...cl....6...cl....6...cl....6...cl....6...cl....6..wT...:...._..5J......J..!..1.,<.R.0.o/i.....G.d.O.k.8.s.<.5...._OF..e.[.L...M.@..U..cK..V/.4...T..#YD-..=........RZ...C....}Dc.=.)8$..R.B..NQ$...$..#...........r..).r..).r..).r..).r..).r..).r..7{v7V.B==.&...O....K..H...%..............j....+PV..AZ...j....+PV..AZ...j....+PV..AZ...j..@.~..........C..0@.`<.O...

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 208x34, components 3
Category:	dropped
Size (bytes):	3634
Entropy (8bit):	7.724554105018517
Encrypted:	false
SSDEEP:	48:rXn13itpRjso9rTTxwaNtPMwX++qrpUTBHsCxJYcbY+bpB3Pzh/00XSAe4Q:rF3iDRp9rTTZLp+pFuBhHYsZbptPzHXM
MD5:	5498D0B3057E9431BA5EE80250E27D05
SHA1:	10B44703E0BAE6CCD1C59BD3BF78F01A588FD790
SHA-256:	9435A05D4B7B5AEE895D70B55E9685C39CE3091644C9869FBE388DB1B674452C
SHA-512:	E3F2D4F385587C675C64A2D9094D64B60267348943E64AFD88A8184F7143F90109112D4F82E24DF2517D6619DBCFAB8F14D4DBD2592D8725372B9178F40A3498
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d............................0............................................................................................................................................"............................................................................................ .01.@P!A.B........................!...41.AQ"..aq.2R0#3 @.s$...................1.!A.P. 0@`.Qq.......................!1AaQ...q... 0@.P................................. .z.Q..f.....9.E.&&...k..l.W@..^.Wg:...z...aly../..[..ew.>..UN.....~../..c.v.y.cA...s.w...d.L.Z..F."...@$.H ......................6...cl....6...cl....6...cl....6...cl....6...cl....6...cl....6..wT...:...._..5J......J..!..1.,<.R.0.o/i.....G.d.O.k.8.s.<.5...._OF..e.[.L...M.@..U..cK..V/.4...T..#YD-..=........RZ...C....}Dc.=.)8$..R.B..NQ$...$..#...........r..).r..).r..).r..).r..).r..).r..7{v7V.B==.&...O....K..H...%..............j....+PV..AZ...j....+PV..AZ...j....+PV..AZ...j..@.~..........C..0@.`<.O...

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 150 x 40
Category:	downloaded
Size (bytes):	4255
Entropy (8bit):	7.748362119597243
Encrypted:	false
SSDEEP:	96:QjDBasXP4rQdT/vuqvkh6jIO5foN5jMMKUxhW+3uc7D81in:Q/B9wrQdjuqve6jIO5C54MKUXNB8gn
MD5:	C848C1727FC4790C81DCEF046F03D829
SHA1:	DBDCE83364FBA86B356079AF00DFECFA13D3D710
SHA-256:	F3435BAF8EEC4F1AADDBBCD41F86DA0C11144CE6DFE0FC0C627A0882004840EB
SHA-512:	98D3F1EE2C98828635AD20B46D6C81A7C70B9AC7F08B38F033E9E674985462CB4AF9D08A263A62EAB3649902EE892C832E71FD6DCECEE23032093CD7B00A500E
Malicious:	false
Reputation:	low
URL:	https://dw26xg4lubooo.cloudfront.net/seals/privacy/12081-header.gif
Preview:	GIF89a..(.............2{=...Y.hO._9.F![H.X@.O.U&.K!g.t#a-.6. ?.B.Q;.H+c1)l3.C.7.Dp5q.g5.A:.Gt..E.T#I$..%e/)[-W.b'i1?.M/o8!E!=.Ku.l2t;&N'.!..P$(T+G.W....8.k.`,t8...../x;.0..<.q.N.=.>.L3.?Zy_7.Dn.el.r....4......~<.JISR...i.s{.}....0...bbgk}.w................x......5..r.t.........l..D..........[}........\|.....9....W..t..c...v.Un....8.f....n....U........k..C.vU.v..Q..ds5...!.......,......(......H....................b............................b.2.....B.......L.....F?QQNF!.FN.?F.!...!F.N!.Q?.....F.M............L.=......!....U~..b.`..!. \|........0c.L..F......E.G2.\...0c.l.....Lr...d..9..`8.S...<....O...N.j)Yd..*_..0.D..".\th.....%.....`.0R... .Q.............. ..a...5.S....h...y.2...s.^JH`..&.V!"...2m.,1H...'>J.!2....d...A6.."GH.A.dI.....H.y....2w.yt...2O^..a.Q..S.b..;P.....a.L.x...-...!S.....-...3,1....(....DV.4....H`.........A...A..S.`...pq".S..@.J(.".\.(.\..b.9n.......5..B...!E..@.G.{..W.r-p.Bml..`p..p...}..C..6..?.P....PR..TiD..<.....`b...@@.(\A@.

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1478
Entropy (8bit):	5.144569070268417
Encrypted:	false
SSDEEP:	24:Zi8uniB8FQHw4MygOmVCXJMFfGgeDNVJzg+/HReh+GVgHRezgj/+RCg+BGT9Su7X:ZVuniB8CcygrV0MdXeDNPg+/HRerVgHk
MD5:	48448E446A25003763219E3FC2F37CD2
SHA1:	5399FA5C034E42DBD52D7BFB706519543E5675D9
SHA-256:	4732475356F2AB19FD993565B9658E2C25B3D408F4C25EA3D4FB879C43B45245
SHA-512:	7067259A45DC0A96860F2DF3F32A9B6F3A52B4E47280A69D8A7A6EABD5066635A02F327E0451E4CF9F6E828DAB46BCE19B4BCD6330FB00451A6E38664EE67F85
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/1040now/1040Now%20Year.htm
Preview:	<html>...<head>...<script type="text/javascript" >... var tabValue = document.URL;... var url = "";... if (tabValue.lastIndexOf("#") >= 0).. url = tabValue.substring(tabValue.lastIndexOf("#"));.. document.location = "../mobile/1040Now Year.html"+url; ...</script>....<title>1040Now User Guide</title></head>...<body>....<table id="Table2" height="20" cellSpacing="0" cellPadding="0" width="95%" align="center".....border="0">.....<font size="4"><b>.......<TBODY>........<tr>.........<td>..........<img src="images/1040header2004-01.gif" align="left">.........</td>........</tr>........<tr>.........<td height="20" bgcolor="#990000"></td>........</tr>........<tr>.........<td align="left">..........<P> </P>..........<BLOCKQUOTE dir="ltr" style="MARGIN-RIGHT: 0px">...........<P><FONT size="4">Enter 1040Now Secured Site</FONT>:</P>...........<UL dir="ltr" style="MARGIN-RIGHT: 0px">............<LI>.............<A href="http://www.1040now.net/index.aspx"><

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/themes/custom/pup_base/fonts/fontawesome-webfont.woff2?v=4.7.0
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 35 x 37, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5612
Entropy (8bit):	7.935139580197782
Encrypted:	false
SSDEEP:	96:DSDZ/I09Da01l+gmkyTt6Hk8nT4qLr5Pf+QE6Lpntpl6114xqaGclv7d+u1:DSDS0tKg9E05T4erJOyptO11uq6vcu1
MD5:	DE748C468720AB9F2E37F756DE679842
SHA1:	F0480E3DFA88DA997AD8D3C66869DE7A46A3BD62
SHA-256:	2F601356302DDE8B45F2453A00D6E2FB8558B0340116F307011ED2E1FCD5248A
SHA-512:	EB159C2392DA4E5259D18453BC9F04FF3FC61581403DFF01476CC4787D5E0A2569D0DF6172E57096A0A9B5B0FB3E2EDEF5B17EB6FEE5D8308FC8D8EC6A32A159
Malicious:	false
Reputation:	low
URL:	https://secure.trust-guard.com/page/templates/certificates/images/tg-shield.png
Preview:	.PNG........IHDR...#...%......PD....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 160, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	583
Entropy (8bit):	7.280879176715662
Encrypted:	false
SSDEEP:	12:6v/7I7w2l3aPhrNB22SMW4K+0Fr6HpT7Yt9iFshJqhxg+ADg:/s43a5rL2T94K+02O9im8hxg+Mg
MD5:	6A55C4BFA2B3EF0A87EBAF722D46F484
SHA1:	A60E1A7B746EBCAD51B99B106126F7725718D69D
SHA-256:	A1F9B6B76C5AF10CDEB8108BC10487112C9B521BFF9C71B67BBD7ED2E583B346
SHA-512:	94542D86F0F82406A7EA47596203C889D09C3059555A800FEE42A8079811916387808CF025BC01EDFE93B6A17E083679BA3CC5E06608C4699FC9A49B33B3DF72
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/themes/custom/pup_base/images/fa5-book.png
Preview:	.PNG........IHDR...............>.....sRGB...,.....pHYs...#...#.x.?v...!PLTE.................................P..L....tRNS...}.[.9......7....IDATx....M.@..`[...#7.....@J .%P@@T@.T.V.br`..^.....if...5.......-a4.6...F...8.h.LB.0R+.X.Z).........5....@.j!.\-.....=.. ...&$.L..Q-#3D6%..O..#F.L.I..nu.>..1.B.I..o0B.....x&S_..i..xH.l....l.F...I...H....}...\|u.^.../{.6b..#F..1b..#F..."9.;...xWz\.....#.p....~-.#...9...)U5..c.6.."o.B...a^..Y.r...?..%........HG{.....CZ.._...O.... ..s..y,.....!e.uJ.......".P. H.o..T DM...b..}...!I..]..#.("..t........?..os......c.......IEND.B`.

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3577
Entropy (8bit):	4.9500653980464975
Encrypted:	false
SSDEEP:	96:Tozwp1Z/T5MCfTRuMKSrPl4M5Zm4ueQAKCGCI3Vv:0yZ/TKM2hAKh3F
MD5:	A8A86863DB9574845176B6731026B59A
SHA1:	D6A7A8907150854F31C74F542860DD72933AEDB5
SHA-256:	0DE8A87760DC661DD9EB3132F353AE262FE369431DBB1717F6B214D77DBBE806
SHA-512:	B2EF7393BBE0082401CAEA9B79021D5E373B24B59C274E7ECE9FF03E75A770E3887EEBAF7D38B8B9AE7BBF50A8A28611635782CF3784F7CEE0EA668ADC3B16C6
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/menutax.js
Preview:	jQuery.noConflict();..jQuery(document).ready(function($){.. $('.menu-toggler').click(function(){.. $("body").toggleClass('no_scroll');.. });..});....jQuery.noConflict();..jQuery(document).ready(function($){.. $(function() {.. initDropDowns($("#menu"));.. });.... function initDropDowns(allMenus) {.. allMenus.children(".menu-toggler").on("click", function() {.. var thisTrigger = jQuery(this),.. thisMenu = thisTrigger.parent(),.. thisPanel = thisTrigger.next();.... if(thisMenu.hasClass("open")){.. thisMenu.removeClass("open");.. jQuery(document).off("click"); .. thisPanel.off("click");.. }.. else{... allMenus.removeClass("open");... thisMenu.addClass("open");.. jQuery(document).on("click", function() {.. allMenus.removeClass("open");.. });.. thisPanel.on("click", function(e) {.. e.stopPropagation();.. });.. }...... r

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 441 x 1, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	125
Entropy (8bit):	5.48237626086557
Encrypted:	false
SSDEEP:	3:yionv//thPkcl/knpTVRthwkBDsTBZt6BIP9FxORchNww8up:6v/lhPkU/6VnDsptxOKNFp
MD5:	82A333C9B03858906E51D87FA1EEBE5A
SHA1:	4222005D54E6207E693AB4C4014F82DD0BA62A04
SHA-256:	EE71B5DEAA72BBC3F31E9A75489C568A026086314C73045C1CA4BE702D9F6AE4
SHA-512:	AFBCAB67B4DD5F1FE531F9E52A695E75C8B6CC32B96274D84D42A5597709EECC0775587A8330837281F862ED6A09160D4F924D910B8D4D6BBBBB64E96818A6A5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............G.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...mjjb...`...Q.........x..yL.......IEND.B`.

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 120x101, components 3
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	7.874610526767601
Encrypted:	false
SSDEEP:	96:gazWMiLJTTp1RZB+TcWCwdr9fCimrwhRU2YUhm:Z83VwZxCimr/Uhm
MD5:	EEC2F99878202E8CBE71720D93357B99
SHA1:	F7FD0C20A53F97D89D08B9C09E8210CCC720B9B6
SHA-256:	D14E4B13DE7285C276FAA5B4223C0F718DC8EC5B68F824D90BB1F78B9F7BF66A
SHA-512:	0A5A6F5DFEF5FEE00C0C97927FEEA03BD73EFA03ADE30909D4DF4CCF9856920C2DFBE94C1D253EDDF2DD4BB70C5B524A592BC2724F9A5F4AB59C26806CD4FECF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................e.x.........................................................................................!1.A"..Qa.2#.b..3..E.q.B.....s$TU.....................!..A.1Qa..q.....2."B.............?...E(..!..Oro.].....#.k.K..E.".I.....Iwz5.x.p..1.v........-...r....(...{=.$....C..2....Z.P......W_....l.I.<..8.!.d...H='4^...u>.-)..Y...h%.k.#>..E.ms..t_URa.Y$.%.... ..M.h.....".L.U.BD].Qu..P(.....R..`..[..7...j.'$Z.;<.pK4.y........ ..u....E....."..y-z.n.>h.q.._.....)......q......<2:..qZ.2.m5..?..-}...>.r.t.c....J.3X~'..sh..l......Q.s.g..O.&Yh[-.q.!k..=............mYq...-&....#Y.n.6;l.s.4..2uT..p..%..g..1.(.f0.....F...y~...[...y...x....[.L..u.F.O..H..WH....b6.]\|'.?"CV\|N[7..I..q.q28...R..c...G7.4pS..k\...."c-...O..j....g.l.x.J.S........w.....D.....rc...r....n.n..X...V\|..6..-.d..

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	58480
Entropy (8bit):	5.229820335503067
Encrypted:	false
SSDEEP:	384:McG0QMj9py8ySu0F2T82tIeJ5L7X/fR9EWFpAvWjd9FiIqMx/SA0z4DPDnD/LY2E:MN6gBvBco6
MD5:	402A6B48EDA0E8E7B8CD6E3ECB0FD5C2
SHA1:	70E48C6FDD9F171FFD011CDC61232ED83AB6458C
SHA-256:	287001CD063A3CA5933E1FF7CCB1BAF3672EB051061D286D404FB67C900F2912
SHA-512:	DF594B19B06FECD246D9A47AAB04450F5C04EC8B9ED9B7807D92C509C8F89C33E9AEB9EEE0D2915CF4D78416BC831C95CE1AEB0B40D5AB5D75015261E5BDA703
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/1040now/Federal%20Tax%20Forms.htm
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN".."http://www.w3.org/TR/html4/loose.dtd">..<html>...<head>...<script type="text/javascript" >... var tabValue = document.URL;... var url = "";... if (tabValue.lastIndexOf("#") >= 0).. url = tabValue.substring(tabValue.lastIndexOf("#"));.. document.location = "../mobile/Federal Tax Forms.htm"+url; ...</script>....<title>1040Now Online Tax Preparation & Electronic Filing</title>....<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">....<LINK href="1040.css" type="text/css" rel="stylesheet"></head>...<body>....<table width="90%" align="center">.....<tr>......<td align="center" height="48"><IMG src="images/1040header2004-01.gif" align="left">......</td>.....</tr>.....<tr>......<td bgColor="#990000" height="20"></td>.....</tr>.....<tr>......<td vAlign="top" width="30%" rowSpan="2">.......<P><FONT color="#333333"><STRONG><FONT size="4"><BR>...........1040Now Federal / Sta

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PC bitmap, Windows 3.x format, 55 x 48 x 24, image size 8064, resolution 3780 x 3780 px/m, cbSize 8118, bits offset 54
Category:	downloaded
Size (bytes):	8118
Entropy (8bit):	4.405247139235593
Encrypted:	false
SSDEEP:	96:6z6BbdR+fzvexqc71H4YnsGd1nXB8LXdpR:6z6Bdq1c754YsGddXi7nR
MD5:	63A4DC9BBC3E15E163A9BEEF36288964
SHA1:	3BD1CA1CAA47A5681BFBEC7FFB96C665DF9334D5
SHA-256:	05322F7F29C9E8F414B74CE9E58F9C7758391B39487B7310C2DEF121FB210496
SHA-512:	AAC14693F239CA2EE74331B7F49BFCD1883AFF0C9FD1831B1DBEE282AC74489956EDD9670CF79CAC647E3BCB7EEB5AA00D77852F7A35D3A01791806EE71ACB33
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images/IRS%20Logo.bmp
Preview:	BM........6...(...7...0.........................................................................................................................................................................................................................................................................................................................................................................................................x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x..x......................................x...................................................................................................................................x................................x....................................................................................................................................................................\|Q....................................................................................

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51416)
Category:	downloaded
Size (bytes):	51492
Entropy (8bit):	5.306983956654098
Encrypted:	false
SSDEEP:	768:eZxW1FpIqCCyhTHSyLmPlM+rt8G13EL9kjbRoz+98ScvLoW+cFckg4ca6KXNboRN:KWkrvLoW+cF7KReoQsfmOUDcHb6i3X
MD5:	B7083B11D7AA08D40FB6D54A56C87E8C
SHA1:	F2E4E5E41B1D15E1E0DACD7B7AB38484257D9E7F
SHA-256:	72723CD0B8ECCCBF74D4E2CA75D6B827288BF91B96533A388B8D3DCAC0A16751
SHA-512:	6CC2D9461C2A3554B9B3BF7B767A5268FEF0EA0EFA37EB5410544556E4F12ED2D3D5E2429106FDA62CEECD483144E6853375714E32C9A4F5180A7EB18E869EF2
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-rum-1.256.1.min.js
Preview:	/! For license information please see nr-rum-1.256.1.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.256.1.PROD"]=self["webpackChunk:NRBA-1.256.1.PROD"]\|\|[]).push([[75],{2573:(t,e,n)=>{n.d(e,{o:()=>c});var r=n(4247),i=n(1117),s=n(8673),a=n(8310),o=n(7056);class c extends i.w{constructor(t,e,n){super(n),this.endpoint=t,this.opts=e\|\|{},this.started=!1,this.timeoutHandle=null,this.aborted=!1,this.harvest=new s.M(this.sharedContext),(0,a.L)(this.unload.bind(this)),this.sharedContext?.ee.on(o.wO.RESET,(()=>this.runHarvest({forceNoRetry:!0})))}unload(){this.aborted\|\|(this.opts.onUnload&&this.opts.onUnload(),this.runHarvest({unload:!0}))}startTimer(t,e){this.interval=t,this.started=!0,this.scheduleHarvest(null!=e?e:this.interval)}stopTimer(){let t=arguments.length>0&&void 0!==arguments[0]&&arguments[0];this.aborted=t,this.started=!1,this.timeoutHandle&&clearTimeout(this.timeoutHandle)}scheduleHarvest(t,e){this.timeoutHandle\|\|(null==t&&(t=this.interval),this.timeoutHandle=setTim

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 780x30, components 3
Category:	downloaded
Size (bytes):	1127
Entropy (8bit):	5.671296740822261
Encrypted:	false
SSDEEP:	24:gKX7BUM5kuZkMRenNLjNL1oxQ2bbbbbDOOGXbbbbbb7bbBnbbbbbYLIbbbbbxvUV:gQCM6uaM4nNLjNklbbbbb6O+bbbbbb7O
MD5:	C4E2453B0DFB685AA2E6224C8DC6FC20
SHA1:	D0F336F4081D2804B8AB78B9782DE5F9759A8CAF
SHA-256:	2F5E78775C197B63C2A91CAE5048A4494AB96BA09159D0C32FE622E243074CF9
SHA-512:	9DD77BECBBECFFE5B7B6EFC0C5C6494BDDAF06526FC7C34613F15D2C74A974790FAD69A18F2C1518A346C111AC3CEAF42D4540368B2F4070C3B0D449F346A852
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images-ez/table-bg.jpg
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d............................e.............................................................................................................................................................................................................................`...@..45.6.....................@`...........................................1`A..@.................s.o.............................P.(..............W..]7.~...........................(\.X..................x............................J,..........tjC.U..M..B@..........................%..........c:5!................<..#.......P....o.$u.:....s\|.#.y.&Gys...............:Ht..$:.N..?.O..........a......d...'.O........?.D.........?.D.........?..=.G..d..................p.J.OJ, Z.oQ..(Y=(..g........?!Y.N%B.jq*.CS.P...J.........?!..L.>.<}2x.c........?!..\|.>.$}.H..................m..m..m..m..m..m..m..m..u..m..m..m.{m..m..m..m..m..m..m..m..m..m..m..m....m..m..m..m..m..m..m..m.[m..m..m..7..m..

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32x32
Category:	dropped
Size (bytes):	3638
Entropy (8bit):	2.571036536899412
Encrypted:	false
SSDEEP:	24:OeP3VnSOcrTxoncyUjvAZgX7a7VFYuq8oPhhr2EsCtIDOLrie:ObDrTxtyUn7WPYXBCs
MD5:	E7E7D53FDBC59F9B23B362F41FAD8990
SHA1:	EBA944D3003861B1E114D8997C2979B003F68087
SHA-256:	6D63881E43E08EF385E6C809B43B2B289A459FB2F30D5159000E2477D776B456
SHA-512:	8ADED0EC6D8F1118CE33479CB16F60A9115948CF09C57DA38292E24DE13B3B5C3942B8E6AEC82769C555FB22BFCB1F91E773C4673E7B6A34F5701EFF0397E259
Malicious:	false
Reputation:	low
Preview:	..............h...&... ..............(....... ...........@............................yJ.{6......["...r.........J............[..g4..q?...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 29396, version 1.0
Category:	downloaded
Size (bytes):	29396
Entropy (8bit):	7.982898561508201
Encrypted:	false
SSDEEP:	768:kz+tHrT939jjLmaC7tfhPJsJehKpLIEsVMxSVtVv7:u+tHrJtjmHry6KNI96WB7
MD5:	A1F620F0005ACEF0FF71C9B798483FDB
SHA1:	6E855789EC3A7BA442A800653FF7EA352865691D
SHA-256:	863B8F9DA715B522FE6070CE7F540EAA9A43BFD05E3640F00DD2DC7639061872
SHA-512:	A88F0990C5EBCFADEAD9E811D4729C3B2491079772EEED9C6F619E02D8DC594260C8155F4E85630B336246F57E3803DCD55687D8629AA197A20BD66BE2F200CD
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/themes/custom/pup_base/fonts/source-sans-pro/fonts/sourcesanspro-bold-webfont.woff
Preview:	wOFF......r.................................BASE.......>...P.s..FFTM............w.W.GDEF......."...&.'..GPOS...<......3...-GSUB..............OS/2.......X...`h...cmap...8........HD..cvt .......8...8.;..fpgm...........eS./.gasp................glyf......O....l..H.head..aL...6...6....hhea..a........$....hmtx..a....8......M3loca..c.........1g.maxp..e.... ... ....name..e.......'...Npost..ph........3...prep..rX...s......webf..r.........p.Y.x.c`d``..b..>........<.&.7......<...6..`d`...a`.......(................Q.j............-!.x.c`d``..b1.9.&.F \|..,@.& f.`....8..x..Z}h....6.\n..^.g....M.]....C.D+b.j.4-..k......Ch..l..G.H.9.OB..6..E..mh...?.Y.=.....!,....>....3;;3;....e..y?...~....Q....Tp.Xk;...'.\|.^..h'f.%D[.......#m.8..}.g......~.J/..W.\.........[@.P..B/...h..vz..@.4D../.!%.i..#.B..[9.L..@M<Fgx..r....z8N.T.^-.?..\|.\|M.:.7...<Z.a...)...1O..v.k.^..HE..=..8z....u.oj.k#..ML...S....b9..Z.X...~.z.7!.^.B..x..19S+..`..<...F.b.@[...\...1z.0...S#5Q3...t.z.2.O..nH.m..=...t..x..y..

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.267838660635414
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xZS8f:3qD+2+pUAew85zssA
MD5:	5EDBA73F30F0D3A342CECCB3A34BFE45
SHA1:	3F39E4C8EF00408D327260F5328162AB3E5D3CAF
SHA-256:	F768529B209DB7EDF38AA0DA2A69C1C1DBE5A760D457FE74080D3AD76F14A0C2
SHA-512:	C302E3CCC2D9F2E12133ED07082A78260613F1B8C756D9EB2CF0A7AF63C425D4A8956B01EAE3FC3DFAB506DACF6416B0B53929D535CFA2AD81951183A6526FE7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 120x90, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2326
Entropy (8bit):	7.904495824325416
Encrypted:	false
SSDEEP:	48:TxG61qxIic2MpY/jTHkpLvmXgQ2LL3ddciZFjr5s/CpcAZCNTDG:tV4Iic2NiLvhdf4whdLpcA8DG
MD5:	3F911B6CFAABF446A27903CBD71E44A8
SHA1:	81D9E4112D401A452B5714D7F2CF5AF4941ACFE0
SHA-256:	B9100ABC97320C4B1C5C45BC3DD9EEC38CBED0F6505984A4225B8BE3505B84AA
SHA-512:	26849347E457AB054AF1DBC969CEBA52A41C9F4979854A38B5E843F68E6BB40B4D5419372055B235DDC7B275ACF29DE7CF0E8A0499EF884A307B0C36967C983A
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi_webp/zmUPHj3AvZc/default.webp
Preview:	RIFF....WEBPVP8 ........x.Z.>9..D"!..... ....J...z....s.v..1...^.z..Y.b..?Y.6.f~.?............`....\|..G._.~Uq........k...^...~%..._.o.N.........q....w...~......g....?....r............}...m._.7a.E/...>.}.....`^.A.\|}...t..,e.)....`...~.....1.\W.1......$.b..}...8.R.E.q7).Exqr..q..Gt..e.a^.J..y..b.\|....h.K..%\|u.....g\|x.K.V.h..<...\.Sq.6.+)m.g..I..!"..:.$v.L.........\|.Hs.FT..h.I}9..7>,5..firR..\......q..[...z.^..}.W....K..ne.wi..:.?.S=b@.7.j.p2....e..O....e.a.o..>g. ..w.K.....(....y..0k.~..$..+....<8..^:.#.R......4....RB./l........%..%.....C..@...r..)6.M.d<......w.....7......x.Z.U...i..>.>J....9.>........f..$.xR.H..6w..m.4e........<. ...a....PD...O!x..../....k/c.....-"..` ...z.....'/5.}?..._...o.v.g>?..e.rd.^..j..M..n.......&....Wm....I..W.8.]K_k./.........7c}...c..6.........?...V.......,._............b.W).,...[/.d.....a....p.y..N..#..w&.f....D\\|z.r.......eV.G.-8....../"...zo..;.+..Bg.,.3G6......{e.A.....K......y.[@.cG....2TNyi.)]b~f..-.f.f.*q"O

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (691), with CRLF line terminators
Category:	downloaded
Size (bytes):	12177
Entropy (8bit):	4.93258033390193
Encrypted:	false
SSDEEP:	192:fVDCvwOAxoBTCqoEbvEuHaKOfTtNQZ4nWAkHyou7ps0BQeEIRNWasdXAasdZNUaM:fRdxGCqpbvEuHoNQZ4nWTH/u7ps0BQn9
MD5:	F0FC9B425EE41EF64862C02538F5F6E7
SHA1:	02AD2C64557D9F17289CED78492CB48B7701D132
SHA-256:	76A73EDFC6E71C390A4F0A488B4B05C3C29ACFA7A0912868C4857F079805DEFE
SHA-512:	4FF18FE260C43551C7DD308752E8887D62B109251B3B5040C755522019DC6A7F4CA875F08761AF661A7F39A3DBA1BDF82A392A54EF3C365B0CF7208165B9731F
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/partner.html
Preview:	<html>...<head>....<title>1040Now :: Free Online Tax Preparation & Electronic Filing</title>....<script type="text/javascript">..function bookmark(){.. var title="title".. var url="http://www.domain.com".... if (window.sidebar) window.sidebar.addPanel(title, url,"");.... else if( window.opera && window.print ).. {.. var mbm = document.createElement('a');.. mbm.setAttribute('rel','sidebar');.. mbm.setAttribute('href','http://www.1040now.com/');.. mbm.setAttribute('title','1040Now Online Tax Preperation & Electronic Filing');.. mbm.click();.. }.... else if( document.all ) window.external.AddFavorite( url, title);....}....</script>.......<script type="text/javascript" >....loc = window.location.href;.. if (loc.indexOf('http://')==0){.. window.location.href = loc.replace('http://','https://');.. ..loc = window.location.href;.. }.. if (loc.indexOf('.com')>0){.. window.location.href = loc.replace('.com','.net')

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	381443
Entropy (8bit):	5.18697771120859
Encrypted:	false
SSDEEP:	1536:Ioi8ZHMCbS/SgVcBqILJPptpJKztM6oyi+MOn4y2Ox5juDEnXrDJc7MsByDCAY6+:Ioi8ZiSgKBjSoyJuf8tcTgo3N
MD5:	EFF7AFAC8F7AC0ED881F37FFD3EEBCBE
SHA1:	21ACF841F4603DBFAED62DECEF15175B5D68F20F
SHA-256:	FF1235E0E6C896931D1F31F618B35E68A469BEFD8C90D7A0DA22F1D988B0BBC2
SHA-512:	24E363D03E898E7347877DC159EBFB1D446C481D0BAEAFF5049BC401A424DC2B0C602ADEE28CF10C142838C334C7109EAAD879BD793366B3DADCEEC5EA86376A
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/0af6e327/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation;-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytd-video-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-mode{font-size:17px}.ytp-autohide{cursor:none}.html5-video-player a{color

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2357
Entropy (8bit):	4.857805474197383
Encrypted:	false
SSDEEP:	24:nj119mlYAMVSQakpxpezMpcUr72bkxexcpYIp6tlYxV0rWwai3mgZUeX5JbPn4Zt:j1P4jMVJleM2psotVccVX/dC9i4
MD5:	23E480DE5CF1877B8B1BBB99033AB4B4
SHA1:	E4406E029A051E2612AF4870280B546DE18C6DB5
SHA-256:	0D3CC49F6EEC20387EFB00E70B76D9759D50E80AB10C963725E61819DAECA099
SHA-512:	63494DB607A177BE5646C79C512CE454093C6FBA5B46AB9308167286E9C3A4A6CA7DFEF5FECD9D5927C867F88E7A2DA0C438B408BA10CAE6F8894CBF12F0C26C
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/menuco.js
Preview:	//$.noConflict();..//$.noConflict();..//jQuery.noConflict();..//jQuery(function($){ .... // your code goes here....//});..jQuery(document).ready(function($){..//$(document).ready(function() {.. // show sidebar and overlay.. function showSidebar() {.. //sidebar.css('margin-left', '0');....sidebar.css('margin-right', m_screen_width +'px');....sidebar.css('margin-left', m_screen_width - sidebar.width() + 'px');.... overlay.show(0, function() {.. overlay.fadeTo('500', 0.5);.. }); .. }.... // hide sidebar and overlay.. function hideSidebar() {.. //sidebar.css('margin-left', sidebar.width() * -1 + 'px');....sidebar.css('margin-left', '9999px');.... overlay.fadeTo('500', 0, function() {.. overlay.hide();.. });;.. }...//alert(document.body.clientWidth);...var m_screen_width = document.body.clientWidth;//screen.width;//document.body.clientWidth;.. // selectors.. var sidebar = $('#data-sidebar');...if (s

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/static_assets/js/libs/jquery.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (431)
Category:	downloaded
Size (bytes):	15054
Entropy (8bit):	5.256011598641834
Encrypted:	false
SSDEEP:	384:IplCZ5MjWQLQQopIaZDS1UHJjE3v11M7EnKPRbaBFjE3nzxw+3baeuaEec7qILSN:Wlmv3ZonsTh9pXcuILSkMWR5cny1GU3C
MD5:	74058968C9D56989004C49532B90F429
SHA1:	AA279C27AA1E05956C7BFA597726C4ED68412877
SHA-256:	B82D4E13EA6E0A629A94DC8D8D674B3754038820F64EA15A92072DF1D555F0AB
SHA-512:	749FA8DD6A13E77977407305D7CA0FF27694420CAEAEB35D7490587C6D20A11BC8B5B90EE0B45B52E85B579C10BC5865D4AF709DBC0B3198009A2C1AE5482150
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/static_assets/js/reporting/autotracker.js
Preview:	/..... .ooooo. ooo. .oo. .ooooo. oooo d8b..... d88" `88b `888P"Y88b d88" `88b `888""8P..... 888888888 88888 888 888 888 888 888..... 888 88888 888 888 888 888 888 ..... `"88888" o888o o888o `Y8bod8P" d888b ..********************************************************************************************************.Copyright 2014 by E-Nor Inc..Automatically tag links for Google Analytics to track file downloads, outbound links, and email clicks. .Automatically tag links for Google Analytics to simplify tracking across domains...Author Mohamed Adel.Automatically tag youtube videos for Google Tag Manager to Play / Pause / Watch to End / Progress. .Version: 5.1 : Enhanced .AFS - added domains.Recieved: 10.18.17.Updated: 12.03.17.******************************************************************************/..function addLinkerEvents().{..var domains_to_track = ["irs.gov", "apps.irs.gov", "search.

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 21, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	291
Entropy (8bit):	6.747268034047225
Encrypted:	false
SSDEEP:	6:6v/lhPimvnDspPnAQsF2S4iW5JyVq+O/COr+orkYIIiLNvGh/jp:6v/7qfdAQssLiWzBr/jkYIHNvGh/N
MD5:	970DC1C25ECC6BCD5C5EA90A5E385322
SHA1:	DC760EC62508BCE0D9B7536CB6AC7EBDE9D24372
SHA-256:	131B8FF6A7C43B21E574D286977BB3E38A72938605391CA93012FD6D4CB163E2
SHA-512:	AD1D912E15E6BF18EAC688AC9E8C985E53620E7C1D4D7CD97D19F27DF3CEBF44104AC109485F2453D518F47075FF40A19EC87C70491EC5E8AAC54781DEC6BA64
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............K......tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.5......At4..].....Hm.b.,._.., ..c.GWW.'@.4..5.0..D.....C..X..tM...'.'...H.Z..L-...e.'....4...l@...C.......&.H...Z.....t..LC..I..._ ..f...%@.z.!...k@o..)?h.tP.i..I"....t......@.......O0........IEND.B`.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PC bitmap, Windows 3.x format, 40 x 16 x 4, image size 320, cbSize 438, bits offset 118
Category:	downloaded
Size (bytes):	438
Entropy (8bit):	2.8722479593379053
Encrypted:	false
SSDEEP:	3:LtllxllXl9lslxllEFl/Ft/HtAiotuZlRx6RRaaak10caoakpii7Ap+0UZHMtbqn:L14lRij+dngdvtbSMFjwzVcDJq
MD5:	A09D3C2B2A37A5EB0B2CDE8847F2543D
SHA1:	284B8B4CF0311DF9153975F3751E7E1DB67AB216
SHA-256:	6F9BC67C28AD865DF88BC247B10DCED0B66BEA9F48FCA8371C5C1499B2DFD71C
SHA-512:	C60BEC359AC59B68CE8A482262F011D727083EC7404D3F76F2078F034B0240A9E320A9F4E24312171FFF95840BA313727F223ECA3D1DA99314BD6745AB0E534C
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images/Next.bmp
Preview:	BM........v...(...(...............@...................................................................................DDDDDDDDDDDDDDDDDDDD............................................................................x...................w...................wx..................ww..................wwx.................ww..................ww..................w...................w...............................................................

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	279639
Entropy (8bit):	5.570714324333909
Encrypted:	false
SSDEEP:	3072:7a24lQdAZVNSNcMzszFeIQr83jCBPIrTWRsYESfhmpt2nBsLqtybXDeltzvsXJoo:74UAFMgzFenY0fhmpt+aqtybXDelJsXn
MD5:	AB4F53AB5243C14CA3B566D5DC274171
SHA1:	F7C27F934021BAFC38F09B053619BDEB232A260A
SHA-256:	96611B3E8E4E2A2E7EA81891FB4B7DF232266044534F1DC7E136C21BE5B23603
SHA-512:	2EBF8D25ABC0A187D4A4F4D9396C12F35089BDA63E0B7D9E9BEAB07E12324228E69531CA99670BE3CA9BE1AEC4C76AA4B7DAA49349945C0252279A6133015886
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-ZY6FM95CS5&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":12,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":111},{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vt

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2452
Entropy (8bit):	5.018381447004163
Encrypted:	false
SSDEEP:	48:RB8DDBt277YbV0MdXezgjmRCPByJxs7qBHiks7qtBTtgk9EiHR0wS:RqB477MV0M696k6D4TCwS
MD5:	472C27CFA6D9A05888CCB3C5E0A62701
SHA1:	39912363E1055C179119719AF3728996E2A1BBE7
SHA-256:	590C69882B98D12B87E959A0224CC3A4433D135A2481ED209AA161564896AA54
SHA-512:	BDB9684C0AD0456024CF7E1BB4BF22BA805B5D9952CF86C0885E85645D3E038DA09219E62476A641B3D36C3A555024E5D2BE82FD875F62B3573573F6A2A3DF4D
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/mobile/1040Now%20Year.html
Preview:	<html>.. <head>.. <meta name="viewport" content="width=device-width, initial-scale=1">.. <title>1040NOW</title>.... CSS -->.. <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.min.css">.. <link rel="stylesheet" href="https://code.ionicframework.com/ionicons/1.5.2/css/ionicons.min.css">.. <link rel="stylesheet" href="css/owl.carousel.min.css">.. <link rel="stylesheet" href="css/style.css">.... font -->.. <link href='https://fonts.googleapis.com/css?family=Nova+Square' rel='stylesheet'>.. <link rel="stylesheet" href="font/font.css">.. .<style type="text/css">.....auto-style1 {.....margin-top: 7px;.....font-family: "Bookman Old Style";.....font-size: x-large;.....color: #FFFFFF;....}.....auto-style2 {.....font-weight: bold;....}....</style>.. </head>.. <body id="">.. <div id="wrapper">.. <section class="section-1">.. <div cla

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	487
Entropy (8bit):	7.366329550863499
Encrypted:	false
SSDEEP:	12:6v/7jw9oKQhbzmBKvvBAFQ5EVOt954iSGvEFWxa7:a0QheBKXB8MwOF4iHQ7
MD5:	6C5EC9FFECCEDE8841DC9E17CCF7BE15
SHA1:	CF3B78BF2B26030577E94B90EE8524C9683E1AAE
SHA-256:	C840D01437BF3C461A9D8B4676974124B62FF0F88DB085C6A38AAF14E32199D0
SHA-512:	AA0A5C0F65FB5D2BAA5AADAAC0F24345F888A868BC81D3AD4C4C093AB245B8B390ED4B282C856CBFD3CC5D82C3501DFED457FB6BEC62D5EA7DE6FE3728CD3B6D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;.J....bKGD..............IDAT(....K[a...ss.Y.n.,.B..Ii;(.(B.V......J.%.T.=~@....N...@A..,.E..Kc..=...o4D.oy......8....8"S.s.-.kT.+.$.. ....N..<....../,.....}.).\_...5.C ..!.........,%..M.j.1..g.y.5.Ufs... ]D...:l!:qw.>.$=......S.C.^..v..&k..J.g!...Sn[....,.6hs...%l...B5v....0.....vz@..;......H.........".....>T....ea. ..R.8...O[...%5D.I.n.m`!...Y.........P.".f.qG..q..?.N.^.'.3....fs.Q....@.... .......R.0.w........C......IEND.B`.

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 120x90, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	2504
Entropy (8bit):	7.905579372867342
Encrypted:	false
SSDEEP:	48:ROEOVo9PsnmZzGgNAfefvsG2t4Z5f9qBfUrumyN8u7dikZmcY84wlE+Gxm2MSoF:ROVodsnS/NMAv7s4Lf94myuaigmcwwl/
MD5:	B80ED04FD9B7B53E0FE233AC2F2D0541
SHA1:	B7A44EA7B3AF6B547E56081BDA5C7223E8B279AF
SHA-256:	5EABC84720368A448BCEA3549F6D309653E16A07533758624BD2DFC30CA3729A
SHA-512:	508E54718C9A300AE9B1AC77A616D123E55EB88F0CB0AD030DA3C2F8B3F602C64E0C410F1803BBC4276F7805F8F4CEBE0FFC1DF3E80D0A385DB9C0EC9D9E3D86
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....P'...x.Z.>m..M.!$$.....f..f4Z^.~....$..~A._.S...9.0........m...?h.8...j.n=.............x..?.}@..h...c......B;....{...7._.............g.o..ZO^....?....q.ZA-..?...K...~.e..G.ru:.b..! .X..._.20...W.da?3..z....k...3..9.g.UQ....]....k..<..L..U.G..J.%.6........&y..c....0=..?......2za.....2..'.aT.......K......Z.L$H......z........*.Y.+..A4..q.\.<....)....0.Gz............zb.7.6.\..").S3....S.V^.c..\..i.S.R!.1.t.........?d.gE5.u.).E?.....C.$..b..)...(x...$.}.L..C.......;....GV.....`.....p....X.\|......T.K...t...1......[.m..^.{.Q...h....L.(<.u..8.E.$.Z:..#-q..G.C.+.@q......]....qU../.o..%.0Wy.h..8..`....9W.".u4Y_a.....5T4.#.. ...YC..>F.O........k_".y....e.].^..l.I.....&.....O.iw.Ql..t..B(..Eb.X=z..<>....~..a...........k.V..V~!...5Br8(64.....8........D3.5...{.e0w...[.t..#.pH.8.....bXAryN"G&.....D.i.n.5....T...O.X..Mo...L-[O..C.......#.M^...T\|.iqK/..n.:i..f.....Z.U.....Y5)...L?o..<.....<NL....t.O.X.....S..0.".F..U6O......XV3$.E.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4008
Entropy (8bit):	3.883718022802644
Encrypted:	false
SSDEEP:	96:hQWG301naT5RK836GFYxLiUazZSlwpiry1j1MCy8cbMVL6Y1sdy1Vvqgt6htKp:hQWQSnaHKc6eMLiUazZS664j1MCy8co7
MD5:	292FE6F3EB30AC350BFA966BA9489142
SHA1:	2C4C1D48D5ADB4BFEF9CED16A4B4DA89EBB6A0C8
SHA-256:	62D2F12F17577D9E7AC088E9DEF0C3B5AA9CB45A16B5D24ED0AF7185013AAB9D
SHA-512:	A441C4DEAA44AAA3136BAE671594A01591BFB4021CF715743772A56D678660E02D35353B7B75DA6885A4F8810C10F68D9AE7148272F630E905967E0992805033
Malicious:	false
Reputation:	low
URL:	https://secure.trust-guard.com/page/smarty/ajax.js?v=1-4
Preview:	function CallAjax(button, elems, values, show).{. if (typeof(values) == 'undefined'). values = {};. if (typeof(elems) == 'undefined'). elems = [];. . if (typeof(show) != 'undefined'). {. if ($issimple(show)). show = $get(show);. . show.style.display = 'block';. }. else. show = null;. . var elem;. var key;. for (i=0; i<elems.length; i++). {. if ($issimple(elems[i])). {. elem = $get(elems[i]);. key = elems[i]; . }. else. {. elem = elems[i];. key = elem.id; . }. . if (elem != null). { . if (elem.type == 'checkbox'). values[key] = (elem.checked) ? '1' : '0';. else. values[key] = (elem.className.indexOf('watermark') >= 0) ? '' : elem.value;. }. }. . values['ajax'] = 1;. . var name;. . if ($issimpl

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 441 x 1, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	125
Entropy (8bit):	5.48237626086557
Encrypted:	false
SSDEEP:	3:yionv//thPkcl/knpTVRthwkBDsTBZt6BIP9FxORchNww8up:6v/lhPkU/6VnDsptxOKNFp
MD5:	82A333C9B03858906E51D87FA1EEBE5A
SHA1:	4222005D54E6207E693AB4C4014F82DD0BA62A04
SHA-256:	EE71B5DEAA72BBC3F31E9A75489C568A026086314C73045C1CA4BE702D9F6AE4
SHA-512:	AFBCAB67B4DD5F1FE531F9E52A695E75C8B6CC32B96274D84D42A5597709EECC0775587A8330837281F862ED6A09160D4F924D910B8D4D6BBBBB64E96818A6A5
Malicious:	false
Reputation:	low
URL:	https://secure.trust-guard.com/page/templates/certificates/images/white-box_mid.png
Preview:	.PNG........IHDR...............G.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...mjjb...`...Q.........x..yL.......IEND.B`.

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	4.558901767484356
Encrypted:	false
SSDEEP:	24:NLMGHHq9QZnmy/oGRH+9QZtc6GGHHi9KoZAH6GCApJWDZZm4Apzex:NLln4AH/5V0kjTnAyHPZiDqg
MD5:	C801F098F25198EE43326CC9AF5FE71A
SHA1:	C65F4A8E0258C37C14D9308F7968EBEF55229980
SHA-256:	6124A3A88F871DE43A3B9E433EE8F9E183E631C6F21A2AE248BF48F882B22770
SHA-512:	BB75898F6CD943FE9AA6FD1C610A49D2FF3A0F20ED2E317BDE9BA54B76E5C99D2CD2F58CAF9A6A79D2A9622F8771B6037BB9F6B6AABD69EE0849E34E4E0DE634
Malicious:	false
Reputation:	low
URL:	https://secure.trust-guard.com/page/js/certificates.js
Preview:	$(document).ready(function () {. $('#yes-vote').click( function() {. $('#thankyou').slideDown(500);. . if (tgvoted != 'yes') { . _gaq.push(['_trackEvent', 'Certificate', 'vote', tgcertdomain + ': yes']);. tgvoted = 'yes';. }. }); . . $('#no-vote').click( function() {. $('#no-feedback').slideDown(500);. . if (tgvoted != 'no') { . _gaq.push(['_trackEvent', 'Certificate', 'vote', tgcertdomain + ': no']);. tgvoted = 'no';. } . });. . $('#submit-feedback').click( function() {. $('#thankyou').slideDown(500);. . if (tgvoted != $('#feedback').val()) {. _gaq.push(['_trackEvent', 'Certificate', 'feedback', tgcertdomain + ': ' + $('#feedback').val()]);. tgvoted = $('#feedback').val();. } . return false; . });. . $('#disclaimer_link').click( function() {. $('#disclaimer').slideToggle(500);. var

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 208x34, components 3
Category:	downloaded
Size (bytes):	3080
Entropy (8bit):	7.61993151418047
Encrypted:	false
SSDEEP:	48:R7vW9UoadpRKJgXbGQB+CM6B6zKgfC4Kd9V3JsehXk4bq23sPaA/+pBwH1HSBqXr:Ra9jARKJcG4D52C4KjsSpbq2kD/0QKc
MD5:	74C091424BB9945E453DA6C99FDF8240
SHA1:	E46C66AE085D4CD397C0C5F94A371532DE80E1A9
SHA-256:	E8FD11C33990C5125A7605DD9664E46D525922E02D6A89E6550E4FC628562AED
SHA-512:	4BC901584AAC07CCD99EA21F9EC1CFDDB2BC515B478D93B7A570B49362AC17306ACF3223541AC9634F40EACC703D77C3C5F0161D9626EACD79BC70A58FD2B079
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images-ez/nav-privacy.jpg
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d....................[...................................................................................................................................................."............................................................................................ ...0@P!1".......................!...41A..Qaq"2#.. .$0@P..BR.Cs.....................1.A@P!Q. 0`.......B....................!1a.AQ...q. 0.@P.................................. .v...Z...[(b.b.y.........evs.]~...tZ..MhW^O/Bi.w....FQ.Mx.._............&.h..^.U+..........................m.cl..e.....v6..]...m.cl..e.....v6..]...m.cl..e.....v6..]...m.cm.S...)P.Xxda.b..../JT.W.(N.S.v.....9x.~FNN~6V....:.lj9....&...F&..9W.W...a.'../...K..\|!Nq.Q....$/.Xa.......&).s.W."R.../..........r..).r..).r..).r..).r..).r..).r..7.}.G...i.z.?..7..'._............j....+PV..AZ...j....+PV..AZ...j....+PV..AZ...j.B@.@......K}Y.)...........P.....UDD....p.&*.2./h.h..G.?.........?.."..........?......

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (18101)
Category:	downloaded
Size (bytes):	43675
Entropy (8bit):	5.288949800298588
Encrypted:	false
SSDEEP:	768:ooDM0Fs5rHIU5PeBF7F+FiClPduaL4+1JhsTnciaNAwVI:5EcGlua0+1JTiaNAwVI
MD5:	6C6228650BCAE006B484B165F3C737DD
SHA1:	E242D4993D793FF3D1AFE8C9C9950E9DABAAD563
SHA-256:	FE5BE6F7270ABDD858AE6A1B713AF65779BAE76D97B769ECB8FA82C5C08BEF6F
SHA-512:	74C694D14CAF298F163BAF91B085AF723D8B24C61F564FE7C1BCBE12A4898F88B5849227538DAAE171D889F6B7BF824971C09C31375BE52E7B26BD92EC001E69
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/pub/js/js_ne84eU7o53LaFR2k8EcTgjeQPizzD0PqvSkS_soe0_A.js?scope=footer&delta=2&language=en&theme=pup_irs&include=eJxtkuF2wyAIhV9I4yN5iFLDZsQjJFvefiZpu3XpP-4HIl6EGJWhbA7uwXBrXNREUMiwYXMjTrASNzGyieLsRhA0dal-D1zKPEK2Qor2hqBLQzmy1OSZ1C1TSRccGlW9Vr9tBQXyphTkcmzGBHbGsjyJILQwXXvsRW8oaC-ekNKkBr-1j_rpYlsq5OEuTWJOGb1CcknnVwnpvx7gA76P_uETIyk3X_OSqIh7B83IrKINqqtcecX2hyhzVqqmQoPUwSSP2X7JsJS6jJlkwmgif5XMEP0-uM8wYu5bfFC7U3unViec0awUkT3OI0Z_I8zRdXsqF6EV7ZH8XXfhiLYrC60vI-PTxUsCQuAWiYvfbe8LfNX-i2JCPc4LzbXbty9-7k9-lX43pPUp5M9dxR7f1NZG5exxfh4v2FYKeBr9j5kwsWB5-HeqO-xuje4MhyDyAxxlNrw
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */.(function(Drupal){'use strict';Drupal.behaviors.addToAny={attach:function(context,settings){if(context!==document&&window.a2a)a2a.init_all();}};})(Drupal);;.(function(){Drupal.behaviors.dataLayer={langPrefixes:function langPrefixes(){var languages=Drupal.settings.dataLayer.languages,langList=[];for(var lang in languages)if(languages[lang].prefix!=='')langList.push(languages[lang].prefix);return langList;},attach:function(){return;}};})();;.(function($,Drupal){Drupal.behaviors.sNavAccordion={attach:function(context,options){'use strict';var btn=$('button.pup-second-nav-btn',context);var icon=btn.find('i');var nav_li=$('.pup-second-nav>li',context);var TABLET_WIDTH=992;var CURRENT_WIDTH=window.innerWidth;var load=0;var mobile=false;var expanded_string=Drupal.t('Expanded menu button. Press space to collapse the menu. Navigate the menu with the tab key.');var collapsed_string=Drupal.t('Collapsed menu button. Press spa

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 201 x 101, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6731
Entropy (8bit):	7.958379248498693
Encrypted:	false
SSDEEP:	192:2fe2NkPOqVGAKqm2NvwZXTA3R/3meASUq/cHk6o6Z:2aOqwtcwZj6RsSUqkHkv6Z
MD5:	77C0928BA8C6607DDDAC6A5EF27409E2
SHA1:	494D5C1FB9C63EDDB9E245D8868ED595F4CD8762
SHA-256:	6C9CCCB8FF4E878E33E299CF8F824F327610C89F343A752C1DF68A71F1F84A18
SHA-512:	1A49C49D0DD1552C2B6DC025F5B3500D0DBD56F33755B296190D196FD5CC3C908D67B636CF59476FF5077DBAFD8497DB966639718C85456AA8DFFD318C0A2307
Malicious:	false
Reputation:	low
URL:	https://seal.digicert.com/seals/cascade/?tag=oSAWl-P8&referer=www.1040now.net&format=png&an=min
Preview:	.PNG........IHDR.......e............pHYs...........~.....IDATx..]{l\Uz?1.......+.........N=).`..6...%.V.T.n.V.0..v...ZZ;.ji.66.HTY<.U.m.. ...G.&..a.G..@^$q....M.9.s.3.....f...{..;...s.?.^YXX.F..7...o.[.e.[)U3G.[.dgmO...b.c.I. us.J..........%....,I,,<`Iba..K....X.XXx.......$....$....S.}.`.2.C".>N.yX....B1.H2..XJ..dg.....G.+U..jSJ%.R..7."D....M.....A.1.o+..W[......y..6T.l.@...nM.1....SJ.Is...^.oEg.U..>...g.o.E..'!.....^u.Q..x..]....B.....5...M.7 F=>..aV.`.\|....jy..4Q.....E.g....1+...k.....J@.SM..A.J.^.T..9.h..$b.X....Fw^z;:.5>:...w..].\|.%E$q..K.$.?.';k.........w....=04....3...Yvo....a.Is.M...%'J.'q..q.Gr...#...C{...~596...z..n.].+..*..Q-...........Cj..#.RJm.P.O.r..@.."...!...N'..g..Ug..O596.W...^...z...n.%...4J..C...uC}.)..i.. ......#[q.y0...Rg...P..-s....n.#.r-f....R.....:._.0.$AD!a.u..N."..._..}O.3{....Y.>..TFZ.Eq...?o./.{.\<(QfjX. i.I..%.....q........9....m....e.=.Z.Suw.../.VR'..3.I. fxw..........s:...Z%J.8yR....u..Q...~o..r.b...7..(

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446), with CRLF line terminators
Category:	downloaded
Size (bytes):	87535
Entropy (8bit):	5.262801903047628
Encrypted:	false
SSDEEP:	1536:3RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:vHNwcv9VBQpLl88SMBQ47GKO
MD5:	C9A1B0AA0167C8A4DF724D18D06814A8
SHA1:	F3F468CCF735476C87E3B49E274EB3752A884607
SHA-256:	7AA6B0E08F48A0F95D8DF7EA89E4CBFE1EF3D1E8C0F7373F7F25EDFB4E4A325E
SHA-512:	05352A89084C3B747C375EEA2107B9B3C660FFB5989D48F10EE30E4ACF917DB21FA7CE56F9B385DE0FCFD0873C4C4E9D96C48F2F38E26D5CD5DD28ED792C3E06
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/js/jquery.min.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remov

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4613
Entropy (8bit):	5.5627487114841
Encrypted:	false
SSDEEP:	48:S6jDDi8juOT2IKlTZV4vzBnVNO6ZlSN4NsDrJ8uH7PUeEq9Z74pwoPG6xWF7oulO:hDDi83vKsBFwDrvZ8BYo+gcXX/yv/yTq
MD5:	A9CFC3A55DD8CBF315207751E15122FB
SHA1:	8BB287E6B82F0A9A29908BF4D47926E31F180D91
SHA-256:	E02EA5F547D101203F3483A64103044D61E4662BFCBAD24BB102007B8BBEEF3A
SHA-512:	EB83F9A89902FDD0527F5104F082A080297FA3752992087EACA408F5B450700C82D7D33AE682438E2D1F95C6FD1A7F254B09E6DA6D032D1720CA2844AC025A6D
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/js/sha1.js
Preview:	/..CryptoJS v3.1.2..code.google.com/p/crypto.js..(c) 2009.2013 by Jeff Mott. All rights reserved...code.google.com/p/crypto.js/wiki/License../..var CryptoJS=CryptoJS\|\|function(e,m){var p={},j=p.lib={},l=function(){},f=j.Base={.. extend:function(a){l.prototype=this;var c=new l;a&&c.mixIn(a);c.hasOwnProperty(.. "init")\|\|(c.init=function(){c.$super.init.apply(this,arguments)});c.init.prototype=.. c;c.$super=this;return c},create:function(){var a=this.extend();a.init.apply(a,.. arguments);return a},init:function(){},mixIn:function(a){for(var c in a)a... hasOwnProperty(c)&&(this[c]=a[c]);a.hasOwnProperty("toString")&&(this.toString=a... toString)},clone:function(){return this.init.prototype.extend(this)}},.. n=j.WordArray=f.extend({init:function(a,c){a=this.words=a\|\|[];this.sigBytes=c!=m?c:.. 4*a.length},toString:function(a){return(a\|\|h).stringify(this)},concat:function(a){.. var c=this.words,q=a.words,d=this.sigBytes;a=a.sigBytes;this.clamp();if(d%4)for(v

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	51
Entropy (8bit):	4.243134106881671
Encrypted:	false
SSDEEP:	3:YWMmqenazHYJtZlCn:YWMm9arYJt6
MD5:	139E6BD0E1A5AE4368562338EA331EEF
SHA1:	014F3DB4AB7C5EC25C29E4089DD6FBBA58D72CC8
SHA-256:	3C6146B9208554FD1964ECABD40D0D8DBB5101AE2B828B2A7CF730AA12572643
SHA-512:	515B39905ED36352A90CCBB7CE0F1C2F912B414CA1FA5ACEBB3A549BF5712B07FD0581F308A6FB3B741BE9CE1376117073108C5B100421F5DC85F6A578ABDCB9
Malicious:	false
Reputation:	low
Preview:	{"site_domain":"arlid:388528","rate_limited":true}.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1124
Entropy (8bit):	5.057020208360156
Encrypted:	false
SSDEEP:	24:VTGIaCY2qG2sLYauWewm2V2Mei6/tQx6RQMzaC7:Vac2sDeseftFRH17
MD5:	3C71D28482EFF8A63ACF1D6D3BD3DAE8
SHA1:	E7795F1111734DBFE44ABB953475486D86E6BD1F
SHA-256:	9C30CBDDA4CD64784EE39C788968B4807DECB3B4DD179AA4D66823A4FE2F3333
SHA-512:	FDEB2F6F88C4BF20559A177D353F1ED2534267EF2016220A0FB38A490358D920C6BB887CE2ED0FBDFDF85211FA2B2C3923CAE8F72C7805B858EE028B186438C5
Malicious:	false
Reputation:	low
URL:	http://www.1040now.net/partner.htm
Preview:	<html>...<head>....<title>1040Now :: Free Online Tax Preparation & Electronic Filing</title>....<script type="text/javascript">..function bookmark(){.. var title="title".. var url="http://www.domain.com".... if (window.sidebar) window.sidebar.addPanel(title, url,"");.... else if( window.opera && window.print ).. {.. var mbm = document.createElement('a');.. mbm.setAttribute('rel','sidebar');.. mbm.setAttribute('href','http://www.1040now.com/');.. mbm.setAttribute('title','1040Now Online Tax Preperation & Electronic Filing');.. mbm.click();.. }.... else if( document.all ) window.external.AddFavorite( url, title);....}....</script>.......<script type="text/javascript" >.. . if (screen.width <= 699) {.. document.location = "https://www.1040now.net/mobile/partner.html";.. }.. else.. document.location = "https://www.1040now.net/partner.html";...</script>........<meta content="" name="keywords">....<meta content="" nam

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	downloaded
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/eureka/clank/117/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 139 x 147
Category:	dropped
Size (bytes):	7430
Entropy (8bit):	7.861587851968346
Encrypted:	false
SSDEEP:	192:13oTuIU4afkDxng94YWeZNGqGNFVF5LfoAKtj+p8:13oKADxng95Gt/xOjc8
MD5:	B9A11A3F6520F7625700A8EC2EBAEF29
SHA1:	23022100D8141C316DD75B4B394E537F930679FF
SHA-256:	8DEC1E274125AD6899A4882D9A72E17CE409E8405AB401B9FC785CCC5C5ED44D
SHA-512:	3D37C7DBFE6116745C3513A57B2562AFBF39513393EC214A1D0D407E8F2912E03EB1103CA28322D70B1F11F656C8730A975B5F5BB69B0D5B181D0EB35BAE29D4
Malicious:	false
Reputation:	low
Preview:	GIF89a................5M{<Qz...7CZ...``.++1.22...00.(Ar+4H.."G\...Yv\|...N.4d.'=vt..iWiYYd\|.....GTh.'H,Akul.K5H..4:K@@........vv.... Rbs.`n....Rc.;LmZk.$=nqd{t...,\mz.diz.BB..PUU`...2?VOOYap..""+Du.....XX{..ASt....0_z..66=..M....>..F..V..5,;Q..R]i\|5JsL^~...Yf{\\h2Bd!9i.ff.Fv. P'@p......EMbUi."<n4Eh...Qe.=Nq]k.=Kb^m.}....QXARCt.9k...$-ACUz.+<Y8Nz)BsLa.Sb\|,>c."RO^u1Fq .%>o...iv.FK\..6ft....@@HLZpHHR#2Y$3R....Fu#9fZh.PP..DoRZk[m.bq.4&:...6g:Ea :l.....nn.cr..-V.&W.....`...7IlHYz?BP.1bt....NYi.ds.^p.@Pf\dtQP\Uau_l.(?n...gw..!Q!$..!R,Eu?T.q`u.#F\k.bp.."T_IZ."Rm\p%<jC,?#;jVg.Wf..(Z(7U.....:...o[m...nx.-Eu.....J?GY..A(:]NN.-Fv-Es.'Q......n}.gx.iw.+6^gt...]_o./Gv.0:.$T..Sev........5d..OPUgVXg..8..L8H_2Jy7Fh..P#<l./O<-Amr.FVv..H2<].#S(7N+CqMPa*Csdt.....Eu."Q...fRe1Hwc^l!.......,...............e!....-(..!C...n...b. ..0....s.h..e..3...!E......83q.......N.'O.....3C.La.ID.6~...d.1.......#....ID.H.j1.."E....L.(Qv..%."`.8k....%\..0.a..+.Y".?..8...A.M..T.{y.....B.X\.B.&9........

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3
Category:	downloaded
Size (bytes):	2827
Entropy (8bit):	7.813251264632497
Encrypted:	false
SSDEEP:	48:lwc4gYEvpGUqd1nBLeu9Nx7pde0aDwpTSWN/FUU2qbVMRv9xwO5VWPfo1Glg8/dU:lG7B/x7pw0acpGWN/FUUrMRvIO5VYfoZ
MD5:	FEC736417049A6DBB499A2D12AE998C1
SHA1:	0AB3DBA4C660B8F3E14EFB253498E7DC673F0917
SHA-256:	5928AB02C7E82C783E6D322941E4559BAFECC02F6C3EDB6A61F52D9AF4F28354
SHA-512:	3D64FD04C1EEEA8F55F189863287574D010AFA32E96E6F2049E9CC03CEDC1E49AB6A9E78BF488F06D99017F78677887EE0D8470C37C1FF9596AD31AADA5B6AC4
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/yiQ-C7lGw0o/default.jpg?sqp=-oaymwEkCHgQWvKriqkDGvABAfgB_gmAAtAFigIMCAAQARhlIFQoUDAP&rs=AOn4CLB0FmWsdr7EhIr7OHcDeM_-hZKOgA
Preview:	......JFIF..................................................."... ....7. %%(.(..-1-&0"'(&...........&...'&''&&&2&&(&2222&&&&&&&&&&&&2&2&&22&&&&22&2&&2&&&&......Z.x.."........................................J........................!..1A"Qa....2BRq..#.......bes....Ccr......$34DES..............................".......................!.1AQ."a2............?.....?&./...........I.......J...8o .Iq..G#F..6=...'....?...uv.FQN,...!b.....Q......XWV..n..........\|..(....7~......-.........).'.k..Jm..~.....g...C.o....b....f...6.1Ff@<..Y....>q...~...7.....>"(^WA#.a.<.3...n.x..]8P.Nl.._5o........o.{j..FU.g....x.k........SS..z9.1..p8..5....G..a....<6.Tu.0........LLX8.YY..z....U.....l....{.,..Y..5.....`w.,.tl+0..%..P..p...+7.....N..18.....q,t...../}mO...Y.:j....4...2..I((p..[.\......K....75..0...Mr.m..E...#3.-.c{...U.\|+.........G..L.X.D9....[..mE.[.ugp..^H.*.F.t.lN....Xye.!...m.\...I.S.I...S..Y...FJ0..t...eI..b.....P-.X[.........\+....2Ksj.f.?O..Y......s..P.x.....pmO....

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 208x34, components 3
Category:	dropped
Size (bytes):	3080
Entropy (8bit):	7.61993151418047
Encrypted:	false
SSDEEP:	48:R7vW9UoadpRKJgXbGQB+CM6B6zKgfC4Kd9V3JsehXk4bq23sPaA/+pBwH1HSBqXr:Ra9jARKJcG4D52C4KjsSpbq2kD/0QKc
MD5:	74C091424BB9945E453DA6C99FDF8240
SHA1:	E46C66AE085D4CD397C0C5F94A371532DE80E1A9
SHA-256:	E8FD11C33990C5125A7605DD9664E46D525922E02D6A89E6550E4FC628562AED
SHA-512:	4BC901584AAC07CCD99EA21F9EC1CFDDB2BC515B478D93B7A570B49362AC17306ACF3223541AC9634F40EACC703D77C3C5F0161D9626EACD79BC70A58FD2B079
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d....................[...................................................................................................................................................."............................................................................................ ...0@P!1".......................!...41A..Qaq"2#.. .$0@P..BR.Cs.....................1.A@P!Q. 0`.......B....................!1a.AQ...q. 0.@P.................................. .v...Z...[(b.b.y.........evs.]~...tZ..MhW^O/Bi.w....FQ.Mx.._............&.h..^.U+..........................m.cl..e.....v6..]...m.cl..e.....v6..]...m.cl..e.....v6..]...m.cm.S...)P.Xxda.b..../JT.W.(N.S.v.....9x.~FNN~6V....:.lj9....&...F&..9W.W...a.'../...K..\|!Nq.Q....$/.Xa.......&).s.W."R.../..........r..).r..).r..).r..).r..).r..).r..7.}.G...i.z.?..7..'._............j....+PV..AZ...j....+PV..AZ...j....+PV..AZ...j.B@.@......K}Y.)...........P.....UDD....p.&*.2./h.h..G.?.........?.."..........?......

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	downloaded
Size (bytes):	58775
Entropy (8bit):	5.560806789897555
Encrypted:	false
SSDEEP:	768:/+1ReeGxgHQ0UpMAF17JgoHAt4/PFZNSFzq8MSGeCx5R+6WkDt3uC:UBqNpMiSt4/P8FMN3uC
MD5:	D402BD816DC653A38C45B999B83A09EC
SHA1:	CAFBC4938C3DFD636AA833B1003248D97353F2C0
SHA-256:	0DD380BA638F1DF10476E7866F3E04F56E13ECC0DD03974EB46122D7E31DFFC8
SHA-512:	D6A4F8D109B026C625B769A0BD074493087416262DD57B77469BEE9A78F4FED1F04F926D1364D94639AE98280C5BE721C3B726F1A54CC7FE7FD04AB1621E0621
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/0af6e327/player_ias.vflset/en_US/embed.js
Preview:	(function(g){var window=this;/. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.io/license././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause./.'use strict';var Zqb=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.NS(a)},$qb=function(){return{I:"svg",.X:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},V:[{I:"path",Cc:!0,S:"ytp-svg-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31 -0.4,-1.5 -1.59,-2.6 -2.99,-3 C 29.11,.98 18.40,.99 18.40,.99 c 0,0 -0.67,-0.01 -1.71,0 z m 72.21,.90 0,21.28 2.78,0 .31,-1.37 .

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	71454
Entropy (8bit):	5.515556518573246
Encrypted:	false
SSDEEP:	1536:T8fsjrsdDVstcbYT1rVEC/OcfRp/evG/JlWjgShAvcxIGGHV3ouFbOA2jCxZ:IfOsoUvGHGg4AvcxIp13m4xZ
MD5:	629401C31553D2F42A6CA46E58C2A97B
SHA1:	0AB6084CAA72F90913C7E4119F491838726EC5C2
SHA-256:	91B9B24F0AA59668E4D0A770EE7A294B9BAA361A76A20ADE8128CD0482A5D805
SHA-512:	1FDFF160DBC2E006E3CF12BADC53F9062B87C9F85D78ACDA67ED8FB1E6BA9E0B615416E9D08E1AE88243ED33313465376281EEAEE7A4DA5E3D2A2B20D8F013DE
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/modules/core.BRQnzO8v.js
Preview:	const t=".BRQnzO8v",J=window,K=document,p=function(){},X=void 0;J.a2a_config=J.a2a_config\|\|{};var e={localize:J.a2a_localize\|\|{},static_server:J.a2a_config.static_server\|\|"https://static.addtoany.com/menu",templates:{},native:X,onclick:2,orientation:X,track_links:X,track_links_key:"",callbacks:[],tracking_callback:X,add_services:!1,thanks:{},locale:X,no_3p:X,icon_color:X,color_main:X,color_bg:X,color_border:X,color_link_text:X,color_link_text_hover:X,counts:X,overlays:[]};const L={num_services:8,prioritize:X,exclude_services:X,custom_services:X,delay:0,show_menu:X,bookmarklet:X},m={linkmedia:X,linkname:X,linkurl:X,linkname_escape:X,menu_type:X,target:X},Z={...e,...L,...m},v=function(){for(const e in J.a2a_config)Z[e]=J.a2a_config[e]},z=function(e){for(const a in e)Z[a]=e[a],J.a2a_config[a]&&(J.a2a_config[a]=e[a])},u=(v(),"https://static.addtoany.com/menu"),o=["feed","mail","page"];let w,x=0;const k=e=>{e?x=e.a2a_index:A&&(x=A)};let j=0;const Q={},n={feed:[],page:[]};let i=["a2a","share

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (32769)
Category:	downloaded
Size (bytes):	94840
Entropy (8bit):	5.372946098601679
Encrypted:	false
SSDEEP:	1536:8YRKUfAjtledhTmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUb6GvCu09s2o2skAieW
MD5:	B8D64D0BC142B3F670CC0611B0AEBCAE
SHA1:	ABCD2BA13348F178B17141B445BC99F1917D47AF
SHA-256:	47B68DCE8CB6805AD5B3EA4D27AF92A241F4E29A5C12A274C852E4346A0500B4
SHA-512:	A684ABBE37E8047C55C394366B012CC9AE5D682D29D340BC48A37BE1A549AECED72DE6408BEDFED776A14611E6F3374015B236FBF49422B2982EF18125FF47DC
Malicious:	false
Reputation:	low
URL:	https://secure.trust-guard.com/page/smarty/jquery.js?v=1-4
Preview:	/! jQuery v1.7.2 jquery.com \| jquery.org/license /.(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){ck\|\|(ck=c.createElement("iframe"),ck.frameBorder=ck.width=ck.height=0),b.appendChild(ck);if(!cl\|\|!ck.createElement)cl=(ck.contentWindow\|\|ck.contentDocument).document,cl.write((f.support.boxModel?"<!doctype html>":"")+"<html><body>"),cl.close();d=cl.createElement(a),cl.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ck)}cj[a]=e}return cj[a]}function ct(a,b){var c={};f.each(cp.concat.apply([],cp.slice(0,b)),function(){c[this]=a});return c}function cs(){cq=b}function cr(){setTimeout(cs,0);return cq=f.now()}function ci(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ch(){try{return new a.XMLHttpRequest}catch(b){}}function cb(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var d=a.dataTyp

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	430
Entropy (8bit):	4.831613513250109
Encrypted:	false
SSDEEP:	6:HJqF3J+mWZ/iBFaHoDucK8LoJMV1NhRFNWA0/vYLtZFXNhRFNWA0p02bs2MK1MU:pqF3J+x/iGIacK3mVBPV0nArPV0pp1D
MD5:	D00D1D30EC8431B05EB97220F840129A
SHA1:	0CCC55F2355A82BCF36C8C0E49E0FC864AD35E15
SHA-256:	5A8576E2097A10DBF8FD6680A1B55BD6A52B1CCDB6E90B1E89AE929818179421
SHA-512:	615B04B630D1B12375DE70D7AA3B96317311D0AF901AC4C492DDCC3D75DA2C5A40781B156440A52918197D69C38693844E8F5F6265A8F2B85DF43F49EC1DD35C
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/static_assets/js/https.js
Preview:	window.onload = function() {. jQuery(function ($) { . if(window.location.href.indexOf("fatcaFfiList") < 0){. $("a").attr("href", function(index) {. var inner_url = this.innerHTML;. this.href = this.href.replace(/^http:\/\/www.irs.gov/, "https://www.irs.gov");. this.href = this.href.replace(/^http:\/\/apps.irs.gov/, "https://apps.irs.gov");.. this.innerHTML = inner_url;. });. }. });.};.

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65463)
Category:	downloaded
Size (bytes):	334596
Entropy (8bit):	5.071778508844457
Encrypted:	false
SSDEEP:	6144:W2FzkIUMag2FRkIUMaMgaEmdUPZSeaj9QCQqE+caziAeD76UvjNux8LFV3LFVaOe:1mdSSe2gqR0+97
MD5:	2878E5D3C6CAD91150CB0F8A5044E3EE
SHA1:	9139CCAB8B6153B61D70F9D7AE617BB336DCE3FB
SHA-256:	1D99D693DDE9D10C74E58500A47F002154213CEDDAD6FB9569D98417162F7B8E
SHA-512:	D8EBDA6706D1DDE9AFB2829B4188D8ED9F263D7E69AAE71D3CBD7855340DFBC7E83A69986B1E6AA9028A7295A91C7AC35DA33488DBD6C3D6989770401C6D548A
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/pub/css/css_Xap-M4EJZ_wacvFw4qjMdrpWUA4Z2i_qz1x0BOcRmlc.css?delta=1&language=en&theme=pup_irs&include=eJxtkuF2wyAIhV9I4yN5iFLDZsQjJFvefiZpu3XpP-4HIl6EGJWhbA7uwXBrXNREUMiwYXMjTrASNzGyieLsRhA0dal-D1zKPEK2Qor2hqBLQzmy1OSZ1C1TSRccGlW9Vr9tBQXyphTkcmzGBHbGsjyJILQwXXvsRW8oaC-ekNKkBr-1j_rpYlsq5OEuTWJOGb1CcknnVwnpvx7gA76P_uETIyk3X_OSqIh7B83IrKINqqtcecX2hyhzVqqmQoPUwSSP2X7JsJS6jJlkwmgif5XMEP0-uM8wYu5bfFC7U3unViec0awUkT3OI0Z_I8zRdXsqF6EV7ZH8XXfhiLYrC60vI-PTxUsCQuAWiYvfbe8LfNX-i2JCPc4LzbXbty9-7k9-lX43pPUp5M9dxR7f1NZG5exxfh4v2FYKeBr9j5kwsWB5-HeqO-xuje4MhyDyAxxlNrw
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */.html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{-webkit-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,sel

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	402
Entropy (8bit):	5.304256621904179
Encrypted:	false
SSDEEP:	12:UNAFTSO6ZRoT6pW5SAKayVVey90H1BGuL/6f7:RTSOYsiwy96DGSSf7
MD5:	B43938DAD8FFAAD8B102973086BB73F0
SHA1:	FFAA6A9EDB6E58865E13ABAB81C21247A03E92E7
SHA-256:	22396B4566E354B630355186A2A18E1A649D851DEA7C612D33C3A423AF2309C1
SHA-512:	0E170BCFB642E50E074B4DCA331F547CDF66216DE6608E28AC2E1626512B236DF6783836C6B10A4FA7D380CA2B1EA9557D214E49B234AD21B55009930F34D3DE
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Nova+Square
Preview:	/* latin */.@font-face {. font-family: 'Nova Square';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/novasquare/v24/RrQUbo9-9DV7b06QHgSWsahHT4I.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 270x42, components 3
Category:	dropped
Size (bytes):	5925
Entropy (8bit):	7.903515058610915
Encrypted:	false
SSDEEP:	96:6S10RuNQZFDPBzYUlEsc1MY2G9bTIZGBxfdAcGmUYKL08t2k1+uq:6hRu2ZFqvLp6ZKxfdA+7aeuq
MD5:	7B8BEBBF69C2CB09A1A2EB95CFB334DE
SHA1:	E6FE377BCC98EC6CC4072A9D7CBA0054918AAC38
SHA-256:	6D4EB18AB8456168656FE904CE1675B5A575F60A817755BD1FC32944105FC774
SHA-512:	684A143519F258DE8DD1482123D722869035046A1AD49627BDCB5ECD77B7D916ED4F5C093D846D54EFE7CC45DDB0AAE9F99535F3297EAC0E6B87201BDD8C3222
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......F......Adobe.d...............................................................................................................................................................................................................................................!1...A"Q.aq2#3...8.RrCS4.u.7..Bb..$dt.%56v......................!1..A.Qaq.."2.......Br....Rb.$4.............?.......4....h.@.....4........>......7.,f...fH..0.yrp......]..l.2......qJ.B5[I....obZ."..i.Vd.A@.`..S..sp..(c!.\l.,+.....1.,.@S.2Q.n..t7.=Tan.4....&.\.=....a..K..C...<?.......#-.VC.X..}b.+m.H.{\.v-..p..<......k%.#e....6P.&._j.5.....h.@.....4....h.@..............'....(...~V.w!D2Os........d...c.~a..oL.C.\|}...\|.....DM.../.BEE.....I..L..3.4.;....f(...&..yh.{....l....v@.S..c...f\......H..E..\......'e.T..H.a"..T.!G....Bd.H\=A......w.sl.?W..vG...^.)..e.}....?......,:.,._.]..........8..s.#.........I\|.....n.!.].c..q@......O.$.>~.G/..n).....BH..N..b..y....yh.......

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2573
Entropy (8bit):	5.147400583778317
Encrypted:	false
SSDEEP:	48:V85xwKjLyhiGBwwuwwWdH4PwwhwwB45dlSwwUgwwv0DwwEwwgSeLfwbVn:GGqLyhizwJwoVw2wB2wUPwxwbwgIp
MD5:	266C882F8A2573DA9C15723125F4BF00
SHA1:	48767F110B17C5EAA9B8B30E5F814BC95267975D
SHA-256:	AC85A3D8445638E53122DF2B2E0557DEC8B1A098B501D993D550A22D8BD979A9
SHA-512:	18E45F7E9AD57E3854C1DD405E129ADAE31594CA6D8F1E94EEB7EC759AC0055164DA8B263B3A7B0BB282CC3492458008EE9B078610D958E49DE2F4AE13B7589D
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/static_assets/js/reporting/google-analytics.js
Preview:	// 07.20.18..(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]\|\|function(){.(i[r].q=i[r].q\|\|[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),.m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m).})(window,document,'script','//www.google-analytics.com/analytics.js','ga');..ga('create', 'UA-22588183-6', 'auto', {'allowLinker':true}); // Replace with your property ID..ga('require', 'linkid', 'linkid.js');..var url = window.location.href;.var pathname = window.location.pathname;.var search = window.location.search;..//for meta tag old url.if (document.getElementsByTagName("meta")['oldUrl']). {var dimensionValue = document.getElementsByTagName("meta")['oldUrl'].content;. ga('set', 'dimension1', dimensionValue);}..else{..var dimensionValue = "NULL";. ga('set', 'dimension1', dimensionValue);}.. .. .//end meta tag old url.//for meta tag new url.if (document.getElementsByTagName("meta")['newUrl']). {var dimensionValue2 = doc

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (331), with CRLF line terminators
Category:	downloaded
Size (bytes):	66228
Entropy (8bit):	5.000743967515168
Encrypted:	false
SSDEEP:	768:++9Qbmbl4du4uq5WMW0Q0LwIrBhDygc67rKjM0Xjao1yzJOfr1tk0rAmubp1T12I:hKWq84F5WzR402Gyzofr1tk0rAmRI
MD5:	6B697C2FB47A3B79F9489A9BC30D527D
SHA1:	16910899D609770E91A2A02A737761640C16D7DA
SHA-256:	DA6CBB40B6AA5A67498F13AD7C56288B4074E6C8F60F7AC1CCE116CEB0FD8DAE
SHA-512:	D707DAF8BDDECC8D115709DF36D268D8D38D4760C7527101C9CD66EC010FBB77F49DBE021FA821B8B7D1CC7BF650C5CCAED48F162901E18ECEDB1E34BE0BB09C
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/js/IRS_fingerprint2.js
Preview:	/.. Fingerprintjs2 2.1.5 - Modern & flexible browser fingerprint library v2..* https://github.com/fingerprintjs/fingerprintjs..* Copyright (c) FingerprintJS, Inc, 2020 (https://fingerprintjs.com)..* Licensed under the MIT (http://www.opensource.org/licenses/mit-license.php) license..... THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"..* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE..* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE..* ARE DISCLAIMED. IN NO EVENT SHALL FINGERPRINTJS INC BE LIABLE FOR ANY..* DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES..* (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;..* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND..* ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT..* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF..* THIS SOFTW

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PC bitmap, Windows 3.x format, 39 x 17 x 4, image size 340, cbSize 458, bits offset 118
Category:	downloaded
Size (bytes):	458
Entropy (8bit):	2.7096910888316836
Encrypted:	false
SSDEEP:	6:0lU3oijoLKRRKXE8KqmF5F5FJ2FEVaaPkXEKRRKRRKRRX:08oicGLK9By89LKLKLX
MD5:	DE38BBCC4F700D91A8B9D6BC18618319
SHA1:	71CC576E52EAD8D999874F8DBCCEF875CD7E98A7
SHA-256:	AE9E7F5F38F08CE2F76D8DD30CC64B199E8AE659F550403A56B7AC0E8C811D1D
SHA-512:	F2A6A4A37B07EE75ECF8E2D44094624883274512D07A68B264D651E7F12817B9D5545243783D4DD36C5A6C214499E030F664FA0E72D21D5B7762A8C2F0C510A9
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images/Done.bmp
Preview:	BM........v...(...'...............T...................................................................................DDDDDDDDDDDDDDDDDDD@................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	262279
Entropy (8bit):	5.567194835397464
Encrypted:	false
SSDEEP:	3072:R0p3LwAZVNSNcMzszFeIgT8AjCBPIrTWR4YESfhmpt2nBsLqwyHXDeltzvsXshNA:CBcAFMgzFemc0fhmpt+aqwyHXDelJsXV
MD5:	1159FC03F2450742876431B8E4B32361
SHA1:	5BFD1B5AFCBC0FBC2858D4A3E04336C97E835D63
SHA-256:	23C128FE72800725DB7C4979648D77BB0932B3ABB763D6E789C8DDE8FF6FA6C0
SHA-512:	C37F478BDB0FB7CC33D1631BD2DEC9EB789BD293C8BC5D6A47F790CC4413867CD6728248FFF294A13F6550860C1E14D37412DDF8CED836435AC70E38EF8BE6E7
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-CSLL4ZEK4L&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_auto_events","priority":19,"vtp_enableScroll":true,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":true,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":15},{"function":"__ogt_dma","priority":9,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":17},{"function":"__ogt_1p_data_v2","priority":9,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","v

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 100 x 40
Category:	downloaded
Size (bytes):	3207
Entropy (8bit):	7.720573905988614
Encrypted:	false
SSDEEP:	96:w3HeU+gvdcyzHAV6o4lqDC243Z1emf3SU:pgvd3giqf4J15
MD5:	4F733E55044E6A04B4C5030F2042CBB9
SHA1:	33D3B48BAFDD4132C9DAD402EF4FFA2DEC1BB6C5
SHA-256:	E32045E76A36C815E15695BAFD9A5167B17E293B14AED93A914402FE4FB6C66D
SHA-512:	A403605272850B37920586600D389F3659BFD56E036556384E1DFD36D2BED57A1D5AD04BE089FB55FE6B16B0482EF99E12FECFCCC303019D81AAFA49C17909D5
Malicious:	false
Reputation:	low
URL:	https://dw26xg4lubooo.cloudfront.net/seals/privacy/12081-mini.gif
Preview:	GIF89ad.(................f.r2.?(m3FxB.X&.R#7.D4.A..v.#..])1\|=q6"b,i\|n.x:.'..C..H.-u8B.Q3[8u.j.9..M!8.Fu.o$f/...S.]u.l.T'...n.d.)..5'8g;>.LZ.S...V.MD.SW``.=.<.J&j1.1.#[-.4.;.Hu.n...@.N...g.\......",....m.p.....\|....K....t.Ri.u.5.................o.{...>.......[.b..v.....\|....t.w..p..[y......\.......1cf-..e..\|..k..x.T....g.......`..q\|.Q..w............s..k..V..v.......d....o..s..{...!.......,....d.(.............................F..F....NFN..NWWU..UO.O..O..........<.........B._BBJ._........U<.<...<.].....W%%..8..8......-.--$......"..).BHAE....u.BE1]8...i.....:....F..0P.X.#...1..@..=!.lb.R...~.. T..3'-.(Q.PG...n......XEh...k.Zm....$..):(X.....'.k..re.........6u.v..'..R.}..E..O... ....6.z..v.Gv!.L..v...kS.].w...XZb.....x..c............D...n..u..Gw(@.......@.O.R.....p<.B.c.&.Kp.IuT&...X.\.kpn.Y.S.....>P.u........J...k.qW^8....8,%..9..T.W.1..Ryt.r....!S(@...LP ...( v.m..u..S....>.....Sd...~...Yt2N....@pA..hyA.5......h...0X.vp..RIC.9....N.>..c...u.dA..

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (429), with no line terminators
Category:	downloaded
Size (bytes):	429
Entropy (8bit):	4.9603233255425
Encrypted:	false
SSDEEP:	12:cHTTyOGq/BWEBa5Xt3TdWdsApURTWpRhb1Je1:6TyOGq/BWEBcXtxWdyRT4hO1
MD5:	014BCC757E484E12E3AEA6C9D768FD4B
SHA1:	4C17157D0012F8002E4E6CF77C5F4A9747792CF4
SHA-256:	4B475960843A5619B907AF1F0A89E3136BD5E6A4A700EC78CB417F302647CF49
SHA-512:	B00FAB0CE2E56B56C18E0DC54AC3329D77FC18096E63BC2AEF34342770F40DAC91C10F7A8A9DB1DCC5CE42FBAFE637FCB1FDD51994EF937AA00923375476D467
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/svg/icons/facebook.js
Preview:	!function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({facebook:'<path fill="#fff" d="M28 16c0-6.627-5.373-12-12-12S4 9.373 4 16c0 5.628 3.875 10.35 9.101 11.647v-7.98h-2.474V16H13.1v-1.58c0-4.085 1.849-5.978 5.859-5.978.76 0 2.072.15 2.608.298v3.325c-.283-.03-.775-.045-1.386-.045-1.967 0-2.728.745-2.728 2.683V16h3.92l-.673 3.667h-3.247v8.245C23.395 27.195 28 22.135 28 16"/>'})}(a2a)

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 150 x 40
Category:	dropped
Size (bytes):	4255
Entropy (8bit):	7.748362119597243
Encrypted:	false
SSDEEP:	96:QjDBasXP4rQdT/vuqvkh6jIO5foN5jMMKUxhW+3uc7D81in:Q/B9wrQdjuqve6jIO5C54MKUXNB8gn
MD5:	C848C1727FC4790C81DCEF046F03D829
SHA1:	DBDCE83364FBA86B356079AF00DFECFA13D3D710
SHA-256:	F3435BAF8EEC4F1AADDBBCD41F86DA0C11144CE6DFE0FC0C627A0882004840EB
SHA-512:	98D3F1EE2C98828635AD20B46D6C81A7C70B9AC7F08B38F033E9E674985462CB4AF9D08A263A62EAB3649902EE892C832E71FD6DCECEE23032093CD7B00A500E
Malicious:	false
Reputation:	low
Preview:	GIF89a..(.............2{=...Y.hO._9.F![H.X@.O.U&.K!g.t#a-.6. ?.B.Q;.H+c1)l3.C.7.Dp5q.g5.A:.Gt..E.T#I$..%e/)[-W.b'i1?.M/o8!E!=.Ku.l2t;&N'.!..P$(T+G.W....8.k.`,t8...../x;.0..<.q.N.=.>.L3.?Zy_7.Dn.el.r....4......~<.JISR...i.s{.}....0...bbgk}.w................x......5..r.t.........l..D..........[}........\|.....9....W..t..c...v.Un....8.f....n....U........k..C.vU.v..Q..ds5...!.......,......(......H....................b............................b.2.....B.......L.....F?QQNF!.FN.?F.!...!F.N!.Q?.....F.M............L.=......!....U~..b.`..!. \|........0c.L..F......E.G2.\...0c.l.....Lr...d..9..`8.S...<....O...N.j)Yd..*_..0.D..".\th.....%.....`.0R... .Q.............. ..a...5.S....h...y.2...s.^JH`..&.V!"...2m.,1H...'>J.!2....d...A6.."GH.A.dI.....H.y....2w.yt...2O^..a.Q..S.b..;P.....a.L.x...-...!S.....-...3,1....(....DV.4....H`.........A...A..S.`...pq".S..@.J(.".\.(.\..b.9n.......5..B...!E..@.G.{..W.r-p.Bml..`p..p...}..C..6..?.P....PR..TiD..<.....`b...@@.(\A@.

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 218x34, components 3
Category:	downloaded
Size (bytes):	3099
Entropy (8bit):	7.652015470137458
Encrypted:	false
SSDEEP:	48:5Z3+2jv8EzNohppppp9JHyUtolt/fQ1zKWuCC2jyclsgeUCQ:5Z3+27zmfKH3Q1zKWuCC2jy/geUx
MD5:	D2FB573244F8BEC1953F05E2A00AB236
SHA1:	BC7175F34D2A53C5E656A4FC9B93B716C158610A
SHA-256:	F3DCC10A9EFAD1F859AD9CBC288DBEF1D7546779172AECF11730D7B1CDFD702A
SHA-512:	D081CEDF37B3B3323255FAB5536CE947A63090E0C862E5503934B00464695A8FF1DC7C783DCA6B3392C70884616411D7A018BCF3D440FA9CAF69A673BC4FFE17
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images-ez/nav-online.jpg
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d....................{....................................................................................................................................................".............................................................................................. 0@A.!1"4..........................4!1q.Aa.B3.0@Q."2.. .Rb..C.$.....................1.!.PQq@p.a.B....................!1a.AQ..q...0@. ..P..................#.............<...6xo^...%..$t......f..Oof...].....C..^..pk..S7...{...:..4..Q...........<...Vxo^.t..c)'../.....#;..H.:.......\|...7.O_..........]..Z............e..X.e..X.e..X.e..X.e..X.e..X.e..X.e..X.e..X.e..X.e..X.e..X.e..X...<..bzr.H.[?..>.....:.^QqX.r'Z....sV..y0.q....I...z`..M...\.n.0.)]...2........Q.n..;!}p.\|....\|.._.>l......$x...{r..............REH..".T..REH..".T..REH..".T..Q..{.^.0N.Pt..'...><M.H.....#}...............L)0...L)0...L)0...L)0...L)0...L)0......^.~...X$..GE.UsINr...9aY.Vr.1.'*.%.F5.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 120x90, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	2824
Entropy (8bit):	7.92431916165163
Encrypted:	false
SSDEEP:	48:bFe1ywSMoMpzBbyeaY3NQhd3+yWxux1lA6rZV2gYLq3PaRAQoh:bFyy/RyfaY9aRCuzlA0nY+PaS1h
MD5:	248D60882687DFCC824EA36FB6AC4276
SHA1:	BCDABB1C6E3364ABF4E61E89A7703E4746360843
SHA-256:	9CF2A2FDA395748B6A51B0EB6952BAC44CBC6CFEB91C41CA18E3A97832CA3755
SHA-512:	9C14A589B3309DBD14157489CE2E47AF929D882825024272400A0B2D729916F2F7B364C882DF23374043873F92027922712C925D0C4E393C255FBC957AF20604
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....0...x.Z.>A..D"...Y..(....ip2%;..%.&~el....s..>..9......_....=).m}@~.~......I.U.......W.o.O.......O.../.1.....Kq.b?y.......y?(..?...7..E.....-...c...O.7.O...?.z......W....]/b......g.\|... ./..../.s+.^..F...d....J./e{(....r......o}.".o.#.!..kJ....%3....-Uj~.Sq..u...X.C..-.b.`'...p;[M..c..h...HQI.s....d,.....M.}...>BX.h.......o.#^.Th...J....e.vA.7.S......5y.4.x!JS...;_..G.n..........X.>C.......B....x ..yP.BG%b...h..fR.-.........$.............A...p....\|.k.Q..............7l.V.,...`{...=Od.....j1....t'o.<..O.=}.......M[@..x}....,..!^.D]L.~F9"Q..h...N..)......:...Jax........S....F...f..O.o{w.L...Xq...O...T<}G...M.(}(6;N.....$m....RB.i)Y.<......vVy7^F.D..g.L+D....yK.._\..sb.....e6.Y..;gX..+.h.&.......Mu9.O....*.....f"......."{...xX........x.......j.6.<.Ikoa.G:..n....a.2f.#o...e....n..z.J..Y\.#Vx......5.......V.A#..YD{.`Y....Y..Rr<.....\|..p.^\|.....?.O..j9...;U.hT..v,..r.O.../.e.p}x...e..FI..}..j@o...e.]]..R..

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1695
Entropy (8bit):	5.053335197156781
Encrypted:	false
SSDEEP:	24:pIob/3fTO+pEkTRqvtVa3WiEdFOpno5bc/fMkFFvPB89Lsfqtsaz:pIs/7zxRqt03WiEdFOpoIE+Fv589G7a
MD5:	6F2519F6C1BADC0940CB36A2AE5FC299
SHA1:	046C8E0DD924CC4AF3E4DA5DEC89BA06FA380994
SHA-256:	76C790738D009DDFFAF7B9034FA3713331BF43F2D450955D34E00AA07BDBFF31
SHA-512:	7FEE00EC75799B4B41D03F05FAA39486E3639B906C5E3C605AEE1DD310BAD18686BEAE3B1F229CB96B7FB6A67BFF23FEE4B88A4786CCB05EFB2E9B929CD70551
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/menuco.css
Preview:	/..html { min-height: 100%; }....body {.. margin: 0;.. min-height: inherit;..}/.. #data-sidebar {.. display: none;.. position: fixed;.. height: 100%;.. z-index: 8888;.. overflow:auto;.. font-size: 12px;.. border: 2px solid #F0F0F0;/#FFF0F5;/..}.. #data-sidebar-overlay {.. display: none;.. position: fixed;.. top: 0;.. left: 0;.. width: 100%;.. min-height: 100%;/inherit;/.. .. background-color: #ddd;..}..../* Additional styles /..../background-color: #39b1cc; #009fda; /..#data-sidebar { background-color: #FFF; box-shadow: 0 6px 0 0 rgba(0,0,0,0.5); }..#data-sidebar a { color:#000; text-decoration:none;}..#data-sidebar ul {...margin: 0;...padding: 0;...list-style-type: none;..}..#data-sidebar ul li{../border: 0 0 1px 0;/..border-top: 1px solid #F0F0F0;../border-bottom: 1px solid white;/..}..#data-sidebar ul li a {...text-decoration: none;...color: #000;...padding: 10px 11px;...background-color: #FFF;/#009fda;*/...display:block;..}..#data-sidebar li a:visited {...color: b

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3813)
Category:	downloaded
Size (bytes):	3887
Entropy (8bit):	5.022277962137568
Encrypted:	false
SSDEEP:	96:mqP1OnfP1EVn2wJeEF02RlHsXgoM6lDVikrV8BM6IeNxEn3CL0g:mFeVn2fOD7YZiy5E
MD5:	EA58CD17945B7F28B17F5470138CA0F8
SHA1:	C0250407C18C4B57DC60F7B70751A064ECFE3200
SHA-256:	46C046CDD96C18B77C987F15CF7608D1F5035FEF273A9223F1685528162711C3
SHA-512:	8F61D139752BE8B72C3168908839596AADB31B789BD0F16E98D3660F2279AA3005E57D3870FB9C599E65EE9E3C9604EA62CE0241DC3DA61B96E1E4FCCD2158C2
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/pub/css/css_U2QileD7TIp6Slel0HOdFXN3tKLVTJZhpxPJ9PAy1g0.css?delta=2&language=en&theme=pup_irs&include=eJxtkuF2wyAIhV9I4yN5iFLDZsQjJFvefiZpu3XpP-4HIl6EGJWhbA7uwXBrXNREUMiwYXMjTrASNzGyieLsRhA0dal-D1zKPEK2Qor2hqBLQzmy1OSZ1C1TSRccGlW9Vr9tBQXyphTkcmzGBHbGsjyJILQwXXvsRW8oaC-ekNKkBr-1j_rpYlsq5OEuTWJOGb1CcknnVwnpvx7gA76P_uETIyk3X_OSqIh7B83IrKINqqtcecX2hyhzVqqmQoPUwSSP2X7JsJS6jJlkwmgif5XMEP0-uM8wYu5bfFC7U3unViec0awUkT3OI0Z_I8zRdXsqF6EV7ZH8XXfhiLYrC60vI-PTxUsCQuAWiYvfbe8LfNX-i2JCPc4LzbXbty9-7k9-lX43pPUp5M9dxR7f1NZG5exxfh4v2FYKeBr9j5kwsWB5-HeqO-xuje4MhyDyAxxlNrw
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq /.@media print{,:after,:before{background:transparent!important;color:#000!important;-webkit-box-shadow:none!important;box-shadow:none!important;text-shadow:none!important}a,a:visited{text-decoration:underline}a[href]:after{content:" (" attr(href) ")"}abbr[title]:after{content:" (" attr(title) ")"}a[href^="#"]:after,a[href^="javascript:"]:after{content:""}blockquote,pre{border:1px solid #999;page-break-inside:avoid}thead{display:table-header-group}img,tr{page-break-inside:avoid}img{max-width:100%!important}h2,h3,p{orphans:3;widows:3}h2,h3{page-break-after:avoid}.navbar{display:none}.btn>.caret,.dropup>.btn>.caret{border-top-color:#000!important}.label{border:1px solid #000}.table{border-collapse:collapse!important}.table td,.table th{background-color:#fff!important}.table-bordered td,.table-bordered th{border:1px solid #ddd!important}}@media print{body,div,html{-webkit-box-shadow:none!important;box-shadow:none!impo

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 160, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	976
Entropy (8bit):	7.618042975859953
Encrypted:	false
SSDEEP:	24:5JcKq/4ASwROujTi210qgujdhHIrG1cB+HTXrx6Z8:5CEA9e210zu7IrG1coHbr8S
MD5:	28FF1C4D19D51521F1751456494DBE61
SHA1:	D69BF4BC23224B24238966DBFB3FFD9B92DEF5FC
SHA-256:	493D68E8F237B05F962056BD60A80AA816F0A7ADDDD1E2E944F0AD688B2AF09E
SHA-512:	7CC099DD2E30F45E151577D2866453DC786B70B401A242E379631A2679D0771A89CA2C9F72464EE33C0FE23103451C1619BE3BA4811214FEDF3B12FB16A4047C
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/themes/custom/pup_base/images/fa5-hands-helping.png
Preview:	.PNG........IHDR.............~!.....sRGB...,.....pHYs...#...#.x.?v...HPLTE....................................................................=......tRNS..L...q......p/.......L/...5....IDATx....r.@..`./1q .c...4q..A.cV.9vj..l..c.L!.OS$..D"......I...dgRr!Iw.fs.2..m...Q{...0.\..#}..3..hK2..CIj.. u.0.&c..#.1.../.2.C.....d...5..\7.1.$.S.........!-.c.B8...^FJ_}0...8..?.....;.2.~..#}s..^.A..... ...bL24.r.'..J..!8.mT.e.&..H.eCBre..\|.p..BW.r.~.x..f.....G........\...(.jN..y.z...)..2CZ.\%7...6.C..`..Y..)K.m.A.e-H..9#.!......T....a...A.B...K{.9.......<..xu...N........_..& ........% .Q.d....B.0..M.<..4^...k..'...?xF.\|E.K\|,....X.Q..,aF...f../...6.n.as..R\.u.\...@.1..@.1..J.3......0....#.X.........w_...(...sdG...3VS....xq..3..Py.eA..........!..1..!u.0?D}IP..U.1..$G..T(I..o....D\..}@.....$ .$..?.I..CP..]lb.f....!..w.H$......]"....)6H.*.1. ...1..=h+.ox.f.....Yu..F.r.......'.........c....'..D{..q.x......f...#..D"....b..SN-.#....IEND.B`.

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 87a, 461 x 37
Category:	downloaded
Size (bytes):	3885
Entropy (8bit):	7.564536507096807
Encrypted:	false
SSDEEP:	96:w2wSNVtO9F9XAQwIkNvbTdqjss1Tfz+1042DvdS2XI:Xwz9FZAPlnU7+YS
MD5:	A681FD2A05AD1D08BB3AE359A1C35248
SHA1:	2CE1718A7FAD8BD41C825864D8AC87E29C46F833
SHA-256:	7ABE924747E4547F472D8C75C959FA229DE43C43904C9408F4897AD4F9709E1D
SHA-512:	197B82FD7B16A5FA8327A2D99E9E7CB39A4D862B601657CE6FC40E5FF7BD9657E2A9EAC916EFF278EDB121C0193B558AA0F66D99CC3DD73C11D32905056B70A1
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images/1040.gif
Preview:	GIF87a..%.........................................U............*.U.......U..U.UU.U..U..U........U................U................U............U.......*U...U.U*UUU.U.U....*.U.........*.U.........*.U.....U..U.U.UU..U..U..U.U*UUU.U.U.UU.UUUUUUU.UU.UU.U..U.U.UU..U..U..U..U.U.UU..U..U..U..U.U.UU..U.U.........U.............U.......U..U.UU.U..U..U........U................U................U..............U............U......U..U.UU.U..U..U.......U...............U...............U...............U.............U.......U..U.UU.U..U..U........U.............U.............U.................&&&333???LLLYYYfffrrr..........................................................!.......,......%........H......\....#J.H....3j..#.[ C..yK..'.\9...y.b.G.&M.8s.....@.bdD..QF..&%.$Jy,_.y..Jz=..-HO.Hy..K...G.].t.S._......a..%.....2.g...[.....7p.z\|..N,Y......e.X.z..U...]e1y........

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (806), with CRLF line terminators
Category:	downloaded
Size (bytes):	11570
Entropy (8bit):	4.908515954734589
Encrypted:	false
SSDEEP:	192:HxVDCvwNvwSqqdCxTABpPaT5TtyKQZ4elAkHjQeGxdwaqasd9HasdvvPasdpXyOY:RRKCCiHPc5QZ4UTHjQtq7asdRasdPas2
MD5:	01A50EFD2E49369C080B8B10E6E2B46A
SHA1:	E79804829D230F7CD5A84890B24AB11911C97A6B
SHA-256:	67F1923ACE10A18647F72DB6DCE4BB227FE811F8879189D31D1F9B569C3A68E1
SHA-512:	20697B3EBD420148CEB2787786B06C167138444DBA5C62F4893B3FFEB8C34F06D771E78A36DF97979CC7FDA02ED7A04316B51E3CE206A314BCF3C54330CDDF67
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/partnerpp.htm
Preview:	<html>...<head>....<title>1040Now :: Online Tax Preparation & Electronic Filing</title>....<script type="text/javascript">..function bookmark(){.. var title="title".. var url="http://www.domain.com".... if (window.sidebar) window.sidebar.addPanel(title, url,"");.... else if( window.opera && window.print ).. {.. var mbm = document.createElement('a');.. mbm.setAttribute('rel','sidebar');.. mbm.setAttribute('href','http://www.1040now.com/');.. mbm.setAttribute('title','1040Now Online Tax Preperation & Electronic Filing');.. mbm.click();.. }.... else if( document.all ) window.external.AddFavorite( url, title);....}....</script>.......<script type="text/javascript" >....loc = window.location.href;.. if (loc.indexOf('http://')==0){.. window.location.href = loc.replace('http://','https://');.. ..loc = window.location.href;.. }.. if (loc.indexOf('.com')>0){.. window.location.href = loc.replace('.com','.net');..

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2271
Entropy (8bit):	5.18528781095449
Encrypted:	false
SSDEEP:	48:2VB+aFi06A1M9+96lhdZxhd3khwYQgktwsQZ55QAe5w:2VB+aFZz1MgOjXmhy/tFQjKw
MD5:	6A9B2D1431B6B72E3F6FA86739CE1D12
SHA1:	6B6E70B26BE27EB44AF6BE5A216808AEBE493760
SHA-256:	7A55CF3C2CBFB4DF597EE9B28998721F6FEA97151B100E305404F62FB1F53A09
SHA-512:	7EEBEB7C296E39202ECB61B3ACE1566C3D9E3839404CB573815803FF5B3394B41801B0CB0FFE9EA1B17441B6E5D9DFD7BC7FC6FB26A100EFE670A4C66F3868AE
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/1040.css
Preview:	/* CSS Document /...menuActuator a { .....color:#666666;.....font-weight:bold;.....font-size:12px;.....font-family:arial;....}../.....menu {.....font-family:verdana;.....color:#666666;.....font-size:10px;.....background-color: #ffffff; .....layer-background-color:#ffffff;.....border-style:double;....}../.. td div {.. / this makes TDs a container with their own coordinate system... absolutely-positioned elements will be offset relative to them */.. position:relative;.. }..a.formlink:link {...color: #313198;...font-size: 1em;...}..a.formlink:visited {...color: #990000;...font-size: .9em;...}..a.formlink:active {...color: #990000;...font-size: .9em;...}..a.formlink:hover {...color: purple;...font-size: .9em;...}...helptable {...background-color: #990000;...}..a.helplink:link {...color: #313198;...font-size: .9em;...}..a.helplink:visited {...color: #990000;...font-size: .9em;...}..a.helplink:active {...color: #990000;...font-size: .9em;...}..a.helplink:hover {

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	51
Entropy (8bit):	4.243134106881671
Encrypted:	false
SSDEEP:	3:YWMmqenazHYJtZlCn:YWMm9arYJt6
MD5:	139E6BD0E1A5AE4368562338EA331EEF
SHA1:	014F3DB4AB7C5EC25C29E4089DD6FBBA58D72CC8
SHA-256:	3C6146B9208554FD1964ECABD40D0D8DBB5101AE2B828B2A7CF730AA12572643
SHA-512:	515B39905ED36352A90CCBB7CE0F1C2F912B414CA1FA5ACEBB3A549BF5712B07FD0581F308A6FB3B741BE9CE1376117073108C5B100421F5DC85F6A578ABDCB9
Malicious:	false
Reputation:	low
URL:	"https://c.go-mpulse.net/api/config.json?key=YVPKX-K5D8K-83D3W-U8X45-X3FTN&d=www.irs.gov&t=5711682&v=1.632.0&if=&sl=0&si=bsovk2xlk1e-sc6cpt&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,Angular,Backbone,Ember,History,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,LOGN&acao=&ak.ai=388528"
Preview:	{"site_domain":"arlid:388528","rate_limited":true}.

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 237x19, components 3
Category:	downloaded
Size (bytes):	389
Entropy (8bit):	3.9599427585052975
Encrypted:	false
SSDEEP:	6:3llVqjtFCud9DR6FkmMuAltHltmiXptWmsZ:VvI6vwWv
MD5:	B37EB0135B80EFF0CF22A7AE85500BA4
SHA1:	4490CDA051E35388985516E6C74D3C192A696739
SHA-256:	81DBCCCA201233A08F85EC6CD98CBF044E8F5CA5648231233334FC8C2BA984D1
SHA-512:	CC83112520A1F3A70B140BE5B3F9C4B78B18DF023C317376EA472FF7C58185DEFE77CF299BE3A1CF5D3B7D85D95F8A3EF743AC34192F3918037468732512BBBF
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images-ez/index_07.jpg
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................................Q...........................................................................................?...W.0....._.C. O..................................................................

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4657
Entropy (8bit):	4.21532241940096
Encrypted:	false
SSDEEP:	96:7CoKDwePoRjDjg3iLfRdmZIQuYBPnlrlo2ipWjCTBSwLIfrAj:0Dwu4jD5f/myK1nxl2tHLo4
MD5:	30ED8195A81DAAC2EAE4A6B52113AF26
SHA1:	A9165A0C6B2DB5FB01EF72461BDC045188C1AC91
SHA-256:	0F43618580DD31A8096EFFD969CA2AF7E26BA8555AB8D732E5B32FE2EF8E8CF6
SHA-512:	9775B65C9B3C674D8884ACF0FA76424025FA9AB1F5829345CB998478D6916AC703CE53310C62157548CE50A1FBCC2833BEAD0BDEE6F9CF79E759805A17E7105B
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/themes/custom/pup_base/IRS-Logo.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="meet" viewBox="0 0 421 147" role="img">. <title id="irsLogoTitle">IRS Logo</title>. <desc id="irsLogoDesc">IRS Logo with link</desc>. <style type="text/css">.. .st0 {fill:#FFFFFF;}. </style>. <path class="st0" d="M153.3,18.9c-1.8-3.1-20.8-11.7-48.2-17.3-11.3,12-11.3,16.8-11.5,18.8s3.7,7.1,7.8,12.3c7.5,9.6,9.5,11.4,10.6,14.3,2.2,5.5-1.4,17.9-4,29.3,0,0-6.7-24.2-9.8-39.9a2.8,2.8,0,0,1,.3-2.3c-16.9-1.6-28.3-2.4-30.3,6.4-7.8,0-11.3,2.2-12.1,3.5-2,3.3.4,10.1,1.7,13.5,1.1-2.7,8-2.2,10.3-2.1s1,0.6,1.3,1.2V89.4h-20l-17.3,46c8,3.8,16.4,6.8,21.6,6.8s18.1-6.7,19.9-6.8,14.7,6.8,20,6.8,13.5-2.6,21.6-6.8L98,89.4H78.1V58.3c-0.3-2.1-1.3-2.8-2-2.9H86.2c-1.5-5.9-3.5-10-6.3-10.3a13.1,13.1,0,0,1,2.6-2.7H74.7c0.8-4.1,10.9-2.6,15.3-2.3,4.5,22.1,12.9,51.7,13.3,52.2s7.5,3.1,8.4,3.2c4.1-8.8,10.3-34.8,10.7-41.1,5.2,1.8,3.1,8.7,2,15.5-5.9,35.7-10.5,46.4-11

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 538x107, components 3
Category:	downloaded
Size (bytes):	41492
Entropy (8bit):	7.973678622098759
Encrypted:	false
SSDEEP:	768:1SlIBJRUDVOhN2dsTgBtiFZO/FGmzNFJ0/a1zhwtrhH+wJKCUvUN:1N2DYPMMgBti44qw/aYtrV4CUsN
MD5:	F9C1C186D4933E7B3674476496C9C7BA
SHA1:	4E97E3B16F28B3C9A462887213308719B72E7183
SHA-256:	6EB26BB21E889AEA580FA9EB76124DCC94CB78CAA49D264CAA00D39C748F443A
SHA-512:	0095669026C41FB50F4D641AB90C6E23E347BAEA56FBF538880ADA09A5E7E8A0486995812102592A82ED607072357C06F7B0BE26948818932772A5E2615C16E4
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images-ez/index_01.jpg
Preview:	......JFIF.....d.d......Ducky.......P......Adobe.d.................................................................................................................................................k.................................................................................................!1..AQ".a2.qB#...34...RbrS$5....C.c%&.s..D.6V7......................!.1..AQaq"....2..B...R#..br.3..C.$5..Sc4Dt6............?..UG.E-..=.QQ..E..=.QQ..E..=.QQ..E..=.QQ..E..=.QQ..E..=.QQ..E..=.QQ..E..=.Q..>z(...E.T\|.QEG.E.T\|.QG...(......(...E.tQEG.E.T\|.QEG.E.q..:(...>z(...>z(...8.tQG...(......(.:(...E.....(......(.8.tQEG.E.T\|.QEG.E.T\|.QEG.E...<........G.E.q.E.~:(...>z(......E.P...V:(...8..+40y.Q..EcE.h....9.(.=d.....E\|..A....R.=.?....Z(.h..x_..=.?....v....z(.....^.(.h..x_...:H~..^.+>./..+..A...hJ.O.A...dT..........v...e.o.K.Zq.[ys8.d..TPr........."".!...^..oh....s.A#.H*..........kn\p7e..x.H&.......Wi.f.".....jC..yx.......$...T.....%. ..5..Xj...vUY

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 538x107, components 3
Category:	dropped
Size (bytes):	41492
Entropy (8bit):	7.973678622098759
Encrypted:	false
SSDEEP:	768:1SlIBJRUDVOhN2dsTgBtiFZO/FGmzNFJ0/a1zhwtrhH+wJKCUvUN:1N2DYPMMgBti44qw/aYtrV4CUsN
MD5:	F9C1C186D4933E7B3674476496C9C7BA
SHA1:	4E97E3B16F28B3C9A462887213308719B72E7183
SHA-256:	6EB26BB21E889AEA580FA9EB76124DCC94CB78CAA49D264CAA00D39C748F443A
SHA-512:	0095669026C41FB50F4D641AB90C6E23E347BAEA56FBF538880ADA09A5E7E8A0486995812102592A82ED607072357C06F7B0BE26948818932772A5E2615C16E4
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......P......Adobe.d.................................................................................................................................................k.................................................................................................!1..AQ".a2.qB#...34...RbrS$5....C.c%&.s..D.6V7......................!.1..AQaq"....2..B...R#..br.3..C.$5..Sc4Dt6............?..UG.E-..=.QQ..E..=.QQ..E..=.QQ..E..=.QQ..E..=.QQ..E..=.QQ..E..=.QQ..E..=.Q..>z(...E.T\|.QEG.E.T\|.QG...(......(...E.tQEG.E.T\|.QEG.E.q..:(...>z(...>z(...8.tQG...(......(.:(...E.....(......(.8.tQEG.E.T\|.QEG.E.T\|.QEG.E...<........G.E.q.E.~:(...>z(......E.P...V:(...8..+40y.Q..EcE.h....9.(.=d.....E\|..A....R.=.?....Z(.h..x_..=.?....v....z(.....^.(.h..x_...:H~..^.+>./..+..A...hJ.O.A...dT..........v...e.o.K.Zq.[ys8.d..TPr........."".!...^..oh....s.A#.H*..........kn\p7e..x.H&.......Wi.f.".....jC..yx.......$...T.....%. ..5..Xj...vUY

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7741), with no line terminators
Category:	downloaded
Size (bytes):	7741
Entropy (8bit):	5.465345450745767
Encrypted:	false
SSDEEP:	192:BJhqyWukzXTmEKoR6r7zDobRcoPQCMz1zua:BJwy3kzXcPzD/mNMz1zua
MD5:	80AA9EEC1D19324DCEF60E2E0ED92280
SHA1:	8EB63A841A5EE0E24B7F47EC15EFFA1A97E89A3E
SHA-256:	81F277888D1EE510668666FB819BCF637E488B613DAC15CF78CBE9D1AC41658C
SHA-512:	E4B8ABB237CBD61F41C41E5E5D530913760AF87AD76D5575E7D4E45C705796A9C22DA0C49896DAF10D9C96B7DD2F7E07BADDE56B119146667B3FCA40066F4D84
Malicious:	false
Reputation:	low
URL:	https://seal.digicert.com/seals/cascade/seal.min.js
Preview:	var __Cascade={};__Cascade.Loaded=__Cascade.Loaded\|\|false;(function(i){var o="seal.digicert.com",g=false,k=o+"/seals/",d="https://"+o+"/seals/popup/",s="cascade",c="s",m="m",q="l",e="black",p="white",b=900,h=900,f=[3,5,7,10,11,13,15,16,17,18],l=18,r="log-errors",n="allow-test-seal",t=!!document.createElementNS&&!!document.createElementNS("http://www.w3.org/2000/svg","svg").createSVGRect,a=(function(){var F=[],G=function(){if(__Cascade.Loaded){return false}__Cascade.Loaded=true;F=__dcid\|\|[];L()},L=function(){for(var ae=0,af=F.length;ae<af;ae++){var P=F[ae],X={},aa="png",U=null,Z=false,S=null,R=false,W=null,Q=document.URL.split("/")[2]\|\|"",ab=(document.URL.split("/").pop().indexOf(r)>-1),V=g\|\|(Q.substring(Q.length-12)==="digicert.com"),ac="//"+k+s+"/";if(C(P)){if(P.length!=5){w(X,"DigiCert Seal invalid settings.");continue}R=true;X={format:"png",tag:P[4]\|\|false,cid:P[0]\|\|false,seal_size:P[2]\|\|m,text_color:P[3]\|\|e,seal_number:parseInt(P[1],10)\|\|l}}else{if(!P.hasOwnProperty("tag")\|\|!P.hasO

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 208x35, components 3
Category:	dropped
Size (bytes):	3550
Entropy (8bit):	7.672747388875095
Encrypted:	false
SSDEEP:	96:UvWCcYyvBpY/g7eSCCOV9zJyX/HOktOYx:aeP8/AeSCCOTtyX/NtZ
MD5:	006E9D59B3172B7E1295DE7183F03E65
SHA1:	2132926C4F39B9AEA85F8C3B82AB6A3F11107704
SHA-256:	1F5060C2D41AC80D9CAB26AA7A7DBC21B41787FE61589173868E210CCAC8A738
SHA-512:	0F3266586E9A68034EA8EA0551699E04B8CFA0F79F959248FAAE3944E6284A7048C37106482A0C9F8150C72FD9F6A5ED75BF0ED12C7ECEC55EF69CCB1902D8B9
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d................-...N...Q................................................................................................................................................#.......................................................................................".....%. 0!1..@P4............................4E.!1..AQaq"2B3. 0..RCbr#....................1B...0.!Aa...PpQq......................!1a.AQ..q... 0.@P...............................N...s.4...).....Q4.G3.1n.......[+g?...{..q0[Y.k..4..y..T...m.pG.z6....G$h.......4b.AT.$h9+......m......................6.1.9...m.cls.c......6.1.9...m.cls.c......6.1.9...m.cls.c......6.1..~l..5..q.J.J.)cW.\.F.E_.........j.........tZ...[.h.F.GU..2.....5.....X...n....].....?....v>...O..&F~L?O..R....gD..XV.]..T+e..z=i.i.i.i.i.i.i.i.i.i.i.i.i.............REH..".T..REH..".T..REH..".T.._J.hz./.....0 \|....4B.................L-0....L-0....L-0....L-0....L-0....L-0...<.d.#.EX..D.`}..d.Q.X.n.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 181x101, components 3
Category:	dropped
Size (bytes):	4575
Entropy (8bit):	7.865310116283506
Encrypted:	false
SSDEEP:	96:kMa7xpxF4HkM0ns/GNOCv5w5JGNqNfFFg6uNMHKHhA1t1dluj:mxFkkMn/rCBw5MYfFFgcKHh6I
MD5:	22EAD279557E21A92EBA96853BB54A6D
SHA1:	A2ED92B39946F3E03EF89AD30EC2123496F9E098
SHA-256:	D6F70C8841E89019EA936444FF0E0A6589F3504E833EBF22163D45D2180F8089
SHA-512:	B9A98E5F68B68A091172459489D0B22245181C397C4055592FC90B91D0509FA444602FFF728683714FC9460DEF205786F65C1C9FA138409854C35751233605AB
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................e...........................................................................................!1A.Qa".q.....2#..BR..3br$..C........................!1..".Aa2.Qq.....B#............?..u....?N..5..A..+.D>.n8..C.eXv....QX3dZ......q.e.6l.).?lzW.L..2.-M.KD......xS.X.ch..;)..:@. \...%xz..O@.T.7.....)..<l..C#.r.......V1$...X..7A..\..Q./..dygic..M.0...$......1.t..C..O...TH...Y.Q.l.?.........VmA...n...C.5<..o"x......n.>..$.V<U2ec.....8....;....W.c....).......p..s.-W.....w.V/e.pp.iW.9..i..8:.+...Y.....Cb..)-.....;C".P.,D.R...W..xP.!-./.G.PL.....'.u4R..."......1,.ji...Z..Cw..T......-`.4..rd..67n..?.....:.NA..d.d?c...1v.;.1...#^...K..H.%,.w....<.lq. .b..Ux~5....!....{.dRS....jq.2_......y....8.d..I.~.TH4(.)"~hlI.p...*.W7>...D.,-R. .~.G...^..T....7.....u(.&m..G.....B....X3Af..N...!.....

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2558
Entropy (8bit):	5.124848700938131
Encrypted:	false
SSDEEP:	48:/qDB8DDBtr7YTN+n7vq+ZE+FZZTQgd/2O/VrjsTnyx2z+56oz0MBUi/nh5tp:/CqBZ7CNoXVnhWOhAeM3wmif
MD5:	3ADB656A00B726B0211714D20156C95A
SHA1:	5399195BAEE4DFBAFEBC307EF7715BE57A0C66E0
SHA-256:	184D11E9D24BE9F5B2DB944839B670AB2D759BDC65D2B3E6886325F53698BFDF
SHA-512:	F6040857885FE89222A8976516DFA2155F73F9AE3D3A616CC77776D9DEDFD321C73C440B2577A0966724D6F35417A7C4CC94030D15CBE54F13040D288E224BC7
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/mobile/1040Now%20Pricing.html
Preview:	.<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN".."http://www.w3.org/TR/html4/loose.dtd">..<html>...<head>.. <meta name="viewport" content="width=device-width, initial-scale=1">.. <title>1040NOW</title>.... CSS -->.. <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.min.css">.. <link rel="stylesheet" href="https://code.ionicframework.com/ionicons/1.5.2/css/ionicons.min.css">.. <link rel="stylesheet" href="css/owl.carousel.min.css">.. <link rel="stylesheet" href="css/style.css">.... font -->.. <link href='https://fonts.googleapis.com/css?family=Nova+Square' rel='stylesheet'>.. <link rel="stylesheet" href="font/font.css">.. .<style type="text/css">.....auto-style1 {.....margin-top: 7px;.....font-family: "Bookman Old Style";.....font-size: x-large;.....color: #FFFFFF;....}....</style>.. </head>.. <body id="">.. <div id="wrapper">..

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 441 x 282, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	186610
Entropy (8bit):	7.984975037419794
Encrypted:	false
SSDEEP:	3072:DZxQc2kEpU3AbijHO4EU0cV/V/JS87Cs5K40Mx8PoHh29ntfuAuwJ:DbX2HUQk/xJnOss4d842ttmAu6
MD5:	BBEE1A8D1375121D07825EA27DB6AAE3
SHA1:	D92E0F7B810AC83F0BE72BC856882359B3285C35
SHA-256:	B457617868AE66214BC0474C3A96E9755E92EBC8170C73A742245BCAE79E92E0
SHA-512:	F3F5B5C294AD1CB871F327F54F4A3C25C1157843947BADC95BB15364B6C9C7FBE22BEA2C561B4B09BE5D023031154A870B7A0ADADC2E8B1EEA24FE6ED797F693
Malicious:	false
Reputation:	low
URL:	https://secure.trust-guard.com/certificates/newimages/privacy-12081.png
Preview:	.PNG........IHDR................?.. .IDATx..y.eWy'.....r...- .E..,.`.B2-.2v.`..#..7.M....=41.0c.h.........{....FX.a-@i+.....\|...u.8.w_.JMt;.#....w.s~.[~.w..5......X.PJ.e....C...%B~...#;.#... .RJ)%..R.e.@..B.B.7_....;.#;rA.Zk...y.....ph...$IB.YZZ...w].RJ.y.#..c...............J.V.g..h....px.....<x..+.....Z..a_.?..`......<y. ............+.x..^7;;..b..y..@.y.W.V+..Bhss....^....G....j......w.rGv..ZVVV..........$..[n...+.....;77....mu...aj...`~~>.C............./]ZZr].E..;X.#;..+.?...>.!......M7.t..c.k3...6.T.......i..j---a.O.8q...F.q........r.+wdG~L.....>...;.c.....(...7.9r.a.....^...~-....h.sg.O.8a..Z..8p..r...G.6../.x.}....\.`.....?~.....6......_o.....O.....L0.h..:.....}...T......8q.g....>t..].^4........._-......0!..}....\r.%...v.gi..Bc.FC.S.S2..R.N.h.px7....8~..g.R.]t...l.....NGJ..P.v..;.#?v.O}M. ...%!$......fggja.#b..L.]6...A..Y...B...\.gJ.my..4M.9s..........O.d}}=..J.." ].`.....;v..G..}..4...W_M).V.z.....Lc..D...A.;(.~.].:....

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3
Category:	downloaded
Size (bytes):	3670
Entropy (8bit):	7.85033532348119
Encrypted:	false
SSDEEP:	96:mOGyLU5wGjGA7NTuGqYY8Zs30ZQzy8i5rAgor4ZEdwZ04mOKS8:/GwUuMHxa2Yl30ZQzy8id1ZEdwm4zKP
MD5:	DEBA772D1F2A9648249DFC54E5BDE3F6
SHA1:	B807949959275D8B6FB67AB179D47371DCC1D5B9
SHA-256:	20CA93F357F272947E8D03E654A78575AD6C7B7C027D22D41BC017FB599C5395
SHA-512:	F515306133DF6F40E5FE7D423500535CA3B2B45286ACC931477F495A60404C73F0EA81DCEF0783EB5E577741C279C81E165D6AC3024E87515B4E291B6A363025
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/ytc/AIdro_l7EQrwAPBISw10QVF36IsB-cpyKQ4weQOea7p4iPxQj3U=s68-c-k-c0x00ffffff-no-rj
Preview:	......JFIF.............Exif..II.......1...............Google..............................................................................................................................................D.D............................................5.............................!"..#12AQ....346qsv...................................5.......................!.1AQa..q..."2....B..3.RSr..............?.D...\|..+.? .....I....xW@.`V.....W........xC.h.....}.....a.H.P..nYA...R..X..L.X.=.....i..j....H.N?o..V.Wr...p.$V..?~..$.W...fR.=..xo9E.+l....s....#.a..v..a......i.....t.gL....y..?h.E..... ..<..PW....Q9h..2M@y5S..<(....X..:....dF....od..S.I.e...G...'....s.n.%.).@$.d...Z.B\u)V.......u....N.....j.r.{.o.x.w...,......+......W..IQ ..... ...=kf.m....7.N.......jv..c#.....m76k.+..R:..#....5.=.g.>.i.!!....B......O.....C{+)m$..8..^5-.nr{e.:.Yo.*..MgE...1.J.{..V&)....7......qt...+...e....:!B@..l..3;.n.R...;}:~j..i\|..P...j..F%.n.>.\.J3.}............!....r..)#2.O.#...:.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 49x29, components 3
Category:	downloaded
Size (bytes):	864
Entropy (8bit):	7.018793898057645
Encrypted:	false
SSDEEP:	12:VvIgtlZcU0efmdcAeI8OSxZvLTrAd0+ZZEL8X2O7s5Eiy+UfBlEGCqO3J:tztlZcqOh8OcLTMd9Z481sE0sx63J
MD5:	81B88EF99B0FE67E0736C5B35360968F
SHA1:	CAA1CB6D9D3DE9760B42D93CA4A0E552B50E2E8F
SHA-256:	300BB56D73D4C8791674BA841C3692512206AAAEA6E0F5F2E738035B51FCAD96
SHA-512:	D399A7C0BF13AC7D9C81434E45A836A4E6F4AB0CD02C60076BDC917CD702F59CF70AD8502378E34A7BD9D305F52FDC30D7657864585C8FB6BCC2AED7051FB748
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images-ez/index_03.jpg
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...................................................................................................................................................1......................................................................................!....1Aaq"...Q...B..2R.#S........................!.1AQa#"2.............?.F..1.sZ..]....d.zH.8e..[L..G?.....@.7.J.>........C.....gt..lm$l..;#H..^..T9.\.)..m.[..q......O.........0Q....x.LY.....R..q..-.)D...l..bP.v...ly...D..&+.e.}.`.....o..U~`....x...B..<..&. ".'^.w;V..rYFr.......\...{y..z.d.NcT..U.:M.N.s.NXD0.h...YDBB.......Fl.....k..".Z..........!.Tt.,j._..l.-....M.d7.gm...CjR/6.. ....-&i?...$5!.W7.tNP.U:..:.N...A.m..v.D..^6cFq........}.>..Wz.~..a.O.-y.....S.>...C-..2.~.<.`Cgg.7.....l.'?p.Y.x.l...8.l.m..}..-\.I.......<..n.xAS..L..6S..w...9...?..

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 208x34, components 3
Category:	downloaded
Size (bytes):	3517
Entropy (8bit):	7.72331074656334
Encrypted:	false
SSDEEP:	96:xLkjMcnER0rU9jw49ZVrbEuyuApOBd0s21S:RkbER0o9l1VUs2s
MD5:	EFCCBD1B2DADF1DE0BCCF047F656A1D3
SHA1:	FC0C09A0A06FD3D36816BCE0BC973DDEED2B5364
SHA-256:	AC7B67CE15862A2FCB8B39067057609322951D895EF2A488BAC762080A437E1E
SHA-512:	64299C9C501AD25E1D5B1FA4E9EF2D7FB75271F7078C9AC272430B2640BE2A5DD1DAD27DD9FCADAABFF32649D81A8913AB6924851285089BF9BF67AA66FB7A38
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images-ez/nav-previous.jpg
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d........................................................................................................................................................................."............................................................................................. 0!1..P.@"2.......................!1....4.AQ"2..R#. 0a.@q..3s....................1.!..AQa.@Pp........................!1a.AQ....q. 0@P................................. .v.....\{MG.X_.T...l..\.@.....9..].......9..}N..-.'..:=8.U..t...k..U^.3..>......$.A .I..@$.b.& .....................6....l....6....l....6....l....6....l....6....l....6....l....6..x.a....Z...*.T.U.8...Z...%O......a..^.#.'/.............0u.4.V5.......9_.H...hm..Y._3c......m.T....L<\MW.$..h..}....0.......GC..G..\..H.9..\|..............r..).r..).r..).r..).r..).r..).r....n[.....0L.2...@"..zI...G...............j....+PV..AZ...j....+PV..AZ...j....+PV..AZ...j.! yq....L...L.$XF.FFQ_9..(T!...?...u..yJ

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 160, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	976
Entropy (8bit):	7.618042975859953
Encrypted:	false
SSDEEP:	24:5JcKq/4ASwROujTi210qgujdhHIrG1cB+HTXrx6Z8:5CEA9e210zu7IrG1coHbr8S
MD5:	28FF1C4D19D51521F1751456494DBE61
SHA1:	D69BF4BC23224B24238966DBFB3FFD9B92DEF5FC
SHA-256:	493D68E8F237B05F962056BD60A80AA816F0A7ADDDD1E2E944F0AD688B2AF09E
SHA-512:	7CC099DD2E30F45E151577D2866453DC786B70B401A242E379631A2679D0771A89CA2C9F72464EE33C0FE23103451C1619BE3BA4811214FEDF3B12FB16A4047C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............~!.....sRGB...,.....pHYs...#...#.x.?v...HPLTE....................................................................=......tRNS..L...q......p/.......L/...5....IDATx....r.@..`./1q .c...4q..A.cV.9vj..l..c.L!.OS$..D"......I...dgRr!Iw.fs.2..m...Q{...0.\..#}..3..hK2..CIj.. u.0.&c..#.1.../.2.C.....d...5..\7.1.$.S.........!-.c.B8...^FJ_}0...8..?.....;.2.~..#}s..^.A..... ...bL24.r.'..J..!8.mT.e.&..H.eCBre..\|.p..BW.r.~.x..f.....G........\...(.jN..y.z...)..2CZ.\%7...6.C..`..Y..)K.m.A.e-H..9#.!......T....a...A.B...K{.9.......<..xu...N........_..& ........% .Q.d....B.0..M.<..4^...k..'...?xF.\|E.K\|,....X.Q..,aF...f../...6.n.as..R\.u.\...@.1..@.1..J.3......0....#.X.........w_...(...sdG...3VS....xq..3..Py.eA..........!..1..!u.0?D}IP..U.1..$G..T(I..o....D\..}@.....$ .$..?.I..CP..]lb.f....!..w.H$......]"....)6H.*.1. ...1..=h+.ox.f.....Yu..F.r.......'.........c....'..D{..q.x......f...#..D"....b..SN-.#....IEND.B`.

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	262253
Entropy (8bit):	5.567164393731355
Encrypted:	false
SSDEEP:	3072:R0p3LwAZVNSNcMzszFeIQT8A9CBPIrTWR4YESfhmpt2nBsLqbyHXDeltzvsXshNQ:CBcAFMgzFesc0fhmpt+aqbyHXDelJsXZ
MD5:	FA4BC47F0DCE114FC291D7752682DC82
SHA1:	96083668AD553973B043DE021E344F6BEC7A7E39
SHA-256:	D691B2390543383E99C3265F4280B49A4D1679AFDD7EF9A3F5AFD9D18B853D2C
SHA-512:	DA4003A4838D6707651B1501E3C53C0A6741C77CBF5D57793012B0DB8A20A11B43700825A83FF3A1D89938D6E5B720D014BDA2E7AEB943B28A3AF9A27F00D846
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-CSLL4ZEK4L
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_auto_events","priority":19,"vtp_enableScroll":true,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":true,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":15},{"function":"__ogt_dma","priority":9,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":17},{"function":"__ogt_1p_data_v2","priority":9,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","v

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PC bitmap, Windows 3.x format, 39 x 17 x 4, image size 340, cbSize 458, bits offset 118
Category:	dropped
Size (bytes):	458
Entropy (8bit):	2.7096910888316836
Encrypted:	false
SSDEEP:	6:0lU3oijoLKRRKXE8KqmF5F5FJ2FEVaaPkXEKRRKRRKRRX:08oicGLK9By89LKLKLX
MD5:	DE38BBCC4F700D91A8B9D6BC18618319
SHA1:	71CC576E52EAD8D999874F8DBCCEF875CD7E98A7
SHA-256:	AE9E7F5F38F08CE2F76D8DD30CC64B199E8AE659F550403A56B7AC0E8C811D1D
SHA-512:	F2A6A4A37B07EE75ECF8E2D44094624883274512D07A68B264D651E7F12817B9D5545243783D4DD36C5A6C214499E030F664FA0E72D21D5B7762A8C2F0C510A9
Malicious:	false
Reputation:	low
Preview:	BM........v...(...'...............T...................................................................................DDDDDDDDDDDDDDDDDDD@................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 87a, 573 x 41
Category:	downloaded
Size (bytes):	4256
Entropy (8bit):	7.603257370529179
Encrypted:	false
SSDEEP:	96:P2wYu+lyhdmTjS4CxHyvwAvwMK7oYBPbfc9n/rCD+WO:uwJTvmPIAoMK7ogc9n/rCa
MD5:	1C4F697992982125786EB808C20BDF6D
SHA1:	ECE7208277755422703B741EBD3EC5CF5FF50AE2
SHA-256:	32BD3569EB76F9D87DE99827674B343AED8FA0E11730D15253C3ADAD8052E3C3
SHA-512:	C11417ED79C6DFBC13D4C77A125AD4F06A6E70F9237C24B64B10FC3F97D4EE98E7C6B5B762F9B0D53DB702F4AE8838D9314211BEDE9FE997B29AE21481DF2529
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images/1040header2004-01.gif
Preview:	GIF87a=.).........................................U............*.U.......U..U.UU.U..U..U........U................U................U............U.......*U...U.U*UUU.U.U....*.U.........*.U.........*.U.....U..U.U.UU..U..U..U.U*UUU.U.U.UU.UUUUUUU.UU.UU.U..U.U.UU..U..U..U..U.U.UU..U..U..U..U.U.UU..U.U.........U.............U.......U..U.UU.U..U..U........U................U................U..............U............U......U..U.UU.U..U..U.......U...............U...............U...............U.............U.......U..U.UU.U..U..U........U.............U.............U.................&&&333???LLLYYYfffrrr..........................................................,....=.)........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.*]...w..J.J....X....u.....[...L.]...p...eD........V.]..%..!Wz$...'o..yn#K....\1w3..........W..eo....5#...,...

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 208x34, components 3
Category:	dropped
Size (bytes):	3823
Entropy (8bit):	7.7499826034021355
Encrypted:	false
SSDEEP:	96:fuiKkIiazHtttr6p+s9IRgqpMddObBGhuzAw+vh:W2Z4Ffs9DmcObvUw+vh
MD5:	7323059BAACECAF6DF3FCDB9330DFBB7
SHA1:	5E0003A4E4D06670C2A52DC9A846581A5FFDB25D
SHA-256:	4F713DD441C46684EE4FF22E974129F2EE0001ACD0A5C0182DE65ECA9519FB5D
SHA-512:	FDE2C7211D50454233F163DA2814FC9C66E44B350589C339FEAB2116B20A08716226247988A206150CDE40B87B53E7F798F423F9D2AF3F21FC5ED7CB587E1694
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d................G........................................................................................................................................................"..............................................................................................01. @P"24%........................!1...4AQ.aq"3....2C0R P.Bbr..#.....................1..P!Qa0Aq.... @.....................!1Aa.Q..q..0.P.. @..................G.`........... .:. .k.XJ..;G...E........].f...zt._.R.eW.G.....l.o$.2.....tk..e..1......$D._....]+a.N..{..o4...).9B...........................6.q.;...m..lw.c......6.q.;...m..lw.c......6.q.;...m..lw.c......6.q....DEr..2.'...N<]..............6.\|L..l<9...X3$.k..._..cb..[...8.3_&._....#..4..H.:........v..........7;...A.\|ol.2d...?:e.c..F.w.....s^......c.+%..s..vlN."y.$..$.-..nf[...&................R.UJ.U.T..R.UJ.U.T..R.UJ.U*.T.._.AxR.Pr"...x..).{....J..W...J................L-0....L-0....L-0....L-0....L-0....L

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HwdYn:r
MD5:	60A7C4D9BF4817D8C16D3E59FB11C68B
SHA1:	9DBD092323AE16199144829EF2EE2495A55B6D96
SHA-256:	B300C225E15DD6A349B5131A7A5404C9E29EA48685C82ED0F6A87CF87442F5D7
SHA-512:	2104D10DE6FB9166A172A2DE7AAE981FF56606C593428001618640675D34BDC51AABA6157EB2A4998068C3B69BB31E58B2064E0E976B60D1FCE2C4214DF3FB38
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlvS97Y54EWNxIFDSs-jAg=?alt=proto
Preview:	CgkKBw0rPowIGgA=

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 120x101, components 3
Category:	downloaded
Size (bytes):	4096
Entropy (8bit):	7.874610526767601
Encrypted:	false
SSDEEP:	96:gazWMiLJTTp1RZB+TcWCwdr9fCimrwhRU2YUhm:Z83VwZxCimr/Uhm
MD5:	EEC2F99878202E8CBE71720D93357B99
SHA1:	F7FD0C20A53F97D89D08B9C09E8210CCC720B9B6
SHA-256:	D14E4B13DE7285C276FAA5B4223C0F718DC8EC5B68F824D90BB1F78B9F7BF66A
SHA-512:	0A5A6F5DFEF5FEE00C0C97927FEEA03BD73EFA03ADE30909D4DF4CCF9856920C2DFBE94C1D253EDDF2DD4BB70C5B524A592BC2724F9A5F4AB59C26806CD4FECF
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images-ez/index_05.jpg
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................e.x.........................................................................................!1.A"..Qa.2#.b..3..E.q.B.....s$TU.....................!..A.1Qa..q.....2."B.............?...E(..!..Oro.].....#.k.K..E.".I.....Iwz5.x.p..1.v........-...r....(...{=.$....C..2....Z.P......W_....l.I.<..8.!.d...H='4^...u>.-)..Y...h%.k.#>..E.ms..t_URa.Y$.%.... ..M.h.....".L.U.BD].Qu..P(.....R..`..[..7...j.'$Z.;<.pK4.y........ ..u....E....."..y-z.n.>h.q.._.....)......q......<2:..qZ.2.m5..?..-}...>.r.t.c....J.3X~'..sh..l......Q.s.g..O.&Yh[-.q.!k..=............mYq...-&....#Y.n.6;l.s.4..2uT..p..%..g..1.(.f0.....F...y~...[...y...x....[.L..u.F.O..H..WH....b6.]\|'.?"CV\|N[7..I..q.q28...R..c...G7.4pS..k\...."c-...O..j....g.l.x.J.S........w.....D.....rc...r....n.n..X...V\|..6..-.d..

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (645), with no line terminators
Category:	downloaded
Size (bytes):	645
Entropy (8bit):	4.577646030689941
Encrypted:	false
SSDEEP:	12:cHTTyOGq/BWEBa6t4U6RSrxV6/F7yqhGQ+ttqUboILnIA8byKP1rtz/Q:6TyOGq/BWEB5t4U6Irxo97AQKtqUB0A/
MD5:	CA05CF90BD32D6134C0B92464C343F9A
SHA1:	187FEB5CC71D225717838268487A0ABC9B8D405C
SHA-256:	3003867B66A32C12FDAFEEFC27CF06D906E5A99BA275550AB757F4BB04834636
SHA-512:	D36553644D3A52A96DBF733C7EB766DEDA074C926F44514001633DD0A3EA2B84D1A835F207BCD9772E33B2A8C086616CEBF6119A3D802134636EF7C53E92DEC0
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/svg/icons/twitter.js
Preview:	!function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({twitter:'<path fill="#FFF" d="M28 8.557a10 10 0 0 1-2.828.775 4.93 4.93 0 0 0 2.166-2.725 9.7 9.7 0 0 1-3.13 1.194 4.92 4.92 0 0 0-3.593-1.55 4.924 4.924 0 0 0-4.794 6.049c-4.09-.21-7.72-2.17-10.15-5.15a4.94 4.94 0 0 0-.665 2.477c0 1.71.87 3.214 2.19 4.1a5 5 0 0 1-2.23-.616v.06c0 2.39 1.7 4.38 3.952 4.83-.414.115-.85.174-1.297.174q-.476-.001-.928-.086a4.935 4.935 0 0 0 4.6 3.42 9.9 9.9 0 0 1-6.114 2.107q-.597 0-1.175-.068a13.95 13.95 0 0 0 7.55 2.213c9.056 0 14.01-7.507 14.01-14.013q0-.32-.015-.637c.96-.695 1.795-1.56 2.455-2.55z"/>'})}(a2a)

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 35 x 37, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5612
Entropy (8bit):	7.935139580197782
Encrypted:	false
SSDEEP:	96:DSDZ/I09Da01l+gmkyTt6Hk8nT4qLr5Pf+QE6Lpntpl6114xqaGclv7d+u1:DSDS0tKg9E05T4erJOyptO11uq6vcu1
MD5:	DE748C468720AB9F2E37F756DE679842
SHA1:	F0480E3DFA88DA997AD8D3C66869DE7A46A3BD62
SHA-256:	2F601356302DDE8B45F2453A00D6E2FB8558B0340116F307011ED2E1FCD5248A
SHA-512:	EB159C2392DA4E5259D18453BC9F04FF3FC61581403DFF01476CC4787D5E0A2569D0DF6172E57096A0A9B5B0FB3E2EDEF5B17EB6FEE5D8308FC8D8EC6A32A159
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...#...%......PD....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 218x34, components 3
Category:	dropped
Size (bytes):	3099
Entropy (8bit):	7.652015470137458
Encrypted:	false
SSDEEP:	48:5Z3+2jv8EzNohppppp9JHyUtolt/fQ1zKWuCC2jyclsgeUCQ:5Z3+27zmfKH3Q1zKWuCC2jy/geUx
MD5:	D2FB573244F8BEC1953F05E2A00AB236
SHA1:	BC7175F34D2A53C5E656A4FC9B93B716C158610A
SHA-256:	F3DCC10A9EFAD1F859AD9CBC288DBEF1D7546779172AECF11730D7B1CDFD702A
SHA-512:	D081CEDF37B3B3323255FAB5536CE947A63090E0C862E5503934B00464695A8FF1DC7C783DCA6B3392C70884616411D7A018BCF3D440FA9CAF69A673BC4FFE17
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d....................{....................................................................................................................................................".............................................................................................. 0@A.!1"4..........................4!1q.Aa.B3.0@Q."2.. .Rb..C.$.....................1.!.PQq@p.a.B....................!1a.AQ..q...0@. ..P..................#.............<...6xo^...%..$t......f..Oof...].....C..^..pk..S7...{...:..4..Q...........<...Vxo^.t..c)'../.....#;..H.:.......\|...7.O_..........]..Z............e..X.e..X.e..X.e..X.e..X.e..X.e..X.e..X.e..X.e..X.e..X.e..X.e..X...<..bzr.H.[?..>.....:.^QqX.r'Z....sV..y0.q....I...z`..M...\.n.0.)]...2........Q.n..;!}p.\|....\|.._.>l......$x...{r..............REH..".T..REH..".T..REH..".T..Q..{.^.0N.Pt..'...><M.H.....#}...............L)0...L)0...L)0...L)0...L)0...L)0......^.~...X$..GE.UsINr...9aY.Vr.1.'*.%.F5.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 188x29, components 3
Category:	downloaded
Size (bytes):	1543
Entropy (8bit):	7.531198577602347
Encrypted:	false
SSDEEP:	24:tCr3xrQD3QfPMeT5DOjty1g6uUrwQXRuYHM6Rgrz9HazYOx3NhiW1UC:039QDgfPMeT5DOc1g7GXlHM66rtXOx3J
MD5:	DA9BED7E02145E8A093752A23BBE381F
SHA1:	002CC9AC7AB67886AFF84EAB4D69F1DC359CD59B
SHA-256:	B9A3D5FDCF635AD11D64BB4FCC71F22DA3F5E8115ECC966494454D48E17C5FC2
SHA-512:	47216132EAB661BB2800F211BCEBF3F7839B506774C45372646047C5C277F246DAD66988E101CBBAE0EC3A1D90C5FF675D0BAA53B588AAEE508C0D9E8D27E907
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images-ez/index_04.jpg
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d..........................................................................................................................................................................................................................................!..."..1#AQq3..2Rc$......................!1...Aa.Qq....2.."r.............?.......}73..vy...Bya.B/O.Y..wvn-......w$.dL..{.T.F...q.;..x,@~.uh.&..P..@ gb}.u.u9.k_4......~..1.R..m....m.....`..N.C..8z.m5.t....buQ......$../5.......h..h}......a...[...}..U..jR.\|VcX.~.r1....xz.7.F9.y..O.G..I...'..8I.m..O....1...-h1v..jar.w.Z..'..!yBF........I.g.aa...}.....n6/..=...P...6].1.'.S.P7.v.V"gs.-85r.x...r..\.W.Wtc]T.5........f.W%:.%..L.-.9..m.?k...g...~KO..Q.....{..J...).<.;...R..0.r..wiFh...7.7c..r...m.g..fo..>:....+..D...s!r......]..S..8x..I..P. .... .... ..:l...sd...V..p.....{L.Fy<....xx.........4.u;....y...2....0...E...Z..m...s.9.Ib..z...I..r!.}..k..Ni3..<.~$..'......l.z._..n_!..&...

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Non-ISO extended-ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	15124
Entropy (8bit):	5.119707940334542
Encrypted:	false
SSDEEP:	192:ZrDsAg4HWblqmiYaODtjG3nhH2zkSesaasuYwBW3NSTj3vRMyl+t0OcxncDSSSSI:vdWlq0Ji3nhH2zkSesa0CNQfB8tJcS4
MD5:	71D3FA656D61392371E69AAE2BBF0C90
SHA1:	E9B34588C5B2AEFE3D5E867578AF12124C332CD6
SHA-256:	7E24E73F35D22D6B7953A65CAB3C6D4952293037AB992684AFF613EC1A198025
SHA-512:	EFF359F7E674F056AAC902426612EF5E5974F2A636E290D2E4A30ADCFD3D2F5C14B88893456977BFC37AE1785B2D0789EDDF8D1A20B487CA213303A1BD28EC62
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/1040now/1040Now%20Privacy%20Statement%201.htm
Preview:	<html>...<head>...<script type="text/javascript" >... var tabValue = document.URL;... var url = "";... if (tabValue.lastIndexOf("#") >= 0).. url = tabValue.substring(tabValue.lastIndexOf("#"));.. document.location = "../mobile/1040Now Privacy Statement 1.htm"+url; ...</script>....<title>1040Now Privacy Notice</title></head>...<body>....<P align="left"> .....<table id="Table2" height="20" cellPadding="0" width="70%" align="center" border="0">......<TBODY>.......<tr vAlign="top">........<td width="2"></td>........<td align="left" width="80%"><STRONG>..........<P><IMG alt="" src="images\1040header.gif"><BR>.........</STRONG><STRONG>..........<script src="//privacy-policy.truste.com/privacy-seal/1040Now/asc?rid=202ca784-86d2-499e-8585-821c00075510"...........type="text/javascript"></script>..........<A title="TRUSTe online privacy certification" href="//privacy.truste.com/privacy-seal/1040Now/validation?rid=c439e3ca-80da-4631-8cb7-3f881eb440ce"..

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 237x53, components 3
Category:	dropped
Size (bytes):	4883
Entropy (8bit):	7.889691717177074
Encrypted:	false
SSDEEP:	96:eY/Wclu476/////nDEoDNbCnNjKum64QEONR7pVl307z/AcXrd8:eY/f6/////D3R290QEy7jIjAcXp8
MD5:	30AC140FFE04CF97BCBD01DF6159D2B1
SHA1:	10EE2DA76C3D0CA7DB3872813B60CD258BA9B1E8
SHA-256:	AD016CFA6DFEEBC2E06BC47EBC5C6972AB26B219D5C4B263C8CE3716EC89A20C
SHA-512:	BA0ED92FB6B9B9DDF20386DFE118F3AE543D4E153C290BC290C3277534C9CC8F7B5E0FC39A1CBC5A7D858A244788A685D72A90B00D5F5F240DCAE68754E43586
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................5.............................................................................................!.T..1A...Qa".q2#.R.Br..5..b..CScs$4tu7......................1.!AQa....b..q....".2Br..R.3..#C4.............?.....r-..E...\...z.8..{............z.........][O.?#...s.i."..h.wr5.9...h...S..b....L..C....\]4.8K.[UV...9..eSf.v.L.....)w.j.$...b...2......{....h..Y...f.{....h..Y...f.{....h..Y...f.{....h..Y...f...`..Z.m.[O.(.4...@q.cty.........E{p.bGi.9..=3.`...]..#.9@{Sz..Q...er..t.\.........".. .v"0..ww...T.O.OP.."z.yj9....R..P.."z.yi..;?....7....^Zs7....,u...'......K..C....5.3p..R..P.."z.yi..;?....7....^Zs7....,u...'......K..C....5.3p..R..P.."z.yi..;?....7....^Zs7....,u...'......K..C....5.3p..R..P.."z.yi..;?....7....^Zs7....,u...'......K..C....5.3p..R..P.."z.yi..;?...

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.268171846580519
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehk2:3q3+pUAew85zvc/hk2
MD5:	20D444971B8254AC39C8145D99D6CA4C
SHA1:	72E41F2A340F4A6E3A748CB57D293631390B733A
SHA-256:	A04F41837D317573EA61EA29ABBA7C4FF4E38C9177DA68F4706B9C13921A8D82
SHA-512:	BEA16497D014481EE10EB80A129846B7B184AB1ECA242FA38B84255C6461C748A62F1BD6C15D1807F8B5E926E550C30AB47F8A40AE43BE229E6AB857C4EA6F6F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Non-ISO extended-ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	44386
Entropy (8bit):	5.244661955742658
Encrypted:	false
SSDEEP:	384:ZngSVnpCSSPjTYV1U1m4XWU1bBU1f9FTS/1+xHi7DJMU02ZTbeZAwuSEXAb7j9Tw:ZbOYJSD7DYonfbIuqtw6wNq15k5
MD5:	DE311DBF458103EB3F5765BCFC42EBDE
SHA1:	683CAD03C7615C33F230A5ECF54DB8CD65FDD339
SHA-256:	16A479C8C64ADA3094AE1011AF47D881EA53C4900B8DBCB44CBCE216BC594F66
SHA-512:	98BCDF5A8E7DBB940B1F403C74451E7557B13F01BBEE5086DAB99ACD579A86276263B37F2BDFBB04A26E85911F87574B85DA3DF936399687B8CD8DD8E4ADC3AD
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/mobile/1040now%20FAQ.htm
Preview:	<html>.. <head>.. <meta name="viewport" content="width=device-width, initial-scale=1">.. <title>1040NOW</title>.... CSS -->.. <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.min.css">.. <link rel="stylesheet" href="https://code.ionicframework.com/ionicons/1.5.2/css/ionicons.min.css">.. <link rel="stylesheet" href="css/owl.carousel.min.css">.. <link rel="stylesheet" href="css/style.css">.... font -->.. <link href='https://fonts.googleapis.com/css?family=Nova+Square' rel='stylesheet'>.. <link rel="stylesheet" href="font/font.css">.. .<style type="text/css">.....auto-style1 {.....margin-top: 7px;.....font-family: "Bookman Old Style";.....font-size: x-large;.....color: #FFFFFF;....}....</style>.. </head>.. <body id="">.. <div id="wrapper">.. <section class="section-1">.. <div class="container">.. <header c

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2575
Entropy (8bit):	5.028197235155486
Encrypted:	false
SSDEEP:	48:8ivAfmQEi4X4tKmLDL59LKx/QuJZcZgvN278VGICEivrEirAdQIz+x3gIfxZlFO2:dAfmQb4X4tjLDL59LKxIuJ2ZgvN272GT
MD5:	460434D53FC1DC8BB4E7CB80990DD48C
SHA1:	2A9F895A8331D13E75A268A2A2CE9C6C4B87D6B7
SHA-256:	41F45798C1A5497257A4DA2009F692C8B7921AAC746A5E23F748C52D8DDDDB61
SHA-512:	6664142CD49DF737FA89B9D2C75B7E5BEBC6AD7FA72D42F9B5F80C3C0BF674859C739427D9773FEF50E7F33BBE660D3BA7EC7FE91297254A246B5A99EE7CC868
Malicious:	false
Reputation:	low
URL:	http://www.1040now.net/styles-ez.css?reload
Preview:	html, body { ...margin-left: 0px;...margin-top: 0px;...margin-right: 0px;...margin-bottom: 0px;......border: 0px;...padding: 0px;...text-align: left;......background: url(images-ez/bg.jpg) repeat-x #001e5a;..}.....blocks {font-size: 11px; line-height: 14px; color: #ffffff;}.....blocks2 {font-size: 11px; line-height: 14px; color: #010101;}...blocks2 a:link {color: #001e5a; text-decoration: none;}...blocks2 a:visited {color: #001e5a; text-decoration: none;}...blocks2 a:hover {color: #0337a0; text-decoration: underline;}...blocks2 a:active {color: #001e5a; text-decoration: none;}.....address { ...background-color: #001e5a;...padding-top: 15px;...font-family: Verdana, Arial, Helvetica, sans-serif; ...font-size: 11px; ...line-height: 14px; ...color: #ffffff;..}.....address a:link {color: #b53e1f; text-decoration: none;}...address a:visited {color: #b53e1f; text-decoration: none;}...address a:hover {color: #746c5d; text-decoration: underline;}...address a:active {color: #b53e1f; text-decor

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3634), with no line terminators
Category:	downloaded
Size (bytes):	3634
Entropy (8bit):	4.775245794486774
Encrypted:	false
SSDEEP:	48:eoqNsfdflHEDmQqrSneV+nI+DzFsAv8eQwonejFGE8Hy3Vc9u51j1jVIJFTmK28E:B6AUe2d1yEHjIJmIDK7
MD5:	8BDE55271FD47488517950F5C9FC0177
SHA1:	E4896968100DEA62149A822EB741F3176DF1F0C4
SHA-256:	53B84BCCBA148296E8E68F4A7E794CCBD7116B1F4AB2645D6BB821E0BCBDFCC5
SHA-512:	035BF99E58A405CF9DFE760A5F5B117E6E5E2303D7025E32B37BC0D0B8F67DCFA4555981F3936D3302AF45041364E4A1FE992481AA9DC8046895F66FFF5AA12C
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/mobile/css/owl.carousel.min.css
Preview:	.owl-carousel .animated{-webkit-animation-duration:1000ms;animation-duration:1000ms;-webkit-animation-fill-mode:both;animation-fill-mode:both}.owl-carousel .owl-animated-in{z-index:0}.owl-carousel .owl-animated-out{z-index:1}.owl-carousel .fadeOut{-webkit-animation-name:fadeOut;animation-name:fadeOut}@-webkit-keyframes fadeOut{0%{opacity:1}100%{opacity:0}}@keyframes fadeOut{0%{opacity:1}100%{opacity:0}}.owl-height{-webkit-transition:height 500ms ease-in-out;-moz-transition:height 500ms ease-in-out;-ms-transition:height 500ms ease-in-out;-o-transition:height 500ms ease-in-out;transition:height 500ms ease-in-out}.owl-carousel{display:none;width:100%;-webkit-tap-highlight-color:transparent;position:relative;z-index:1}.owl-carousel .owl-stage{position:relative;-ms-touch-action:pan-Y}.owl-carousel .owl-stage:after{content:".";display:block;clear:both;visibility:hidden;line-height:0;height:0}.owl-carousel .owl-stage-outer{position:relative;overflow:hidden;-webkit-transform:translate3d(0px,0p

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 441 x 10, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	407
Entropy (8bit):	7.1300559400645565
Encrypted:	false
SSDEEP:	12:6v/7XzRbF8Tk3TnRvsZ9NfjvBy9Rlj8Y+/qKQcc:O1F8mn949NLc18VRBc
MD5:	35955645892BA536E5AD86549B620BFE
SHA1:	BAFA7A126BFEEA7A2F5F0E636038EC3BEEE54FF4
SHA-256:	61BF06BC79E865B805B7A3E6C89E822B47C2783E228B8B9B6B2CE16465C185D8
SHA-512:	5CFA6F049879EE50429E9D4B30EC08169E81CEFF88141D0E6768CBA50539FE7765B7C25FDD57AD376A32E0C40F8D552A149E4DE8984009D6E27FDCA5C027EBA6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............)} G....tEXtSoftware.Adobe ImageReadyq.e<...9IDATx...AJ.@....Dp%Hr.....n.. x..&..B.+.+A(]x..$4.U.:...ZK...4B......2.d.o>&d.....8.......d2...u..n....7.^+l.<....7.^3...Y.1..@o4...%..^..Ns.....l..~.%....8f2...k.l.....'.,M..r.t...e{L.l*.7.....(......@y.....P..2..j5.....v.}J.e..~4.]..C...r]......n.SEQ..f..$yU?.(..=.....Jn$..@r.8....Mb$.G)........:.p..@......IEND.B`.

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 21, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	6.747268034047225
Encrypted:	false
SSDEEP:	6:6v/lhPimvnDspPnAQsF2S4iW5JyVq+O/COr+orkYIIiLNvGh/jp:6v/7qfdAQssLiWzBr/jkYIHNvGh/N
MD5:	970DC1C25ECC6BCD5C5EA90A5E385322
SHA1:	DC760EC62508BCE0D9B7536CB6AC7EBDE9D24372
SHA-256:	131B8FF6A7C43B21E574D286977BB3E38A72938605391CA93012FD6D4CB163E2
SHA-512:	AD1D912E15E6BF18EAC688AC9E8C985E53620E7C1D4D7CD97D19F27DF3CEBF44104AC109485F2453D518F47075FF40A19EC87C70491EC5E8AAC54781DEC6BA64
Malicious:	false
Reputation:	low
URL:	https://secure.trust-guard.com/page/templates/certificates/images/thumbs-dn.png
Preview:	.PNG........IHDR.............K......tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.5......At4..].....Hm.b.,._.., ..c.GWW.'@.4..5.0..D.....C..X..tM...'.'...H.Z..L-...e.'....4...l@...C.......&.H...Z.....t..LC..I..._ ..f...%@.z.!...k@o..)?h.tP.i..I"....t......@.......O0........IEND.B`.

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 28, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4029
Entropy (8bit):	7.913273658410279
Encrypted:	false
SSDEEP:	96:ISDZ/I09Da01l+gmkyTt6Hk8nTPg8n3UW78JvqqQbBIX:ISDS0tKg9E05TPg83UW7AWbBs
MD5:	23AA7C10974ECE809AC91B944937774A
SHA1:	53F6BFD563CE51DAF318294A80AD1C7A849825C6
SHA-256:	2AED0559EBB58B74E1AE783EF624DBBC9F70390A2648DC1787AF6C68122EC510
SHA-512:	1AA9CE66B6F91AD45284B9FB66DF4E9A6D60F5221270AC6D1D6BA0BE4FAC67634AB4C31559D907A8A1E836D014FD6472EB1BF3B48E1A7A1383E1186D4BF51BA2
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/themes/custom/pup_base/images/official-site-flag.png
Preview:	.PNG........IHDR...(.................pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.6582064698239685
Encrypted:	false
SSDEEP:	24:coS7OCwiv6vNV1VnALBAuCiVLQBPUmivUz/:chl7suLtBKsg
MD5:	8B1C3B49203241B0BFD26CF609011626
SHA1:	98D4CDAE2A3A8F8547B020D89EFD0A126680B58F
SHA-256:	20B219BDD4E1B2C2BFCC5E87815E12837F96F765872E7180C975602284207758
SHA-512:	243FE7D7666D510E8EC9760ED6846188E40FB28C5E90EA65CC88B212598BA60535574A9F6F6D056DA9FB2063029876EC6567B726DF4940E03DB18AD68622786D
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ..........................................#...#...#...#...#. .#...#...#...........................#...#...#.).#...#...#..#..#..#...#.1.#...#...............#...#...#._.#..#...#...#...#...#...#...#..#.n.#...#.......#...#...#.`.#..#...#...!..."...#..."..."...#...#...#.r.#...#...#...#.*.#..#..."...(...D...^...c...U...6...#...#...#..#.9.#...#...#...#..."...,...f..................I...#...#...#...#...#...#...#..."...W........................5..."...#..#...#...#..#...'...t........................L...!...#..#.).#...#..#...&...p........................I...!...#..#.'.#...#...#..."...M.....................y.../..."...#..#...#...#.q.#...#...&...U...............t...;..."...#...#...#...#...#...#..#...#...#...4...I...O...A...+..."...#...#..#.).#...#...#...#.F.#..#...#..."...!...!...!..."...#...#..#.W.#...#.......#...#...#.A.#..#...#...#...#...#...#...#..#.N.#...#...............#...#...#...#.[.#...#...#...#...#

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 87a, 573 x 41
Category:	dropped
Size (bytes):	4256
Entropy (8bit):	7.603257370529179
Encrypted:	false
SSDEEP:	96:P2wYu+lyhdmTjS4CxHyvwAvwMK7oYBPbfc9n/rCD+WO:uwJTvmPIAoMK7ogc9n/rCa
MD5:	1C4F697992982125786EB808C20BDF6D
SHA1:	ECE7208277755422703B741EBD3EC5CF5FF50AE2
SHA-256:	32BD3569EB76F9D87DE99827674B343AED8FA0E11730D15253C3ADAD8052E3C3
SHA-512:	C11417ED79C6DFBC13D4C77A125AD4F06A6E70F9237C24B64B10FC3F97D4EE98E7C6B5B762F9B0D53DB702F4AE8838D9314211BEDE9FE997B29AE21481DF2529
Malicious:	false
Reputation:	low
Preview:	GIF87a=.).........................................U............*.U.......U..U.UU.U..U..U........U................U................U............U.......*U...U.U*UUU.U.U....*.U.........*.U.........*.U.....U..U.U.UU..U..U..U.U*UUU.U.U.UU.UUUUUUU.UU.UU.U..U.U.UU..U..U..U..U.U.UU..U..U..U..U.U.UU..U.U.........U.............U.......U..U.UU.U..U..U........U................U................U..............U............U......U..U.UU.U..U..U.......U...............U...............U...............U.............U.......U..U.UU.U..U..U........U.............U.............U.................&&&333???LLLYYYfffrrr..........................................................,....=.)........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.*]...w..J.J....X....u.....[...L.]...p...eD........V.]..%..!Wz$...'o..yn#K....\1w3..........W..eo....5#...,...

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 21, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	288
Entropy (8bit):	6.873351411840123
Encrypted:	false
SSDEEP:	6:6v/lhPimvnDspnmA2pFfYrSxNMRcKVX6KtKjFO2jGN15bcgpyA5jp:6v/7qfJmAQBNMRcKs9rjG9VN
MD5:	4FE0F9D1C2D633128FB56D94206DEB6F
SHA1:	08A0CB20DD0613C413A2796CB92E00C88BA3588D
SHA-256:	A9A9DCBF2560550DF3F293A9B5E32E2FFCE6E41040C2D435F4BF48872ECFBBC6
SHA-512:	A7A4E62CDCD6F824A650FF100E7E23B6FCCC33202D720AF5E32003161209F0433AFCEE5DF93684F526114AC51AE228D03C9A42167DF9E9180BF0A64F64DA3893
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............K......tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.>...*..........R..@........S..E@.H...@....=\|.1.1..H..b! .H.......P.&......H.#...2......H... .4............7.qX.$..I...kR....K-.....0..U..2....u.c.&..`6.....?.0.d.,...)`..h.@.....C..S......IEND.B`.

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 96x20, components 3
Category:	dropped
Size (bytes):	1548
Entropy (8bit):	7.464445368473459
Encrypted:	false
SSDEEP:	24:QS/i7LNp3T6mqrl0CAdjgF4nFA3UFdt5tUxeyrwNCU8quH0:Yhp32mqrl0zlgWnykFdtfUxeQauH0
MD5:	C75B86E3A52FD28E0ED0739CA96D5307
SHA1:	DB8792ABEFDD9C64D0B305477E2488F50535C1FA
SHA-256:	CC71B8EBF292BE25B1972450B7C963CE6DB4E99B7D83818F8C18C8FA0F4EAC0A
SHA-512:	A5C75D0768D3F9C3679883E342E9B6BDBB49F0746593A7A54D1EBAC4A029349EEBBF50399F368DCC6ABFB49068714EFC16374CDB09282B08A2D10ED90F576665
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......F......Adobe.d...................................................................................................................................................`.............m..........................................................................!".2#.1A3.B$b.%..............................?....G&.>..T.0h.......j.%.1.Ya".R....a.:B"....].E.9....c.ro.r...lw&l...s.@$.S.L..X..C@o...\e..!Y....3.8.;......h..........Nm..#....QwX.A..hB...s"...&...l..P1.d.a.(0....i.O..9[l!.=.$.e..C.&.p.C...$.....D.=B0. .;.FE.xG$.$f.4H...~Pl..V..\...P..8.....tJ...s[...P..."..#..]...3..#..#...V.........>:}.p..q.z.C......&.....P.....u..9.._x..x.I.C.e..z.............0... !...r.(..s_.b.......g?.Q..A..f..V..&.J........N....;,f,q.<.w........'n...e......`3u.(.N0...:Y....dY.r......n....!z..GO.%.).,S..O!.'.......sf.q~..........B&j.........IZF)`% ..!....w<....Q...&../.s.{K..&....&S.U.......` ......x{<n......?`F.....".f.7~c...L.Ae"S.{f.Cf3<}.2'..Q<SWEy.

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (681), with CRLF line terminators
Category:	downloaded
Size (bytes):	15198
Entropy (8bit):	5.102606650833334
Encrypted:	false
SSDEEP:	192:WqLxgsa5EKlqdkpbG3nh3BtSEsNasuYJ5WvNScAnTMWPm7lclZZZZZx:10Jlq6a3nh3BtSEsNKvNcZJ
MD5:	8F939776E3B2444498D89081354508E7
SHA1:	FF92B307FFCE4C289EF5DDB45DF608851E9AC0E1
SHA-256:	1725A9373C0C6C6A0341E258EACD66650160DDBF37ED204A27854D5406B1D969
SHA-512:	E103F69FC0FAE150B52FCFF09E3EB1ED79979258AEFF44CDA350CA2C552DEE2B9C8854BE9682922ECE5115EB101688E8FDEADDBA28EE6B49AB6E67465649B111
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/mobile/1040Now%20Privacy%20Statement%201.htm
Preview:	.<html>.. <head>.. <meta name="viewport" content="width=device-width, initial-scale=1">.. <title>1040NOW</title>.... CSS -->.. <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.min.css">.. <link rel="stylesheet" href="https://code.ionicframework.com/ionicons/1.5.2/css/ionicons.min.css">.. <link rel="stylesheet" href="css/owl.carousel.min.css">.. <link rel="stylesheet" href="css/style.css">.... font -->.. <link href='https://fonts.googleapis.com/css?family=Nova+Square' rel='stylesheet'>.. <link rel="stylesheet" href="font/font.css">.. .<style type="text/css">.....auto-style1 {.....margin-top: 7px;.....font-family: "Bookman Old Style";.....font-size: x-large;.....color: #FFFFFF;....}....</style>.. </head>.. <body id="">.. <div id="wrapper">.. <section class="section-1">.. <div class="container">.. <heade

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	11157
Entropy (8bit):	5.1391701098644536
Encrypted:	false
SSDEEP:	96:83d+unloNDelJNJ/z9ZZALIQVLwBDF3D2aoroLl2WQMngVxZnLKI4t23BZFpFHnY:sdcglJJgSDFaacj5/mN57ce
MD5:	2B293CBAC0FC554C31C5BC22D1A6AE07
SHA1:	F3AC2FFDCC20F672C6B723E6FD8F3AC41C77E62A
SHA-256:	3BA65FFA5E57DCED33576DEAFF49DA0905EF155B10B9D99726F1DF9C399AB86B
SHA-512:	2AB5584DA16600A112E4BBEBFD26C435B086CE7A01AA3CAABE20853C589982805F5E7D48C1CDCBEA0902E6B1650F35F22F4ADCEB839A9A1279C3B9208EE0DAEF
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/menutax.css
Preview:	/* Resets /../..* {.. margin: 0;.. padding: 0;..}/../..body {.. font-family: 'Ubuntu', sans-serif;.. font-weight: 400;.. background: #ddd;..}....a { text-decoration: none; }../..div.scrollmenu {.. background-color: #F5F5F5;.. overflow: auto;.. white-space: nowrap;...font-size: 1.75em;..}....div.scrollmenu a {.. display: inline-block;.. color: blue;.. text-align: center;.. padding: 6px;.. text-decoration: none;..}....div.scrollmenu a:hover {.. background-color: #009fda;..}....tr.fedsec { line-height: 20px; vertical-align: middle; }../background-color: #39b1cc; #009fda; /...responsive-menu a { text-decoration: none; }../ Resets /..span#togglefedtaxlink { text-decoration: none; color: #000; }...alert {.. color: #666;.. text-align: center;.. margin: 100px 0;..}..@media handheld, screen and (min-width: 641px) {.....no_scroll { overflow-y: hidden; }.....menu-toggler { display: none; }....#menu {.. width:100%;.. height: 30px;/50px;*/.. margin: 0

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371)
Category:	downloaded
Size (bytes):	109518
Entropy (8bit):	5.106399115782481
Encrypted:	false
SSDEEP:	768:ZbGxwUkBUmlpztzuRdvGN6eABkdIUIbZbnbJN8gwaKNhL3tqNhkRQmNae:ywldERdvGNIkabbRk3chs
MD5:	385B964B68ACB68D23CB43A5218FADE9
SHA1:	58A360D7EF24D8D05737DB1712DD5C086597E862
SHA-256:	B5FD723750763EBB731F9221E413E7D64D58D5192DC040E42292ED3DCCCCA732
SHA-512:	729F49483CA2D020C2BC17C52982D65DEBDBDEBF2146FE49C5CC4B914ABF2C4B4098E83B5F4CB3477A74C7F83E4B7696719C35F26871B025F27A5296997833CE
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.min.css
Preview:	/!. Bootstrap v3.2.0 (http://getbootstrap.com). * Copyright 2011-2014 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.1 \| MIT License \| git.io/normalize */html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:0 0}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{height:0;-webkit-box-sizing:conten

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (552), with CRLF line terminators
Category:	downloaded
Size (bytes):	28851
Entropy (8bit):	5.771311912057063
Encrypted:	false
SSDEEP:	768:B3v464PbyVqrYtdQ52pnbrwSmCsslOFFct0DMWbM/AR:Bf464PbyVqrYtdQcbrwSmCsQOrDMrM
MD5:	26433217E805A89CF41ADAC58221316E
SHA1:	BBF155E3C6D673D127021EF9B669338A5D9F3C24
SHA-256:	07AE623F7D42C8707E43608A6A946B0806C4753193CC29E89A296A7585556EBB
SHA-512:	6849E1896CCBA102880DD535BF3FB430F082E3CB12D4A649D038D673F31D85050B0781A416639BB38FBE669787D48CB655771097CF6F052A290250BC0D4CF35E
Malicious:	false
Reputation:	low
URL:	https://dap.digitalgov.gov/Universal-Federated-Analytics-Min.js?agency=IRS
Preview:	var tObjectCheck,_allowedQuerystrings=[],isSearch=!1,oCONFIG={GWT_UAID:["UA-33523145-1"],GWT_GA4ID:["G-CSLL4ZEK4L"],FORCE_SSL:!0,ANONYMIZE_IP:!0,AGENCY:"",SUB_AGENCY:"",VERSION:"20240416 v7.01 - Dual Tracking",SITE_TOPIC:"",SITE_PLATFORM:"",SCRIPT_SOURCE:"",URL_PROTOCOL:location.protocol,USE_MAIN_CUSTOM_DIMENSIONS:!0,MAIN_AGENCY_CUSTOM_DIMENSION_SLOT:"dimension1",MAIN_SUBAGENCY_CUSTOM_DIMENSION_SLOT:"dimension2",MAIN_CODEVERSION_CUSTOM_DIMENSION_SLOT:"dimension3",MAIN_SITE_TOPIC_CUSTOM_DIMENSION_SLOT:"dimension4",..MAIN_SITE_PLATFORM_CUSTOM_DIMENSION_SLOT:"dimension5",MAIN_SCRIPT_SOURCE_URL_CUSTOM_DIMENSION_SLOT:"dimension6",MAIN_URL_PROTOCOL_CUSTOM_DIMENSION_SLOT:"dimension7",MAIN_INTERACTION_TYPE_CUSTOM_DIMENSION_SLOT:"dimension8",USE_PARALLEL_CUSTOM_DIMENSIONS:!1,PARALLEL_AGENCY_CUSTOM_DIMENSION_SLOT:"dimension1",PARALLEL_SUBAGENCY_CUSTOM_DIMENSION_SLOT:"dimension2",PARALLEL_CODEVERSION_CUSTOM_DIMENSION_SLOT:"dimension3",PARALLEL_SITE_TOPIC_CUSTOM_DIMENSION_SLOT:"dimension4",PARALLE

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 28, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4029
Entropy (8bit):	7.913273658410279
Encrypted:	false
SSDEEP:	96:ISDZ/I09Da01l+gmkyTt6Hk8nTPg8n3UW78JvqqQbBIX:ISDS0tKg9E05TPg83UW7AWbBs
MD5:	23AA7C10974ECE809AC91B944937774A
SHA1:	53F6BFD563CE51DAF318294A80AD1C7A849825C6
SHA-256:	2AED0559EBB58B74E1AE783EF624DBBC9F70390A2648DC1787AF6C68122EC510
SHA-512:	1AA9CE66B6F91AD45284B9FB66DF4E9A6D60F5221270AC6D1D6BA0BE4FAC67634AB4C31559D907A8A1E836D014FD6472EB1BF3B48E1A7A1383E1186D4BF51BA2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(.................pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	8151
Entropy (8bit):	4.676294107001177
Encrypted:	false
SSDEEP:	192:bfX2ojmuSmeuolUd19XsIFWf92yEfbEDzTk3l:L2Q7hd19XsGWUyEfb6Tk3l
MD5:	6BF52CC6AE1664F14276E511A2FF6583
SHA1:	1A16D98BA4FF4E2DDE6B948981381F6A6E55C768
SHA-256:	582A09BC391AA4A5A798FEFA428B8C1C9EE286A46B6D348D80D96BC14921FFC9
SHA-512:	65A30BD54D35384E24EAA1F51AB84314EF04BEA1FC0C59EDC7BA67BE7994C0A35B76F48F51EA7FBAF1263C7AE67F0BBFBE804C6FFCC0C0767B8907E690FAF3C1
Malicious:	false
Reputation:	low
URL:	https://secure.trust-guard.com/page/smarty/tools.js?v=1-4
Preview:	function $get(elem)..{.. return document.getElementById(elem);..}....function $set(elem, value)..{.. if ($issimple(elem)).. elem = $get(elem);.. if (elem == null) return false;.. .. switch (elem.tagName.toLowerCase()).. {.. case 'select':.. $(elem).val(value);.. break;.. case 'span': case 'div': case 'td':.. elem.innerHTML = value;.. break;.. case 'textarea':.. elem.value = value;.. break;.. case 'input':.. switch (elem.type).. {.. case 'text':.. elem.value = value;.. break;.. case 'checkbox':.. elem.checked = (value == 'on' \|\| value == 1);.. break;.. case 'radio':.. var options = getElementsByName(elem.name);.. for (var i=0; i<options.length; i++).. {..

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 237x19, components 3
Category:	dropped
Size (bytes):	389
Entropy (8bit):	3.9599427585052975
Encrypted:	false
SSDEEP:	6:3llVqjtFCud9DR6FkmMuAltHltmiXptWmsZ:VvI6vwWv
MD5:	B37EB0135B80EFF0CF22A7AE85500BA4
SHA1:	4490CDA051E35388985516E6C74D3C192A696739
SHA-256:	81DBCCCA201233A08F85EC6CD98CBF044E8F5CA5648231233334FC8C2BA984D1
SHA-512:	CC83112520A1F3A70B140BE5B3F9C4B78B18DF023C317376EA472FF7C58185DEFE77CF299BE3A1CF5D3B7D85D95F8A3EF743AC34192F3918037468732512BBBF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................................Q...........................................................................................?...W.0....._.C. O..................................................................

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 120x90, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2504
Entropy (8bit):	7.905579372867342
Encrypted:	false
SSDEEP:	48:ROEOVo9PsnmZzGgNAfefvsG2t4Z5f9qBfUrumyN8u7dikZmcY84wlE+Gxm2MSoF:ROVodsnS/NMAv7s4Lf94myuaigmcwwl/
MD5:	B80ED04FD9B7B53E0FE233AC2F2D0541
SHA1:	B7A44EA7B3AF6B547E56081BDA5C7223E8B279AF
SHA-256:	5EABC84720368A448BCEA3549F6D309653E16A07533758624BD2DFC30CA3729A
SHA-512:	508E54718C9A300AE9B1AC77A616D123E55EB88F0CB0AD030DA3C2F8B3F602C64E0C410F1803BBC4276F7805F8F4CEBE0FFC1DF3E80D0A385DB9C0EC9D9E3D86
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi_webp/s09YWoGtftM/default.webp
Preview:	RIFF....WEBPVP8 ....P'...x.Z.>m..M.!$$.....f..f4Z^.~....$..~A._.S...9.0........m...?h.8...j.n=.............x..?.}@..h...c......B;....{...7._.............g.o..ZO^....?....q.ZA-..?...K...~.e..G.ru:.b..! .X..._.20...W.da?3..z....k...3..9.g.UQ....]....k..<..L..U.G..J.%.6........&y..c....0=..?......2za.....2..'.aT.......K......Z.L$H......z........*.Y.+..A4..q.\.<....)....0.Gz............zb.7.6.\..").S3....S.V^.c..\..i.S.R!.1.t.........?d.gE5.u.).E?.....C.$..b..)...(x...$.}.L..C.......;....GV.....`.....p....X.\|......T.K...t...1......[.m..^.{.Q...h....L.(<.u..8.E.$.Z:..#-q..G.C.+.@q......]....qU../.o..%.0Wy.h..8..`....9W.".u4Y_a.....5T4.#.. ...YC..>F.O........k_".y....e.].^..l.I.....&.....O.iw.Ql..t..B(..Eb.X=z..<>....~..a...........k.V..V~!...5Br8(64.....8........D3.5...{.e0w...[.t..#.pH.8.....bXAryN"G&.....D.i.n.5....T...O.X..Mo...L-[O..C.......#.M^...T\|.iqK/..n.:i..f.....Z.U.....Y5)...L?o..<.....<NL....t.O.X.....S..0.".F..U6O......XV3$.E.

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 188x29, components 3
Category:	dropped
Size (bytes):	1543
Entropy (8bit):	7.531198577602347
Encrypted:	false
SSDEEP:	24:tCr3xrQD3QfPMeT5DOjty1g6uUrwQXRuYHM6Rgrz9HazYOx3NhiW1UC:039QDgfPMeT5DOc1g7GXlHM66rtXOx3J
MD5:	DA9BED7E02145E8A093752A23BBE381F
SHA1:	002CC9AC7AB67886AFF84EAB4D69F1DC359CD59B
SHA-256:	B9A3D5FDCF635AD11D64BB4FCC71F22DA3F5E8115ECC966494454D48E17C5FC2
SHA-512:	47216132EAB661BB2800F211BCEBF3F7839B506774C45372646047C5C277F246DAD66988E101CBBAE0EC3A1D90C5FF675D0BAA53B588AAEE508C0D9E8D27E907
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d..........................................................................................................................................................................................................................................!..."..1#AQq3..2Rc$......................!1...Aa.Qq....2.."r.............?.......}73..vy...Bya.B/O.Y..wvn-......w$.dL..{.T.F...q.;..x,@~.uh.&..P..@ gb}.u.u9.k_4......~..1.R..m....m.....`..N.C..8z.m5.t....buQ......$../5.......h..h}......a...[...}..U..jR.\|VcX.~.r1....xz.7.F9.y..O.G..I...'..8I.m..O....1...-h1v..jar.w.Z..'..!yBF........I.g.aa...}.....n6/..=...P...6].1.'.S.P7.v.V"gs.-85r.x...r..\.W.Wtc]T.5........f.W%:.%..L.-.9..m.?k...g...~KO..Q.....{..J...).<.;...R..0.r..wiFh...7.7c..r...m.g..fo..>:....+..D...s!r......]..S..8x..I..P. .... .... ..:l...sd...V..p.....{L.Fy<....xx.........4.u;....y...2....0...E...Z..m...s.9.Ib..z...I..r!.}..k..Ni3..<.~$..'......l.z._..n_!..&...

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3
Category:	dropped
Size (bytes):	2515
Entropy (8bit):	7.781387328374556
Encrypted:	false
SSDEEP:	48:BQSu1RqBa8IN3SeFwp5pK60LnahNWFmUmwk3g6JCqlNQS:BTARqBtAClhNWFmtw6g6JbN5
MD5:	55CB5F4F73F7B3E452D6EE73E3133949
SHA1:	F36339780E797A55EB0DFA0856A656D7E833EBE5
SHA-256:	687AF93080832D3D0A90128BBF466A957E72B14F7075BFC7B60621FD00C8BC31
SHA-512:	46AE2DFDEC5EAD45C11C40D1D6336C759D5CC99CB100EBD9D33FC1B62A1C79D560FF45FE81E4BA5DE4C916CD176E7C4DBFB85404CC316BCAD38FEB510B3411AE
Malicious:	false
Reputation:	low
Preview:	......JFIF..................................................."... ...(-. %'(,(..-1-(0"((&...........&..!'&&)&&&&&&&&.&32&).&&&&2'-+22&&2&&&2&&&&&2.&3&&&&......Z.x.."........................................J........................!..1"AQa...dq.........23BRb.CS.........#$4Tc..................................#.....................!..1Q.Aa.#..............?....ao...z.=.4.+,D..f.n...b.w.y..i.#....=.B..!..........a..(......a./.O...}@...s...w.........Q@R.U..>.w.....z...G...H.W......./.......L.6........i)....5.7._..\...\.5K...c.i.`R.U.>-.O._.o.Er.....u....2...B<..mr....!..!....>.Z....i.Y....9.....fcE.y... . .9..R..b.n!..zu*}......R;.{+d%iv@..j7n...[.D....=U%.J.7.i...^M.QGL....n.%f...I\|..O......Y....j...x1..N.:....(.WG..N.......ul...A>H.^.....U.j.F......9...K..x...=.{T.]3..V..$^......@\| oJl.........C......$....l\|..5N\|`-.`..`...9...\... .......[.0[..mZ.cn.s.w..R.i....>..... .`.....+..w....[w3[rU.2LrD...&@....7'k".m[ki6..r..!..K.r..J.LphBH.]......k-..BJ.E...... .

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (31985)
Category:	downloaded
Size (bytes):	207040
Entropy (8bit):	5.4572005914060355
Encrypted:	false
SSDEEP:	3072:y62bNbWHF80++NOtFkK/02nyjKKhBe4Rf0vdHlHMIWNbTiB:CbNb8Ft++N/v25KhR2HMI1B
MD5:	53F533FDF71FDB8527AB9FA6641E241B
SHA1:	8CDE78B625D06E4304941EC09EE038C47E4768DC
SHA-256:	95A439C4E11ACE2484E8D42C30FF56CF7DB5EA7C6463DF9CE2FDAFA7F6CCBF54
SHA-512:	D2E2A2EDDD0FBAF3EBCEDDE4B7CD5497BC40BDAD86ECD5A9FA4227E7F0C1DCEDB38867CCB3D004D027F675ED406FE437D2015DA949CA84B95F95A4FEA415075E
Malicious:	false
Reputation:	low
URL:	https://s.go-mpulse.net/boomerang/YVPKX-K5D8K-83D3W-U8X45-X3FTN
Preview:	/. Copyright (c) 2011, Yahoo! Inc. All rights reserved.. * Copyright (c) 2011-2012, Log-Normal, Inc. All rights reserved.. * Copyright (c) 2012-2017, SOASTA, Inc. All rights reserved.. * Copyright (c) 2017, Akamai Technologies, Inc. All rights reserved.. * Copyrights licensed under the BSD License. See the accompanying LICENSE.txt file for terms.. /./ JavaScript MD5 1.0.1 Copyright 2011, Sebastian Tschan. Licensed under the MIT license. /./ Boomerang Version: 1.632.0 139f333a35e2484b05a07930423f1e230719cb95 */..function BOOMR_check_doc_domain(a){if(window){if(!a){if(window.parent===window\|\|!document.getElementById("boomr-if-as"))return;if(window.BOOMR&&BOOMR.boomerang_frame&&BOOMR.window)try{BOOMR.boomerang_frame.document.domain!==BOOMR.window.document.domain&&(BOOMR.boomerang_frame.document.domain=BOOMR.window.document.domain)}catch(b){BOOMR.isCrossOriginError(b)\|\|BOOMR.addError(b,"BOOMR_check_doc_domain.domainFix")}a=document.domain}if(a&&-1!==a.indexOf(".")&&window.parent){

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51437)
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.6914132784066815
Encrypted:	false
SSDEEP:	1536:jL1vJUPIxubKUfOBbxT2+kfVcaXryjm3ifN4i:ZO5bKUfOfK+kSa2jNr
MD5:	895054D4AF36A84FCE27EB97927CA036
SHA1:	639981DFD85846B185237E62B3892EA473B79E26
SHA-256:	ACD3A22015A7FC3412FE11C416D1EDBFDEDE063B0B2DFDC2711807434260CB42
SHA-512:	4CA4C9FAD90A6FFA57BB872593753BD7BFF70BFC24B3624720B737956047A0CA2C3851E2C8B5DCF9C96E4557AE4655738B33B1FCFB8507C7F36A24445EAA24ED
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/rNOiIBWn_DQS_hHEFtHtv97eBjsLLf3CcRgHQ0Jgy0I.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function b(I){return I}var H=function(I,r,W,D,F,x,Q,m,w,a,u,J){for(a=(u=39,86);;)try{if(60==u)break;else{if(u==I)return a=86,m;if(u==W)R.console[x](J.message),u=I;else if(58==u)a=86,u=41;else if(u==r)u=w&&w.createPolicy?D:44;else if(u==D)a=D,m=w.createPolicy(Q,{createHTML:e,createScript:e,createScriptURL:e}),u=I;else if(41==u)u=R.console?W:I;else if(39==u)w=R.trustedTypes,m=F,u=r;else if(44==u)return m}}catch(S){if(86==a)throw S;a==D&&(J=S,u=58)}},e=function(I){return b.call(this,I)},R=this\|\|self;(0,eval)(function(I,r){return(r=H(43,68,74,20,null,"error","ad"))&&1===I.eval(r.createScript("1"))?function(W){return r.createScript(W)}:function(W){return""+W}}(R)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:applicati

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	552
Entropy (8bit):	4.856978299349082
Encrypted:	false
SSDEEP:	12:UKtsV6DRRo6DRRPkKZ1oQ0Ou9AFOCu6Y3Yn88sRI:buSRRtRRFoQ0Z9AFOT6IYnX
MD5:	B6B8ED9A7B8DD66DC0FBEF82C6B130EC
SHA1:	CE3279910C9ED6A20D9C2743135AD7A5219FC87E
SHA-256:	88775DD0872803F120F5A8BD60FBD6D4CE197F7E0DC94DE45B458BEB61EC1325
SHA-512:	C74CCDBB6122BCF59897D503EACADA2D84BA43EA8F36C7C2C0ACA5F1B2E1662AF90E1D7F5EFCE3809B68C4972EA74B4D975C25B029049AFBFDFECEE64AB394E0
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/static_assets/js/leftnav/height.js
Preview:	/* . * Set the height of the left navigation. This will adjust . * the height according to content height.. */..function setDivHeight() {..var offset = document.getElementById("footerDiv").offsetTop;..document.getElementById("leftNavDiv").style.height = offset-106 + "px";.}..function returnLink (url, w, h) {. var left = ( screen.width - w ) / 2;. var top = ( screen.height - h ) / 2;. . window.open(url, "popup", "left=" + left + ", top=" + top + ", width=" + w + ", height=" + h + ", resizable=1, scrollbars, toolbar=0, menubar=0");.} .

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	39903
Entropy (8bit):	4.546732945543146
Encrypted:	false
SSDEEP:	384:F208T6cfXsLoSzxIbslPBTtdgxCWuFVlrPJxlUKL:EXsHleo+xCDnjlUKL
MD5:	390CC2482DEE6D7D40030C379BF1F49D
SHA1:	CD6FBE36E8912FA094E9F1E19CF3EC3D9EFE13A8
SHA-256:	36401CAA009AF760E1ED2DF7DBAEE7A8138C47F79C36776B1194D0CCE58E2AD9
SHA-512:	AD6180F78B741CC37D300F6A88372A9A2305EF731874C8E188D15EB14990BD90B84257F7C66C7D8B3FC5A3F58E12076854D8E573B11A8C958CD3AE4E4309BBFC
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/main_.js
Preview:	function fddy089090090019036093052012085().. {.. var element = GetDocumentAll();.. for (i = 0; i < element.length; i++) .. { .. if (element[i].getAttribute("type") != null && element.getAttribute("type") == "checkbox") .. { .. element[i].checked = true; .. } .. } .. } .. .. function fddy073093083017044075072020093098014(a) .. { .. var str = "If all of your tax data have been entered and it is ready for Print/File, click OK. \rOtherwise, Cancel if you have MORE TAX DATA TO ENTER.";.. if (a == "bdd_y072106098034048087050014088102009077099099030") .. { .. return confirm("Start a new tax return without 1040Now account?");.. } .. if (a == "bdd_y072106098034048087050006082097009089093" \|\| a == "bdd_y072106098034048087050004088097005") .. { .. return confirm(str);

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	944
Entropy (8bit):	4.911345409864214
Encrypted:	false
SSDEEP:	12:Oj3jVP2ab/mfb/kVwmEhUm5BYeu3tAi5YjAix9+DRWA32FQRxxdrWdRZQM1iLmA8:MPbjmj0sDBtudAIYdPGRWo2ADIyM4SyY
MD5:	48937CD4E0C197B85A34EACBC17662D3
SHA1:	A666CC4768AE115425F6C14A618749CA1F4BF395
SHA-256:	315CA72AB48AC5D6CE2A22A316E0F872C3791E53AF658F250D9F3DCCA9BADAED
SHA-512:	27A7C3BC70033B63562614082EE6E1247B36782E466C5DD58A55B7A93EC15D189B91DCEA6E12670FACB92E1F7CADE1A93A5095B638946B8A82D461ACF20B1D35
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/modules/contrib/google_tag/js/gtag.js?sbu7cu
Preview:	window.dataLayer = window.dataLayer \|\| [];.function gtag(){dataLayer.push(arguments);}.gtag('js', new Date());.gtag('set', 'developer_id.dMDhkMT', true);..(function (drupalSettings) {. const config = drupalSettings.gtag;. if (config.tagId.length !== 0) {. const script = document.createElement('script'). script.async = true;. script.src = 'https://www.googletagmanager.com/gtag/js?id=' + config.tagId. script.type = 'text/javascript';. document.getElementsByTagName('head')[0].appendChild(script);. }.. const additionalConfigInfo = config.additionalConfigInfo \|\| []. if (additionalConfigInfo.length === 0) {. gtag('config', config.tagId);. } else {. gtag('config', config.tagId, additionalConfigInfo);. }.. const otherIds = config.otherIds \|\| []. otherIds.forEach(id => gtag('config', id)).. const events = config.events \|\| []. events.forEach(event => gtag('event', event.name, event.data)).})(drupalSettings);.

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	895
Entropy (8bit):	4.8274015272091395
Encrypted:	false
SSDEEP:	24:7G6QcsszbWbii1SzgMVxuFnCwzQXczdbRWo2L:7G6lss2bNSznVOF4czdbwoY
MD5:	6C6EEC3CACBFD793036A9B92407333B6
SHA1:	25EF3D36A3817AD25FE445F35015FA354FDD774F
SHA-256:	5FC7AB8ECA4149765C42BF4D24E3D0BCD4BF564EBE0C47C73A7957AD1FF31737
SHA-512:	DD88029B1F31AE1D189E38E770840E56FFC41C54D59AE15993F1ADD7A2DE7BE8FE4C5F1240FF7BC788EB2ACB8B8E27D1B1822660C4535D9F2BF5E2965BB3EC92
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/modules/contrib/google_tag/js/gtm.js?sbu7cu
Preview:	const dl = drupalSettings.gtm.settings.data_layer \|\| 'dataLayer'.window[dl] = window[dl] \|\| [];..(function (drupalSettings) {. const config = drupalSettings.gtm;.. window[dl].push({'gtm.start': new Date().getTime(), event:'gtm.js'});. const gtmSettings = config.settings;. if (gtmSettings.include_classes === true) {. window[dl].push({. 'gtm.allowlist': gtmSettings.allowlist_classes ?? [],. 'gtm.blocklist': gtmSettings.blocklist_classes ?? [],. });. }. config.tagIds.forEach(function(tagId) {. const script = document.createElement('script'). script.async = true;. const dLink = dl!='dataLayer'?'&l='+dl:'';. script.src = 'https://www.googletagmanager.com/gtm.js?id=' + tagId + dLink;. script.type = 'text/javascript'. document.getElementsByTagName('head')[0].appendChild(script);. });.})(drupalSettings);.

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 780x32, components 3
Category:	dropped
Size (bytes):	2717
Entropy (8bit):	6.709519906600316
Encrypted:	false
SSDEEP:	48:/rrklyJy4uhoHHHHHHHHHHBcPipX+ccr7bbbbb6O+bbbbbb7bbRgnbbbbbbbbbd3:/EYyROR+ccHbbbbb/+bbbbbb7bbRgnbh
MD5:	9A44C4AE36789FF633D9FA880F666F03
SHA1:	5C9840C6CAB7B34A6A00F9CF34C3E36916FEBB23
SHA-256:	CF623BE16EA17E3DB7EFAB22B1FEC2761192A505953380E9AA0124555227D74B
SHA-512:	DF3C5471726BB62DFE085DF768920FD9574C9E472EAC1E9FCF6EFE4CDAF7E627A0E3E27E1B30323488CD82B433F30DC8827B8C917246FBDA156556EB9548C96F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d......................................................................................................................................................................... ..........................................................................................`.@.4.156......................5.4`..@.!.....1Aa2.......................................Q1a.`@!A.P..................7.~...........................(\.X..........tjC.U.....x............................J,..........:5!...y...\<...........................s...............W.w.o\~sp...................................\.c.'.?............P....%..?Sw.......;.K..~......Z...].wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v.......F..tk...F..tk...F..tk...F..tk...F..tk...F..tk...F.o...l.<.5..............................................................................................x.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 208x34, components 3
Category:	dropped
Size (bytes):	3517
Entropy (8bit):	7.72331074656334
Encrypted:	false
SSDEEP:	96:xLkjMcnER0rU9jw49ZVrbEuyuApOBd0s21S:RkbER0o9l1VUs2s
MD5:	EFCCBD1B2DADF1DE0BCCF047F656A1D3
SHA1:	FC0C09A0A06FD3D36816BCE0BC973DDEED2B5364
SHA-256:	AC7B67CE15862A2FCB8B39067057609322951D895EF2A488BAC762080A437E1E
SHA-512:	64299C9C501AD25E1D5B1FA4E9EF2D7FB75271F7078C9AC272430B2640BE2A5DD1DAD27DD9FCADAABFF32649D81A8913AB6924851285089BF9BF67AA66FB7A38
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d........................................................................................................................................................................."............................................................................................. 0!1..P.@"2.......................!1....4.AQ"2..R#. 0a.@q..3s....................1.!..AQa.@Pp........................!1a.AQ....q. 0@P................................. .v.....\{MG.X_.T...l..\.@.....9..].......9..}N..-.'..:=8.U..t...k..U^.3..>......$.A .I..@$.b.& .....................6....l....6....l....6....l....6....l....6....l....6....l....6..x.a....Z...*.T.U.8...Z...%O......a..^.#.'/.............0u.4.V5.......9_.H...hm..Y._3c......m.T....L<\MW.$..h..}....0.......GC..G..\..H.9..\|..............r..).r..).r..).r..).r..).r..).r....n[.....0L.2...@"..zI...G...............j....+PV..AZ...j....+PV..AZ...j....+PV..AZ...j.! yq....L...L.$XF.FFQ_9..(T!...?...u..yJ

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	47358
Entropy (8bit):	5.041346151440155
Encrypted:	false
SSDEEP:	768:M2k5z2bhReJJJK720yDfT00EESj0LVC8VyFVC8ZDggzOzEc1NkZv:M2qz2bh4JJJK720kfTZEESWVC8VyFVCW
MD5:	D0590085CFC9B8DAB31F3F4F62C3568F
SHA1:	E6C398EB944D9AAEEB0B04B63634F1B4EB65D21E
SHA-256:	38A0B4C279FA6CA407F5F95B826B2C1A0405BE5C977DE3F8A6059D8FA22E6D4D
SHA-512:	350F1FAACD5AF10FC0ECC46679E92BC920E98A30A885F091C5D90885B6D6CC68500C35BA982C09BD9BE0642CFC42229DBD35B5789270F46B54E64238DCBDC3B4
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/main.js
Preview:	..function selectall()....{.. var element = GetDocumentAll();.....for (i = 0; i < element.length; i++).....{......if (element[i].getAttribute("type") != null && element.getAttribute("type") == "checkbox")......{.......element[i].checked = true;......}.....}......}........function checkbutton(a)....{.....var str = "If all of your tax data have been entered and it is ready for Print/File, click OK. \rOtherwise, Cancel if you have MORE TAX DATA TO ENTER.";..........if (a == "button_nosignup").....{......return confirm("Start a new tax return without 1040Now account?");.....}.....if (a == "button_finish" \|\| a == "button_done").....{......return confirm(str);.....}.....if (a == "button_submitefileus").....{......return confirm("Submit Your Federal Tax Return Electronically? Please be advised that once a return has been submitted, it can not be recalled! Continue?");.....}.....return true;....}..........function doBack(a, b, c, d)....{.... var element;.....if (c == "disabled").

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (52739)
Category:	downloaded
Size (bytes):	412989
Entropy (8bit):	5.637156338316717
Encrypted:	false
SSDEEP:	6144:YFHzGTkgbyiCdRCNg7kPdK6s7YbIuUJVCR:YFqTkPiCdwNg7kVKgn
MD5:	B465BD863810B5BB8CF83F3AB94B6879
SHA1:	A141987E8C41C54E8918CA24C2832A1C4A849FE2
SHA-256:	33DA238CF8C6332A48752046B269DED7242310F83B6DB880EAFCE578E4E67519
SHA-512:	331260F2B9577FBE5A1B8FDCA4F90A6CE34B5B32D70130F93792DEC3A264BAF79D1717B034C9AF1BA97B698E93462547CD9EB7E32D30FD3DBB2AA8497BAA21B8
Malicious:	false
Reputation:	low
URL:	https://resources.digital-cloud-gov.medallia.com/wdcgov/20103/onsite/generic1712762295004.js
Preview:	.(function(window){window.MDIGITAL=window.MDIGITAL\|\|{};window.MDIGITAL.version='2.54.1';})(window);window.KAMPYLE_CONSTANT={PLACEHOLDERS:{URL_PREFIX:'https://resources.digital-cloud-gov.medallia.com/',COOLADATA_SRC_PREFIX:'https://resources.digital-cloud-gov.medallia.com/',COOLDATA_API_HOST:'udc-neb.kampyle.com/',USERSNAP_ONPREM_HOST_PREFIX:'https://md-scp.kampyle.com/',USER_AGENT_CLIENT_HINTS_LIST:'["brands", "mobile", "platform", "architecture", "model", "bitness", "platformVersion", "fullVersionList", "wow64", "uaFullVersion"]'},SRC:{OPEN_SANS:'resources/form/FormBuilder/vendor/fonts-googleapis/css/open-sans-v14.css',COOLADATA:'resources/onsite/js/cool-2.1.15.min.js',OOPS:'resources/onsite/images/oops.svg'},FORM_HEIGHT:'450',FORM_WIDTH:'450',COOKIE_EXPIRATION:365,DEVICES:{DESKTOP:'desktop',MOBILE:'mobile',TABLET:'tablet',},FEATURE_VERSIONS:{MOBILE_DYNAMIC_SIZING:2,},TIME_FORMATS:{SECONDS:'seconds',MINUTES:'minutes',HOURS:'hours',DAYS:'days',WEEKS:'weeks',MONTHS:'months',YEARS:'years

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	troff or preprocessor input, ASCII text, with very long lines (14445)
Category:	downloaded
Size (bytes):	34848
Entropy (8bit):	5.067732768681103
Encrypted:	false
SSDEEP:	384:LRQvJAJAf+WieN77hd9+M2lqW/zJvzxfOJlW6GdWZEP2JJ4SAtZ5eeQgtl:KAV/zlzIJlW6GdWZEP2JJfeQ2
MD5:	F3C3147C07A74C7AC746E295EBDAE30C
SHA1:	D171B92F5D7C59F8280B1FD239805B40ADDE5A92
SHA-256:	E34C4FD3EC9481EDCC2DAB9189E43D6172A1079C9BFE0BBF4733948A21B59C4E
SHA-512:	4D702F6DDB8DE76193A61690F4E9EC59575377FEA7ABAD7194289DD463C4DF9C43A0EA2E7DD3CEAFBD787B3E81FDB105514D67A715D216814430107B14453F83
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/pub/css/css_vLfXcAqLKS3YU_fzLQ7mHSjuHayIdWcOB7KAaUb3K8s.css?delta=0&language=en&theme=pup_irs&include=eJxtkuF2wyAIhV9I4yN5iFLDZsQjJFvefiZpu3XpP-4HIl6EGJWhbA7uwXBrXNREUMiwYXMjTrASNzGyieLsRhA0dal-D1zKPEK2Qor2hqBLQzmy1OSZ1C1TSRccGlW9Vr9tBQXyphTkcmzGBHbGsjyJILQwXXvsRW8oaC-ekNKkBr-1j_rpYlsq5OEuTWJOGb1CcknnVwnpvx7gA76P_uETIyk3X_OSqIh7B83IrKINqqtcecX2hyhzVqqmQoPUwSSP2X7JsJS6jJlkwmgif5XMEP0-uM8wYu5bfFC7U3unViec0awUkT3OI0Z_I8zRdXsqF6EV7ZH8XXfhiLYrC60vI-PTxUsCQuAWiYvfbe8LfNX-i2JCPc4LzbXbty9-7k9-lX43pPUp5M9dxR7f1NZG5exxfh4v2FYKeBr9j5kwsWB5-HeqO-xuje4MhyDyAxxlNrw
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */..text-align-left{text-align:left;}.text-align-right{text-align:right;}.text-align-center{text-align:center;}.text-align-justify{text-align:justify;}.align-left{float:left;}.align-right{float:right;}.align-center{display:block;margin-right:auto;margin-left:auto;}..fieldgroup{padding:0;border-width:0;}..container-inline div,.container-inline label{display:inline-block;}.container-inline .details-wrapper{display:block;}.container-inline .hidden{display:none;}..clearfix::after{display:table;clear:both;content:"";}..js details:not([open]) .details-wrapper{display:none;}..hidden{display:none;}.visually-hidden{position:absolute !important;overflow:hidden;clip:rect(1px,1px,1px,1px);width:1px;height:1px;word-wrap:normal;}.visually-hidden.focusable:active,.visually-hidden.focusable:focus{position:static !important;overflow:visible;clip:auto;width:auto;height:auto;}.invisible{visibility:hidden;}..item-list__comma-list,.item-

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65362)
Category:	downloaded
Size (bytes):	138496
Entropy (8bit):	5.271884923153074
Encrypted:	false
SSDEEP:	3072:Yu1zNwcv9qBy1HOg8SMpQ47GKztcnLQD7c8H:j1zWi9qgsgUpQ47GKReP8H
MD5:	A4810CCBC411CCFEAA934D45C261855B
SHA1:	71826FC4B6B7686FBDEE69E89911026F8BAE1694
SHA-256:	F0816CBEC1779957CC235C8D6A96C32C3BB577649172FDFB02284CB53381BC75
SHA-512:	688F937C81BCE7DF1B11D93A4C0479FA65112D03CFD168A79291F5EB244DEFB94DECA260890470BDF86DB98FEA2ED0ACB0AD363DD7CD37552E4C54EDC1ECA5D0
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/pub/js/js_MIAwPdBRPFF2L-vkDvXGThAXXW3BA20QzJR9s-q1WWw.js?scope=footer&delta=0&language=en&theme=pup_irs&include=eJxtkuF2wyAIhV9I4yN5iFLDZsQjJFvefiZpu3XpP-4HIl6EGJWhbA7uwXBrXNREUMiwYXMjTrASNzGyieLsRhA0dal-D1zKPEK2Qor2hqBLQzmy1OSZ1C1TSRccGlW9Vr9tBQXyphTkcmzGBHbGsjyJILQwXXvsRW8oaC-ekNKkBr-1j_rpYlsq5OEuTWJOGb1CcknnVwnpvx7gA76P_uETIyk3X_OSqIh7B83IrKINqqtcecX2hyhzVqqmQoPUwSSP2X7JsJS6jJlkwmgif5XMEP0-uM8wYu5bfFC7U3unViec0awUkT3OI0Z_I8zRdXsqF6EV7ZH8XXfhiLYrC60vI-PTxUsCQuAWiYvfbe8LfNX-i2JCPc4LzbXbty9-7k9-lX43pPUp5M9dxR7f1NZG5exxfh4v2FYKeBr9j5kwsWB5-HeqO-xuje4MhyDyAxxlNrw
Preview:	/* @license MIT https://raw.githubusercontent.com/jquery/jquery/3.7.0/LICENSE.txt /./! jQuery v3.7.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license */.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttri

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 201 x 101, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6731
Entropy (8bit):	7.958379248498693
Encrypted:	false
SSDEEP:	192:2fe2NkPOqVGAKqm2NvwZXTA3R/3meASUq/cHk6o6Z:2aOqwtcwZj6RsSUqkHkv6Z
MD5:	77C0928BA8C6607DDDAC6A5EF27409E2
SHA1:	494D5C1FB9C63EDDB9E245D8868ED595F4CD8762
SHA-256:	6C9CCCB8FF4E878E33E299CF8F824F327610C89F343A752C1DF68A71F1F84A18
SHA-512:	1A49C49D0DD1552C2B6DC025F5B3500D0DBD56F33755B296190D196FD5CC3C908D67B636CF59476FF5077DBAFD8497DB966639718C85456AA8DFFD318C0A2307
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......e............pHYs...........~.....IDATx..]{l\Uz?1.......+.........N=).`..6...%.V.T.n.V.0..v...ZZ;.ji.66.HTY<.U.m.. ...G.&..a.G..@^$q....M.9.s.3.....f...{..;...s.?.^YXX.F..7...o.[.e.[)U3G.[.dgmO...b.c.I. us.J..........%....,I,,<`Iba..K....X.XXx.......$....$....S.}.`.2.C".>N.yX....B1.H2..XJ..dg.....G.+U..jSJ%.R..7."D....M.....A.1.o+..W[......y..6T.l.@...nM.1....SJ.Is...^.oEg.U..>...g.o.E..'!.....^u.Q..x..]....B.....5...M.7 F=>..aV.`.\|....jy..4Q.....E.g....1+...k.....J@.SM..A.J.^.T..9.h..$b.X....Fw^z;:.5>:...w..].\|.%E$q..K.$.?.';k.........w....=04....3...Yvo....a.Is.M...%'J.'q..q.Gr...#...C{...~596...z..n.].+..*..Q-...........Cj..#.RJm.P.O.r..@.."...!...N'..g..Ug..O596.W...^...z...n.%...4J..C...uC}.)..i.. ......#[q.y0...Rg...P..-s....n.#.r-f....R.....:._.0.$AD!a.u..N."..._..}O.3{....Y.>..TFZ.Eq...?o./.{.\<(QfjX. i.I..%.....q........9....m....e.=.Z.Suw.../.VR'..3.I. fxw..........s:...Z%J.8yR....u..Q...~o..r.b...7..(

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 524x40, components 3
Category:	dropped
Size (bytes):	8693
Entropy (8bit):	7.924353273420073
Encrypted:	false
SSDEEP:	192:y/ZXFnnh0VlXhotGLqtIScGVPZZVcMI1Nd0S:y/Hh0VletGLqqhGFfGX1F
MD5:	76B3C831340505A08CC55C1CA4560688
SHA1:	ABFD2EC6B0E74598C3C3563F69C4873391410428
SHA-256:	B9D3320E9E786446CD3B291AF8D2768FEA340F96DF43F966D1E95139F2470FF9
SHA-512:	392990014D15453308DB56FAFD7ED30E0FFDFA6116CE8ECF9E7360658A00879F06C60EAB2469A3082E3CF9E1F94159C8EA32014146F44D5F651C7F4B8925358A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d........................7..!.............................................................................................................................................(...........................................................................................@1..2.0!"5 PA$4.#CB%.......................!..1..AQa"2.q....B#@.Rbr.3..$. ...Cs.4t.0P...SD.%u..................... P!.@1`.pQ.....................!1AQa.q...@.. 0.P..................%%L..........<..gE.........._.....$.%$$......G.p.:.t...hu.m.0.......>...p.....c8.'.qzU.,].uY.p............JRRYH(.....>..3..L-....:.......>C..l.M.".$.B...Nd../..z...v[\|.#.......x:]...]...:.6..Nv}zM.o'..k..U.wZ.9.,......T~..{\|..i~.e..n.NN#B^:..KJMY.%..tgSl...}.8).&.Q4...&y..O\.a\.....u:.`...;>.Y.y...wyHcX+.y....m...\|..j....7.U.6p%..N.).DuNh....;..N...W.\|....8:{.{...u....}....i..LGn.Y...C..y..lQ.E.@4.`...%1.^..=...."..X..........&..M...+.........DC...B1..cI..d.?.\|....1....h.[-.I

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (682)
Category:	downloaded
Size (bytes):	327826
Entropy (8bit):	5.589615323522859
Encrypted:	false
SSDEEP:	3072:GWo02tPPLdCYIqJAPqcj5RUmzhWEt/WkCidORd9qTH/CkMw3taGoQHOaPhXKh:ANPLdCDt6mzhJt/EidOzUTfChw9aPYpC
MD5:	D5B8D160AB640BFC1DD99ACD65F1D38D
SHA1:	1BE3896846933D5011C56D56B4A0609B9F1A1CAF
SHA-256:	A4A828C62029E531DFD2399D717731F7A22CE1C3E2C0BB796EEE2C4BAE9046B7
SHA-512:	F562F2E71D4071147F96588903487CB76551815E384ED32E1C2265150D68161045C6407B8A09A717ACBE80F830EDD974576308BF26DEA6D40B7B9EEA1B956EB7
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/0af6e327/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){'use strict';var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var fa=ca(this);function u(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27712), with CRLF line terminators
Category:	downloaded
Size (bytes):	82578
Entropy (8bit):	6.004875219067137
Encrypted:	false
SSDEEP:	1536:k8Paucg0bKIU1XKjZ+a0l/fhr2UETlvRmV3T7dCvYYZCSlrAFdUwu6:k85cg0blU1a1+x/fhaUOtYh7dCvYYcaG
MD5:	36A1B1ACCE3AD694C4DBC65592520775
SHA1:	8B34FA8F83EBC837E214CE7DAFEFA6110AED5A21
SHA-256:	00D3FC34874388C544872CD6CBFF7E4669FFA4CD7750DCB8913C308956599BCA
SHA-512:	7F9C3C582690F4E55F21F2DE3CEFE4A0835D1757D9588B60AD4FB49071DB7729B00FCAE618E680ECBF2E9BC9967190045003C28D4311D661E9683EB776FE2732
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/mobile/font/font.css
Preview:	@font-face {..font-family:"proxima-nova";..src:url(data:font/opentype;base64,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

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PC bitmap, Windows 3.x format, 40 x 16 x 4, image size 320, cbSize 438, bits offset 118
Category:	dropped
Size (bytes):	438
Entropy (8bit):	2.8722479593379053
Encrypted:	false
SSDEEP:	3:LtllxllXl9lslxllEFl/Ft/HtAiotuZlRx6RRaaak10caoakpii7Ap+0UZHMtbqn:L14lRij+dngdvtbSMFjwzVcDJq
MD5:	A09D3C2B2A37A5EB0B2CDE8847F2543D
SHA1:	284B8B4CF0311DF9153975F3751E7E1DB67AB216
SHA-256:	6F9BC67C28AD865DF88BC247B10DCED0B66BEA9F48FCA8371C5C1499B2DFD71C
SHA-512:	C60BEC359AC59B68CE8A482262F011D727083EC7404D3F76F2078F034B0240A9E320A9F4E24312171FFF95840BA313727F223ECA3D1DA99314BD6745AB0E534C
Malicious:	false
Reputation:	low
Preview:	BM........v...(...(...............@...................................................................................DDDDDDDDDDDDDDDDDDDD............................................................................x...................w...................wx..................ww..................wwx.................ww..................ww..................w...................w...............................................................

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1245
Entropy (8bit):	5.462849750105637
Encrypted:	false
SSDEEP:	24:hM0mIAvy4Wvsqs1Ra7JZRGNeHX+AYcvP2wk1RjdEF3qpMk5:lmIAq1UqsziJZ+eHX+AdP2TvpMk5
MD5:	5343C1A8B203C162A3BF3870D9F50FD4
SHA1:	04B5B886C20D88B57EEA6D8FF882624A4AC1E51D
SHA-256:	DC1D54DAB6EC8C00F70137927504E4F222C8395F10760B6BEECFCFA94E08249F
SHA-512:	E0F50ACB6061744E825A4051765CEBF23E8C489B55B190739409D8A79BB08DAC8F919247A4E5F65A015EA9C57D326BBEF7EA045163915129E01F316C4958D949
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/main.css
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="co

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32x32
Category:	downloaded
Size (bytes):	3638
Entropy (8bit):	2.571036536899412
Encrypted:	false
SSDEEP:	24:OeP3VnSOcrTxoncyUjvAZgX7a7VFYuq8oPhhr2EsCtIDOLrie:ObDrTxtyUn7WPYXBCs
MD5:	E7E7D53FDBC59F9B23B362F41FAD8990
SHA1:	EBA944D3003861B1E114D8997C2979B003F68087
SHA-256:	6D63881E43E08EF385E6C809B43B2B289A459FB2F30D5159000E2477D776B456
SHA-512:	8ADED0EC6D8F1118CE33479CB16F60A9115948CF09C57DA38292E24DE13B3B5C3942B8E6AEC82769C555FB22BFCB1F91E773C4673E7B6A34F5701EFF0397E259
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/themes/custom/pup_base/favicon.ico
Preview:	..............h...&... ..............(....... ...........@............................yJ.{6......["...r.........J............[..g4..q?...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 160, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	583
Entropy (8bit):	7.280879176715662
Encrypted:	false
SSDEEP:	12:6v/7I7w2l3aPhrNB22SMW4K+0Fr6HpT7Yt9iFshJqhxg+ADg:/s43a5rL2T94K+02O9im8hxg+Mg
MD5:	6A55C4BFA2B3EF0A87EBAF722D46F484
SHA1:	A60E1A7B746EBCAD51B99B106126F7725718D69D
SHA-256:	A1F9B6B76C5AF10CDEB8108BC10487112C9B521BFF9C71B67BBD7ED2E583B346
SHA-512:	94542D86F0F82406A7EA47596203C889D09C3059555A800FEE42A8079811916387808CF025BC01EDFE93B6A17E083679BA3CC5E06608C4699FC9A49B33B3DF72
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............>.....sRGB...,.....pHYs...#...#.x.?v...!PLTE.................................P..L....tRNS...}.[.9......7....IDATx....M.@..`[...#7.....@J .%P@@T@.T.V.br`..^.....if...5.......-a4.6...F...8.h.LB.0R+.X.Z).........5....@.j!.\-.....=.. ...&$.L..Q-#3D6%..O..#F.L.I..nu.>..1.B.I..o0B.....x&S_..i..xH.l....l.F...I...H....}...\|u.^.../{.6b..#F..1b..#F..."9.;...xWz\.....#.p....~-.#...9...)U5..c.6.."o.B...a^..Y.r...?..%........HG{.....CZ.._...O.... ..s..y,.....!e.uJ.......".P. H.o..T DM...b..}...!I..]..#.("..t........?..os......c.......IEND.B`.

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	946
Entropy (8bit):	5.311193966372227
Encrypted:	false
SSDEEP:	24:BTjbfkN0FXMxC+ds4ZmcThbQ2YeE4yyVDyJ+Kx:tfkBxC+G4z1TOx
MD5:	31381DFCF6556C5E363B26DF44493192
SHA1:	D26E1163E8823EA6334968A3733EB3EF4032D5CD
SHA-256:	D3440410AD51B92D77FFC2340E2E5436D28083D4C0B36340BF20FF201B76A0F1
SHA-512:	B82D181A6E4B9218C19F49F67AD1DC57F856D688BBA00DEA35F6A3D8E493CF03EA6C0C88E18D4DE089994CCC64CB65687B29701DD61240FFB0BF6ADBDAF41E92
Malicious:	false
Reputation:	low
URL:	http://www.1040now.net/
Preview:	<html>...<head>....<title>1040Now Free Online Tax Preparation & Electronic Filing</title>....<meta content="Microsoft FrontPage 3.0" name="GENERATOR">....<meta http-equiv="refresh" content="0; url=http://www.1040now.net/partner.htm">...</head>...<body>....<P><STRONG><FONT size="6"><FONT size="5">1040Now</FONT> </FONT>- Free File Online ......Tax Preparation & E-Filing<BR>......<BR>.....</STRONG>Loading 1040Now free file landing page. If it is not loaded within few .....minutes, click any of the following link:</P>....<UL>.....<LI>......<a href="http://www.1040now.net/partner.htm">1040Now Free File Secured .......Server # 1</a>.....</LI>....</UL>....<P>If you are unable to to load 1040Now Free File Server above, please .....contact 1040Now at <A href="mailto:cs@1040now.com">cs@1040now.com</A>.<BR>.....<BR>.....We appologize for any inconvenience. Thank you for using 1040Now<BR>.....<BR>....</P>...</body>..</html>..

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 237x53, components 3
Category:	downloaded
Size (bytes):	4883
Entropy (8bit):	7.889691717177074
Encrypted:	false
SSDEEP:	96:eY/Wclu476/////nDEoDNbCnNjKum64QEONR7pVl307z/AcXrd8:eY/f6/////D3R290QEy7jIjAcXp8
MD5:	30AC140FFE04CF97BCBD01DF6159D2B1
SHA1:	10EE2DA76C3D0CA7DB3872813B60CD258BA9B1E8
SHA-256:	AD016CFA6DFEEBC2E06BC47EBC5C6972AB26B219D5C4B263C8CE3716EC89A20C
SHA-512:	BA0ED92FB6B9B9DDF20386DFE118F3AE543D4E153C290BC290C3277534C9CC8F7B5E0FC39A1CBC5A7D858A244788A685D72A90B00D5F5F240DCAE68754E43586
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images-ez/button-no-free.jpg
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................5.............................................................................................!.T..1A...Qa".q2#.R.Br..5..b..CScs$4tu7......................1.!AQa....b..q....".2Br..R.3..#C4.............?.....r-..E...\...z.8..{............z.........][O.?#...s.i."..h.wr5.9...h...S..b....L..C....\]4.8K.[UV...9..eSf.v.L.....)w.j.$...b...2......{....h..Y...f.{....h..Y...f.{....h..Y...f.{....h..Y...f...`..Z.m.[O.(.4...@q.cty.........E{p.bGi.9..=3.`...]..#.9@{Sz..Q...er..t.\.........".. .v"0..ww...T.O.OP.."z.yj9....R..P.."z.yi..;?....7....^Zs7....,u...'......K..C....5.3p..R..P.."z.yi..;?....7....^Zs7....,u...'......K..C....5.3p..R..P.."z.yi..;?....7....^Zs7....,u...'......K..C....5.3p..R..P.."z.yi..;?....7....^Zs7....,u...'......K..C....5.3p..R..P.."z.yi..;?...

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 10x316, components 3
Category:	dropped
Size (bytes):	1319
Entropy (8bit):	6.822495536629223
Encrypted:	false
SSDEEP:	12:VKUCF6c8mkXGnWbnxYJfVFKCPg1jZ913r2NXn/XnkhJiweLDvy+Mp9EQ3k2vD5qs:pEkhsx2XNr+veb7Esk2ThHMMujCxx
MD5:	694C61E50CFDB49FF5A7E4792CAEF93D
SHA1:	DFFBB82199EA34142932073F8D371D2F9CF1CEB5
SHA-256:	91A3D834BF9141C665CE40404FA381C4B629FA434FF32EA419E0EBA259C27977
SHA-512:	F8A087139D5A7E91B04C442491B69B4697DCD3C3ED0F76668B9DB4B23028010AA924A5F5B7860235935C25DBD5CB5995CAF1D729F192001BF53F76105E1D167E
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d................C...........%............................................................................................................................................<.................................................................................!# .P."`...................2.C...1.PA.B........................P`.....................Qa..!1...P @q....................n.....n.....n.....n..s..n..sFl.7..f..P...@..........................Vm-+Mi.5f....Vm-+Mi.5f....VMMKIi:.......l.....?...........<r....,..>_....................?.."....b"....."...........?...........?......l)&.R-..[]KYKYI6.m."..E......l)&.R-..[]KYKYI6.m."..E......s.&.R-..[.Ky.y.72.ne:W.N..S..=.s.~t:..C.C.C....;...o.........?!.o...[..V....o...[V.+\|....um[..V.+}...?.#..V....?.....C.P....."............?!..B.8.N%..d..}.d..8.N%....!..d.Y8.N>..N!..d.Y8..B.8.N%..d.{.o~.a.."........\...........?!..[.T....(6.f..$.!A.....%IHPB.kvmn.RJ......[.T..\..kvmn.RJ.

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 97x31, components 3
Category:	downloaded
Size (bytes):	2375
Entropy (8bit):	7.544047410261827
Encrypted:	false
SSDEEP:	48:Fn2R6OCpznVD9xVDIc5evDoPdDIQtcZcZ3rUYQ8OF:wI3z52Qd0yjZbhQF
MD5:	03BAD616A72B49C456E8B9F710FA1A62
SHA1:	9CA1B8C774870AF43FFD58118E0443436E11F2F8
SHA-256:	19B79432CA20F6DF6D1EE1AA13B6FADE2440118A805869F57600A14255FECA4E
SHA-512:	2654C95BC5EF9BBA24A8ACBB6F0BCB8927B774EF3994F94DDE155677F86E785C345CEB7255607B27062BC8A31CF71DCE65FD1A030F81FA376A9F67D69972EE2C
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images-ez/efile-logo.jpg
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d................D...........E..............................................................................................................................................a........................................................................................ ...!.12.......................!..1A"..#. aq..BR.Q..2...r34..................!.. @.q.0..1AQa.......................!1AQq .a...........................D.....\..}...M....M'<.-..k..{.Y........{0.q..c @.....im...tqrk0.)7.=..?...../Y.h...u.Q.2................'L.......{`!....m.>..$J..k.H....c..y.il..xq."=.jL.W..o.!..v.{7..z..&^.....Re\.z.>...[.c........zY..~.Y..P.(.2.L..............+.XJ..K.E.q.[m.$.....eh..4?.~.Js......kS,5.{I%..a.u.B..]..=U.............U.,.eYVU. ..;....Oj.U..?.a.....$..]@..qT.\.....F1.q........?..m....6.jyEWS....EEX......"C........?....0.A.........?..k.O.............[>.(.?..M8..i..jHu..F...g.1.f0...,...:T.'.(..4..U.. 3Q.[.....z.#..-.b.<.*..

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 181x101, components 3
Category:	downloaded
Size (bytes):	4575
Entropy (8bit):	7.865310116283506
Encrypted:	false
SSDEEP:	96:kMa7xpxF4HkM0ns/GNOCv5w5JGNqNfFFg6uNMHKHhA1t1dluj:mxFkkMn/rCBw5MYfFFgcKHh6I
MD5:	22EAD279557E21A92EBA96853BB54A6D
SHA1:	A2ED92B39946F3E03EF89AD30EC2123496F9E098
SHA-256:	D6F70C8841E89019EA936444FF0E0A6589F3504E833EBF22163D45D2180F8089
SHA-512:	B9A98E5F68B68A091172459489D0B22245181C397C4055592FC90B91D0509FA444602FFF728683714FC9460DEF205786F65C1C9FA138409854C35751233605AB
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images-ez/index_02.jpg
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................e...........................................................................................!1A.Qa".q.....2#..BR..3br$..C........................!1..".Aa2.Qq.....B#............?..u....?N..5..A..+.D>.n8..C.eXv....QX3dZ......q.e.6l.).?lzW.L..2.-M.KD......xS.X.ch..;)..:@. \...%xz..O@.T.7.....)..<l..C#.r.......V1$...X..7A..\..Q./..dygic..M.0...$......1.t..C..O...TH...Y.Q.l.?.........VmA...n...C.5<..o"x......n.>..$.V<U2ec.....8....;....W.c....).......p..s.-W.....w.V/e.pp.iW.9..i..8:.+...Y.....Cb..)-.....;C".P.,D.R...W..xP.!-./.G.PL.....'.u4R..."......1,.ji...Z..Cw..T......-`.4..rd..67n..?.....:.NA..d.d?c...1v.;.1...#^...K..H.%,.w....<.lq. .b..Ux~5....!....{.dRS....jq.2_......y....8.d..I.~.TH4(.)"~hlI.p...*.W7>...D.,-R. .~.G...^..T....7.....u(.&m..G.....B....X3Af..N...!.....

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5360
Entropy (8bit):	4.1823373370899635
Encrypted:	false
SSDEEP:	96:Hszp10A1ErPnyLd9zbxcUCqhYWaHJv5ivJcDYqGQsHHfqbF5/D2gQzpR0d8jyc9:Hszpr1EryLfzSMhYWaHJvPdbefUbKfnL
MD5:	255A4ADED26071F662028780E94BC3DE
SHA1:	937665E4C7796AFE10107C42D8EA44F0A3884183
SHA-256:	66466573E4C2CFFDC636E13E76758DCF83F0CE235083C2098AD471CF419481D8
SHA-512:	2CE2CFCEEBC85C235C4A8DC44F5255E0C79EF6EB753D11B8EB2B375AE9401B93C9158CF3BAC812D1C10CCBFBB1BD628F3699514F524971684B9BDF9645514A0C
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/themes/custom/pup_irs/images/logo-print.svg
Preview:	<svg width="158.9" height="61.1" xmlns="http://www.w3.org/2000/svg">. <style type="text/css">.st0{fill:#000000;}</style>.. <g>. <title>background</title>. <rect fill="none" id="canvas_background" height="63.1" width="160.9" y="-1" x="-1"/>. </g>. <g>. <title>Layer 1</title>. <g id="svg_1">. <path fill="#ffffff" id="svg_2" d="m66.8,8.9c2.5,0.1 4.2,0.6 4.9,1.2c0.7,0.6 1.1,2.2 1.1,4.5l0,28.1c0,2.4 -0.4,3.9 -1.1,4.5c-0.7,0.6 -2.4,1 -4.9,1.1l0,1.2l18.4,0l0,-1.2c-2.5,-0.1 -4.1,-0.5 -4.9,-1.1c-0.7,-0.6 -1.1,-2.1 -1.1,-4.5l0,-28.1c0,-2.3 0.4,-3.9 1.1,-4.5c0.8,-0.6 2.4,-1.1 4.9,-1.2l0,-1.1l-18.4,0l0,1.1z" class="st0"/>. <path fill="#ffffff" id="svg_3" d="m123.9,47.4c-0.7,-0.5 -1.6,-1.1 -2.4,-2.1l-12.7,-16c3.5,-0.6 6.1,-1.7 8.2,-3.4c2,-1.7 3,-4 3,-7.2c0,-4.6 -2.3,-7.9 -6.7,-9.6c-2.4,-1 -5.4,-1.3 -9,-1.3l-17.4,0l0,1.1c2.3,0.2 3.7,0.6 4.3,1.3c0.7,0.7 1.1,2.1 1.1,4.4l0,27.2c0,2.7 -0.4,4.4 -1,5.1c-0.6,0.6 -2,1.1 -4.4,1.3l0,1.2l17.3,0l0,-1.2c-2.4,-0.1 -3.8,-0.6 -4.6,-1.2c-0.7,-0.6 -1.1,-2.1 -

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65463)
Category:	downloaded
Size (bytes):	227866
Entropy (8bit):	4.834301445181285
Encrypted:	false
SSDEEP:	1536:hFVzE/grctwAiRW1q5oRJnVnk999Pu2oNUI62io+BI2469J4XW2rVGXtU76Oiuhl:hFVzE/grctwAiRW1q5uqSOoXJbLVHFDP
MD5:	5BD44299C3EC3DAAF0DA91F90555AB2B
SHA1:	B8893C4B9F4081CE8AC64671312EAF6A132EF8D9
SHA-256:	E6C9DC197F32EC155A9CC32F5EBEF488F3923255DA8588A8A15708BC285A3A28
SHA-512:	3CFCBEB07952679F37ECA5D1397A02316DBE7B01B6CCB52121D4153C6D0E9E02FA933EF8518764B53EEBEE1A3622F2288DC2621EE3C209CBAB203394D95F696E
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/pub/css/css_5AC04achp0hZXPooF9E7mTU_TXaSle-hxqi3dGnkgxM.css?delta=3&language=en&theme=pup_irs&include=eJxtkuF2wyAIhV9I4yN5iFLDZsQjJFvefiZpu3XpP-4HIl6EGJWhbA7uwXBrXNREUMiwYXMjTrASNzGyieLsRhA0dal-D1zKPEK2Qor2hqBLQzmy1OSZ1C1TSRccGlW9Vr9tBQXyphTkcmzGBHbGsjyJILQwXXvsRW8oaC-ekNKkBr-1j_rpYlsq5OEuTWJOGb1CcknnVwnpvx7gA76P_uETIyk3X_OSqIh7B83IrKINqqtcecX2hyhzVqqmQoPUwSSP2X7JsJS6jJlkwmgif5XMEP0-uM8wYu5bfFC7U3unViec0awUkT3OI0Z_I8zRdXsqF6EV7ZH8XXfhiLYrC60vI-PTxUsCQuAWiYvfbe8LfNX-i2JCPc4LzbXbty9-7k9-lX43pPUp5M9dxR7f1NZG5exxfh4v2FYKeBr9j5kwsWB5-HeqO-xuje4MhyDyAxxlNrw
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */.@media screen{aside.pup-sidebar-mobile-left{display:none!important}@media screen and (max-width:768px){aside.pup-sidebar-mobile-left{display:block!important}}@media screen and (max-width:991px){aside.pup-sidebar-mobile-left nav#sidebar-wrapper{background-color:#fff;width:100%;max-width:308px;height:100vh;max-height:600px;position:fixed;right:-9999px;left:inherit;overflow-y:auto;border:1px solid #ccc;z-index:3;padding-bottom:20px;top:62px}}@media screen and (max-width:768px){aside.pup-sidebar-mobile-left nav#sidebar-wrapper{max-width:280px}}aside.pup-sidebar-mobile-left .pup-filter-results{position:fixed;z-index:3;width:150px;right:-50px;top:150px;height:50px;-webkit-transform:rotate(-90deg);transform:rotate(-90deg);background-color:#002d62;color:#fff;border:none;outline:none}.pup-faq-accordion aside.pup-sidebar-mobile-left .pup-filter-results i.fa-chevron-down.ui-accordion-header:before,.pup-faq-accordion aside.pu

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.6582064698239685
Encrypted:	false
SSDEEP:	24:coS7OCwiv6vNV1VnALBAuCiVLQBPUmivUz/:chl7suLtBKsg
MD5:	8B1C3B49203241B0BFD26CF609011626
SHA1:	98D4CDAE2A3A8F8547B020D89EFD0A126680B58F
SHA-256:	20B219BDD4E1B2C2BFCC5E87815E12837F96F765872E7180C975602284207758
SHA-512:	243FE7D7666D510E8EC9760ED6846188E40FB28C5E90EA65CC88B212598BA60535574A9F6F6D056DA9FB2063029876EC6567B726DF4940E03DB18AD68622786D
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/favicon.ico
Preview:	............ .h.......(....... ..... ..........................................#...#...#...#...#. .#...#...#...........................#...#...#.).#...#...#..#..#..#...#.1.#...#...............#...#...#._.#..#...#...#...#...#...#...#..#.n.#...#.......#...#...#.`.#..#...#...!..."...#..."..."...#...#...#.r.#...#...#...#.*.#..#..."...(...D...^...c...U...6...#...#...#..#.9.#...#...#...#..."...,...f..................I...#...#...#...#...#...#...#..."...W........................5..."...#..#...#...#..#...'...t........................L...!...#..#.).#...#..#...&...p........................I...!...#..#.'.#...#...#..."...M.....................y.../..."...#..#...#...#.q.#...#...&...U...............t...;..."...#...#...#...#...#...#..#...#...#...4...I...O...A...+..."...#...#..#.).#...#...#...#.F.#..#...#..."...!...!...!..."...#...#..#.W.#...#.......#...#...#.A.#..#...#...#...#...#...#...#..#.N.#...#...............#...#...#...#.[.#...#...#...#...#

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 780x32, components 3
Category:	downloaded
Size (bytes):	2717
Entropy (8bit):	6.709519906600316
Encrypted:	false
SSDEEP:	48:/rrklyJy4uhoHHHHHHHHHHBcPipX+ccr7bbbbb6O+bbbbbb7bbRgnbbbbbbbbbd3:/EYyROR+ccHbbbbb/+bbbbbb7bbRgnbh
MD5:	9A44C4AE36789FF633D9FA880F666F03
SHA1:	5C9840C6CAB7B34A6A00F9CF34C3E36916FEBB23
SHA-256:	CF623BE16EA17E3DB7EFAB22B1FEC2761192A505953380E9AA0124555227D74B
SHA-512:	DF3C5471726BB62DFE085DF768920FD9574C9E472EAC1E9FCF6EFE4CDAF7E627A0E3E27E1B30323488CD82B433F30DC8827B8C917246FBDA156556EB9548C96F
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images-ez/footer.jpg
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d......................................................................................................................................................................... ..........................................................................................`.@.4.156......................5.4`..@.!.....1Aa2.......................................Q1a.`@!A.P..................7.~...........................(\.X..........tjC.U.....x............................J,..........:5!...y...\<...........................s...............W.w.o\~sp...................................\.c.'.?............P....%..?Sw.......;.K..~......Z...].wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v..wj..v.......F..tk...F..tk...F..tk...F..tk...F..tk...F..tk...F.o...l.<.5..............................................................................................x.

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (31013)
Category:	downloaded
Size (bytes):	156656
Entropy (8bit):	5.070407999135847
Encrypted:	false
SSDEEP:	3072:UuoKiM4ale5e0BHe2bdyTIFJqkG2yrEkqvlWJRbYud6IaoTdUZg:UUb3kvBHe2bdkIFkkIrERvaz
MD5:	ADF30A4B6E67DFEBE38A1223FA22A8E2
SHA1:	654C8F855903A93E615B602EF9FD23B5DF5438D0
SHA-256:	207482C07EDA4372FA31BD1CD17C3EAF517A9D7A111784735E65F591B7FFE1B6
SHA-512:	C2A5342FFF9B6A506E9B478095D7AF394FA7A50FACAA149E3C03770DE7087DDC69757584A6B7800AC9FDAEA1D1B1A0097A7C9CBD624CFA86D7BC0C2796473402
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/filing/e-file-options
Preview:	<!DOCTYPE html>.<html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# ">. <head>. <meta charset="utf-8" /><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={ajax:{deny_list:["bam.nr-data.net"]}};(window.NREUM\|\|(NREUM={})).loader_config={licenseKey:"b67fc6a152",applicationID:"70700070"};;/! For license information please see nr-loader-rum-1.256.1.min.js.LICENSE.txt /.(()=>{var e,t,r={234:(e,t,r)=>{"use strict";r.d(t,{P_:()=>v,Mt:()=>b,C5:()=>s,OP:()=>k,lF:()=>N,Yu:()=>_,Dg:()=>m,CX:()=>c,GE:()=>w,sU:()=>R});var n=r(8632),i=r(9567);const o={beacon:n.ce.beacon,errorBeacon:n.ce.errorBeacon,licenseKey:void 0,applicationID:void 0,sa:vo

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 139 x 147
Category:	downloaded
Size (bytes):	7430
Entropy (8bit):	7.861587851968346
Encrypted:	false
SSDEEP:	192:13oTuIU4afkDxng94YWeZNGqGNFVF5LfoAKtj+p8:13oKADxng95Gt/xOjc8
MD5:	B9A11A3F6520F7625700A8EC2EBAEF29
SHA1:	23022100D8141C316DD75B4B394E537F930679FF
SHA-256:	8DEC1E274125AD6899A4882D9A72E17CE409E8405AB401B9FC785CCC5C5ED44D
SHA-512:	3D37C7DBFE6116745C3513A57B2562AFBF39513393EC214A1D0D407E8F2912E03EB1103CA28322D70B1F11F656C8730A975B5F5BB69B0D5B181D0EB35BAE29D4
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images-ez/secured.gif
Preview:	GIF89a................5M{<Qz...7CZ...``.++1.22...00.(Ar+4H.."G\...Yv\|...N.4d.'=vt..iWiYYd\|.....GTh.'H,Akul.K5H..4:K@@........vv.... Rbs.`n....Rc.;LmZk.$=nqd{t...,\mz.diz.BB..PUU`...2?VOOYap..""+Du.....XX{..ASt....0_z..66=..M....>..F..V..5,;Q..R]i\|5JsL^~...Yf{\\h2Bd!9i.ff.Fv. P'@p......EMbUi."<n4Eh...Qe.=Nq]k.=Kb^m.}....QXARCt.9k...$-ACUz.+<Y8Nz)BsLa.Sb\|,>c."RO^u1Fq .%>o...iv.FK\..6ft....@@HLZpHHR#2Y$3R....Fu#9fZh.PP..DoRZk[m.bq.4&:...6g:Ea :l.....nn.cr..-V.&W.....`...7IlHYz?BP.1bt....NYi.ds.^p.@Pf\dtQP\Uau_l.(?n...gw..!Q!$..!R,Eu?T.q`u.#F\k.bp.."T_IZ."Rm\p%<jC,?#;jVg.Wf..(Z(7U.....:...o[m...nx.-Eu.....J?GY..A(:]NN.-Fv-Es.'Q......n}.gx.iw.+6^gt...]_o./Gv.0:.$T..Sev........5d..OPUgVXg..8..L8H_2Jy7Fh..P#<l./O<-Amr.FVv..H2<].#S(7N+CqMPa*Csdt.....Eu."Q...fRe1Hwc^l!.......,...............e!....-(..!C...n...b. ..0....s.h..e..3...!E......83q.......N.'O.....3C.La.ID.6~...d.1.......#....ID.H.j1.."E....L.(Qv..%."`.8k....%\..0.a..+.Y".?..8...A.M..T.{y.....B.X\.B.&9........

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 18, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1848
Entropy (8bit):	7.294498611958225
Encrypted:	false
SSDEEP:	48:kqQvnLinFD7YrJ3En0z9Z313XStf4GbNFwvTzRupQSjc:9QGSa0z9qtlFwv3RIDA
MD5:	5209C2C239D139C068F75BC18F0FAD0E
SHA1:	FC9CA21C242E67C37A7C17DD473AE2023114E1FC
SHA-256:	DAD3E705F396F119FEB37090C79DB1CCD1D5BFD729B8F1554281D516877BF5F0
SHA-512:	C27BA954EEA98832475E096CEB8E4FD1CB33124E131CCA774257CE90BF0A999FB3A9D85F9AC7B6425E237E474740B95D4A6BDA13E5E2294C3733709648C54B31
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............5T....tEXtSoftware.Adobe ImageReadyq.e<...^iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="uuid:80A265A9CC53DF119B668112F49224F1" xmpMM:DocumentID="xmp.did:305E4FF4FF1C11E4B4CBD697B9216E6D" xmpMM:InstanceID="xmp.iid:305E4FF3FF1C11E4B4CBD697B9216E6D" xmp:CreatorTool="Adobe Photoshop CS4 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:070B86A443AEE011A9D6F3253D680165" stRef:documentID="uuid:80A265A9CC53DF119B668112F49224F1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......pIDATx..kh.U...3;;....$m...)mP0m-(..X_.%`.A..(...(..

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555)
Category:	downloaded
Size (bytes):	2546025
Entropy (8bit):	5.660474814936524
Encrypted:	false
SSDEEP:	24576:dTu2yKLtnVCBa26V/ZcLbFLGQFChwSyyta0yzZZs2FPkIpfu7LDY:c2yuVCBGxHyyta0AdFPkp7g
MD5:	49D004306911152B2D9C8470C6855607
SHA1:	D2DB3B6DAF04831C2E719337FEE2992D4F11917E
SHA-256:	32B27F09F362CE9B7B218F547FF7FB3109DA60A9C57217C757E17CC98108D848
SHA-512:	72D5ED93D71E0A389938604B22C5E495BE64D13A2B0FFDF4680662AC85EBE4A46E40D284D43236376A26B23A1B4765B990D4E45E81EFC440BBFA5CD20AFBEF85
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/0af6e327/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTICULAR PURPOSE AND NONIN

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4364), with CRLF line terminators
Category:	downloaded
Size (bytes):	14110
Entropy (8bit):	5.523816836497081
Encrypted:	false
SSDEEP:	192:KP9TbMfm2ScBQBwmmH/jWuAe5tCG5vhRHJC1xvNAkspJTXT6s8:EaUcBQ2+u9bC1xv4px2
MD5:	1E33B770A49B21A521FD71F17698A390
SHA1:	86D0EDB0865CA085D7C49D6B788FFB96F83CCC63
SHA-256:	1F774DF1E242A0E1087BB2068EC21A73AD71DC63A2583FF4C48EE5952D4D5C91
SHA-512:	3133D60C70AE53A2164B6E9C86A8B076EF28AF08E7D090B573E72A252AEE1DAE9A01BFA1F0341CD2D59F1C59B947965BD01DBDB4CA6217D8C9961AD25192AB48
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/main.aspx?code=2
Preview:	..<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" >..<html xsl:version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns="http://www.w3.org/TR/xhtml1/strict" xmlns:msxml="urn:schemas-microsoft-com:xslt" xmlns:asp="Remove">..<head>..<title>1040Now Online Tax Preparation & Electronic Filing</title>.. <meta http-equiv="X-UA-Compatible" content="IE=edge"/>.. <meta name="viewport" content="width=device-width, initial-scale=1"/>.. <link rel="shortcut icon" type="image/x-icon" href="favicon.ico">.. <script type="text/javascript" src="js/IRS_fingerprint2.js"></script>.. <script type="text/javascript" src="js/sha1.js"></script>.. <link rel="stylesheet" type="text/css" href="1040.css"/>.. <link rel="stylesheet" type="text/css" href="main.css" />.. <link rel="stylesheet" type="text/css" href="menutax.css"/>.. <link rel="stylesheet" type="text/css" href="menuco.css"/> ...<meta content="Microsoft Visual Studio 7.0" name="GENERATOR"/>...<meta content

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4411
Entropy (8bit):	5.336130726080858
Encrypted:	false
SSDEEP:	96:ZAiBfrV0MABfa6OMkJxCuVBJXv+CpVe3+sCZ7+CjiA+Ct+COMEwC+SjD+C+OqLJY:ZzV0ZBfBOMkJ9VBBNVsC7iAxyMEXJeSL
MD5:	15024F32A80EE1E2D49E052BB864FADE
SHA1:	ADD6CA85E8EAA3EFAE98C5CACD7A2B5ED647955C
SHA-256:	A0664EFBDA87194755AD7C52B498A8AB13BAB2FC9E26A0F4F262C646E573AF63
SHA-512:	FD917DE9D12A667FD0179A8B13BEF674DDD7BDADA0F7DAC53477E56A1EFAB222A07D13A1A0672F615002374F3CFA07DAE8D108427085244BAA2650FACEBCF014
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/1040now/1040Now%20Pricing.htm
Preview:	<html>...<head>...<script type="text/javascript" >... var tabValue = document.URL;... var url = "";... if (tabValue.lastIndexOf("#") >= 0).. url = tabValue.substring(tabValue.lastIndexOf("#"));.. document.location = "../mobile/1040Now Pricing.html"+url; ...</script>....<title>1040Now User Guide</title></head>...<body>....<table id="Table2" height="20" cellSpacing="0" cellPadding="0" width="95%" align="center".....border="0">.....<font size="4"><b>.......<TBODY>........<tr>.........<td>..........<img src="images/1040header2004-01.gif" align="left">.........</td>........</tr>........<tr>.........<td height="20" bgcolor="#990000"></td>........</tr>........<tr>.........<td align="left">..........<P>...........<font size="2">............<BR>...........</font>..........</P>..........<BLOCKQUOTE dir="ltr" style="MARGIN-RIGHT: 0px">...........<P dir="ltr" align="left"><FONT color="#000000"><FONT face="Arial"><STRONG>1040 Filing Fee:</STRONG>.............<

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 524x40, components 3
Category:	downloaded
Size (bytes):	8693
Entropy (8bit):	7.924353273420073
Encrypted:	false
SSDEEP:	192:y/ZXFnnh0VlXhotGLqtIScGVPZZVcMI1Nd0S:y/Hh0VletGLqqhGFfGX1F
MD5:	76B3C831340505A08CC55C1CA4560688
SHA1:	ABFD2EC6B0E74598C3C3563F69C4873391410428
SHA-256:	B9D3320E9E786446CD3B291AF8D2768FEA340F96DF43F966D1E95139F2470FF9
SHA-512:	392990014D15453308DB56FAFD7ED30E0FFDFA6116CE8ECF9E7360658A00879F06C60EAB2469A3082E3CF9E1F94159C8EA32014146F44D5F651C7F4B8925358A
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images-ez/block-tops.jpg
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d........................7..!.............................................................................................................................................(...........................................................................................@1..2.0!"5 PA$4.#CB%.......................!..1..AQa"2.q....B#@.Rbr.3..$. ...Cs.4t.0P...SD.%u..................... P!.@1`.pQ.....................!1AQa.q...@.. 0.P..................%%L..........<..gE.........._.....$.%$$......G.p.:.t...hu.m.0.......>...p.....c8.'.qzU.,].uY.p............JRRYH(.....>..3..L-....:.......>C..l.M.".$.B...Nd../..z...v[\|.#.......x:]...]...:.6..Nv}zM.o'..k..U.wZ.9.,......T~..{\|..i~.e..n.NN#B^:..KJMY.%..tgSl...}.8).&.Q4...&y..O\.a\.....u:.`...;>.Y.y...wyHcX+.y....m...\|..j....7.U.6p%..N.).DuNh....;..N...W.\|....8:{.{...u....}....i..LGn.Y...C..y..lQ.E.@4.`...%1.^..=...."..X..........&..M...+.........DC...B1..cI..d.?.\|....1....h.[-.I

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	487
Entropy (8bit):	7.366329550863499
Encrypted:	false
SSDEEP:	12:6v/7jw9oKQhbzmBKvvBAFQ5EVOt954iSGvEFWxa7:a0QheBKXB8MwOF4iHQ7
MD5:	6C5EC9FFECCEDE8841DC9E17CCF7BE15
SHA1:	CF3B78BF2B26030577E94B90EE8524C9683E1AAE
SHA-256:	C840D01437BF3C461A9D8B4676974124B62FF0F88DB085C6A38AAF14E32199D0
SHA-512:	AA0A5C0F65FB5D2BAA5AADAAC0F24345F888A868BC81D3AD4C4C093AB245B8B390ED4B282C856CBFD3CC5D82C3501DFED457FB6BEC62D5EA7DE6FE3728CD3B6D
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/themes/custom/pup_base/images/Icon-Search.png
Preview:	.PNG........IHDR.............;.J....bKGD..............IDAT(....K[a...ss.Y.n.,.B..Ii;(.(B.V......J.%.T.=~@....N...@A..,.E..Kc..=...o4D.oy......8....8"S.s.-.kT.+.$.. ....N..<....../,.....}.).\_...5.C ..!.........,%..M.j.1..g.y.5.Ufs... ]D...:l!:qw.>.$=......S.C.^..v..&k..J.g!...Sn[....,.6hs...%l...B5v....0.....vz@..;......H.........".....>T....ea. ..R.8...O[...%5D.I.n.m`!...Y.........P.".f.qG..q..?.N.^.'.3....fs.Q....@.... .......R.0.w........C......IEND.B`.

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 10x316, components 3
Category:	downloaded
Size (bytes):	1319
Entropy (8bit):	6.822495536629223
Encrypted:	false
SSDEEP:	12:VKUCF6c8mkXGnWbnxYJfVFKCPg1jZ913r2NXn/XnkhJiweLDvy+Mp9EQ3k2vD5qs:pEkhsx2XNr+veb7Esk2ThHMMujCxx
MD5:	694C61E50CFDB49FF5A7E4792CAEF93D
SHA1:	DFFBB82199EA34142932073F8D371D2F9CF1CEB5
SHA-256:	91A3D834BF9141C665CE40404FA381C4B629FA434FF32EA419E0EBA259C27977
SHA-512:	F8A087139D5A7E91B04C442491B69B4697DCD3C3ED0F76668B9DB4B23028010AA924A5F5B7860235935C25DBD5CB5995CAF1D729F192001BF53F76105E1D167E
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images-ez/bg.jpg
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d................C...........%............................................................................................................................................<.................................................................................!# .P."`...................2.C...1.PA.B........................P`.....................Qa..!1...P @q....................n.....n.....n.....n..s..n..sFl.7..f..P...@..........................Vm-+Mi.5f....Vm-+Mi.5f....VMMKIi:.......l.....?...........<r....,..>_....................?.."....b"....."...........?...........?......l)&.R-..[]KYKYI6.m."..E......l)&.R-..[]KYKYI6.m."..E......s.&.R-..[.Ky.y.72.ne:W.N..S..=.s.~t:..C.C.C....;...o.........?!.o...[..V....o...[V.+\|....um[..V.+}...?.#..V....?.....C.P....."............?!..B.8.N%..d..}.d..8.N%....!..d.Y8.N>..N!..d.Y8..B.8.N%..d.{.o~.a.."........\...........?!..[.T....(6.f..$.!A.....%IHPB.kvmn.RJ......[.T..\..kvmn.RJ.

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057604
Encrypted:	false
SSDEEP:	3:APr4Y:APrV
MD5:	AC1981771A4F94EF40BAA578B55343BC
SHA1:	3B5C34AE086FBB783D36DA0CF885D8A7524B17C4
SHA-256:	B58B527345904E6AA688675309BE6441AB302B1863D52DB7D12DAD9E03014293
SHA-512:	69F5E441B7F026EC5A71A8FF836CC06ECEED14C337DCBC98E5A74E654A1E423F7C7A54D132627F1A999CF26088304EB54B8DB684168EA09B1B7A1F409D128C32
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlD5KfoAnoAQBIFDcMS_rwSBQ0d3M9e?alt=proto
Preview:	ChIKBw3DEv68GgAKBw0d3M9eGgA=

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	downloaded
Size (bytes):	120953
Entropy (8bit):	5.4801075096032275
Encrypted:	false
SSDEEP:	3072:GQFQRtdKh8EeaYshUS/BVCFcbWRxiBgBuVe5J0WJvdS:pFItdK2Ee7S/BVCFcbWRxiBgBuVe5J0d
MD5:	78EF7CAB784B16F42C602A84A0450C74
SHA1:	8EBD6D2C8C53D309C72D3CA6D67D19B70AC78207
SHA-256:	EFA52A0ED7764824EFB787DBBDABD8B76C40CFEE4056A5D861EED2113E6312DE
SHA-512:	3E19FA7AAB4D48FD7FA86D60F4C20A13B9174AC007FDB32F3A7D5A0098ED6CC5A354B1F8B24C39569DA40BCC265D1D66A340A238AE5D5A1A4E754957988EFBB0
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/0af6e327/player_ias.vflset/en_US/remote.js
Preview:	(function(g){var window=this;'use strict';var a8=function(a){g.Ep(a,"zx",Math.floor(2147483648Math.random()).toString(36)+Math.abs(Math.floor(2147483648Math.random())^g.kb()).toString(36));return a},b8=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.Dga(a.B,b,c)},OAb=function(a){if(a instanceof g.xt)return a;.if("function"==typeof a.Fk)return a.Fk(!1);if(g.ab(a)){var b=0,c=new g.xt;c.next=function(){for(;;){if(b>=a.length)return g.t2;if(b in a)return g.zt(a[b++]);b++}};.return c}throw Error("Not implemented");},PAb=function(a,b,c){if(g.ab(a))g.$b(a,b,c);.else for(a=OAb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},QAb=function(a,b){var c=[];.PAb(b,function(d){try{var e=g.Ov.prototype.B.call(this,d,!0)}catch(f){if("Storage: Invalid value was encountered"==f)return;throw f;}void 0===e?c.push(d):g.tla(e)&&c.push(d)},a);.return c},RAb=function(a,b){QAb(a,b).forEach(function(c){g.Ov.prototype.remove.call(this,c)},a)},SAb=function(a){if(a.qa){if(a.qa.locationOverri

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1482
Entropy (8bit):	4.795374622536908
Encrypted:	false
SSDEEP:	24:xtae68XeA5eCMSb5ezR9LS5eKeR9LM0ADOqTyTFXhX4F4FIiTcyF/bDFqFn:vanE5eCP5eznS5eKenM05qTyTdB4eaii
MD5:	E14B2CEB46CC8CD07F44722C6FFB90CC
SHA1:	61249023498E0ED653ABC590F36E8D8A8D224DE1
SHA-256:	8476BBD3414E158E98C009EFE02EBDD33F36D32052BB931FEF81FECC2E990369
SHA-512:	BDEF2E8C1D9B8C55C4FAB551A10EE5B51CBF258E5D54F6FA7E43E478FEAC202E6B3C455A5AD16063366AFAE1C955035DF90616CB486B837747ED951B098713C8
Malicious:	false
Reputation:	low
URL:	https://secure.trust-guard.com/page/css/split-cert.css
Preview:	body, td {.. font-family: sans-serif;.. font-size: 12px;..}....a {..}....a:hover {..}.....green-bg {.. background-color: #e0e9e6;..}.....white-box {.. background-image: url(/page/templates/certificates/images/white-box_mid.png);.. background-repeat: repeat-y;.. padding: 6px 17px 3px 17px;.. font-size: 11px;.. color: gray;..}.....white-box-top {.. background-image: url(/page/templates/certificates/images/white-box_top.png);.. background-repeat: no-repeat; .. height: 10px; ..}.....white-box-bottom {.. background-image: url(/page/templates/certificates/images/white-box_bot.png);.. background-repeat: no-repeat; .. height: 10px; ..}....ul.check {.. list-style-image:url(/page/images/check.png);..}....ul.check li {.. vertical-align: middle;..}....#disclaimer {.. display: none;..}...disclaimer {.. display: none;..}....#yes-vote {.. line-height: 20px;.. cursor: pointer;..}..#no-vote {.. line-height: 20px;.. cursor: pointer;..}...

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5360
Entropy (8bit):	4.1823373370899635
Encrypted:	false
SSDEEP:	96:Hszp10A1ErPnyLd9zbxcUCqhYWaHJv5ivJcDYqGQsHHfqbF5/D2gQzpR0d8jyc9:Hszpr1EryLfzSMhYWaHJvPdbefUbKfnL
MD5:	255A4ADED26071F662028780E94BC3DE
SHA1:	937665E4C7796AFE10107C42D8EA44F0A3884183
SHA-256:	66466573E4C2CFFDC636E13E76758DCF83F0CE235083C2098AD471CF419481D8
SHA-512:	2CE2CFCEEBC85C235C4A8DC44F5255E0C79EF6EB753D11B8EB2B375AE9401B93C9158CF3BAC812D1C10CCBFBB1BD628F3699514F524971684B9BDF9645514A0C
Malicious:	false
Reputation:	low
Preview:	<svg width="158.9" height="61.1" xmlns="http://www.w3.org/2000/svg">. <style type="text/css">.st0{fill:#000000;}</style>.. <g>. <title>background</title>. <rect fill="none" id="canvas_background" height="63.1" width="160.9" y="-1" x="-1"/>. </g>. <g>. <title>Layer 1</title>. <g id="svg_1">. <path fill="#ffffff" id="svg_2" d="m66.8,8.9c2.5,0.1 4.2,0.6 4.9,1.2c0.7,0.6 1.1,2.2 1.1,4.5l0,28.1c0,2.4 -0.4,3.9 -1.1,4.5c-0.7,0.6 -2.4,1 -4.9,1.1l0,1.2l18.4,0l0,-1.2c-2.5,-0.1 -4.1,-0.5 -4.9,-1.1c-0.7,-0.6 -1.1,-2.1 -1.1,-4.5l0,-28.1c0,-2.3 0.4,-3.9 1.1,-4.5c0.8,-0.6 2.4,-1.1 4.9,-1.2l0,-1.1l-18.4,0l0,1.1z" class="st0"/>. <path fill="#ffffff" id="svg_3" d="m123.9,47.4c-0.7,-0.5 -1.6,-1.1 -2.4,-2.1l-12.7,-16c3.5,-0.6 6.1,-1.7 8.2,-3.4c2,-1.7 3,-4 3,-7.2c0,-4.6 -2.3,-7.9 -6.7,-9.6c-2.4,-1 -5.4,-1.3 -9,-1.3l-17.4,0l0,1.1c2.3,0.2 3.7,0.6 4.3,1.3c0.7,0.7 1.1,2.1 1.1,4.4l0,27.2c0,2.7 -0.4,4.4 -1,5.1c-0.6,0.6 -2,1.1 -4.4,1.3l0,1.2l17.3,0l0,-1.2c-2.4,-0.1 -3.8,-0.6 -4.6,-1.2c-0.7,-0.6 -1.1,-2.1 -

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	downloaded
Size (bytes):	1055
Entropy (8bit):	5.312171042632955
Encrypted:	false
SSDEEP:	24:E1hfkXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E12XmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	25F3CA9CEECFADF1D06A8226E6419E5F
SHA1:	3B38EE70566F7F8A3FA39A1E70C73EE2DD516089
SHA-256:	B50DD0986C969FD95C7C1B8395EFB9455C6096E891E9388AFFDB1380D7E623FA
SHA-512:	8AF85BA3C2F2F7807807570EEB985CC89E35EBD1BAFFF5A970D409B58E6642AAC714EA7BEE14E1FFC0EEDE6A1E79AD6D709EDA9416193A3499620ACE7527F012
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/iframe_api
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/0af6e327\/www-widgetapi.vflset\/www-widgetapi.js';window['yt_embedsEnableIframeDefaultReferrerPolicy'] = true ;try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTag

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 642x147, components 3
Category:	downloaded
Size (bytes):	33759
Entropy (8bit):	7.9769515569693175
Encrypted:	false
SSDEEP:	768:4S7Kzr8C0qKhDvOLpbu5CpoPHwxa6lA9i0TWTLWucIFJopGKfRzNW6Q:1Gr8CVEvSJu5uoPQxa6lF0TuLWunFJoC
MD5:	0BAB17DBBBD79E72124CCFCCEA279A6F
SHA1:	AB90AEAC8841B07FE5983935A7817F10E1960AC3
SHA-256:	794529F7B01E1CE4C04E5AA752FF986491A15EC5CB48449D4BC1743ADDC7C12B
SHA-512:	E202EB80F8C949B4775A777763A850E190178D1985182BC801354D1D56F2FAA34FB8BBC1B451AFAE683743E193AF5D63867B80B6321EEC75D8FA720139A75F88
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/images-ez/top-left.jpg
Preview:	......JFIF.....d.d......Ducky.......A.....&Adobe.d...................5;..V0............................................................................................................................................................................................................................................ !1..0".@..PA45#%2$`3&.......................!1..AQa".q..2.4 ...BR.#3.0.b...Cs...@..r.5.$.S.tP....................1.!`Aa pQ...Pq.."@...2....................!1.AQa .q...0.....@P.......................I.....&Z..j...%..@..P.1....@..p...u.$=!.!.G..y.b..X.H...h...b.B...."..6..K....^K.......Jjz......z..s.s....q=g........B .3M....@0.....:N...q.B...."R....D. ..C...V..7l..r..1I...t...q.7..s..<............\|.W.}?/...g.....8..7....r.\|.....?.v..w<6>.....y.{M.:v......c.\|^....z..X.[H.....G...!.;..E.X...U.D...!..\..d.......L.D5T..s....K.}.......A.}O.M....\|...=.A..>..}Y.a.1Ju.~.]q..w.......<....g.....e....~X9..^..>....x..k..z.@.9 ...3R.q.B<w...4...]...R.A.P....G h..q.VnY,

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 780x30, components 3
Category:	dropped
Size (bytes):	1127
Entropy (8bit):	5.671296740822261
Encrypted:	false
SSDEEP:	24:gKX7BUM5kuZkMRenNLjNL1oxQ2bbbbbDOOGXbbbbbb7bbBnbbbbbYLIbbbbbxvUV:gQCM6uaM4nNLjNklbbbbb6O+bbbbbb7O
MD5:	C4E2453B0DFB685AA2E6224C8DC6FC20
SHA1:	D0F336F4081D2804B8AB78B9782DE5F9759A8CAF
SHA-256:	2F5E78775C197B63C2A91CAE5048A4494AB96BA09159D0C32FE622E243074CF9
SHA-512:	9DD77BECBBECFFE5B7B6EFC0C5C6494BDDAF06526FC7C34613F15D2C74A974790FAD69A18F2C1518A346C111AC3CEAF42D4540368B2F4070C3B0D449F346A852
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d............................e.............................................................................................................................................................................................................................`...@..45.6.....................@`...........................................1`A..@.................s.o.............................P.(..............W..]7.~...........................(\.X..................x............................J,..........tjC.U..M..B@..........................%..........c:5!................<..#.......P....o.$u.:....s\|.#.y.&Gys...............:Ht..$:.N..?.O..........a......d...'.O........?.D.........?.D.........?..=.G..d..................p.J.OJ, Z.oQ..(Y=(..g........?!Y.N%B.jq*.CS.P...J.........?!..L.>.<}2x.c........?!..\|.>.$}.H..................m..m..m..m..m..m..m..m..u..m..m..m.{m..m..m..m..m..m..m..m..m..m..m..m....m..m..m..m..m..m..m..m.[m..m..m..7..m..

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 97x31, components 3
Category:	dropped
Size (bytes):	2375
Entropy (8bit):	7.544047410261827
Encrypted:	false
SSDEEP:	48:Fn2R6OCpznVD9xVDIc5evDoPdDIQtcZcZ3rUYQ8OF:wI3z52Qd0yjZbhQF
MD5:	03BAD616A72B49C456E8B9F710FA1A62
SHA1:	9CA1B8C774870AF43FFD58118E0443436E11F2F8
SHA-256:	19B79432CA20F6DF6D1EE1AA13B6FADE2440118A805869F57600A14255FECA4E
SHA-512:	2654C95BC5EF9BBA24A8ACBB6F0BCB8927B774EF3994F94DDE155677F86E785C345CEB7255607B27062BC8A31CF71DCE65FD1A030F81FA376A9F67D69972EE2C
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......F.....&Adobe.d................D...........E..............................................................................................................................................a........................................................................................ ...!.12.......................!..1A"..#. aq..BR.Q..2...r34..................!.. @.q.0..1AQa.......................!1AQq .a...........................D.....\..}...M....M'<.-..k..{.Y........{0.q..c @.....im...tqrk0.)7.=..?...../Y.h...u.Q.2................'L.......{`!....m.>..$J..k.H....c..y.il..xq."=.jL.W..o.!..v.{7..z..&^.....Re\.z.>...[.c........zY..~.Y..P.(.2.L..............+.XJ..K.E.q.[m.$.....eh..4?.~.Js......kS,5.{I%..a.u.B..]..=U.............U.,.eYVU. ..;....Oj.U..?.a.....$..]@..qT.\.....F1.q........?..m....6.jyEWS....EEX......"C........?....0.A.........?..k.O.............[>.(.?..M8..i..jHu..F...g.1.f0...,...:T.'.(..4..U.. 3Q.[.....z.#..-.b.<.*..

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38798)
Category:	downloaded
Size (bytes):	299245
Entropy (8bit):	5.5404412213162955
Encrypted:	false
SSDEEP:	3072:2gAXdwAZVNSNcyzsz/Fm879CBPIrTW7CeMfK6St2nBsLq9igzoRxVJl:2RdwAFygz+GfK6St+aq9igzofh
MD5:	7AAC39157F0F59987EDC89CDFADB6124
SHA1:	50CF85AF321C59C42608372F3D9D5ECE26C97F7E
SHA-256:	B97EC819085E816197D9B4FD7F542DE52B50299A8EDC51222E5CE308DFD61702
SHA-512:	93181DC9BEE15E38D6C9E083086410D2EB5725E5435235464EBE629FABC4350D6536BD39449B86DB6D0968879239923166DF3163C4287DCC4978A3DBB6FFF0A5
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-KV978ZL
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"74",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__dbg"},{"function":"__c","vtp_value":"UA-22588183-3"},{"function":"__c","vtp_value":"UA-22588183-6"},{"function":"__c","vtp_value":"UA-22588183-8"},{"function":"__c","vtp_value":"UA-22588183-12"},{"function":"__remm","vtp_setDefaultValue":true,"vtp_input":["macro",2],"vtp_fullMatch":true,"vtp_replaceAfterMatch":true,"vtp_ignoreCase":true,"vtp_defaultValue":["macro",4],"vtp_map":["list",["map","key","((apps\|forms\|services\|rpr)\\.irs\\.gov($\|\\.googleweblight))\|survey\\.foresee\|gen[1-2]\\.pup\|va1pprdlwe

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 120x90, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	2326
Entropy (8bit):	7.904495824325416
Encrypted:	false
SSDEEP:	48:TxG61qxIic2MpY/jTHkpLvmXgQ2LL3ddciZFjr5s/CpcAZCNTDG:tV4Iic2NiLvhdf4whdLpcA8DG
MD5:	3F911B6CFAABF446A27903CBD71E44A8
SHA1:	81D9E4112D401A452B5714D7F2CF5AF4941ACFE0
SHA-256:	B9100ABC97320C4B1C5C45BC3DD9EEC38CBED0F6505984A4225B8BE3505B84AA
SHA-512:	26849347E457AB054AF1DBC969CEBA52A41C9F4979854A38B5E843F68E6BB40B4D5419372055B235DDC7B275ACF29DE7CF0E8A0499EF884A307B0C36967C983A
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ........x.Z.>9..D"!..... ....J...z....s.v..1...^.z..Y.b..?Y.6.f~.?............`....\|..G._.~Uq........k...^...~%..._.o.N.........q....w...~......g....?....r............}...m._.7a.E/...>.}.....`^.A.\|}...t..,e.)....`...~.....1.\W.1......$.b..}...8.R.E.q7).Exqr..q..Gt..e.a^.J..y..b.\|....h.K..%\|u.....g\|x.K.V.h..<...\.Sq.6.+)m.g..I..!"..:.$v.L.........\|.Hs.FT..h.I}9..7>,5..firR..\......q..[...z.^..}.W....K..ne.wi..:.?.S=b@.7.j.p2....e..O....e.a.o..>g. ..w.K.....(....y..0k.~..$..+....<8..^:.#.R......4....RB./l........%..%.....C..@...r..)6.M.d<......w.....7......x.Z.U...i..>.>J....9.>........f..$.xR.H..6w..m.4e........<. ...a....PD...O!x..../....k/c.....-"..` ...z.....'/5.}?..._...o.v.g>?..e.rd.^..j..M..n.......&....Wm....I..W.8.]K_k./.........7c}...c..6.........?...V.......,._............b.W).,...[/.d.....a....p.y..N..#..w&.f....D\\|z.r.......eV.G.-8....../"...zo..;.+..Bg.,.3G6......{e.A.....K......y.[@.cG....2TNyi.)]b~f..-.f.f.*q"O

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1305)
Category:	downloaded
Size (bytes):	46274
Entropy (8bit):	5.48786904450865
Encrypted:	false
SSDEEP:	768:aqNVrKn0VGhn+K7U1r2p/Y60fyy3/g3OMZht1z1prkfw1+9NZ5VA:RHrLVGhnpIwp/Y7cnz1RkLL5m
MD5:	E9372F0EBBCF71F851E3D321EF2A8E5A
SHA1:	2C7D19D1AF7D97085C977D1B69DCB8B84483D87C
SHA-256:	1259EA99BD76596239BFD3102C679EB0A5052578DC526B0452F4D42F8BCDD45F
SHA-512:	C3A1C74AC968FC2FA366D9C25442162773DB9AF1289ADFB165FC71E7750A7E62BD22F424F241730F3C2427AFFF8A540C214B3B97219A360A231D4875E6DDEE6F
Malicious:	false
Reputation:	low
URL:	https://ssl.google-analytics.com/ga.js
Preview:	(function(){var E;var g=window,n=document,p=function(a){var b=g._gaUserPrefs;if(b&&b.ioo&&b.ioo()\|\|a&&!0===g["ga-disable-"+a])return!0;try{var c=g.external;if(c&&c._gaUserPrefs&&"oo"==c._gaUserPrefs)return!0}catch(f){}a=[];b=n.cookie.split(";");c=/^\sAMP_TOKEN=\s(.?)\s$/;for(var d=0;d<b.length;d++){var e=b[d].match(c);e&&a.push(e[1])}for(b=0;b<a.length;b++)if("$OPT_OUT"==decodeURIComponent(a[b]))return!0;return!1};var q=function(a){return encodeURIComponent?encodeURIComponent(a).replace(/$/g,"%28").replace(/$/g,"%29"):a},r=/^(www\.)?google(\.com?)?(\.[a-z]{2})?$/,u=/(^\|\.)doubleclick\.net$/i;function Aa(a,b){switch(b){case 0:return""+a;case 1:return 1a;case 2:return!!a;case 3:return 1E3a}return a}function Ba(a){return"function"==typeof a}function Ca(a){return void 0!=a&&-1<(a.constructor+"").indexOf("String")}function F(a,b){return void 0==a\|\|"-"==a&&!b\|\|""==a}function Da(a){if(!a\|\|""==a)return"";for(;a&&-1<" \n\r\t".indexOf(a.charAt(0));)a=a.substring(1);for(;a&&-1<" \n\r\t".i

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Non-ISO extended-ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	44001
Entropy (8bit):	5.273562324383193
Encrypted:	false
SSDEEP:	384:50XfBSgSVnpCSSPjTgV1U1m4XWU1SBU1f9FTS/1+xHi7DJMU02ZTbeZAwuSEXAbT:50mOgiSD7DYonfbIuqVPk8vWwNq15k5
MD5:	87E09B76ADAE8663EDC311805ED56D88
SHA1:	DB0DC906420A119BFBFAC6A4F1C74BD9D63E85A9
SHA-256:	D925940E4A3D92063813262767B66C64060C59195389B19DD00CE1D04B30065E
SHA-512:	4232B9E43B5BE8ED09B79AEB1BCCD1D1128ABF4CDBCF201D7E922EC6701419AA73E253121B605BEB61283EF09C297695A4943AB566AD0236E1D72338A89F304A
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/1040now/1040now%20FAQ.htm
Preview:	<html>...<head>...<script type="text/javascript" >... var tabValue = document.URL;... var url = "";... if (tabValue.lastIndexOf("#") >= 0).. url = tabValue.substring(tabValue.lastIndexOf("#"));.. document.location = "../mobile/1040now FAQ.htm"+url; ...</script>....<title>1040Now User Guide</title>...</head>...<body>....<table id="Table2" height="20" cellSpacing="0" cellPadding="0" width="95%" align="center".....border="0">.....<b><font size="4">.......<TBODY>........<tr>.........<td><img src="images/1040header2004-01.gif" align="left" width="573" height="41">.........</td>........</tr>........<tr>.........<td height="20" bgcolor="#990000"></td>........</tr>........<tr>.........<td align="left"><font size="3"><em><strong><br>.............User Guide Table Of Content</strong></em></font><ul>...........<li>............<em><strong><a href="#1">General Information</a></strong></em>...........<li>............<em><strong><a href="#2">Tax Preparation</a></

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 13948, version 1.1
Category:	downloaded
Size (bytes):	13948
Entropy (8bit):	7.962285297410793
Encrypted:	false
SSDEEP:	384:mc0f6GPVR6W09snS1TVpmpzUGZFfFI9sC:m7hRk6S5cAGDFI9sC
MD5:	A390A96892E31E0C01EB351F75F9ED63
SHA1:	593A56AB3DDB754E3F101C4F439E86377B45FEBC
SHA-256:	F6E70BA38C7F19CA3EFE6D45B31601A9EFB5758B20EA3768214F44890DF805F1
SHA-512:	7C94055EE2D90C0D8CB62059989E459C5AFD75FDCBB1E47D762DD8D6F243DBC525AA88C594D9A7C72D0E2DB692ACEA00D24995690D486E6BE6E21D7253D0DA38
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/themes/custom/pup_base/fonts/source-sans-pro/fonts/sourcesanspro-italic.woff
Preview:	wOFF......6\|......`.........................GDEF...D...6...@.D.rGPOS...\|..........GSUB...l...S...p....OS/2.......Y...`Z..:cmap.......E.....0..gasp...d............glyf...l..%...;.....head../<...6...6...hhea../t..."...$....hmtx../..........."/loca..1.........R.Dpmaxp..3x... ... ...Zname..3.........$8>.post..4x.......1....x.....@0.....}tF`..%2j.....j......T.b...\|..Kj9V..Z....x..V..[7.}.afff(33333.`...0s.....!.=P.r..g..;.o.m......+....$.....8....y..{.-.?..(....V...G.D..9.<..".._..2..uq&n.x..c...L...........h..h..p....x......!...h..8.I.A.!.../1..P.V,..:3Bf.PF..123[u.d..D...(.y#..0U..Bl..L.....0...LD..F..x..2k0.k..n(P.Nx.&./\|.Z.T .QI..q.Ej.).........`....}..Dc."p=.".r..../......d0.....\|n.4..........."....hL...'.j..I.....J!`..'.W.0.e.o.....'......S.4]...#..O&y"B..C..h&.e.od...9.b.e,....\.(..}..."..t.&..4..d.#.D.."9.....N.....(.^.0...&y...-y......Q~...d.......Q...(...9.?.^Z.l&...i..'V.X..}qs.&S:.........\D./.6.y..A...zqd...B.8....l........*..[E..^.

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 49x29, components 3
Category:	dropped
Size (bytes):	864
Entropy (8bit):	7.018793898057645
Encrypted:	false
SSDEEP:	12:VvIgtlZcU0efmdcAeI8OSxZvLTrAd0+ZZEL8X2O7s5Eiy+UfBlEGCqO3J:tztlZcqOh8OcLTMd9Z481sE0sx63J
MD5:	81B88EF99B0FE67E0736C5B35360968F
SHA1:	CAA1CB6D9D3DE9760B42D93CA4A0E552B50E2E8F
SHA-256:	300BB56D73D4C8791674BA841C3692512206AAAEA6E0F5F2E738035B51FCAD96
SHA-512:	D399A7C0BF13AC7D9C81434E45A836A4E6F4AB0CD02C60076BDC917CD702F59CF70AD8502378E34A7BD9D305F52FDC30D7657864585C8FB6BCC2AED7051FB748
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...................................................................................................................................................1......................................................................................!....1Aaq"...Q...B..2R.#S........................!.1AQa#"2.............?.F..1.sZ..]....d.zH.8e..[L..G?.....@.7.J.>........C.....gt..lm$l..;#H..^..T9.\.)..m.[..q......O.........0Q....x.LY.....R..q..-.)D...l..bP.v...ly...D..&+.e.}.`.....o..U~`....x...B..<..&. ".'^.w;V..rYFr.......\...{y..z.d.NcT..U.:M.N.s.NXD0.h...YDBB.......Fl.....k..".Z..........!.Tt.,j._..l.-....M.d7.gm...CjR/6.. ....-&i?...$5!.W7.tNP.U:..:.N...A.m..v.D..^6cFq........}.>..Wz.~..a.O.-y.....S.>...C-..2.~.<.`Cgg.7.....l.'?p.Y.x.l...8.l.m..}..-\.I.......<..n.xAS..L..6S..w...9...?..

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 29840, version 1.0
Category:	downloaded
Size (bytes):	29840
Entropy (8bit):	7.980144837257093
Encrypted:	false
SSDEEP:	768:Ut3KGxLoG4CYS1vVMZrO+5yohji5mbAn9KfvZ:MjZoG4TS1vVmrOOX8n9KnZ
MD5:	625D98ECFF29A47D3A9A720C51EE14D2
SHA1:	0B156C4DF64E20FABD067692A10229CBBFA8E4E0
SHA-256:	DB101D5470C62A501CA711F2DD6BCE3599F88532B8F0AE71D0CC7C5DC06222CE
SHA-512:	793B2CEEE13F2A92EB83B14147A55CF5A1239A56C297ECBD17F50FB847C4334A8F0E186C90A1CBC0F7D539E1BB9768E9BBA1BC640F6E9B89C7D6EA6470906868
Malicious:	false
Reputation:	low
URL:	https://www.irs.gov/themes/custom/pup_base/fonts/source-sans-pro/fonts/sourcesanspro-regular-webfont.woff
Preview:	wOFF......t........ ........................BASE.......>...P.s..FFTM............v.7.GDEF......."...&.'..GPOS...<...<..5...GSUB...x..........OS/2...t...X...`gZ..cmap............HD..cvt ...X...V...V....fpgm...........eS./.gasp...d............glyf...l..P:...Pt;..head..b....6...6....hhea..b........$.`..hmtx..c....:....x.Y.loca..e<..........^maxp..g.... ... ....name..g$......'..%..post..q.........3...prep..s........h.W..webf..t.........n Y.x.c`d``..b..>........<.&.7......<...6..`d`...a`.......(................$..............-..x.c`d``..b1.9.&.F \|..,@.& f.`....8..x..[.h...?/.hL.uo....i;..v.f.s.jj.mi.\f.....Z...'#+..)R... C2)2.........J)..e.{.Dx.<B.....=.~...^.?.7..{...}...{~..(ADU.B{......T.....*=B.QO.T.W.jhZ....S........>=..?.u.U.~.'..E).!.a'9)..o.U%.).xJ.i.-.-.....R7}H..<}....N,.?.G...uj.JZ......2.....a...."z.b.F.......h9@k..6.B.)....!..C.M:.8/P......4.fs....W....9.,.....;.}nc.,jF...i.9...VV#7bdVZ...+....z..4\|.C.>...y..........=FMjM.?..>..%.._.\.x...&.R.mC...1..7...@

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5211
Entropy (8bit):	5.082895631270573
Encrypted:	false
SSDEEP:	96:U/iiE08G1WmgNB/VNFVvTgAhhwiLGhnc+Ieb9sjSgqzi58yxsu+TEG:C0LmgbVNfTgAhhwiyDoqaxLQEG
MD5:	F3F48A7DCDA507B2711B6DED8D4A453A
SHA1:	997C18C1894973D266F0EEAB47976CEB50BB2F24
SHA-256:	E58828320933312E4A8B007C5EE7CC85809CE91C716BB6D21A5EBEDA36F9515E
SHA-512:	E09C1B22F16726B81F4FAD301C917B7463BBB539063A867F6A888D70AB5B26CB99A2C7E2EFC3C4A579015F5066A60E3CAF020C70B8C32EE5F86584F3EE9862CC
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/mobile/css/style.css
Preview:	body {...font-family: "proxima-nova", sans-serif;...font-weight: 400;..}....p {...color: #717171;...line-height: 1.4;...font-size: 18px;..}....a, a:active, a:focus, a:hover {outline: none;}.....nav>li>a:hover, .nav>li>a:focus {...background-color: rgba(238, 238, 238, 0);..}.....navbar {margin: 0; border: 0; border-radius: 0;}.....navbar-toggle {...padding: 0;...border: 0;...margin: 0;..}.....section-1 {background-color: #0093AF;}.....site-header {...padding-top: 30px;...padding-bottom: 30px;..}....#p-our-team .site-header,..#p-contact .site-header {.. padding-top: 10px;.. padding-bottom: 10px;..}..#p-our-team .logo,..#p-contact .logo {.. margin-top: 6px;.. margin-bottom: 0;..}..#p-our-team .nav,..#p-contact .nav {.. margin-top: 8px;..}.....logo {.. margin-top: 7px;.. font-family: 'Nova Square', cursive;..}.....logo a {color: #fff;}.....logo a:hover {text-decoration: none;}.....ion-navicon {...font-size: 3em;...color: #fff;..}.....navbar-nav>li>a {.. color: #ffff

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 642x147, components 3
Category:	dropped
Size (bytes):	33759
Entropy (8bit):	7.9769515569693175
Encrypted:	false
SSDEEP:	768:4S7Kzr8C0qKhDvOLpbu5CpoPHwxa6lA9i0TWTLWucIFJopGKfRzNW6Q:1Gr8CVEvSJu5uoPQxa6lF0TuLWunFJoC
MD5:	0BAB17DBBBD79E72124CCFCCEA279A6F
SHA1:	AB90AEAC8841B07FE5983935A7817F10E1960AC3
SHA-256:	794529F7B01E1CE4C04E5AA752FF986491A15EC5CB48449D4BC1743ADDC7C12B
SHA-512:	E202EB80F8C949B4775A777763A850E190178D1985182BC801354D1D56F2FAA34FB8BBC1B451AFAE683743E193AF5D63867B80B6321EEC75D8FA720139A75F88
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......A.....&Adobe.d...................5;..V0............................................................................................................................................................................................................................................ !1..0".@..PA45#%2$`3&.......................!1..AQa".q..2.4 ...BR.#3.0.b...Cs...@..r.5.$.S.tP....................1.!`Aa pQ...Pq.."@...2....................!1.AQa .q...0.....@P.......................I.....&Z..j...%..@..P.1....@..p...u.$=!.!.G..y.b..X.H...h...b.B...."..6..K....^K.......Jjz......z..s.s....q=g........B .3M....@0.....:N...q.B...."R....D. ..C...V..7l..r..1I...t...q.7..s..<............\|.W.}?/...g.....8..7....r.\|.....?.v..w<6>.....y.{M.:v......c.\|^....z..X.[H.....G...!.;..E.X...U.D...!..\..d.......L.D5T..s....K.}.......A.}O.M....\|...=.A..>..}Y.a.1Ju.~.]q..w.......<....g.....e....~X9..^..>....x..k..z.@.9 ...3R.q.B<w...4...]...R.A.P....G h..q.VnY,

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2734
Entropy (8bit):	5.028077812225126
Encrypted:	false
SSDEEP:	48:RBVDfGBtr7YbVUdXeze9Jj2dK+/HReXRppUl2tBJ5erO1wAogMI+/HR0wz:RvGBZ7MVUgfwpptBJkrDsMJfCwz
MD5:	F681F310929816F1313273FD5C01AD7E
SHA1:	03D8C40D6C68A84D8C9028B1D4FF48284BBBAE52
SHA-256:	BF6B331C60DB89A21336BF35760A89AC32F983C1EF94CBD3856ADD65684A7E32
SHA-512:	2F61196A9B92E9C4AEE7281F47B0670A84C6FA15A82601EF9DE3D7C8E028A3C6661FFE01807CE0284B201831B5B9FBC83D7B81151F2B21BB57D76051DE1B529C
Malicious:	false
Reputation:	low
URL:	https://www.1040now.net/mobile/sslgeotrust.html
Preview:	<html>.. <head>.. <meta name="viewport" content="width=device-width, initial-scale=1">.. <title>1040NOW</title>.... CSS -->.. <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.min.css">.. <link rel="stylesheet" href="http://code.ionicframework.com/ionicons/1.5.2/css/ionicons.min.css">.. <link rel="stylesheet" href="css/owl.carousel.min.css">.. <link rel="stylesheet" href="css/style.css">.... font -->.. <link href='http://fonts.googleapis.com/css?family=Nova+Square' rel='stylesheet'>.. <link rel="stylesheet" href="font/font.css">.. .<style type="text/css">.....auto-style1 {.....margin-top: 7px;.....font-family: "Bookman Old Style";.....font-size: x-large;.....color: #FFFFFF;....}....</style>.. </head>.. <body id="">.. <div id="wrapper">.. <section class="section-1">.. <div class="container">.. <header cla

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 120x90, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2824
Entropy (8bit):	7.92431916165163
Encrypted:	false
SSDEEP:	48:bFe1ywSMoMpzBbyeaY3NQhd3+yWxux1lA6rZV2gYLq3PaRAQoh:bFyy/RyfaY9aRCuzlA0nY+PaS1h
MD5:	248D60882687DFCC824EA36FB6AC4276
SHA1:	BCDABB1C6E3364ABF4E61E89A7703E4746360843
SHA-256:	9CF2A2FDA395748B6A51B0EB6952BAC44CBC6CFEB91C41CA18E3A97832CA3755
SHA-512:	9C14A589B3309DBD14157489CE2E47AF929D882825024272400A0B2D729916F2F7B364C882DF23374043873F92027922712C925D0C4E393C255FBC957AF20604
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi_webp/qP5c-ZOMct4/default.webp
Preview:	RIFF....WEBPVP8 .....0...x.Z.>A..D"...Y..(....ip2%;..%.&~el....s..>..9......_....=).m}@~.~......I.U.......W.o.O.......O.../.1.....Kq.b?y.......y?(..?...7..E.....-...c...O.7.O...?.z......W....]/b......g.\|... ./..../.s+.^..F...d....J./e{(....r......o}.".o.#.!..kJ....%3....-Uj~.Sq..u...X.C..-.b.`'...p;[M..c..h...HQI.s....d,.....M.}...>BX.h.......o.#^.Th...J....e.vA.7.S......5y.4.x!JS...;_..G.n..........X.>C.......B....x ..yP.BG%b...h..fR.-.........$.............A...p....\|.k.Q..............7l.V.,...`{...=Od.....j1....t'o.<..O.=}.......M[@..x}....,..!^.D]L.~F9"Q..h...N..)......:...Jax........S....F...f..O.o{w.L...Xq...O...T<}G...M.(}(6;N.....$m....RB.i)Y.<......vVy7^F.D..g.L+D....yK.._\..sb.....e6.Y..;gX..+.h.&.......Mu9.O....*.....f"......."{...xX........x.......j.6.<.Ikoa.G:..n....a.2f.#o...e....n..z.J..Y\.#Vx......5.......V.A#..YD{.`Y....Y..Rr<.....\|..p.^\|.....?.O..j9...;U.hT..v,..r.O.../.e.p}x...e..FI..}..j@o...e.]]..R..

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4657
Entropy (8bit):	4.21532241940096
Encrypted:	false
SSDEEP:	96:7CoKDwePoRjDjg3iLfRdmZIQuYBPnlrlo2ipWjCTBSwLIfrAj:0Dwu4jD5f/myK1nxl2tHLo4
MD5:	30ED8195A81DAAC2EAE4A6B52113AF26
SHA1:	A9165A0C6B2DB5FB01EF72461BDC045188C1AC91
SHA-256:	0F43618580DD31A8096EFFD969CA2AF7E26BA8555AB8D732E5B32FE2EF8E8CF6
SHA-512:	9775B65C9B3C674D8884ACF0FA76424025FA9AB1F5829345CB998478D6916AC703CE53310C62157548CE50A1FBCC2833BEAD0BDEE6F9CF79E759805A17E7105B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="meet" viewBox="0 0 421 147" role="img">. <title id="irsLogoTitle">IRS Logo</title>. <desc id="irsLogoDesc">IRS Logo with link</desc>. <style type="text/css">.. .st0 {fill:#FFFFFF;}. </style>. <path class="st0" d="M153.3,18.9c-1.8-3.1-20.8-11.7-48.2-17.3-11.3,12-11.3,16.8-11.5,18.8s3.7,7.1,7.8,12.3c7.5,9.6,9.5,11.4,10.6,14.3,2.2,5.5-1.4,17.9-4,29.3,0,0-6.7-24.2-9.8-39.9a2.8,2.8,0,0,1,.3-2.3c-16.9-1.6-28.3-2.4-30.3,6.4-7.8,0-11.3,2.2-12.1,3.5-2,3.3.4,10.1,1.7,13.5,1.1-2.7,8-2.2,10.3-2.1s1,0.6,1.3,1.2V89.4h-20l-17.3,46c8,3.8,16.4,6.8,21.6,6.8s18.1-6.7,19.9-6.8,14.7,6.8,20,6.8,13.5-2.6,21.6-6.8L98,89.4H78.1V58.3c-0.3-2.1-1.3-2.8-2-2.9H86.2c-1.5-5.9-3.5-10-6.3-10.3a13.1,13.1,0,0,1,2.6-2.7H74.7c0.8-4.1,10.9-2.6,15.3-2.3,4.5,22.1,12.9,51.7,13.3,52.2s7.5,3.1,8.4,3.2c4.1-8.8,10.3-34.8,10.7-41.1,5.2,1.8,3.1,8.7,2,15.5-5.9,35.7-10.5,46.4-11

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (435), with no line terminators
Category:	downloaded
Size (bytes):	435
Entropy (8bit):	4.938295498043445
Encrypted:	false
SSDEEP:	12:cHTTyOGq/BWEBabt42tO2yPXXrlrxtSjLFkkjl:6TyOGq/BWEBCt4kO2qJcpJ
MD5:	642BB6C34A06BBBC8A77593BE82CE6A4
SHA1:	E15D59B78D23923DB8723101F547775413F3D3A9
SHA-256:	CE5DBB2CDB85126FDC9D774971A56F8848DBEE977A382BD512A5F8B49EA8C727
SHA-512:	61E45E7BD89474825458A06AE5120F93265D8862C74DC01055F3A25F6360492E95F92280A80330BA24997E52B5E83C20BBE3212FC56206FD8E69380A0044139F
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/svg/icons/linkedin.js
Preview:	!function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({linkedin:'<path fill="#FFF" d="M6.227 12.61h4.19v13.48h-4.19zm2.095-6.7a2.43 2.43 0 0 1 0 4.86c-1.344 0-2.428-1.09-2.428-2.43s1.084-2.43 2.428-2.43m4.72 6.7h4.02v1.84h.058c.56-1.058 1.927-2.176 3.965-2.176 4.238 0 5.02 2.792 5.02 6.42v7.395h-4.183v-6.56c0-1.564-.03-3.574-2.178-3.574-2.18 0-2.514 1.7-2.514 3.46v6.668h-4.187z"/>'})}(a2a)

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 96x20, components 3
Category:	downloaded
Size (bytes):	1548
Entropy (8bit):	7.464445368473459
Encrypted:	false
SSDEEP:	24:QS/i7LNp3T6mqrl0CAdjgF4nFA3UFdt5tUxeyrwNCU8quH0:Yhp32mqrl0zlgWnykFdtfUxeQauH0
MD5:	C75B86E3A52FD28E0ED0739CA96D5307
SHA1:	DB8792ABEFDD9C64D0B305477E2488F50535C1FA
SHA-256:	CC71B8EBF292BE25B1972450B7C963CE6DB4E99B7D83818F8C18C8FA0F4EAC0A
SHA-512:	A5C75D0768D3F9C3679883E342E9B6BDBB49F0746593A7A54D1EBAC4A029349EEBBF50399F368DCC6ABFB49068714EFC16374CDB09282B08A2D10ED90F576665
Malicious:	false
Reputation:	low
URL:	https://secure.trust-guard.com/page/templates/certificates/images/ssl-img.jpg
Preview:	......JFIF.....d.d......Ducky.......F......Adobe.d...................................................................................................................................................`.............m..........................................................................!".2#.1A3.B$b.%..............................?....G&.>..T.0h.......j.%.1.Ya".R....a.:B"....].E.9....c.ro.r...lw&l...s.@$.S.L..X..C@o...\e..!Y....3.8.;......h..........Nm..#....QwX.A..hB...s"...&...l..P1.d.a.(0....i.O..9[l!.=.$.e..C.&.p.C...$.....D.=B0. .;.FE.xG$.$f.4H...~Pl..V..\...P..8.....tJ...s[...P..."..#..]...3..#..#...V.........>:}.p..q.z.C......&.....P.....u..9.._x..x.I.C.e..z.............0... !...r.(..s_.b.......g?.Q..A..f..V..&.J........N....;,f,q.<.w........'n...e......`3u.(.N0...:Y....dY.r......n....!z..GO.%.).,S..O!.'.......sf.q~..........B&j.........IZF)`% ..!....w<....Q...&../.s.{K..&....&S.U.......` ......x{<n......?`F.....".f.7~c...L.Ae"S.{f.Cf3<}.2'..Q<SWEy.

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3
Category:	dropped
Size (bytes):	2827
Entropy (8bit):	7.813251264632497
Encrypted:	false
SSDEEP:	48:lwc4gYEvpGUqd1nBLeu9Nx7pde0aDwpTSWN/FUU2qbVMRv9xwO5VWPfo1Glg8/dU:lG7B/x7pw0acpGWN/FUUrMRvIO5VYfoZ
MD5:	FEC736417049A6DBB499A2D12AE998C1
SHA1:	0AB3DBA4C660B8F3E14EFB253498E7DC673F0917
SHA-256:	5928AB02C7E82C783E6D322941E4559BAFECC02F6C3EDB6A61F52D9AF4F28354
SHA-512:	3D64FD04C1EEEA8F55F189863287574D010AFA32E96E6F2049E9CC03CEDC1E49AB6A9E78BF488F06D99017F78677887EE0D8470C37C1FF9596AD31AADA5B6AC4
Malicious:	false
Reputation:	low
Preview:	......JFIF..................................................."... ....7. %%(.(..-1-&0"'(&...........&...'&''&&&2&&(&2222&&&&&&&&&&&&2&2&&22&&&&22&2&&2&&&&......Z.x.."........................................J........................!..1A"Qa....2BRq..#.......bes....Ccr......$34DES..............................".......................!.1AQ."a2............?.....?&./...........I.......J...8o .Iq..G#F..6=...'....?...uv.FQN,...!b.....Q......XWV..n..........\|..(....7~......-.........).'.k..Jm..~.....g...C.o....b....f...6.1Ff@<..Y....>q...~...7.....>"(^WA#.a.<.3...n.x..]8P.Nl.._5o........o.{j..FU.g....x.k........SS..z9.1..p8..5....G..a....<6.Tu.0........LLX8.YY..z....U.....l....{.,..Y..5.....`w.,.tl+0..%..P..p...+7.....N..18.....q,t...../}mO...Y.:j....4...2..I((p..[.\......K....75..0...Mr.m..E...#3.-.c{...U.\|+.........G..L.X.D9....[..mE.[.ugp..^H.*.F.t.lN....Xye.!...m.\...I.S.I...S..Y...FJ0..t...eI..b.....P-.X[.........\+....2Ksj.f.?O..Y......s..P.x.....pmO....

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3
Category:	dropped
Size (bytes):	3670
Entropy (8bit):	7.85033532348119
Encrypted:	false
SSDEEP:	96:mOGyLU5wGjGA7NTuGqYY8Zs30ZQzy8i5rAgor4ZEdwZ04mOKS8:/GwUuMHxa2Yl30ZQzy8id1ZEdwm4zKP
MD5:	DEBA772D1F2A9648249DFC54E5BDE3F6
SHA1:	B807949959275D8B6FB67AB179D47371DCC1D5B9
SHA-256:	20CA93F357F272947E8D03E654A78575AD6C7B7C027D22D41BC017FB599C5395
SHA-512:	F515306133DF6F40E5FE7D423500535CA3B2B45286ACC931477F495A60404C73F0EA81DCEF0783EB5E577741C279C81E165D6AC3024E87515B4E291B6A363025
Malicious:	false
Reputation:	low
Preview:	......JFIF.............Exif..II.......1...............Google..............................................................................................................................................D.D............................................5.............................!"..#12AQ....346qsv...................................5.......................!.1AQa..q..."2....B..3.RSr..............?.D...\|..+.? .....I....xW@.`V.....W........xC.h.....}.....a.H.P..nYA...R..X..L.X.=.....i..j....H.N?o..V.Wr...p.$V..?~..$.W...fR.=..xo9E.+l....s....#.a..v..a......i.....t.gL....y..?h.E..... ..<..PW....Q9h..2M@y5S..<(....X..:....dF....od..S.I.e...G...'....s.n.%.).@$.d...Z.B\u)V.......u....N.....j.r.{.o.x.w...,......+......W..IQ ..... ...=kf.m....7.N.......jv..c#.....m76k.+..R:..#....5.=.g.>.i.!!....B......O.....C{+)m$..8..^5-.nr{e.:.Yo.*..MgE...1.J.{..V&)....7......qt...+...e....:!B@..l..3;.n.R...;}:~j..i\|..P...j..F%.n.>.\.J3.}............!....r..)#2.O.#...:.

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1335)
Category:	downloaded
Size (bytes):	1569
Entropy (8bit):	5.369127779967127
Encrypted:	false
SSDEEP:	48:Xpm6RFvCzWzAiWqSeTqn1PByqka1cUj54/vD978:5pfpy1Pkqka1cS52b978
MD5:	0CC3A63FE10060AF4A349E5DF666EEFE
SHA1:	3E8D3925B550345123F2CAB26568221FD4154F9C
SHA-256:	92FCA55833F48B4289AC8F1CEDD48752B580FCE4EC4B5D81670B8193D6E51B54
SHA-512:	5801C9DB98C4998480772CA5AD71F0E400C4756AE713AAB0358CA6593B3A3426499D6DEC81A768C861CBBCD8394DD8C6D647628A13F124FF3A1119F9B7793E8C
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/plugins/ua/linkid.js
Preview:	(function(){var e=window,h=document,k="replace";var m=function(a,c,d,b,g){c=encodeURIComponent(c)[k](/$/g,"%28")[k](/$/g,"%29");a=a+"="+c+"; path="+(d\|\|"/")+"; ";g&&(a+="expires="+(new Date((new Date).getTime()+g)).toGMTString()+"; ");b&&"none"!=b&&(a+="domain="+b+";");b=h.cookie;h.cookie=a;return b!=h.cookie},p=function(a){var c=h.body;try{c.addEventListener?c.addEventListener("click",a,!1):c.attachEvent&&c.attachEvent("onclick",a)}catch(d){}};var q=function(a,c,d,b){this.get=function(){for(var b=void 0,c=[],d=h.cookie.split(";"),l=new RegExp("^\\s"+a+"=\\s(.?)\\s$"),f=0;f<d.length;f++){var n=d[f].match(l);n&&c.push(decodeURIComponent(n[1][k](/%28/g,"(")[k](/%29/g,")")))}for(d=0;d<c.length;d++)c[d]&&(b=c[d]);return b};this.set=function(g){return m(a,g,b,c,1E3*d)};this.remove=function(){return m(a,"",b,c,-100)}};var t=function(a,c){var d=void 0;if("function"==typeof a.get&&"function"==typeof a.set){var b=c\|\|{},g=b.hasOwnProperty("cookieName")?b.cookieName:"_gali",r=b.hasOwnProper

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (531)
Category:	downloaded
Size (bytes):	220979
Entropy (8bit):	5.6154075312842
Encrypted:	false
SSDEEP:	1536:5ihMF2MaJLH2DmDPzuz22/ym8ON9lxC/ZciTJYt/oLlUApL2KVX7NxCpK0u3jiJr:MtJ7DR0lfiJdKK0u3iYZhnjCiCNiWbuE
MD5:	A70E911421DA4EB47E035D6F25388F76
SHA1:	C910977D4DE4C1239CA2023D63BB04032BB3C1E9
SHA-256:	85B38E7085AC3E5D7B57603C31D75140522FA3A4A70C0A944AD7337B80451E1A
SHA-512:	2C78498874F88CFD516F84F27417D28FADDE24EDDDB8B0FF5BC0AC2EF13C3CF4E05F9B75A63735040DCDF271B401FBEEB0320F2C61FC3C07A9FEF4EF08BAF406
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/0af6e327/www-widgetapi.vflset/www-widgetapi.js
Preview:	(function(){'use strict';var r;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var da=ca(this);function v(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.v("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,va

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 19, 2024 07:31:17.092444897 CEST	49678	443	192.168.2.4	104.46.162.224
Apr 19, 2024 07:31:19.154910088 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 19, 2024 07:31:28.764926910 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 19, 2024 07:31:28.786864042 CEST	49735	80	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:28.787235975 CEST	49736	80	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:28.877306938 CEST	49737	80	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:28.931962967 CEST	80	49735	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:28.932065010 CEST	49735	80	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:28.932305098 CEST	49735	80	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:28.936822891 CEST	80	49736	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:28.936889887 CEST	49736	80	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.010719061 CEST	80	49737	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.010802031 CEST	49737	80	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.071125984 CEST	80	49735	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.125066996 CEST	49735	80	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.157968998 CEST	49735	80	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.158823967 CEST	49736	80	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.311048985 CEST	80	49735	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.311079025 CEST	80	49735	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.311176062 CEST	49735	80	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.311849117 CEST	80	49736	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.311865091 CEST	80	49736	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.311913967 CEST	49736	80	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.344604969 CEST	49736	80	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.474299908 CEST	80	49736	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.474368095 CEST	80	49736	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.474385023 CEST	80	49736	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.474473953 CEST	49736	80	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.552643061 CEST	49740	443	192.168.2.4	64.233.176.106
Apr 19, 2024 07:31:29.552712917 CEST	443	49740	64.233.176.106	192.168.2.4
Apr 19, 2024 07:31:29.552793980 CEST	49740	443	192.168.2.4	64.233.176.106
Apr 19, 2024 07:31:29.553019047 CEST	49740	443	192.168.2.4	64.233.176.106
Apr 19, 2024 07:31:29.553036928 CEST	443	49740	64.233.176.106	192.168.2.4
Apr 19, 2024 07:31:29.565996885 CEST	49741	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.566018105 CEST	443	49741	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.566082954 CEST	49741	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.566370010 CEST	49741	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.566384077 CEST	443	49741	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.566871881 CEST	49742	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.566946983 CEST	443	49742	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.567014933 CEST	49742	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.567214966 CEST	49742	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.567243099 CEST	443	49742	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.772584915 CEST	443	49740	64.233.176.106	192.168.2.4
Apr 19, 2024 07:31:29.772974014 CEST	49740	443	192.168.2.4	64.233.176.106
Apr 19, 2024 07:31:29.773005009 CEST	443	49740	64.233.176.106	192.168.2.4
Apr 19, 2024 07:31:29.774049044 CEST	443	49740	64.233.176.106	192.168.2.4
Apr 19, 2024 07:31:29.774158955 CEST	49740	443	192.168.2.4	64.233.176.106
Apr 19, 2024 07:31:29.775372982 CEST	49740	443	192.168.2.4	64.233.176.106
Apr 19, 2024 07:31:29.775453091 CEST	443	49740	64.233.176.106	192.168.2.4
Apr 19, 2024 07:31:29.828969955 CEST	49740	443	192.168.2.4	64.233.176.106
Apr 19, 2024 07:31:29.828991890 CEST	443	49740	64.233.176.106	192.168.2.4
Apr 19, 2024 07:31:29.853862047 CEST	443	49742	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.854512930 CEST	49742	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.854533911 CEST	443	49742	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.855604887 CEST	443	49742	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.855669975 CEST	49742	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.855750084 CEST	443	49741	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.858819008 CEST	49742	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.858933926 CEST	443	49742	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.859306097 CEST	49741	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.859328985 CEST	443	49741	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.859870911 CEST	49742	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.859880924 CEST	443	49742	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.860985994 CEST	443	49741	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.861052990 CEST	49741	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.863465071 CEST	49741	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.863564014 CEST	443	49741	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.873624086 CEST	49740	443	192.168.2.4	64.233.176.106
Apr 19, 2024 07:31:29.904782057 CEST	49742	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.904798031 CEST	49741	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:29.904836893 CEST	443	49741	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:29.956918001 CEST	49741	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.119168043 CEST	443	49742	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.119194984 CEST	443	49742	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.119201899 CEST	443	49742	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.119252920 CEST	443	49742	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.119338989 CEST	49742	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.119354963 CEST	443	49742	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.119406939 CEST	49742	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.119406939 CEST	49742	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.162827015 CEST	49742	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.162870884 CEST	443	49742	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.164170980 CEST	49743	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.164226055 CEST	443	49743	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.164278030 CEST	49743	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.168159962 CEST	49744	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.168180943 CEST	443	49744	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.168234110 CEST	49744	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.170205116 CEST	49741	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.170490026 CEST	49743	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.170509100 CEST	443	49743	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.171081066 CEST	49745	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.171133041 CEST	443	49745	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.171210051 CEST	49745	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.171787024 CEST	49744	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.171801090 CEST	443	49744	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.172367096 CEST	49746	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.172426939 CEST	443	49746	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.172498941 CEST	49746	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.172907114 CEST	49747	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.172944069 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.173005104 CEST	49747	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.173563004 CEST	49745	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.173590899 CEST	443	49745	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.174098969 CEST	49746	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.174134970 CEST	443	49746	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.174623013 CEST	49747	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.174634933 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.216125011 CEST	443	49741	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.305917025 CEST	443	49741	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.305972099 CEST	443	49741	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.306078911 CEST	49741	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.306139946 CEST	443	49741	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.306171894 CEST	443	49741	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.306232929 CEST	49741	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.330024004 CEST	49748	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:30.330075026 CEST	443	49748	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:30.330142975 CEST	49748	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:30.330677032 CEST	49748	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:30.330693960 CEST	443	49748	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:30.333084106 CEST	49741	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.333149910 CEST	443	49741	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.361857891 CEST	49749	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.361938000 CEST	443	49749	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.362039089 CEST	49749	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.362485886 CEST	49749	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.362515926 CEST	443	49749	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.447654963 CEST	443	49743	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.449666023 CEST	443	49744	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.463089943 CEST	49744	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.463126898 CEST	443	49744	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.463320017 CEST	49743	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.463334084 CEST	443	49743	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.464268923 CEST	443	49744	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.464422941 CEST	443	49743	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.464899063 CEST	49744	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.465096951 CEST	443	49744	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.465439081 CEST	49743	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.465626955 CEST	443	49743	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.466041088 CEST	49744	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.466095924 CEST	49743	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.471126080 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.472067118 CEST	443	49745	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.473206043 CEST	49745	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.473249912 CEST	443	49745	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.473419905 CEST	49747	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.473484039 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.474289894 CEST	443	49746	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.474504948 CEST	49746	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.474581003 CEST	443	49746	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.474642038 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.474705935 CEST	49747	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.474716902 CEST	443	49745	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.474769115 CEST	49745	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.475162983 CEST	49747	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.475238085 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.475471020 CEST	49745	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.475548029 CEST	443	49745	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.475641966 CEST	49747	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.475660086 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.475683928 CEST	49745	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.475693941 CEST	443	49745	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.476124048 CEST	443	49746	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.476191998 CEST	49746	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.476735115 CEST	49746	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.476825953 CEST	443	49746	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.479114056 CEST	49746	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.479131937 CEST	443	49746	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.508148909 CEST	443	49744	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.512121916 CEST	443	49743	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.530121088 CEST	49745	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.530126095 CEST	49746	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.530127048 CEST	49747	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.553781986 CEST	443	49748	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:30.576823950 CEST	49748	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:30.576899052 CEST	443	49748	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:30.580895901 CEST	443	49748	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:30.581007004 CEST	49748	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:30.582515001 CEST	49748	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:30.582735062 CEST	443	49748	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:30.582818031 CEST	49748	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:30.582840919 CEST	443	49748	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:30.623431921 CEST	49748	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:30.644954920 CEST	443	49749	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.645451069 CEST	49749	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.645473957 CEST	443	49749	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.646545887 CEST	443	49749	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.646604061 CEST	49749	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.647010088 CEST	49749	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.647068977 CEST	443	49749	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.647349119 CEST	49749	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.647353888 CEST	443	49749	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.689907074 CEST	49749	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.727466106 CEST	443	49743	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.727521896 CEST	443	49743	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.727612972 CEST	49743	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.727657080 CEST	443	49743	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.727722883 CEST	443	49743	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.727905989 CEST	49743	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.743273020 CEST	443	49746	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.743300915 CEST	443	49746	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.743393898 CEST	443	49746	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.743504047 CEST	49746	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.743504047 CEST	49746	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.744205952 CEST	49743	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.744225979 CEST	443	49743	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.744844913 CEST	49750	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.744884968 CEST	443	49750	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.744940996 CEST	49750	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.745431900 CEST	49750	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.745444059 CEST	443	49750	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.746046066 CEST	443	49745	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.746068954 CEST	443	49745	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.746078014 CEST	443	49745	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.746131897 CEST	49745	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.746150970 CEST	443	49745	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.746162891 CEST	443	49745	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.746227026 CEST	49745	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.750777960 CEST	49746	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.750807047 CEST	443	49746	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.751348019 CEST	49751	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.751421928 CEST	443	49751	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.751506090 CEST	49751	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.752624035 CEST	49751	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.752655983 CEST	443	49751	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.753901005 CEST	49745	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.753914118 CEST	443	49745	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.754365921 CEST	49752	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.754393101 CEST	443	49752	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.754456997 CEST	49752	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.755088091 CEST	49752	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.755109072 CEST	443	49752	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.860461950 CEST	443	49744	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.860519886 CEST	443	49744	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.860563040 CEST	443	49744	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.860588074 CEST	49744	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.860635042 CEST	443	49744	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.860652924 CEST	49744	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.860685110 CEST	49744	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.861248970 CEST	443	49744	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.861318111 CEST	49744	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.861323118 CEST	443	49744	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.861352921 CEST	443	49744	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.861385107 CEST	49744	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.861383915 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.861448050 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.861469030 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.861485958 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.861515045 CEST	49747	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.861530066 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.861548901 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.861566067 CEST	49747	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.861592054 CEST	49747	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.861598969 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.861609936 CEST	49747	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.861655951 CEST	49747	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.871500969 CEST	443	49744	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.871551037 CEST	49744	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.872013092 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.872056961 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.872082949 CEST	49747	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.872136116 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.872174978 CEST	49747	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.877990961 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.878057003 CEST	49747	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.878071070 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.878106117 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.878156900 CEST	49747	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.878235102 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.878287077 CEST	49747	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.881330967 CEST	49744	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.881366968 CEST	443	49744	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.882338047 CEST	49753	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.882388115 CEST	443	49753	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.882462025 CEST	49753	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.883817911 CEST	49753	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.883850098 CEST	443	49753	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.885449886 CEST	49747	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.885468960 CEST	443	49747	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.886460066 CEST	49754	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.886483908 CEST	443	49754	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.886543989 CEST	49754	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.890667915 CEST	49754	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.890690088 CEST	443	49754	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.939457893 CEST	49755	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.939512014 CEST	443	49755	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.939563036 CEST	49755	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.940224886 CEST	49756	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.940284967 CEST	443	49756	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.940351009 CEST	49756	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.940949917 CEST	49757	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.940994024 CEST	443	49757	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.941056967 CEST	49757	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.941979885 CEST	49757	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.942001104 CEST	443	49757	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.942622900 CEST	49756	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.942648888 CEST	443	49756	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.943162918 CEST	49755	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:30.943178892 CEST	443	49755	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:30.954488039 CEST	443	49748	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:30.954547882 CEST	443	49748	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:30.954633951 CEST	49748	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:30.954654932 CEST	443	49748	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:30.954709053 CEST	49748	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:30.955411911 CEST	443	49748	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:30.955543041 CEST	443	49748	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:30.955601931 CEST	49748	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:31.031790972 CEST	443	49750	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.033288956 CEST	49750	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.033308983 CEST	443	49750	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.033530951 CEST	49748	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:31.033560038 CEST	443	49748	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:31.033660889 CEST	443	49750	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.034327984 CEST	49750	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.034388065 CEST	443	49750	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.034748077 CEST	49750	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.038233995 CEST	443	49751	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.038691998 CEST	49751	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.038710117 CEST	443	49751	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.039225101 CEST	443	49751	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.039880991 CEST	49751	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.039971113 CEST	443	49751	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.040144920 CEST	49751	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.046196938 CEST	443	49752	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.047190905 CEST	49752	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.047228098 CEST	443	49752	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.048765898 CEST	443	49752	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.048827887 CEST	49752	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.049839973 CEST	49752	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.049918890 CEST	443	49752	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.050187111 CEST	49752	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.050196886 CEST	443	49752	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.076154947 CEST	443	49750	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.084134102 CEST	443	49751	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.091207027 CEST	49752	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.164180994 CEST	443	49753	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.164917946 CEST	49753	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.164994955 CEST	443	49753	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.166564941 CEST	443	49753	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.166637897 CEST	49753	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.167749882 CEST	49753	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.167872906 CEST	443	49753	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.168498993 CEST	49753	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.168517113 CEST	443	49753	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.169970989 CEST	443	49754	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.183893919 CEST	49754	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.183928967 CEST	443	49754	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.187757015 CEST	443	49754	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.187824011 CEST	49754	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.189049006 CEST	49754	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.189295053 CEST	443	49754	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.189454079 CEST	49754	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.189465046 CEST	443	49754	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.195020914 CEST	443	49749	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.195261955 CEST	443	49749	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.195334911 CEST	49749	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.209980011 CEST	49753	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.212542057 CEST	49749	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.212583065 CEST	443	49749	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.213615894 CEST	49758	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.213663101 CEST	443	49758	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.213718891 CEST	49758	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.215847969 CEST	49758	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.215863943 CEST	443	49758	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.223269939 CEST	443	49757	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.227580070 CEST	443	49756	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.229327917 CEST	443	49755	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.243263960 CEST	49754	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.245557070 CEST	49757	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.245599985 CEST	443	49757	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.246701956 CEST	49756	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.246753931 CEST	443	49756	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.248394966 CEST	443	49756	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.248481035 CEST	49756	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.249239922 CEST	443	49757	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.249310017 CEST	49757	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.249582052 CEST	49755	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.249609947 CEST	443	49755	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.250272989 CEST	49756	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.250416994 CEST	443	49756	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.250874043 CEST	49757	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.251049995 CEST	443	49757	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.251277924 CEST	49756	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.251292944 CEST	443	49756	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.251327038 CEST	49757	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.251339912 CEST	443	49757	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.253274918 CEST	443	49755	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.253341913 CEST	49755	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.279083967 CEST	49755	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.279257059 CEST	443	49755	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.279985905 CEST	49755	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.280003071 CEST	443	49755	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.294148922 CEST	49756	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.294152975 CEST	49757	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.301444054 CEST	443	49750	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.301666975 CEST	443	49750	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.301721096 CEST	49750	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.304892063 CEST	443	49751	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.304917097 CEST	443	49751	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.304966927 CEST	49751	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.304991961 CEST	443	49751	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.305012941 CEST	443	49751	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.305054903 CEST	49751	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.311567068 CEST	443	49752	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.311625957 CEST	443	49752	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.311680079 CEST	49752	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.311765909 CEST	443	49752	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.311803102 CEST	443	49752	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.311852932 CEST	49752	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.314338923 CEST	49750	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.314376116 CEST	443	49750	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.315650940 CEST	49759	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.315696955 CEST	443	49759	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.315763950 CEST	49759	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.319484949 CEST	49759	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.319520950 CEST	443	49759	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.324570894 CEST	49755	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.425446987 CEST	443	49753	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.425600052 CEST	443	49753	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.425679922 CEST	49753	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.433373928 CEST	443	49754	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.433393002 CEST	443	49754	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.433451891 CEST	49754	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.433465004 CEST	443	49754	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.433506012 CEST	49754	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.481159925 CEST	49751	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.481199980 CEST	443	49751	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.481559038 CEST	49760	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.481612921 CEST	443	49760	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.481667042 CEST	49760	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.486318111 CEST	49760	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.486336946 CEST	443	49760	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.487458944 CEST	49752	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.487524986 CEST	443	49752	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.488234043 CEST	49761	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.488261938 CEST	443	49761	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.488308907 CEST	49761	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.489742994 CEST	49761	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.489758968 CEST	443	49761	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.494143009 CEST	443	49758	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.494530916 CEST	49758	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.494544983 CEST	443	49758	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.495031118 CEST	443	49758	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.495641947 CEST	49758	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.495726109 CEST	443	49758	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.495989084 CEST	49758	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.509283066 CEST	49753	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.509346962 CEST	443	49753	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.509910107 CEST	49762	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.509943008 CEST	443	49762	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.509991884 CEST	49762	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.511121988 CEST	49762	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.511137962 CEST	443	49762	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.511485100 CEST	49754	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.511513948 CEST	443	49754	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.511991024 CEST	49763	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.512012005 CEST	443	49763	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.512059927 CEST	49763	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.513322115 CEST	49763	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.513334036 CEST	443	49763	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.536115885 CEST	443	49758	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.598264933 CEST	443	49759	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.609255075 CEST	443	49755	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.609275103 CEST	443	49756	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.609282970 CEST	443	49755	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.609297991 CEST	443	49755	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.609318972 CEST	443	49756	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.609330893 CEST	443	49756	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.609340906 CEST	49755	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.609359980 CEST	443	49756	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.609371901 CEST	443	49755	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.609381914 CEST	49756	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.609406948 CEST	443	49755	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.609409094 CEST	443	49756	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.609419107 CEST	49756	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.609448910 CEST	443	49756	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.609451056 CEST	49755	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.609482050 CEST	443	49757	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.609484911 CEST	49756	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.609533072 CEST	443	49757	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.609582901 CEST	49757	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.609601974 CEST	443	49757	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.609641075 CEST	49757	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.609646082 CEST	443	49757	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.609724045 CEST	443	49757	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.609761953 CEST	49757	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.618290901 CEST	49759	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.618305922 CEST	443	49759	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.618880033 CEST	443	49759	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.619831085 CEST	49759	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.619905949 CEST	443	49759	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.620907068 CEST	49759	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.654725075 CEST	49756	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.654746056 CEST	443	49756	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.655478954 CEST	49755	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.655508041 CEST	443	49755	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.664122105 CEST	443	49759	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.680886030 CEST	49757	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.680915117 CEST	443	49757	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.763039112 CEST	443	49758	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.763072014 CEST	443	49758	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.763118029 CEST	49758	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.763145924 CEST	443	49758	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.763181925 CEST	443	49758	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.763298035 CEST	49758	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.764621019 CEST	49758	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.764642000 CEST	443	49758	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.764827013 CEST	49764	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.764874935 CEST	443	49764	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.764930964 CEST	49764	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.765515089 CEST	49764	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.765527964 CEST	443	49764	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.785190105 CEST	443	49761	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.785449028 CEST	49761	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.785473108 CEST	443	49761	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.786061049 CEST	443	49760	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.786241055 CEST	49760	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.786258936 CEST	443	49760	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.786925077 CEST	443	49761	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.786984921 CEST	49761	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.787379026 CEST	49761	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.787446022 CEST	443	49761	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.787564039 CEST	49761	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.787569046 CEST	443	49761	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.788188934 CEST	443	49760	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.788341999 CEST	49760	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.788899899 CEST	49760	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.789027929 CEST	443	49760	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.789237976 CEST	49760	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.789248943 CEST	443	49760	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.798691988 CEST	443	49762	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.799005985 CEST	49762	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.799020052 CEST	443	49763	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.799032927 CEST	443	49762	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.799362898 CEST	49763	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.799379110 CEST	443	49763	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.799530983 CEST	443	49762	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.799947977 CEST	49762	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.800036907 CEST	443	49762	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.800406933 CEST	49762	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.800854921 CEST	443	49763	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.800920010 CEST	49763	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.801630020 CEST	49763	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.801701069 CEST	443	49763	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.801789045 CEST	49763	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.801795006 CEST	443	49763	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.838566065 CEST	49760	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.838740110 CEST	49761	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.844124079 CEST	443	49762	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.854628086 CEST	49763	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.854784012 CEST	443	49759	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.854813099 CEST	443	49759	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.854917049 CEST	443	49759	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.854921103 CEST	49759	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.854975939 CEST	49759	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.855732918 CEST	49759	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.855771065 CEST	443	49759	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.856153011 CEST	49765	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.856198072 CEST	443	49765	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.856249094 CEST	49765	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.856724977 CEST	49765	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:31.856738091 CEST	443	49765	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:31.911463976 CEST	49766	443	192.168.2.4	23.201.212.130
Apr 19, 2024 07:31:31.911528111 CEST	443	49766	23.201.212.130	192.168.2.4
Apr 19, 2024 07:31:31.911597013 CEST	49766	443	192.168.2.4	23.201.212.130
Apr 19, 2024 07:31:31.913878918 CEST	49766	443	192.168.2.4	23.201.212.130
Apr 19, 2024 07:31:31.913894892 CEST	443	49766	23.201.212.130	192.168.2.4
Apr 19, 2024 07:31:32.046562910 CEST	443	49764	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.046986103 CEST	49764	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.047019005 CEST	443	49764	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.047349930 CEST	443	49761	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.047358036 CEST	443	49760	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.047377110 CEST	443	49761	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.047382116 CEST	443	49760	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.047390938 CEST	443	49760	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.047424078 CEST	49761	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.047435045 CEST	443	49760	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.047454119 CEST	443	49761	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.047462940 CEST	49760	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.047462940 CEST	49760	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.047475100 CEST	443	49761	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.047485113 CEST	443	49760	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.047487974 CEST	49761	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.047494888 CEST	443	49764	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.047508001 CEST	443	49760	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.047514915 CEST	49761	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.047617912 CEST	49760	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.048300028 CEST	49764	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.048384905 CEST	443	49764	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.048650980 CEST	49764	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.049650908 CEST	49761	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.049668074 CEST	443	49761	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.050559044 CEST	49760	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.050579071 CEST	443	49760	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.061156988 CEST	443	49763	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.061182976 CEST	443	49763	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.061223984 CEST	49763	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.061245918 CEST	443	49763	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.061264992 CEST	443	49763	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.061281919 CEST	49763	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.061311960 CEST	49763	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.061403036 CEST	443	49762	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.061459064 CEST	443	49762	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.061511993 CEST	49762	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.061539888 CEST	443	49762	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.061578989 CEST	49762	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.061585903 CEST	443	49762	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.061700106 CEST	443	49762	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.061736107 CEST	49762	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.062846899 CEST	49763	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.062859058 CEST	443	49763	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.063694000 CEST	49762	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.063705921 CEST	443	49762	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.096122026 CEST	443	49764	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.132267952 CEST	443	49766	23.201.212.130	192.168.2.4
Apr 19, 2024 07:31:32.132339001 CEST	49766	443	192.168.2.4	23.201.212.130
Apr 19, 2024 07:31:32.135926008 CEST	443	49765	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.139286995 CEST	49766	443	192.168.2.4	23.201.212.130
Apr 19, 2024 07:31:32.139296055 CEST	443	49766	23.201.212.130	192.168.2.4
Apr 19, 2024 07:31:32.139553070 CEST	443	49766	23.201.212.130	192.168.2.4
Apr 19, 2024 07:31:32.141782999 CEST	49765	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.141810894 CEST	443	49765	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.142306089 CEST	443	49765	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.150047064 CEST	49765	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.150146008 CEST	443	49765	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.150202036 CEST	49765	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.182790995 CEST	49766	443	192.168.2.4	23.201.212.130
Apr 19, 2024 07:31:32.191520929 CEST	49765	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.191531897 CEST	443	49765	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.270016909 CEST	49766	443	192.168.2.4	23.201.212.130
Apr 19, 2024 07:31:32.303894997 CEST	49767	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.303968906 CEST	443	49767	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.304280043 CEST	49767	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.305401087 CEST	49767	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.305428028 CEST	443	49767	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.305929899 CEST	49768	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.305975914 CEST	443	49768	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.308007002 CEST	49768	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.309324026 CEST	49768	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.309333086 CEST	443	49768	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.312113047 CEST	443	49766	23.201.212.130	192.168.2.4
Apr 19, 2024 07:31:32.315515041 CEST	49769	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.315543890 CEST	443	49769	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.315999985 CEST	49769	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.316345930 CEST	49769	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.316358089 CEST	443	49769	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.316514969 CEST	443	49764	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.316545010 CEST	443	49764	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.316606998 CEST	49764	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.316628933 CEST	443	49764	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.316643000 CEST	443	49764	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.316682100 CEST	49764	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.317833900 CEST	49770	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.317866087 CEST	443	49770	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.317919970 CEST	49770	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.318449974 CEST	49770	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.318466902 CEST	443	49770	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.319272995 CEST	49764	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.319288015 CEST	443	49764	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.344221115 CEST	49771	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.344254971 CEST	443	49771	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.344448090 CEST	49771	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.345060110 CEST	49772	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.345110893 CEST	443	49772	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.345442057 CEST	49771	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.345452070 CEST	443	49771	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.345469952 CEST	49772	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.345726013 CEST	49772	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.345741987 CEST	443	49772	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.374769926 CEST	443	49766	23.201.212.130	192.168.2.4
Apr 19, 2024 07:31:32.374847889 CEST	443	49766	23.201.212.130	192.168.2.4
Apr 19, 2024 07:31:32.374887943 CEST	49766	443	192.168.2.4	23.201.212.130
Apr 19, 2024 07:31:32.395001888 CEST	443	49765	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.395101070 CEST	443	49765	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.395183086 CEST	49765	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.419272900 CEST	49766	443	192.168.2.4	23.201.212.130
Apr 19, 2024 07:31:32.419296980 CEST	443	49766	23.201.212.130	192.168.2.4
Apr 19, 2024 07:31:32.419321060 CEST	49766	443	192.168.2.4	23.201.212.130
Apr 19, 2024 07:31:32.419327021 CEST	443	49766	23.201.212.130	192.168.2.4
Apr 19, 2024 07:31:32.422278881 CEST	49765	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.422303915 CEST	443	49765	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.435851097 CEST	49773	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.435899019 CEST	443	49773	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.435991049 CEST	49773	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.437043905 CEST	49773	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.437057972 CEST	443	49773	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.439280033 CEST	49774	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:32.439311981 CEST	443	49774	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:32.439379930 CEST	49774	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:32.439965010 CEST	49774	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:32.439980030 CEST	443	49774	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:32.541363955 CEST	49778	443	192.168.2.4	23.201.212.130
Apr 19, 2024 07:31:32.541420937 CEST	443	49778	23.201.212.130	192.168.2.4
Apr 19, 2024 07:31:32.541493893 CEST	49778	443	192.168.2.4	23.201.212.130
Apr 19, 2024 07:31:32.542079926 CEST	49778	443	192.168.2.4	23.201.212.130
Apr 19, 2024 07:31:32.542092085 CEST	443	49778	23.201.212.130	192.168.2.4
Apr 19, 2024 07:31:32.585792065 CEST	443	49767	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.590539932 CEST	443	49768	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.590704918 CEST	49767	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.590734005 CEST	443	49767	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.591242075 CEST	443	49767	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.591279984 CEST	49768	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.591299057 CEST	443	49768	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.591764927 CEST	443	49768	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.591984034 CEST	49767	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.592065096 CEST	443	49767	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.594166994 CEST	49768	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.594248056 CEST	443	49768	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.594405890 CEST	49767	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.594444036 CEST	49768	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.596234083 CEST	443	49770	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.601038933 CEST	443	49769	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.602889061 CEST	49769	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.602909088 CEST	443	49769	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.603045940 CEST	49770	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.603060007 CEST	443	49770	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.604424953 CEST	443	49769	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.604537964 CEST	49769	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.604554892 CEST	443	49770	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.604607105 CEST	49770	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.635365009 CEST	443	49772	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.636113882 CEST	443	49768	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.636123896 CEST	443	49767	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.636949062 CEST	443	49771	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.653217077 CEST	443	49774	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:32.663558960 CEST	49770	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.663707018 CEST	443	49770	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.666613102 CEST	49769	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.666764975 CEST	443	49769	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.667752981 CEST	49771	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.667769909 CEST	443	49771	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.668551922 CEST	49772	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.668582916 CEST	443	49772	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.669231892 CEST	443	49771	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.669234037 CEST	49774	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:32.669262886 CEST	443	49774	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:32.669286013 CEST	49771	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.669660091 CEST	443	49772	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.669708014 CEST	49772	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.670311928 CEST	443	49774	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:32.670368910 CEST	49774	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:32.675829887 CEST	49771	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.675899029 CEST	443	49771	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.678328037 CEST	49772	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.678406954 CEST	443	49772	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.678910017 CEST	49770	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.678919077 CEST	443	49770	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.684263945 CEST	49774	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:32.684341908 CEST	443	49774	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:32.684541941 CEST	49769	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.684560061 CEST	443	49769	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.685329914 CEST	49771	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.685342073 CEST	443	49771	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.685524940 CEST	49772	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.685538054 CEST	443	49772	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.685709000 CEST	49774	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:32.685734987 CEST	443	49774	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:32.710352898 CEST	443	49773	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.710587978 CEST	49773	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.710616112 CEST	443	49773	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.711064100 CEST	443	49773	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.711404085 CEST	49773	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.711477995 CEST	443	49773	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.711540937 CEST	49773	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.726998091 CEST	49770	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.727021933 CEST	49769	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.727021933 CEST	49774	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:32.727024078 CEST	49772	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.728291988 CEST	49771	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.754487038 CEST	443	49778	23.201.212.130	192.168.2.4
Apr 19, 2024 07:31:32.754561901 CEST	49778	443	192.168.2.4	23.201.212.130
Apr 19, 2024 07:31:32.756119013 CEST	443	49773	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:32.756422997 CEST	49778	443	192.168.2.4	23.201.212.130
Apr 19, 2024 07:31:32.756431103 CEST	443	49778	23.201.212.130	192.168.2.4
Apr 19, 2024 07:31:32.756659985 CEST	443	49778	23.201.212.130	192.168.2.4
Apr 19, 2024 07:31:32.759257078 CEST	49773	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:32.759659052 CEST	49778	443	192.168.2.4	23.201.212.130
Apr 19, 2024 07:31:32.804111958 CEST	443	49778	23.201.212.130	192.168.2.4
Apr 19, 2024 07:31:32.880471945 CEST	443	49774	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:32.880496979 CEST	443	49774	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:32.880546093 CEST	49774	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:32.880579948 CEST	443	49774	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:32.880623102 CEST	49774	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:32.881937981 CEST	443	49774	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:32.881998062 CEST	443	49774	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:32.882180929 CEST	49774	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:32.883033991 CEST	49774	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:32.883053064 CEST	443	49774	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:32.883066893 CEST	49774	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:32.883107901 CEST	49774	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:32.963340998 CEST	443	49778	23.201.212.130	192.168.2.4
Apr 19, 2024 07:31:32.963419914 CEST	443	49778	23.201.212.130	192.168.2.4
Apr 19, 2024 07:31:32.963536024 CEST	49778	443	192.168.2.4	23.201.212.130
Apr 19, 2024 07:31:32.976363897 CEST	49778	443	192.168.2.4	23.201.212.130
Apr 19, 2024 07:31:32.976407051 CEST	443	49778	23.201.212.130	192.168.2.4
Apr 19, 2024 07:31:33.079333067 CEST	443	49773	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.079556942 CEST	443	49773	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.079648018 CEST	49773	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.093525887 CEST	49773	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.093554974 CEST	443	49773	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.101739883 CEST	443	49767	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.101763010 CEST	443	49767	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.101777077 CEST	443	49767	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.101829052 CEST	49767	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.101855993 CEST	443	49767	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.101882935 CEST	49767	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.101907969 CEST	49767	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.103137970 CEST	443	49767	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.103154898 CEST	443	49767	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.103193998 CEST	49767	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.103207111 CEST	443	49767	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.103247881 CEST	49767	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.106754065 CEST	443	49767	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.106827974 CEST	443	49767	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.106884956 CEST	49767	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.107258081 CEST	49767	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.107273102 CEST	443	49767	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.108470917 CEST	49779	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.108510971 CEST	443	49779	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.108628035 CEST	49779	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.112235069 CEST	49779	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.112255096 CEST	443	49779	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.139245987 CEST	443	49770	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.139357090 CEST	443	49770	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.139398098 CEST	49770	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.141063929 CEST	49770	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.141078949 CEST	443	49770	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.141617060 CEST	49780	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.141650915 CEST	443	49780	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.141712904 CEST	49780	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.143485069 CEST	49780	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.143496037 CEST	443	49780	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.166984081 CEST	443	49769	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.167093992 CEST	443	49769	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.167144060 CEST	49769	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.198339939 CEST	443	49771	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.198343992 CEST	443	49772	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.198364019 CEST	443	49772	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.198370934 CEST	443	49771	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.198381901 CEST	443	49771	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.198434114 CEST	49772	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.198445082 CEST	443	49772	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.198474884 CEST	49771	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.198498964 CEST	443	49771	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.198502064 CEST	49772	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.198513985 CEST	443	49771	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.198554039 CEST	49771	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.262309074 CEST	49769	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.262342930 CEST	443	49769	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.264070988 CEST	443	49768	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.264108896 CEST	443	49768	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.264137983 CEST	443	49768	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.264169931 CEST	49768	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.264194012 CEST	443	49768	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.264219046 CEST	49768	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.264245987 CEST	49768	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.268362045 CEST	49781	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.268393993 CEST	443	49781	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.268455029 CEST	49781	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.269758940 CEST	49771	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.269787073 CEST	443	49771	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.270219088 CEST	443	49768	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.270243883 CEST	443	49768	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.270282030 CEST	49768	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.270287037 CEST	443	49768	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.270349026 CEST	49768	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.271187067 CEST	443	49768	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.271269083 CEST	49768	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.271274090 CEST	443	49768	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.271300077 CEST	443	49768	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.271312952 CEST	49768	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.271349907 CEST	49768	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.271770954 CEST	49782	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.271785975 CEST	443	49782	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.271836996 CEST	49782	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.273617029 CEST	49772	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.273653030 CEST	443	49772	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.282331944 CEST	49783	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.282351017 CEST	443	49783	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.282407045 CEST	49783	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.290088892 CEST	49781	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.290102005 CEST	443	49781	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.290807962 CEST	49782	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.290817976 CEST	443	49782	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.292079926 CEST	49783	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.292088985 CEST	443	49783	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.344257116 CEST	49768	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.344274044 CEST	443	49768	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.351166010 CEST	49784	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.351213932 CEST	443	49784	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.351275921 CEST	49784	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.396588087 CEST	443	49779	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.422703028 CEST	443	49780	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.438441038 CEST	49784	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.438477993 CEST	443	49784	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.443691969 CEST	49779	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.443716049 CEST	443	49779	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.445008039 CEST	443	49779	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.445827961 CEST	49780	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.445857048 CEST	443	49780	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.446535110 CEST	443	49780	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.456161022 CEST	49779	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.456372023 CEST	443	49779	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.463725090 CEST	49780	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.463814020 CEST	443	49780	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.482974052 CEST	49779	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.483067989 CEST	49780	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.524122000 CEST	443	49779	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.528120995 CEST	443	49780	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.573195934 CEST	443	49783	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.573347092 CEST	443	49781	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.573476076 CEST	49783	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.573501110 CEST	443	49783	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.573596001 CEST	49781	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.573605061 CEST	443	49781	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.574536085 CEST	443	49782	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.574680090 CEST	443	49781	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.574733973 CEST	49781	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.574873924 CEST	49782	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.574897051 CEST	443	49782	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.575012922 CEST	443	49783	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.575078964 CEST	49783	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.575201988 CEST	49781	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.575248003 CEST	443	49781	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.575495958 CEST	49783	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.575572968 CEST	443	49783	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.575701952 CEST	49781	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.575706959 CEST	443	49781	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.575772047 CEST	49783	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.575778961 CEST	443	49783	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.576359987 CEST	443	49782	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.576415062 CEST	49782	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.577091932 CEST	49782	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.577155113 CEST	443	49782	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.577214956 CEST	49782	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.577222109 CEST	443	49782	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.622996092 CEST	49783	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.623013020 CEST	49781	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.623019934 CEST	49782	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.656248093 CEST	443	49779	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.656352997 CEST	443	49779	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.656419992 CEST	49779	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.657243013 CEST	49779	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.657280922 CEST	443	49779	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.657640934 CEST	49785	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.657684088 CEST	443	49785	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.657795906 CEST	49785	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.658240080 CEST	49785	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.658266068 CEST	443	49785	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.700440884 CEST	443	49780	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.700473070 CEST	443	49780	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.700536013 CEST	49780	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.700571060 CEST	443	49780	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.700587988 CEST	443	49780	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.700618029 CEST	49780	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.700654030 CEST	49780	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.704868078 CEST	49780	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.704885006 CEST	443	49780	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.705257893 CEST	49786	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.705303907 CEST	443	49786	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.705375910 CEST	49786	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.705759048 CEST	49786	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.705774069 CEST	443	49786	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.717293978 CEST	443	49784	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.730282068 CEST	49784	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.730314016 CEST	443	49784	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.731950998 CEST	443	49784	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.732065916 CEST	49784	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.761571884 CEST	49784	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.761778116 CEST	443	49784	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.762115955 CEST	49784	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.762142897 CEST	443	49784	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.810525894 CEST	49784	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.835478067 CEST	443	49782	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.835490942 CEST	443	49781	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.835494995 CEST	443	49781	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.835505009 CEST	443	49782	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.835510015 CEST	443	49782	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.835551023 CEST	443	49782	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.835594893 CEST	443	49781	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.835602045 CEST	443	49782	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.835629940 CEST	49782	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.835645914 CEST	49781	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.835645914 CEST	49781	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.835788965 CEST	49782	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.835884094 CEST	443	49783	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.835911989 CEST	443	49783	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.835956097 CEST	49783	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.835983038 CEST	443	49783	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.836025953 CEST	443	49783	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.836036921 CEST	49783	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.836072922 CEST	49783	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.837950945 CEST	49781	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.837969065 CEST	443	49781	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.838563919 CEST	49787	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.838623047 CEST	443	49787	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.838681936 CEST	49787	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.839010000 CEST	49783	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.839020967 CEST	443	49783	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.839293957 CEST	49788	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.839319944 CEST	443	49788	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.839374065 CEST	49788	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.839616060 CEST	49782	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.839622974 CEST	443	49782	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.839833975 CEST	49789	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.839849949 CEST	443	49789	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.839916945 CEST	49789	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.840323925 CEST	49787	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.840348005 CEST	443	49787	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.840976954 CEST	49788	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.840987921 CEST	443	49788	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.841356993 CEST	49789	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.841367960 CEST	443	49789	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.933248997 CEST	443	49785	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.933621883 CEST	49785	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.933643103 CEST	443	49785	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.934104919 CEST	443	49785	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.934614897 CEST	49785	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.934684992 CEST	443	49785	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.935025930 CEST	49785	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.980137110 CEST	443	49785	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.983118057 CEST	443	49784	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.983153105 CEST	443	49784	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.983211040 CEST	49784	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.983243942 CEST	443	49784	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.983278036 CEST	443	49784	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.983285904 CEST	49784	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.983323097 CEST	49784	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.993561983 CEST	443	49786	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.994447947 CEST	49786	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.994508982 CEST	443	49786	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.995716095 CEST	443	49786	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.996798992 CEST	49786	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.997035980 CEST	443	49786	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:33.997421980 CEST	49786	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.998173952 CEST	49784	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:33.998205900 CEST	443	49784	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.040122032 CEST	443	49786	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.126909971 CEST	443	49789	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.128904104 CEST	49789	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.128941059 CEST	443	49789	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.130505085 CEST	443	49789	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.130580902 CEST	49789	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.131359100 CEST	49789	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.131480932 CEST	443	49789	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.132051945 CEST	49789	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.132061958 CEST	443	49789	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.132411957 CEST	443	49787	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.132983923 CEST	49787	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.133008003 CEST	443	49787	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.133428097 CEST	443	49787	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.135035038 CEST	49787	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.135147095 CEST	443	49787	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.136239052 CEST	443	49788	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.136979103 CEST	49788	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.137003899 CEST	443	49788	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.137099981 CEST	49787	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.138108015 CEST	443	49788	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.154077053 CEST	49788	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.154294968 CEST	443	49788	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.155567884 CEST	49788	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.178186893 CEST	49789	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.184119940 CEST	443	49787	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.196156025 CEST	443	49788	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.199626923 CEST	443	49785	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.199719906 CEST	443	49785	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.199786901 CEST	49785	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.199820042 CEST	443	49785	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.199865103 CEST	49785	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.199917078 CEST	443	49785	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.199963093 CEST	49785	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.311261892 CEST	443	49786	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.311316013 CEST	443	49786	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.311377048 CEST	49786	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.311414003 CEST	443	49786	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.311458111 CEST	49786	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.311517000 CEST	443	49786	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.311566114 CEST	49786	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.337124109 CEST	49785	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.337194920 CEST	443	49785	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.345771074 CEST	49786	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.345812082 CEST	443	49786	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.388530016 CEST	443	49789	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.388586044 CEST	443	49789	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.388644934 CEST	49789	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.388672113 CEST	443	49789	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.388829947 CEST	443	49789	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.388885975 CEST	49789	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.394124985 CEST	443	49787	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.394217014 CEST	443	49787	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.394277096 CEST	49787	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.397981882 CEST	49789	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.398005009 CEST	443	49789	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.401220083 CEST	443	49788	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.401295900 CEST	443	49788	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.401343107 CEST	49788	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.401902914 CEST	49787	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.401920080 CEST	443	49787	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:34.414567947 CEST	49788	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:34.414597034 CEST	443	49788	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:39.763892889 CEST	443	49740	64.233.176.106	192.168.2.4
Apr 19, 2024 07:31:39.763969898 CEST	443	49740	64.233.176.106	192.168.2.4
Apr 19, 2024 07:31:39.764031887 CEST	49740	443	192.168.2.4	64.233.176.106
Apr 19, 2024 07:31:41.046705008 CEST	49740	443	192.168.2.4	64.233.176.106
Apr 19, 2024 07:31:41.046734095 CEST	443	49740	64.233.176.106	192.168.2.4
Apr 19, 2024 07:31:41.091828108 CEST	49793	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.091881037 CEST	443	49793	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.091965914 CEST	49793	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.092178106 CEST	49794	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.092257023 CEST	443	49794	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.092338085 CEST	49794	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.093023062 CEST	49794	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.093055964 CEST	443	49794	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.093198061 CEST	49793	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.093214989 CEST	443	49793	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.370404959 CEST	443	49794	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.370726109 CEST	49794	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.370758057 CEST	443	49794	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.371995926 CEST	443	49794	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.372322083 CEST	49794	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.372497082 CEST	443	49794	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.372525930 CEST	49794	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.373344898 CEST	443	49793	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.376084089 CEST	49793	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.376137018 CEST	443	49793	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.376753092 CEST	443	49793	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.377093077 CEST	49793	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.377187967 CEST	443	49793	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.416145086 CEST	443	49794	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.425812006 CEST	49794	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.427301884 CEST	49793	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.643290043 CEST	443	49794	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.643384933 CEST	443	49794	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.643652916 CEST	49794	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.643899918 CEST	49794	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.643940926 CEST	443	49794	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.643973112 CEST	49794	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.643997908 CEST	49794	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.645817041 CEST	49793	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.688165903 CEST	443	49793	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.795399904 CEST	443	49793	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.795459032 CEST	443	49793	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.795484066 CEST	443	49793	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.795504093 CEST	443	49793	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.795538902 CEST	49793	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.795541048 CEST	443	49793	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.795564890 CEST	443	49793	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.795583963 CEST	49793	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.795594931 CEST	443	49793	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.795603991 CEST	49793	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.795622110 CEST	49793	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.795785904 CEST	443	49793	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.795917988 CEST	49793	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.796478987 CEST	49793	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.796509981 CEST	443	49793	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.812827110 CEST	49798	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.812920094 CEST	443	49798	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.813141108 CEST	49798	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.813318968 CEST	49799	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.813349009 CEST	443	49799	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.814088106 CEST	49799	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.814599991 CEST	49798	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.814631939 CEST	443	49798	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.815032959 CEST	49799	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.815046072 CEST	443	49799	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.815608978 CEST	49800	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.815684080 CEST	443	49800	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.815771103 CEST	49800	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.816009998 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.816041946 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.816091061 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.816473007 CEST	49802	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.816550016 CEST	443	49802	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.816817999 CEST	49803	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.816847086 CEST	443	49803	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.816849947 CEST	49802	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.816951036 CEST	49803	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.817178965 CEST	49800	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.817198992 CEST	443	49800	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.817464113 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.817480087 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.817641973 CEST	49802	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.817678928 CEST	443	49802	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:41.817872047 CEST	49803	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:41.817889929 CEST	443	49803	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.091377974 CEST	443	49798	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.091723919 CEST	49798	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.091787100 CEST	443	49798	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.092329979 CEST	443	49798	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.092737913 CEST	49798	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.092834949 CEST	443	49798	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.092869043 CEST	49798	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.106972933 CEST	443	49800	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.107157946 CEST	49800	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.107177973 CEST	443	49800	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.109797001 CEST	443	49802	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.110107899 CEST	49802	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.110167027 CEST	443	49802	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.110923052 CEST	443	49800	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.110999107 CEST	49800	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.111284971 CEST	49800	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.111399889 CEST	49800	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.111406088 CEST	443	49800	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.111530066 CEST	443	49800	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.111987114 CEST	443	49802	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.112059116 CEST	49802	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.112292051 CEST	49802	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.112382889 CEST	49802	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.112390041 CEST	443	49802	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.114739895 CEST	443	49799	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.115200043 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.115200996 CEST	443	49803	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.116178036 CEST	49799	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.116192102 CEST	443	49799	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.116523027 CEST	49803	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.116559029 CEST	443	49803	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.116640091 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.116666079 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.117485046 CEST	443	49799	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.117979050 CEST	49799	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.118098974 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.118155956 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.118205070 CEST	443	49799	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.118427992 CEST	443	49803	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.118494034 CEST	49803	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.120434999 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.120563030 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.120616913 CEST	49799	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.121098042 CEST	49803	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.121184111 CEST	443	49803	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.121223927 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.121232986 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.121284008 CEST	49803	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.121299982 CEST	443	49803	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.136147976 CEST	443	49798	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.143239021 CEST	49798	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.156146049 CEST	443	49802	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.158932924 CEST	49802	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.158956051 CEST	443	49802	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.158997059 CEST	49800	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.159014940 CEST	443	49800	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.168117046 CEST	443	49799	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.174561024 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.174571991 CEST	49803	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.206072092 CEST	49802	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.206073046 CEST	49800	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.356868029 CEST	443	49798	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.356894970 CEST	443	49798	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.356987000 CEST	443	49798	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.357024908 CEST	49798	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.357058048 CEST	49798	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.358501911 CEST	49798	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.358527899 CEST	443	49798	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.361203909 CEST	49805	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.361232996 CEST	443	49805	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.361304998 CEST	49805	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.361522913 CEST	49805	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.361535072 CEST	443	49805	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.368016005 CEST	443	49800	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.368216038 CEST	443	49800	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.368278980 CEST	49800	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.369291067 CEST	49800	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.369307995 CEST	443	49800	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.369338036 CEST	443	49799	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.369383097 CEST	443	49799	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.369435072 CEST	49799	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.369445086 CEST	443	49799	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.369592905 CEST	443	49799	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.369719028 CEST	49799	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.370716095 CEST	49806	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.370799065 CEST	443	49806	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.370910883 CEST	49806	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.371382952 CEST	49806	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.371422052 CEST	443	49806	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.371470928 CEST	49799	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.371479988 CEST	443	49799	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.371486902 CEST	49799	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.371546984 CEST	49799	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.383456945 CEST	443	49802	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.383505106 CEST	443	49802	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.383524895 CEST	443	49802	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.383584976 CEST	443	49802	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.383588076 CEST	49802	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.383625984 CEST	443	49802	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.383666992 CEST	443	49802	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.383704901 CEST	49802	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.383704901 CEST	49802	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.383704901 CEST	49802	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.383963108 CEST	443	49802	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.384264946 CEST	49802	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.384738922 CEST	49802	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.384768963 CEST	443	49802	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.391078949 CEST	443	49803	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.391130924 CEST	443	49803	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.391149998 CEST	443	49803	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.391190052 CEST	49803	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.391211987 CEST	443	49803	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.391230106 CEST	49803	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.391333103 CEST	443	49803	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.391381979 CEST	49803	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.393429041 CEST	49803	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.393446922 CEST	443	49803	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.393510103 CEST	49803	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.393526077 CEST	49803	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.528240919 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.528304100 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.528325081 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.528343916 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.528359890 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.528388023 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.528402090 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.528407097 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.528436899 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.528470039 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.528476000 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.528495073 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.533061981 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.533119917 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.533128023 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.533149004 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.533180952 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.578948021 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.645061970 CEST	443	49805	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.645334005 CEST	49805	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.645354033 CEST	443	49805	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.645831108 CEST	443	49805	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.646336079 CEST	49805	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.646420002 CEST	443	49805	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.646521091 CEST	49805	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.658509016 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.658539057 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.658581018 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.658612013 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.658631086 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.658683062 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.660788059 CEST	443	49806	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.661067963 CEST	49806	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.661134005 CEST	443	49806	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.661175013 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.661195040 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.661233902 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.661241055 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.661293030 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.661298037 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.661370993 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.661415100 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.662175894 CEST	49801	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.662190914 CEST	443	49801	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.662425995 CEST	443	49806	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.663156033 CEST	49806	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.663347960 CEST	443	49806	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.664515972 CEST	49806	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.676554918 CEST	49808	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.676640987 CEST	443	49808	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.676834106 CEST	49808	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.677076101 CEST	49808	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.677107096 CEST	443	49808	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.677751064 CEST	49809	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.677824020 CEST	443	49809	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.677938938 CEST	49809	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.678453922 CEST	49810	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.678474903 CEST	443	49810	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.678544998 CEST	49810	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.678778887 CEST	49809	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.678807974 CEST	443	49809	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.678982973 CEST	49810	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.679001093 CEST	443	49810	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.679338932 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.679418087 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.679481030 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.679613113 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.679641962 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.692121029 CEST	443	49805	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.712126017 CEST	443	49806	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.914899111 CEST	443	49805	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.914953947 CEST	443	49805	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.915004015 CEST	49805	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.915030003 CEST	443	49805	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.915158987 CEST	443	49805	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.915159941 CEST	49805	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.915328979 CEST	49805	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.916156054 CEST	49805	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.916171074 CEST	443	49805	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.919203043 CEST	49812	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.919239998 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.919462919 CEST	49812	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.920198917 CEST	49812	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.920217991 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.921369076 CEST	49813	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.921435118 CEST	443	49813	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.921562910 CEST	49813	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.921763897 CEST	49813	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.921792984 CEST	443	49813	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.929558992 CEST	443	49806	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.929610968 CEST	443	49806	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.929693937 CEST	49806	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.929764986 CEST	443	49806	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.929828882 CEST	443	49806	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.929886103 CEST	49806	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.930293083 CEST	49806	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.930324078 CEST	443	49806	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.932874918 CEST	49814	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.932904005 CEST	443	49814	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.933145046 CEST	49814	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.933449984 CEST	49814	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.933461905 CEST	443	49814	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.933835030 CEST	49815	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.933885098 CEST	443	49815	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.933934927 CEST	49815	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.934151888 CEST	49815	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.934170961 CEST	443	49815	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.962918043 CEST	443	49810	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.962935925 CEST	443	49808	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.963229895 CEST	49808	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.963269949 CEST	443	49808	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.963403940 CEST	49810	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.963416100 CEST	443	49810	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.963602066 CEST	443	49808	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.963942051 CEST	49808	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.964008093 CEST	443	49808	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.964086056 CEST	49808	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.964878082 CEST	443	49810	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.964937925 CEST	49810	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.965281010 CEST	49810	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.965352058 CEST	443	49810	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.965454102 CEST	49810	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.967210054 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.967612028 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.967643023 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.967940092 CEST	443	49809	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.968138933 CEST	49809	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.968204975 CEST	443	49809	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.968975067 CEST	443	49809	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.969192028 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.969264030 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.969774961 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.969865084 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.970217943 CEST	49809	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.970385075 CEST	443	49809	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.970411062 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:42.970426083 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:42.970570087 CEST	49809	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.004143000 CEST	443	49808	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.008121967 CEST	443	49810	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.012115002 CEST	443	49809	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.015701056 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.015847921 CEST	49810	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.015866041 CEST	443	49810	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.063241005 CEST	49810	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.198009968 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.198276997 CEST	49812	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.198304892 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.199774027 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.199839115 CEST	49812	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.200217009 CEST	49812	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.200304985 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.200922966 CEST	443	49813	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.201520920 CEST	49812	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.201531887 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.201672077 CEST	49813	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.201694965 CEST	443	49813	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.202061892 CEST	443	49813	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.202358007 CEST	49813	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.202416897 CEST	443	49813	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.202555895 CEST	49813	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.212434053 CEST	443	49814	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.212644100 CEST	49814	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.212666988 CEST	443	49814	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.213403940 CEST	443	49815	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.213577032 CEST	49815	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.213608027 CEST	443	49815	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.214066982 CEST	443	49815	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.214286089 CEST	443	49814	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.214343071 CEST	49814	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.214366913 CEST	49815	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.214433908 CEST	443	49815	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.214843035 CEST	49814	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.214921951 CEST	443	49814	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.214977980 CEST	49815	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.215044022 CEST	49814	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.215050936 CEST	443	49814	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.220839977 CEST	443	49808	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.220844030 CEST	443	49810	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.220954895 CEST	443	49808	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.220963001 CEST	443	49810	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.221012115 CEST	49808	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.221076012 CEST	49810	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.224736929 CEST	49808	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.224764109 CEST	443	49808	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.225366116 CEST	49810	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.225385904 CEST	443	49810	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.226157904 CEST	49816	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.226186991 CEST	443	49816	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.226448059 CEST	49816	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.227246046 CEST	49816	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.227260113 CEST	443	49816	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.229677916 CEST	49817	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.229711056 CEST	443	49817	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.229804993 CEST	49817	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.230022907 CEST	49817	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.230036020 CEST	443	49817	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.248111963 CEST	443	49813	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.253417969 CEST	49812	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.260123014 CEST	443	49815	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.269421101 CEST	49814	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.360486984 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.360549927 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.360570908 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.360613108 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.360625029 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.360678911 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.360747099 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.360793114 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.360793114 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.360793114 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.360826015 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.361437082 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.361491919 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.361538887 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.361560106 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.361584902 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.366137981 CEST	443	49809	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.366223097 CEST	443	49809	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.366338015 CEST	49809	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.366400957 CEST	443	49809	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.366488934 CEST	49809	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.378985882 CEST	443	49809	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.379045010 CEST	443	49809	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.379081011 CEST	49809	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.379100084 CEST	443	49809	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.379125118 CEST	49809	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.382833004 CEST	443	49809	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.382909060 CEST	49809	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.382924080 CEST	443	49809	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.383021116 CEST	443	49809	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.383508921 CEST	49809	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.383891106 CEST	49809	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.383928061 CEST	443	49809	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.403393030 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.479243040 CEST	443	49813	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.479259968 CEST	443	49815	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.479265928 CEST	443	49813	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.479289055 CEST	443	49815	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.479346037 CEST	443	49813	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.479352951 CEST	49815	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.479372978 CEST	49813	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.479382038 CEST	443	49815	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.479396105 CEST	443	49815	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.479398966 CEST	49813	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.479435921 CEST	49815	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.485922098 CEST	443	49814	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.485945940 CEST	443	49814	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.486007929 CEST	49814	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.486031055 CEST	443	49814	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.486044884 CEST	443	49814	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.486057997 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.486083031 CEST	49814	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.486088991 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.486124992 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.486145973 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.486162901 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.486186028 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.491832972 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.491854906 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.491892099 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.491899014 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.491944075 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.503370047 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.503392935 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.503453016 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.503459930 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.503652096 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.508157015 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.508249044 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.508255005 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.508280993 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.508291960 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.508332968 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.551373005 CEST	443	49817	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.552151918 CEST	443	49816	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.582969904 CEST	49816	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.582984924 CEST	443	49816	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.583496094 CEST	443	49816	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.586049080 CEST	49817	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.586082935 CEST	443	49817	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.586740971 CEST	443	49817	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.587925911 CEST	49816	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.587997913 CEST	443	49816	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.588526011 CEST	49817	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.588618040 CEST	443	49817	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.589152098 CEST	49817	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.589201927 CEST	49816	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.591598988 CEST	49813	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.591629982 CEST	443	49813	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.595701933 CEST	49815	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.595742941 CEST	443	49815	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.596117020 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.596154928 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.596165895 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.596214056 CEST	49812	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.596220016 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.596266031 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.596290112 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.596334934 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.596357107 CEST	49812	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.596357107 CEST	49812	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.596393108 CEST	49812	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.601232052 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.601255894 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.601320028 CEST	49812	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.601327896 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.601371050 CEST	49812	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.615289927 CEST	49811	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.615338087 CEST	443	49811	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.632174969 CEST	443	49816	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.632210016 CEST	443	49817	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.633003950 CEST	49814	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.633043051 CEST	443	49814	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.729087114 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.729137897 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.729182005 CEST	49812	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.729204893 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.729224920 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.729228973 CEST	49812	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.729264975 CEST	49812	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.815406084 CEST	443	49817	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.815521955 CEST	443	49817	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.815735102 CEST	49817	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.848855972 CEST	443	49816	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.848908901 CEST	443	49816	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.848968029 CEST	49816	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:43.848978996 CEST	443	49816	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.849102974 CEST	443	49816	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:43.849184036 CEST	49816	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:44.645791054 CEST	49812	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:44.645838022 CEST	443	49812	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:44.659480095 CEST	49817	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:44.659524918 CEST	443	49817	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:44.660629988 CEST	49816	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:44.660659075 CEST	443	49816	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:47.273622036 CEST	49818	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:47.273675919 CEST	443	49818	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:47.273827076 CEST	49818	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:47.274198055 CEST	49819	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:47.274301052 CEST	443	49819	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:47.274667025 CEST	49818	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:47.274691105 CEST	443	49818	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:47.274724007 CEST	49819	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:47.275412083 CEST	49819	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:47.275441885 CEST	443	49819	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:47.588248968 CEST	443	49818	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:47.589994907 CEST	443	49819	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:47.595124960 CEST	49819	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:47.595169067 CEST	443	49819	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:47.595432043 CEST	49818	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:47.595464945 CEST	443	49818	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:47.595665932 CEST	443	49819	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:47.595850945 CEST	443	49818	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:47.596394062 CEST	49819	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:47.596493959 CEST	443	49819	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:47.596970081 CEST	49818	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:47.597037077 CEST	443	49818	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:47.599992037 CEST	49819	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:47.644125938 CEST	443	49819	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:47.653309107 CEST	49818	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:47.864835024 CEST	443	49819	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:47.864898920 CEST	443	49819	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:47.864923954 CEST	443	49819	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:47.865024090 CEST	49819	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:47.865055084 CEST	443	49819	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:47.865073919 CEST	443	49819	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:47.865133047 CEST	49819	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:47.865133047 CEST	49819	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:47.866034985 CEST	49819	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:47.866055965 CEST	443	49819	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.322810888 CEST	49818	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.333300114 CEST	49820	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.333333969 CEST	443	49820	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.333417892 CEST	49820	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.336752892 CEST	49820	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.336771011 CEST	443	49820	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.368112087 CEST	443	49818	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.441251993 CEST	49821	443	192.168.2.4	3.161.163.32
Apr 19, 2024 07:31:48.441297054 CEST	443	49821	3.161.163.32	192.168.2.4
Apr 19, 2024 07:31:48.441346884 CEST	49821	443	192.168.2.4	3.161.163.32
Apr 19, 2024 07:31:48.442020893 CEST	49821	443	192.168.2.4	3.161.163.32
Apr 19, 2024 07:31:48.442039013 CEST	443	49821	3.161.163.32	192.168.2.4
Apr 19, 2024 07:31:48.455497980 CEST	443	49818	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.455542088 CEST	443	49818	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.455549002 CEST	443	49818	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.455590963 CEST	443	49818	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.455605030 CEST	49818	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.455605984 CEST	443	49818	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.455612898 CEST	443	49818	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.455636024 CEST	443	49818	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.455650091 CEST	49818	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.455661058 CEST	443	49818	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.455667973 CEST	49818	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.455674887 CEST	49818	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.455693007 CEST	49818	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.576235056 CEST	49818	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.576272964 CEST	443	49818	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.581300020 CEST	49822	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.581327915 CEST	443	49822	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.581382990 CEST	49822	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.581984043 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.582025051 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.582077980 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.582232952 CEST	49822	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.582247972 CEST	443	49822	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.582483053 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.582499027 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.586827993 CEST	49824	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.586836100 CEST	443	49824	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.586890936 CEST	49824	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.587085009 CEST	49824	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.587099075 CEST	443	49824	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.587677002 CEST	49825	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:48.587697983 CEST	443	49825	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:48.587747097 CEST	49825	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:48.587928057 CEST	49825	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:48.587943077 CEST	443	49825	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:48.616875887 CEST	443	49820	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.617096901 CEST	49820	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.617106915 CEST	443	49820	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.618294001 CEST	443	49820	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.618602037 CEST	49820	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.618725061 CEST	49820	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.618731022 CEST	443	49820	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.618765116 CEST	443	49820	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.658811092 CEST	443	49821	3.161.163.32	192.168.2.4
Apr 19, 2024 07:31:48.659123898 CEST	49821	443	192.168.2.4	3.161.163.32
Apr 19, 2024 07:31:48.659154892 CEST	443	49821	3.161.163.32	192.168.2.4
Apr 19, 2024 07:31:48.660263062 CEST	443	49821	3.161.163.32	192.168.2.4
Apr 19, 2024 07:31:48.660316944 CEST	49821	443	192.168.2.4	3.161.163.32
Apr 19, 2024 07:31:48.665901899 CEST	49821	443	192.168.2.4	3.161.163.32
Apr 19, 2024 07:31:48.665976048 CEST	443	49821	3.161.163.32	192.168.2.4
Apr 19, 2024 07:31:48.669750929 CEST	49820	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.689110041 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:48.689137936 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:48.689192057 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:48.689975977 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:48.689987898 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:48.691550970 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:48.691579103 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:48.691628933 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:48.692091942 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:48.692105055 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:48.719520092 CEST	49821	443	192.168.2.4	3.161.163.32
Apr 19, 2024 07:31:48.719546080 CEST	443	49821	3.161.163.32	192.168.2.4
Apr 19, 2024 07:31:48.766527891 CEST	49821	443	192.168.2.4	3.161.163.32
Apr 19, 2024 07:31:48.806516886 CEST	443	49825	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:48.808362961 CEST	49825	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:48.808398962 CEST	443	49825	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:48.808747053 CEST	443	49825	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:48.809139967 CEST	49825	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:48.809204102 CEST	443	49825	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:48.809319973 CEST	49825	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:48.856120110 CEST	443	49825	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:48.867654085 CEST	443	49822	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.869155884 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.875626087 CEST	443	49820	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.875677109 CEST	443	49820	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.875754118 CEST	49820	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.875766993 CEST	443	49820	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.875806093 CEST	49820	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.875907898 CEST	443	49820	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.876147985 CEST	443	49820	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.876234055 CEST	49820	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.880208015 CEST	443	49824	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.897648096 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.897674084 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.897775888 CEST	49822	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.897797108 CEST	443	49822	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.898087025 CEST	49824	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.898097038 CEST	443	49824	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.898293972 CEST	443	49822	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.898952007 CEST	49822	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.899025917 CEST	443	49822	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.899269104 CEST	49822	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.901243925 CEST	49820	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.901258945 CEST	443	49820	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.901575089 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.901649952 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.901782036 CEST	443	49824	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.901840925 CEST	49824	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.902879000 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.903063059 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.908054113 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:48.909836054 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:48.913414001 CEST	49824	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.913585901 CEST	443	49824	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.914397955 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:48.914407969 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:48.915059090 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:48.915081978 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:48.915317059 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.915330887 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.915467024 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:48.915517092 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:48.916182995 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:48.916239977 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:48.944112062 CEST	443	49822	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.946677923 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:48.946768999 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:48.951277018 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:48.951359034 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:48.951623917 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:48.951637030 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:48.952080965 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:48.952106953 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:48.953898907 CEST	49824	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.953908920 CEST	443	49824	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:48.968899965 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:48.992656946 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:48.992908955 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:49.008285999 CEST	49824	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.139575005 CEST	443	49822	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.139631987 CEST	443	49822	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.139703989 CEST	49822	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.139728069 CEST	443	49822	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.139847040 CEST	443	49822	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.139904022 CEST	49822	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.162117958 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.162158012 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.162204027 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.162219048 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.162236929 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.162247896 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.162270069 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.162287951 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.162319899 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.162322044 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.162331104 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.162379026 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.162400961 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.163111925 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.163146019 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.163151026 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.163183928 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.163214922 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.163217068 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.163223028 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.163261890 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.163266897 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.164004087 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.164045095 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.164046049 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.164053917 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.164087057 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.164091110 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.164124012 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.164164066 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.164169073 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.164922953 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.164948940 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.164969921 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.164974928 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.164990902 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.165011883 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.165018082 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.165055990 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.165766954 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.165811062 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.165838957 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.165849924 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.165854931 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.165887117 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.165893078 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.165904999 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.165946960 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.166724920 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.166779995 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.166809082 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.166815996 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.166821003 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.166857958 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.166863918 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.167521954 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.167547941 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.167565107 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.167570114 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.167602062 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.167606115 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.167609930 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.167654991 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.168524027 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.168581009 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.169162035 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.169285059 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.169338942 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:49.169361115 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.169436932 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.169477940 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:49.169483900 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.169572115 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.169610023 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:49.169615030 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.169706106 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.169753075 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:49.169758081 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.169972897 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.170020103 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:49.170023918 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.170111895 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.170152903 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:49.170156956 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.170253038 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.170290947 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:49.170295000 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.171303988 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.171355963 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:49.171361923 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.171463966 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.171504974 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:49.171509981 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.171597958 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.171636105 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:49.171639919 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.171740055 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.171778917 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:49.171782970 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.171879053 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.171921015 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:49.171926022 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.173275948 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.173377991 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:49.173384905 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.173480034 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.173521996 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:49.173526049 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.173610926 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.173650026 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:49.173655033 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.173742056 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.173783064 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:49.173788071 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.173990965 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.174036980 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:49.224028111 CEST	49828	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:49.224050045 CEST	443	49828	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:49.224579096 CEST	49822	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.224610090 CEST	443	49822	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.232270002 CEST	443	49825	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:49.232291937 CEST	443	49825	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:49.232345104 CEST	49825	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:49.232368946 CEST	443	49825	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:49.232383013 CEST	443	49825	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:49.232403040 CEST	49825	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:49.232438087 CEST	49825	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:49.237668991 CEST	49825	443	192.168.2.4	13.32.66.19
Apr 19, 2024 07:31:49.237692118 CEST	443	49825	13.32.66.19	192.168.2.4
Apr 19, 2024 07:31:49.266587019 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.266623020 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.266632080 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.266649961 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.266664028 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.266665936 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.266674042 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.266689062 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.266705990 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.266731977 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.266885996 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.266931057 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.266942024 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.266954899 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.266976118 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.266980886 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.266989946 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.267376900 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.267446041 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.267452955 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.267484903 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.268054008 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.268096924 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.269099951 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.269133091 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.269145966 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.269150019 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.269203901 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.269865990 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.269891977 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.269908905 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.269912958 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.269937992 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.269970894 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.269993067 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.270025015 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.270030975 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.270049095 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.270766973 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.270792961 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.270811081 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.270816088 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.270844936 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.271297932 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.271328926 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.271339893 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.271344900 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.271368980 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.271424055 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.271464109 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.283472061 CEST	49826	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:49.283490896 CEST	443	49826	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:49.325223923 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.370939016 CEST	49830	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:49.370968103 CEST	443	49830	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:49.371022940 CEST	49830	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:49.371274948 CEST	49830	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:49.371289968 CEST	443	49830	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:49.392445087 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.392477036 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.392534971 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.392543077 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.392615080 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.392615080 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.392644882 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.392683983 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.392683983 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.392712116 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.398344994 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.398392916 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.398418903 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.398425102 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.398458004 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.398472071 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.406497002 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.406549931 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.406570911 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.406577110 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.406615019 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.448616982 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.448833942 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.448983908 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.449356079 CEST	49823	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:49.449373960 CEST	443	49823	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:49.587639093 CEST	443	49830	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:49.588013887 CEST	49830	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:49.588021994 CEST	443	49830	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:49.588479996 CEST	443	49830	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:49.588923931 CEST	49830	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:49.588995934 CEST	443	49830	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:49.624497890 CEST	49830	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:49.668122053 CEST	443	49830	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:49.816180944 CEST	443	49830	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:49.816214085 CEST	443	49830	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:49.816260099 CEST	49830	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:49.816271067 CEST	443	49830	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:49.816292048 CEST	443	49830	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:49.816308975 CEST	49830	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:49.816339016 CEST	49830	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:49.817450047 CEST	49830	443	192.168.2.4	13.32.66.84
Apr 19, 2024 07:31:49.817461014 CEST	443	49830	13.32.66.84	192.168.2.4
Apr 19, 2024 07:31:51.078391075 CEST	49831	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:51.078493118 CEST	443	49831	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.078592062 CEST	49831	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:51.080111980 CEST	49833	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:51.080133915 CEST	443	49833	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:51.080204010 CEST	49833	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:51.080739021 CEST	49831	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:51.080775976 CEST	443	49831	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.082474947 CEST	49834	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:51.082483053 CEST	443	49834	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:51.082669973 CEST	49833	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:51.082681894 CEST	443	49833	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:51.082696915 CEST	49834	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:51.083051920 CEST	49834	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:51.083061934 CEST	443	49834	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:51.084148884 CEST	49824	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:51.128154993 CEST	443	49824	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.257451057 CEST	443	49824	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.257508039 CEST	443	49824	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.257534981 CEST	443	49824	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.257558107 CEST	443	49824	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.257569075 CEST	49824	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:51.257582903 CEST	443	49824	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.257603884 CEST	49824	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:51.257616043 CEST	443	49824	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.257632971 CEST	49824	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:51.257739067 CEST	443	49824	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.257841110 CEST	49824	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:51.258760929 CEST	49824	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:51.258797884 CEST	443	49824	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.297982931 CEST	443	49834	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:51.298409939 CEST	49834	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:51.298423052 CEST	443	49834	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:51.299012899 CEST	443	49834	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:51.299779892 CEST	49834	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:51.299896955 CEST	443	49834	104.18.11.207	192.168.2.4
Apr 19, 2024 07:31:51.305932045 CEST	443	49833	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:51.315367937 CEST	49833	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:51.315382957 CEST	443	49833	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:51.316929102 CEST	443	49833	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:51.342238903 CEST	49834	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:31:51.347548962 CEST	49833	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:51.347839117 CEST	443	49833	104.26.6.173	192.168.2.4
Apr 19, 2024 07:31:51.400939941 CEST	49833	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:31:51.468821049 CEST	443	49831	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.469244957 CEST	49831	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:51.469290018 CEST	443	49831	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.469660044 CEST	443	49831	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.469976902 CEST	49831	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:51.470043898 CEST	443	49831	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.470120907 CEST	49831	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:51.512192011 CEST	443	49831	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.738158941 CEST	443	49831	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.738219023 CEST	443	49831	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.738384962 CEST	443	49831	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.738392115 CEST	49831	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:51.738432884 CEST	49831	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:51.738993883 CEST	49831	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:51.739020109 CEST	443	49831	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.754281998 CEST	49835	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:51.754337072 CEST	443	49835	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:51.754406929 CEST	49835	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:51.754669905 CEST	49835	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:51.754686117 CEST	443	49835	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:52.038029909 CEST	443	49835	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:52.038319111 CEST	49835	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:52.038347006 CEST	443	49835	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:52.039582968 CEST	443	49835	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:52.039921045 CEST	49835	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:52.040091038 CEST	443	49835	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:52.040153027 CEST	49835	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:52.084145069 CEST	443	49835	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:52.091022015 CEST	49835	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:52.294363022 CEST	443	49835	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:52.294414043 CEST	443	49835	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:52.294478893 CEST	49835	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:52.294509888 CEST	443	49835	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:52.294581890 CEST	443	49835	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:52.294913054 CEST	49835	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:52.298079967 CEST	49835	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:52.298096895 CEST	443	49835	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.082156897 CEST	49836	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.082202911 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.082328081 CEST	49836	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.083087921 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.083133936 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.083214045 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.084455967 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.084472895 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.084682941 CEST	49836	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.084701061 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.384035110 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.384816885 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.384867907 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.385258913 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.385266066 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.385766983 CEST	49836	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.385782957 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.386887074 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.387233019 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.387307882 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.388672113 CEST	49836	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.388849020 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.390940905 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.432125092 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.436173916 CEST	49836	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.782062054 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.782092094 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.782105923 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.782149076 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.782181978 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.782197952 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.782228947 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.783322096 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.783339977 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.783377886 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.783385992 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.783410072 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.832465887 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.908539057 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.908612013 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.908637047 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.908683062 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.908714056 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.908817053 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.912728071 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.912801027 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.912811995 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.912873030 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.912926912 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.912942886 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.913018942 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.913036108 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.913059950 CEST	443	49837	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.913090944 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.913090944 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.913129091 CEST	49837	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.998235941 CEST	49838	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:53.998342037 CEST	443	49838	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:53.999515057 CEST	49838	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.000128031 CEST	49838	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.000169039 CEST	443	49838	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.001014948 CEST	49836	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.002808094 CEST	49839	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.002909899 CEST	443	49839	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.003057957 CEST	49839	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.003544092 CEST	49839	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.003577948 CEST	443	49839	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.048111916 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.260159016 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.260189056 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.260196924 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.260207891 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.260231018 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.260242939 CEST	49836	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.260251999 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.260277033 CEST	49836	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.260298014 CEST	49836	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.264950037 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.264969110 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.265033007 CEST	49836	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.265039921 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.276083946 CEST	443	49838	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.278316021 CEST	443	49839	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.298048973 CEST	49839	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.298075914 CEST	443	49839	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.298470974 CEST	49838	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.298485994 CEST	443	49838	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.298528910 CEST	443	49839	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.299176931 CEST	443	49838	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.310384035 CEST	49836	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.328772068 CEST	49838	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.329155922 CEST	443	49838	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.329511881 CEST	49839	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.329642057 CEST	443	49839	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.370857954 CEST	49839	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.370858908 CEST	49838	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.386430025 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.386444092 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.386465073 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.386490107 CEST	49836	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.386499882 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.386548996 CEST	49836	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.391166925 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.391195059 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.391228914 CEST	49836	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.391237020 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.391278982 CEST	49836	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.391292095 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.391330004 CEST	49836	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.391335964 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.391366959 CEST	49836	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.391386032 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:54.391421080 CEST	49836	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.490633011 CEST	49836	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:54.490652084 CEST	443	49836	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.104391098 CEST	49838	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.152112961 CEST	443	49838	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.239363909 CEST	443	49838	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.239456892 CEST	443	49838	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.239620924 CEST	49838	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.240185976 CEST	49838	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.240211010 CEST	443	49838	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.240221024 CEST	49838	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.240262032 CEST	49838	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.242305994 CEST	49839	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.288120985 CEST	443	49839	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.407372952 CEST	443	49839	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.407396078 CEST	443	49839	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.407402992 CEST	443	49839	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.407429934 CEST	443	49839	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.407444954 CEST	443	49839	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.407454014 CEST	443	49839	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.407463074 CEST	49839	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.407475948 CEST	443	49839	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.407490015 CEST	49839	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.407515049 CEST	443	49839	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.407581091 CEST	49839	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.408735037 CEST	49839	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.408746958 CEST	443	49839	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.438752890 CEST	49840	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.438783884 CEST	443	49840	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.440037012 CEST	49840	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.441344976 CEST	49840	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.441359997 CEST	443	49840	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.469225883 CEST	49841	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.469271898 CEST	443	49841	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.472049952 CEST	49841	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.473440886 CEST	49841	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.473452091 CEST	443	49841	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.717324972 CEST	443	49840	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.717618942 CEST	49840	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.717655897 CEST	443	49840	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.717991114 CEST	443	49840	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.718388081 CEST	49840	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.718463898 CEST	443	49840	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.719249010 CEST	49840	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.757548094 CEST	443	49841	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.757793903 CEST	49841	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.757811069 CEST	443	49841	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.758126974 CEST	443	49841	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.758443117 CEST	49841	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.758491993 CEST	443	49841	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.758589983 CEST	49841	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.764110088 CEST	443	49840	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.804121017 CEST	443	49841	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.973644018 CEST	443	49840	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.973861933 CEST	443	49840	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:57.973948002 CEST	49840	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.974519968 CEST	49840	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:57.974565983 CEST	443	49840	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:58.015662909 CEST	443	49841	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:58.015738964 CEST	443	49841	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:58.015827894 CEST	49841	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:58.016391039 CEST	49841	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:58.016412020 CEST	443	49841	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:58.224267006 CEST	49842	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:58.224375010 CEST	443	49842	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:58.224464893 CEST	49842	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:58.224728107 CEST	49842	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:58.224770069 CEST	443	49842	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:58.511533022 CEST	443	49842	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:58.565095901 CEST	49842	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:58.834465027 CEST	49842	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:58.834517002 CEST	443	49842	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:58.835026979 CEST	443	49842	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:58.847815037 CEST	49842	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:58.847968102 CEST	443	49842	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:58.856112957 CEST	49842	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:58.904119968 CEST	443	49842	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:58.987250090 CEST	443	49842	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:58.987339973 CEST	443	49842	107.144.122.203	192.168.2.4
Apr 19, 2024 07:31:58.987394094 CEST	49842	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:59.226057053 CEST	49842	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:31:59.226094007 CEST	443	49842	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:01.067215919 CEST	49843	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:01.067260981 CEST	443	49843	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:01.067398071 CEST	49843	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:01.067624092 CEST	49844	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:01.067670107 CEST	443	49844	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:01.067719936 CEST	49844	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:01.068124056 CEST	49843	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:01.068136930 CEST	443	49843	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:01.068259954 CEST	49844	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:01.068270922 CEST	443	49844	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:01.101795912 CEST	49821	443	192.168.2.4	3.161.163.32
Apr 19, 2024 07:32:01.105684996 CEST	49821	443	192.168.2.4	3.161.163.32
Apr 19, 2024 07:32:01.105732918 CEST	443	49821	3.161.163.32	192.168.2.4
Apr 19, 2024 07:32:01.105803013 CEST	443	49821	3.161.163.32	192.168.2.4
Apr 19, 2024 07:32:01.105869055 CEST	49821	443	192.168.2.4	3.161.163.32
Apr 19, 2024 07:32:01.349842072 CEST	443	49844	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:01.350116968 CEST	49844	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:01.350142002 CEST	443	49844	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:01.350480080 CEST	443	49844	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:01.350796938 CEST	49844	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:01.350871086 CEST	443	49844	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:01.354500055 CEST	443	49843	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:01.354759932 CEST	49843	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:01.354773045 CEST	443	49843	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:01.355087042 CEST	443	49843	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:01.355410099 CEST	49843	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:01.355468035 CEST	443	49843	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:01.390702963 CEST	49844	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:01.406227112 CEST	49843	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.078767061 CEST	49844	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.124111891 CEST	443	49844	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.231029987 CEST	443	49844	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.231054068 CEST	443	49844	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.231110096 CEST	49844	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.231122971 CEST	443	49844	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.231132984 CEST	443	49844	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.231168032 CEST	49844	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.232302904 CEST	49844	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.232312918 CEST	443	49844	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.246417999 CEST	49843	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.248738050 CEST	49845	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.248776913 CEST	443	49845	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.248830080 CEST	49845	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.249104023 CEST	49845	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.249115944 CEST	443	49845	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.292114019 CEST	443	49843	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.383342981 CEST	443	49843	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.383367062 CEST	443	49843	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.383446932 CEST	443	49843	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.383497000 CEST	49843	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.383497000 CEST	49843	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.386003017 CEST	49843	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.386030912 CEST	443	49843	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.388633013 CEST	49846	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.388684034 CEST	443	49846	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.388807058 CEST	49846	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.388977051 CEST	49846	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.388994932 CEST	443	49846	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.525298119 CEST	443	49845	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.525587082 CEST	49845	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.525604963 CEST	443	49845	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.526081085 CEST	443	49845	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.526411057 CEST	49845	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.526483059 CEST	443	49845	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.526571035 CEST	49845	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.568116903 CEST	443	49845	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.656825066 CEST	443	49846	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.657111883 CEST	49846	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.657146931 CEST	443	49846	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.657509089 CEST	443	49846	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.657917023 CEST	49846	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.657984018 CEST	443	49846	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.658251047 CEST	49846	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.704118967 CEST	443	49846	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.808903933 CEST	443	49845	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.808924913 CEST	443	49845	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.808971882 CEST	49845	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.808998108 CEST	443	49845	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.809026003 CEST	443	49845	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.809070110 CEST	49845	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.811271906 CEST	49845	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.811281919 CEST	443	49845	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.921302080 CEST	443	49846	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.921328068 CEST	443	49846	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.921392918 CEST	49846	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:03.921411037 CEST	443	49846	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:03.921458006 CEST	49846	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:04.037709951 CEST	49846	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:04.037735939 CEST	443	49846	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.355925083 CEST	49847	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:05.355961084 CEST	443	49847	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.356020927 CEST	49847	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:05.356570959 CEST	49848	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:05.356611013 CEST	443	49848	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.356656075 CEST	49848	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:05.360091925 CEST	49848	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:05.360115051 CEST	443	49848	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.360445976 CEST	49847	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:05.360456944 CEST	443	49847	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.635206938 CEST	443	49848	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.635463953 CEST	49848	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:05.635488987 CEST	443	49848	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.635952950 CEST	443	49848	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.636312008 CEST	49848	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:05.636382103 CEST	443	49848	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.636574030 CEST	49848	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:05.644234896 CEST	443	49847	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.644476891 CEST	49847	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:05.644495010 CEST	443	49847	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.645741940 CEST	443	49847	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.646151066 CEST	49847	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:05.646406889 CEST	443	49847	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.680130005 CEST	443	49848	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.686960936 CEST	49847	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:05.899990082 CEST	443	49848	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.900019884 CEST	443	49848	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.900082111 CEST	49848	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:05.900114059 CEST	443	49848	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.900132895 CEST	443	49848	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.900170088 CEST	49848	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:05.901228905 CEST	49848	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:05.901247025 CEST	443	49848	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.948007107 CEST	49849	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:05.948055029 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.948134899 CEST	49849	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:05.949242115 CEST	49849	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:05.949254990 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:05.953372955 CEST	49847	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:06.000122070 CEST	443	49847	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:06.099272966 CEST	443	49847	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:06.099292040 CEST	443	49847	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:06.099349976 CEST	49847	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:06.099364996 CEST	443	49847	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:06.099406004 CEST	49847	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:06.100256920 CEST	49847	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:06.100271940 CEST	443	49847	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:06.230298996 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:06.238641024 CEST	49849	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:06.238652945 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:06.239144087 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:06.254796028 CEST	49849	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:06.254909039 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:06.294594049 CEST	443	49834	104.18.11.207	192.168.2.4
Apr 19, 2024 07:32:06.294754982 CEST	443	49834	104.18.11.207	192.168.2.4
Apr 19, 2024 07:32:06.294814110 CEST	49834	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:32:06.296144962 CEST	443	49833	104.26.6.173	192.168.2.4
Apr 19, 2024 07:32:06.296255112 CEST	443	49833	104.26.6.173	192.168.2.4
Apr 19, 2024 07:32:06.296477079 CEST	49833	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:32:06.306936026 CEST	49849	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:06.391568899 CEST	49833	443	192.168.2.4	104.26.6.173
Apr 19, 2024 07:32:06.391597033 CEST	443	49833	104.26.6.173	192.168.2.4
Apr 19, 2024 07:32:06.391839027 CEST	49834	443	192.168.2.4	104.18.11.207
Apr 19, 2024 07:32:06.391844988 CEST	443	49834	104.18.11.207	192.168.2.4
Apr 19, 2024 07:32:07.089994907 CEST	49850	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.090034008 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.090275049 CEST	49850	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.090590954 CEST	49850	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.090603113 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.098695993 CEST	49849	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.140124083 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.360306978 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.360377073 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.360399961 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.360423088 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.360464096 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.360485077 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.360486984 CEST	49849	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.360486984 CEST	49849	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.360512018 CEST	49849	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.360515118 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.360559940 CEST	49849	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.360559940 CEST	49849	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.362266064 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.362315893 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.362469912 CEST	49849	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.362481117 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.362533092 CEST	49849	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.370982885 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.371063948 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.371145010 CEST	49849	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.371145010 CEST	49849	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.371153116 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.371223927 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.371310949 CEST	49849	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.371572018 CEST	49849	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.371589899 CEST	443	49849	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.373367071 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.373584032 CEST	49850	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.373606920 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.374722004 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.375081062 CEST	49850	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.375251055 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.419713974 CEST	49850	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.523765087 CEST	49850	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.531941891 CEST	49851	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.531985998 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.532068968 CEST	49851	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.535682917 CEST	49851	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.535697937 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.564161062 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.788316965 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.788353920 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.788366079 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.788384914 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.788409948 CEST	49850	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.788431883 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.788451910 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.788465977 CEST	49850	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.788474083 CEST	49850	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.788492918 CEST	49850	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.790445089 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.790481091 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.790505886 CEST	49850	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.790510893 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.790539980 CEST	49850	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.797390938 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.797425032 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.797445059 CEST	49850	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.797454119 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.797475100 CEST	49850	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.797489882 CEST	49850	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.797493935 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.797538996 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.797574997 CEST	49850	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.823646069 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.874627113 CEST	49851	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.879497051 CEST	49851	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.879506111 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.880950928 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.882211924 CEST	49851	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.882400990 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.902848005 CEST	49850	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:07.902884960 CEST	443	49850	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:07.922472954 CEST	49851	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:09.142304897 CEST	49852	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:09.142359018 CEST	443	49852	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.142762899 CEST	49852	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:09.144382954 CEST	49852	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:09.144403934 CEST	443	49852	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.168411970 CEST	49851	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:09.212162018 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.425270081 CEST	443	49852	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.433963060 CEST	49852	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:09.434006929 CEST	443	49852	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.434645891 CEST	443	49852	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.435246944 CEST	49852	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:09.435323000 CEST	443	49852	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.484338045 CEST	49852	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:09.548109055 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.548142910 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.548154116 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.548178911 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.548196077 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.548199892 CEST	49851	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:09.548206091 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.548218966 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.548250914 CEST	49851	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:09.548289061 CEST	49851	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:09.549169064 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.549191952 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.549232006 CEST	49851	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:09.549246073 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.549295902 CEST	49851	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:09.557039022 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.557080030 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.557142973 CEST	49851	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:09.557142973 CEST	49851	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:09.557149887 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.557229042 CEST	49851	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:09.557404995 CEST	49851	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:09.557420015 CEST	443	49851	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.941616058 CEST	49853	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:09.941654921 CEST	443	49853	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:09.941731930 CEST	49853	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:09.954672098 CEST	49853	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:09.954689026 CEST	443	49853	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:10.233380079 CEST	443	49853	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:10.276042938 CEST	49853	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:10.292190075 CEST	49853	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:10.292202950 CEST	443	49853	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:10.293390989 CEST	443	49853	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:10.345940113 CEST	49853	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:10.377125025 CEST	49853	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:10.377298117 CEST	443	49853	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:10.427928925 CEST	49853	443	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:14.122592926 CEST	49737	80	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:14.256558895 CEST	80	49737	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:14.311994076 CEST	49735	80	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:14.444839001 CEST	80	49735	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:14.483056068 CEST	49736	80	192.168.2.4	107.144.122.203
Apr 19, 2024 07:32:14.616894007 CEST	80	49736	107.144.122.203	192.168.2.4
Apr 19, 2024 07:32:16.621623993 CEST	49864	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:16.621660948 CEST	443	49864	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:16.621789932 CEST	49864	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:16.622057915 CEST	49864	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:16.622081041 CEST	443	49864	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:16.723529100 CEST	49866	443	192.168.2.4	3.161.136.58
Apr 19, 2024 07:32:16.723568916 CEST	443	49866	3.161.136.58	192.168.2.4
Apr 19, 2024 07:32:16.723632097 CEST	49866	443	192.168.2.4	3.161.136.58
Apr 19, 2024 07:32:16.723901033 CEST	49866	443	192.168.2.4	3.161.136.58
Apr 19, 2024 07:32:16.723915100 CEST	443	49866	3.161.136.58	192.168.2.4
Apr 19, 2024 07:32:16.843955040 CEST	443	49864	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:16.844414949 CEST	49864	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:16.844425917 CEST	443	49864	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:16.845851898 CEST	443	49864	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:16.845927000 CEST	49864	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:16.849355936 CEST	49864	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:16.849450111 CEST	443	49864	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:16.904047012 CEST	49864	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:16.904068947 CEST	443	49864	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:16.943880081 CEST	443	49866	3.161.136.58	192.168.2.4
Apr 19, 2024 07:32:16.944139004 CEST	49866	443	192.168.2.4	3.161.136.58
Apr 19, 2024 07:32:16.944152117 CEST	443	49866	3.161.136.58	192.168.2.4
Apr 19, 2024 07:32:16.945580006 CEST	443	49866	3.161.136.58	192.168.2.4
Apr 19, 2024 07:32:16.945632935 CEST	49866	443	192.168.2.4	3.161.136.58
Apr 19, 2024 07:32:16.946755886 CEST	49866	443	192.168.2.4	3.161.136.58
Apr 19, 2024 07:32:16.946830988 CEST	443	49866	3.161.136.58	192.168.2.4
Apr 19, 2024 07:32:16.952117920 CEST	49864	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:16.999306917 CEST	49866	443	192.168.2.4	3.161.136.58
Apr 19, 2024 07:32:16.999336004 CEST	443	49866	3.161.136.58	192.168.2.4
Apr 19, 2024 07:32:17.047766924 CEST	49866	443	192.168.2.4	3.161.136.58
Apr 19, 2024 07:32:17.667124987 CEST	49864	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:17.708156109 CEST	443	49864	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:17.781640053 CEST	443	49864	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:17.781759024 CEST	443	49864	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:17.781833887 CEST	443	49864	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:17.781889915 CEST	49864	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:17.781918049 CEST	443	49864	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:17.781989098 CEST	49864	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:17.782001972 CEST	443	49864	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:17.782046080 CEST	443	49864	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:17.782124996 CEST	49864	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:17.785275936 CEST	49864	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:17.785296917 CEST	443	49864	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:17.834836960 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:17.834886074 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:17.834961891 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:17.835197926 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:17.835226059 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:17.835293055 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:17.850804090 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:17.850816965 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:17.851759911 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:17.851795912 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:17.860723972 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:17.860755920 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:17.860835075 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:17.861458063 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:17.861473083 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:17.862005949 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:17.862021923 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:17.862382889 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:17.862454891 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:17.862473011 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:17.864135027 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:17.864168882 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:17.864252090 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:17.873611927 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:17.873640060 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.094399929 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.094638109 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.094662905 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.095257044 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.095323086 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.095386982 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.095666885 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.095686913 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.096275091 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.096328020 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.096333981 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.096379042 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.097280025 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.097352028 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.097476959 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.097592115 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.097614050 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.097697020 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.097893000 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.097902060 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.097951889 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.097963095 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.098320007 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.099013090 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.099030972 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.099502087 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.099832058 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.100161076 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.100214958 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.101366043 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.101433992 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.103372097 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.103390932 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.109133005 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.109469891 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.109486103 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.110841990 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.110913992 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.112646103 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.113079071 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.113105059 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.113939047 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.114022017 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.114310026 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.114391088 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.114536047 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.114562035 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.115087032 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.115183115 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.119781971 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.119874001 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.120527983 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.120789051 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.120919943 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.120938063 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.139808893 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.139875889 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.156280994 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.156387091 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.170650005 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.385065079 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.385153055 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.385175943 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.385199070 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.385251999 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.385256052 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.391026020 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.391098022 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.391118050 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.393934011 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.394058943 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.394110918 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.394125938 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.394166946 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.397691965 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.397726059 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.397778988 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.397800922 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.397855043 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.398322105 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.398374081 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.398382902 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.400772095 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.400854111 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.404064894 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.404119015 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.404258013 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.404274940 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.404371023 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.404753923 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.404803038 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.405563116 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.405635118 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.405653000 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.408925056 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.408982992 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.411051989 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.411238909 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.412899017 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.412972927 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.412981033 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.412993908 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.413022995 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.414005041 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.414102077 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.414127111 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.414155006 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.414340973 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.414382935 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.417046070 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.417105913 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.419241905 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.419398069 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.420254946 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.420336008 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.420344114 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.420363903 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.420399904 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.420933008 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.421010971 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.421026945 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.421238899 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.421302080 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.425312996 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.425369024 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.427598953 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.427602053 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.427781105 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.427953005 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.429229975 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.429335117 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.429349899 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.429419041 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.429491997 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.433484077 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.433558941 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.433568954 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.433588028 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.433636904 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.435816050 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.436120033 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.437500954 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.437582016 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.437597036 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.437616110 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.437673092 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.437675953 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.437706947 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.437805891 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.441591978 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.441675901 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.443984032 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.444096088 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.444139004 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.444155931 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.444463968 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.445813894 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.445847034 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.445858002 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.445900917 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.445914984 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.452178001 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.452271938 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.454226971 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.454310894 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.454325914 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.454349995 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.454406977 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.454418898 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.462578058 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.462646961 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.462661028 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.485307932 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.485393047 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.485511065 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.488692045 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.488729954 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.488996029 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.489049911 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.492597103 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.492644072 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.500031948 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.500097036 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.507318020 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.507400036 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.507414103 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.507457972 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.507942915 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.509962082 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.510056973 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.513926983 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.513976097 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.514077902 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.514081001 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.514556885 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.514616013 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.518003941 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.518064022 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.520210981 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.520337105 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.522044897 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.522115946 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.522152901 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.522206068 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.524271011 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.524358034 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.526226997 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.526274920 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.529156923 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.530297041 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.530350924 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.530380011 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.530388117 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.530431032 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.532496929 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.532565117 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.532571077 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.532619953 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.534420967 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.534483910 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.534487963 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.534508944 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.534755945 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.536547899 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.536623955 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.536628962 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.536689043 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.536741972 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.538553953 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.538621902 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.540736914 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.540834904 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.540852070 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.540867090 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.540918112 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.542684078 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.542745113 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.543852091 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.543906927 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.543911934 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.544996977 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.545058966 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.546725035 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.546840906 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.548979998 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.549105883 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.550831079 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.550936937 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.551006079 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.551012039 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.551043034 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.553484917 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.553539038 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.553550005 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.553566933 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.553623915 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.554131031 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.554183006 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.554191113 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.554980993 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.557267904 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.557363033 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.559184074 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.560566902 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.560631990 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.560636997 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.561758041 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.561839104 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.563268900 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.563329935 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.563388109 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.563400984 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.563452005 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.565401077 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.567028999 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.567106009 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.567111969 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.567362070 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.567389011 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.567413092 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.567419052 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.567526102 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.570151091 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.570209026 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.571403027 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.573477983 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.573549032 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.573556900 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.573602915 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.573642015 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.573676109 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.573685884 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.573956013 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.575593948 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.578454018 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.579210043 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.579262018 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.579272032 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.579896927 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.579961061 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.579967976 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.581779003 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.582871914 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.582917929 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.582926989 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.583420038 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.583477974 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.583487988 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.586329937 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.586401939 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.586407900 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.586770058 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.586843014 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.586859941 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.587002993 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.587177038 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.587182999 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.589580059 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.589770079 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.589780092 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.590070963 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.590117931 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.590125084 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.593223095 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.593372107 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.593432903 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.593442917 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.593470097 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.593477011 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.594266891 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.595069885 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.595128059 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.595134020 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.595135927 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.595151901 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.597224951 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.597309113 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.597317934 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.597997904 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.598067045 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.598073006 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.600425005 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.601479053 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.601686954 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.601699114 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.601732969 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.601738930 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.603769064 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.603844881 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.603859901 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.604398012 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.604450941 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.604458094 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.606910944 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.607712984 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.607737064 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.607781887 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.607805014 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.607808113 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.607815981 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.607815981 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.607830048 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.607848883 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.607906103 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.607909918 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.608695030 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.610496998 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.610502005 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.611742020 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.614149094 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.614171028 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.615159035 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.615230083 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.615308046 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.615315914 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.615334034 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.615369081 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.615406036 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.615418911 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.615931988 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.616008997 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.616017103 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.616874933 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.616930008 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.616935968 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.618155956 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.619791031 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.619848967 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.619867086 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.622426033 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.622522116 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.622562885 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.622576952 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.622581959 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.622597933 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.623040915 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.623284101 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.623292923 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.624238014 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.624322891 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.624327898 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.624614954 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.625238895 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.625245094 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.627312899 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.627367973 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.627388000 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.629044056 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.629127979 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.629133940 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.629935980 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.630003929 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.630018950 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.630358934 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.630408049 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.630414963 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.631416082 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.631474972 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.631479979 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.632900000 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.632950068 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.632966995 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.633413076 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.633466959 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.633471966 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.636367083 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.636425972 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.636430025 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.637176991 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.637275934 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.637290955 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.637619972 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.637686014 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.637692928 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.637723923 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.637778044 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.637783051 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.638665915 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.638742924 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.638763905 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.641489983 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.641516924 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.641547918 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.641552925 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.641616106 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.642025948 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.642087936 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.642093897 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.643045902 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.643230915 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.643239021 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.643299103 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.643346071 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.643359900 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.644639969 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.644704103 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.644717932 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.646190882 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.646451950 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.647362947 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.647368908 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.648394108 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.648408890 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.648436069 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.648453951 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.648453951 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.648482084 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.648523092 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.648586988 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.648595095 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.648626089 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.649530888 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.649599075 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.649605036 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.649735928 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.649768114 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.649811029 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.649816036 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.649857998 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.651607037 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.651674032 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.651686907 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.653067112 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.653248072 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.653809071 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.654007912 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.654015064 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.654449940 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.656085014 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.656162024 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.656182051 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.658123016 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.658133984 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.658183098 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.658189058 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.658219099 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.658238888 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.658457994 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.658521891 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.658523083 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.658549070 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.658586025 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.658595085 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.658646107 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.659161091 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.659219027 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.659225941 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.660589933 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.660630941 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.660644054 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.661303997 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.661371946 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.661386013 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.661518097 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.661561966 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.661566973 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.663244009 CEST	49884	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.663248062 CEST	443	49884	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.663738966 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.665438890 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.665487051 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.665503025 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.665976048 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.666050911 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.666053057 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.666081905 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.666142941 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.666183949 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.666254044 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.666260004 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.670329094 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.671180010 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.671189070 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.671302080 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.671350002 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.671370029 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.671983004 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.672085047 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.672138929 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.672143936 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.672200918 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.672257900 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.672266006 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.676117897 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.676640034 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.676702023 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.676721096 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.676752090 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.676764965 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.676819086 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.676868916 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.676876068 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.676971912 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.677028894 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.677037954 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.681005001 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.681065083 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.681082010 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.681354046 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.681416035 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.681420088 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.681571960 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.681631088 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.681639910 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.681744099 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.681794882 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.681806087 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.683993101 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.684055090 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.684062958 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.685672045 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.685736895 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.685753107 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.686188936 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.686249971 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.686254978 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.686547041 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.686609983 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.686619043 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.688849926 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.688913107 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.688920975 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.690442085 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.690490961 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.690506935 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.690943003 CEST	49900	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:18.690959930 CEST	443	49900	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:18.691191912 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.691199064 CEST	49900	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:18.691236019 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.691241026 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.691488028 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.691723108 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.691732883 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.692595959 CEST	49900	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:18.692606926 CEST	443	49900	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:18.693783998 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.693841934 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.693851948 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.695221901 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.695278883 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.695307016 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.695398092 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.695441961 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.695545912 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.695627928 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.695631981 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.695842028 CEST	49879	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.695856094 CEST	443	49879	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.696125984 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.696173906 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.696182966 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.698494911 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.698561907 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.698570967 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.700196981 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.700244904 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.700249910 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.700326920 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.700367928 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.700433016 CEST	49878	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.700438023 CEST	443	49878	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.700882912 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.700978994 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.700992107 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.703255892 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.703541040 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.703548908 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.705564022 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.705636024 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.705643892 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.707422972 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.707484961 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.707493067 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.710441113 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.711543083 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.711644888 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.712827921 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.712903023 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.712914944 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.715137959 CEST	49882	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.715157032 CEST	443	49882	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.715502024 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.715529919 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.716172934 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.717642069 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.717721939 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.717730999 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.722711086 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.722779989 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.724733114 CEST	49883	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.724756956 CEST	443	49883	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.725263119 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.725523949 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.725888968 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.743192911 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.743230104 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.743783951 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.743783951 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.743829966 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.745817900 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.745841026 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.745922089 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.746278048 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.746294022 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.746404886 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.747523069 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.747541904 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.747859955 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.747876883 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.772113085 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.779287100 CEST	49906	443	192.168.2.4	64.233.176.119
Apr 19, 2024 07:32:18.779309988 CEST	443	49906	64.233.176.119	192.168.2.4
Apr 19, 2024 07:32:18.779444933 CEST	49906	443	192.168.2.4	64.233.176.119
Apr 19, 2024 07:32:18.784037113 CEST	49906	443	192.168.2.4	64.233.176.119
Apr 19, 2024 07:32:18.784076929 CEST	443	49906	64.233.176.119	192.168.2.4
Apr 19, 2024 07:32:18.906461000 CEST	443	49900	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:18.925503016 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.925558090 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.925592899 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.925620079 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.925623894 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.925663948 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.925718069 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.932638884 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.934772968 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.934799910 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.940268993 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.940463066 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.940479994 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.947303057 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.947366953 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.947381020 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.954351902 CEST	49900	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:18.954448938 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.954685926 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.954699039 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.961035013 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.961899042 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.961976051 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.961990118 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.964477062 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.964538097 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.964977026 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.965043068 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.965441942 CEST	49900	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:18.965461016 CEST	443	49900	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:18.965677023 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.965733051 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.966233969 CEST	443	49900	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:18.966285944 CEST	49900	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:18.967309952 CEST	443	49900	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:18.967358112 CEST	49900	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:18.977601051 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.977725029 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.978262901 CEST	49900	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:18.978377104 CEST	443	49900	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:18.979756117 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.979787111 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.979861975 CEST	49900	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:18.979875088 CEST	443	49900	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:18.980739117 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.981410980 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:18.981422901 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.981771946 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:18.991781950 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.005007982 CEST	443	49906	64.233.176.119	192.168.2.4
Apr 19, 2024 07:32:19.006217003 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.006333113 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.006387949 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.006417036 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.006897926 CEST	49906	443	192.168.2.4	64.233.176.119
Apr 19, 2024 07:32:19.006907940 CEST	443	49906	64.233.176.119	192.168.2.4
Apr 19, 2024 07:32:19.007438898 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.007874966 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.008409977 CEST	443	49906	64.233.176.119	192.168.2.4
Apr 19, 2024 07:32:19.008924007 CEST	49906	443	192.168.2.4	64.233.176.119
Apr 19, 2024 07:32:19.010370970 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.010395050 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.010627985 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.012006998 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.012260914 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.014379025 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.014395952 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.020045996 CEST	49906	443	192.168.2.4	64.233.176.119
Apr 19, 2024 07:32:19.020240068 CEST	443	49906	64.233.176.119	192.168.2.4
Apr 19, 2024 07:32:19.020365000 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.020381927 CEST	49900	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:19.020976067 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.021262884 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.021292925 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.030009031 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.032118082 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.032154083 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.033638954 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.033727884 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.033740044 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.040942907 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.040999889 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.041012049 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.048501968 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.048604965 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.048615932 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.052125931 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.055540085 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.055624962 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.055660009 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.062062025 CEST	49906	443	192.168.2.4	64.233.176.119
Apr 19, 2024 07:32:19.062073946 CEST	443	49906	64.233.176.119	192.168.2.4
Apr 19, 2024 07:32:19.062828064 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.063580990 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.063594103 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.068115950 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.070099115 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.070146084 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.070158958 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.077421904 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.077493906 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.077510118 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.084594011 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.084645987 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.084656000 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.091140985 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.091200113 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.091209888 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.097754955 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.097887993 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.097901106 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.104278088 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.105274916 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.105285883 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.105788946 CEST	49906	443	192.168.2.4	64.233.176.119
Apr 19, 2024 07:32:19.110830069 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.110908031 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.110917091 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.117357016 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.117451906 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.117461920 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.123960018 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.126512051 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.126521111 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.130565882 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.130621910 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.130630016 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.132977962 CEST	443	49900	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:19.133064032 CEST	49900	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:19.133089066 CEST	443	49900	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:19.133177042 CEST	443	49900	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:19.134464025 CEST	49900	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:19.137161970 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.137233019 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.137242079 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.142057896 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.143332958 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.143343925 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.146631002 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.146682978 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.146696091 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.151088953 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.152965069 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.152978897 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.155230999 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.155298948 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.155308008 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.159476042 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.159576893 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.159595013 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.165738106 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.165786028 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.165826082 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.165837049 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.165879965 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.170041084 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.174212933 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.174254894 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.174288034 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.174295902 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.174336910 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.175972939 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.176021099 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.176052094 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.176076889 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.176078081 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.176122904 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.176156044 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.178384066 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.182598114 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.182638884 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.182708979 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.182717085 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.182761908 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.182936907 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.182987928 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.182997942 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.186862946 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.190385103 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.190481901 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.190512896 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.191023111 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.191066980 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.191117048 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.191145897 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.191190004 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.195257902 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.197537899 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.197901964 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.197911024 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.199496984 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.199539900 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.199577093 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.199594021 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.199629068 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.203627110 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.204863071 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.207860947 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.207901955 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.207945108 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.207977057 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.208007097 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.208030939 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.212085009 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.212106943 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.212161064 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.214370966 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.214386940 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.216229916 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.218238115 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.218286037 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.218331099 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.218352079 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.218364954 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.219917059 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.219963074 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.219995975 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.220026970 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.220030069 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.220043898 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.220118999 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.222454071 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.224076986 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.224083900 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.226507902 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.228043079 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.228092909 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.228127956 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.228136063 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.228178978 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.228748083 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.228892088 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.228957891 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.228980064 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.229099035 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.229991913 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.230005980 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.230444908 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.231422901 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.231441021 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.234160900 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.234271049 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.234294891 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.235910892 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.236051083 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.236346960 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.236434937 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.236448050 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.236501932 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.236510992 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.237826109 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.237898111 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.237966061 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.241506100 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.244085073 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.244146109 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.244210958 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.244261026 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.244275093 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.244501114 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.245196104 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.245265961 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.245280981 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.245315075 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.245323896 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.248720884 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.250895023 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.250932932 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.250958920 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.250967979 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.250998974 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.252341032 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.252585888 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.252665997 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.252677917 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.252712965 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.252734900 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.255486012 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.255522013 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.255544901 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.255558968 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.256076097 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.257775068 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.258922100 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.259015083 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.259027958 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.259947062 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.259959936 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.260441065 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.260687113 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.260744095 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.260752916 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.260863066 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.260870934 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.261137009 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.261195898 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.261208057 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.263391018 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.263499975 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.263511896 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.265747070 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.265892982 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.265907049 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.267906904 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.268096924 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.268110037 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.268878937 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.270211935 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.270287037 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.270301104 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.270337105 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.270349979 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.272367001 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.273169994 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.273181915 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.274496078 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.274561882 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.274574995 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.276588917 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.276634932 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.276673079 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.276688099 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.278713942 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.278779030 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.278794050 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.280529022 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.280648947 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.280663967 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.280745029 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.282669067 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.282712936 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.282740116 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.282756090 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.282805920 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.284025908 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.284450054 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.284461975 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.285664082 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.285707951 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.285770893 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.285789013 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.285842896 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.287652969 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.289695978 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.289748907 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.289748907 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.289762974 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.289813042 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.291336060 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.291383982 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.291397095 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.291651011 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.293598890 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.293641090 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.293659925 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.293673038 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.293735027 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.295578957 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.297468901 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.297518015 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.297571898 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.297586918 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.297641993 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.298624992 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.298686028 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.298698902 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.299348116 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.300937891 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.300947905 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.301193953 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.301234007 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.301287889 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.301302910 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.301361084 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.303085089 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.304868937 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.304910898 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.304922104 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.304934978 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.304991007 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.305943966 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.306004047 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.306015968 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.306684017 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.308537006 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.308588982 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.308603048 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.309489012 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.309551954 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.309566021 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.311269999 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.311340094 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.311351061 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.311352968 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.311367989 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.313045979 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.313119888 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.313133001 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.313287973 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.314083099 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.314095974 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.314791918 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.314866066 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.314877987 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.316566944 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.316760063 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.316771984 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.318418980 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.318538904 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.318551064 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.320070982 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.320142984 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.320154905 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.320501089 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.320679903 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.320693016 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.321794033 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.321871042 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.321883917 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.323467970 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.323554993 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.323568106 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.325172901 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.326888084 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.326937914 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.326944113 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.326957941 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.326986074 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.327847004 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.328062057 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.328073978 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.328593016 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.329524994 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.329539061 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.331116915 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.331170082 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.331238031 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.331252098 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.331305981 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.332762957 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.334422112 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.334461927 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.334487915 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.334501028 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.335150957 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.335212946 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.335983038 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.335985899 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.336013079 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.336025000 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.336128950 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.336157084 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.337615013 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.337654114 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.337712049 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.337727070 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.337779045 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.339229107 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.339979887 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.340125084 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.340133905 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.340814114 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.340915918 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.340924025 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.340936899 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.342190027 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.342263937 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.342436075 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.342468977 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.342479944 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.344019890 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.344084978 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.344121933 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.344147921 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.344420910 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.344489098 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.344495058 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.344505072 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.345546007 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.347098112 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.347142935 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.347201109 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.347214937 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.347419977 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.348135948 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.348447084 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.348488092 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.348501921 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.348506927 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.348517895 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.348524094 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.348587990 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.348592997 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.348593950 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.350110054 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.350162983 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.350178003 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.350892067 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.351038933 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.351052046 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.352466106 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.352586985 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.352602005 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.354017019 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.354355097 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.354370117 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.355017900 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.355063915 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.355074883 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.355427027 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.355480909 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.355488062 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.356247902 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.356436968 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.356463909 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.356475115 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.356532097 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.356540918 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.356882095 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.356930971 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.356940985 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.358392000 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.358443022 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.358452082 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.359811068 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.360070944 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.360076904 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.361215115 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.361303091 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.361310959 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.361504078 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.361582994 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.361594915 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.362632990 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.362711906 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.362719059 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.363926888 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.363991976 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.364000082 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.364353895 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.364538908 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.364554882 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.364662886 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.365299940 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.365358114 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.365369081 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.365370035 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.365380049 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.366650105 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.366700888 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.366712093 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.367914915 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.367980957 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.367990971 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.368645906 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.368694067 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.368704081 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.369947910 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.369987965 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.370007038 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.370014906 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.370111942 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.371197939 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.372438908 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.372505903 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.372539043 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.372673988 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.372705936 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.372752905 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.372766018 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.372765064 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.372775078 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.372823000 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.372833967 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.373789072 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.374557972 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.374660015 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.374670029 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.375128031 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.375165939 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.375193119 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.375210047 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.375322104 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.376365900 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.377033949 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.377051115 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.377623081 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.377659082 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.377684116 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.377697945 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.377801895 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.378442049 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.378504992 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.378838062 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.379417896 CEST	49910	443	192.168.2.4	172.67.39.148
Apr 19, 2024 07:32:19.379465103 CEST	443	49910	172.67.39.148	192.168.2.4
Apr 19, 2024 07:32:19.379523039 CEST	49910	443	192.168.2.4	172.67.39.148
Apr 19, 2024 07:32:19.380079985 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.380124092 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.380179882 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.380196095 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.380247116 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.380640030 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.380692005 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.380906105 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.380939960 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.380943060 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.380947113 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.380950928 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.380974054 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.381026983 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.381072998 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.381078959 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.381232977 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.382482052 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.382515907 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.382539034 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.382554054 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.382658958 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.382723093 CEST	49910	443	192.168.2.4	172.67.39.148
Apr 19, 2024 07:32:19.382739067 CEST	443	49910	172.67.39.148	192.168.2.4
Apr 19, 2024 07:32:19.383606911 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.384279966 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.384337902 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.384354115 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.385462999 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.385525942 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.385539055 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.385982990 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.386003017 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.386600971 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.386661053 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.386672974 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.387696981 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.387743950 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.387774944 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.387815952 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.387829065 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.388761997 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.388879061 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.388900995 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.388916969 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.388979912 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.388993025 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.389054060 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.389240026 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.389250040 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.390033007 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.390089989 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.390101910 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.391166925 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.392076969 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.392088890 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.392265081 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.392812967 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.392824888 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.393388987 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.393457890 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.393471003 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.394489050 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.394541979 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.394553900 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.395611048 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.395684004 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.395698071 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.396626949 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.396692991 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.396706104 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.396753073 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.396990061 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.397008896 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.397145033 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.397255898 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.397269011 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.397511005 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.397651911 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.397711039 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.398214102 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.398376942 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.398408890 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.398641109 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.399281979 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.399347067 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.399405003 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.399416924 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.399468899 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.400141954 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.400202990 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.400274038 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.400388956 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.401424885 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.401459932 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.401500940 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.401525974 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.401577950 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.402405024 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.402970076 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.402992964 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.403156042 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.403192043 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.403417110 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.403450966 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.403471947 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.403486967 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.403544903 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.404061079 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.404119968 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.404139996 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.404381990 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.405073881 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.405128002 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.405143023 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.405371904 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.405416012 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.405479908 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.405494928 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.405915976 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.406378984 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.407407045 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.407485008 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.407516003 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.407529116 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.407582045 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.407594919 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.407627106 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.407866955 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.411421061 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.412028074 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.412039042 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.412381887 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.412496090 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.412513971 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.418689013 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.419668913 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.419681072 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.419689894 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.419783115 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.419797897 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.426042080 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.426769018 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.426779032 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.427058935 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.427123070 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.427136898 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.433346033 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.433451891 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.433459997 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.434348106 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.434420109 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.434432983 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.437603951 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.440642118 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.441471100 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.441479921 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.441641092 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.441889048 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.441901922 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.443396091 CEST	49900	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:19.443423986 CEST	443	49900	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:19.447951078 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.448029041 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.448036909 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.449044943 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.449098110 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.449111938 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.455238104 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.455281019 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.455300093 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.456197023 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.456253052 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.456267118 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.461077929 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.461158991 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.461165905 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.463468075 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.463545084 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.463558912 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.466486931 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.466586113 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.466593981 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.469261885 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.469316959 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.469330072 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.471796036 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.471863985 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.471872091 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.472254038 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.474701881 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.474895000 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.474929094 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.476708889 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.476805925 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.476824999 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.479950905 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.480020046 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.480038881 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.481678009 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.481925011 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.481933117 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.484858036 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.485162020 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.485177040 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.488792896 CEST	49904	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.488815069 CEST	443	49904	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.489079952 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.489109993 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.489773035 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.490123987 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.490134001 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.492031097 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.492032051 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.492052078 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.492115021 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.494015932 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.494036913 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.494036913 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.494036913 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.494049072 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.494082928 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.495873928 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.497175932 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.497215986 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.497256994 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.497277975 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.497328997 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.498898983 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.502173901 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.503367901 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.503401995 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.503432035 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.503459930 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.503462076 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.503473997 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.503511906 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.503535032 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.503585100 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.503607035 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.503689051 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.503689051 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.503839970 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.503962994 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.503971100 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.504026890 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.504026890 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.504036903 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.504055977 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.504096031 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.504096031 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.504105091 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.504144907 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.504235029 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.504245043 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.504323959 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.504863024 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.504914999 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.504964113 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.504992008 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.505007029 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.505016088 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.505083084 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.505631924 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.505733013 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.505740881 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.505774975 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.505845070 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.505883932 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.505909920 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.505918026 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.505973101 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.506632090 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.506867886 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.506885052 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.506894112 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.506927967 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.506975889 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.506983995 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.507052898 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.507081032 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.507096052 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.507133961 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.507153034 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.507201910 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.507385015 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.507620096 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.507649899 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.507679939 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.507707119 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.507711887 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.507719994 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.507747889 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.507862091 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.507869959 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.508563042 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.508605003 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.508634090 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.508640051 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.508649111 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.508752108 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.508760929 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.508815050 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.508853912 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.509371042 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.509438992 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.512106895 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.513747931 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.513803959 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.513812065 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.517023087 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.517055035 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.517090082 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.517110109 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.517158985 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.518728971 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.518762112 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.518790007 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.518799067 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.519134998 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.521893978 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.523653030 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.526886940 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.526918888 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.526935101 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.526953936 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.527015924 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.528836966 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.528866053 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.529073000 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.529081106 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.529268026 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.531928062 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.533588886 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.536808968 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.536855936 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.536871910 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.538435936 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.538469076 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.538527012 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.538536072 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.538678885 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.541774035 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.541822910 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.541831970 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.541856050 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.541913986 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.543006897 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.546850920 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.547581911 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.547657967 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.547666073 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.549822092 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.550117970 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.550127029 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.551100016 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.551131010 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.551172972 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.551223993 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.551275015 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.554887056 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.555032969 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.555058002 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.555604935 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:19.555648088 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:19.555797100 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.555864096 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:19.558089972 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.558134079 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.558152914 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.558684111 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.558885098 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.558893919 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.560000896 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:19.560019016 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:19.562352896 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.562486887 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.562504053 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.562727928 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.563400984 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.563410044 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.566821098 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.566880941 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.566895962 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.566988945 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.567043066 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.567050934 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.570892096 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.570939064 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.570952892 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.571085930 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.571162939 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.571170092 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.575095892 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.575139046 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.575190067 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.575213909 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.575333118 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.575341940 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.579161882 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.579246044 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.579405069 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.579411983 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.579463005 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.579484940 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.582973003 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.583102942 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.583105087 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.583118916 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.583163023 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.583178997 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.583271980 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.585473061 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.585618019 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.585624933 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.587255955 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.587302923 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.587321043 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.590529919 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.590563059 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.590666056 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.590676069 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.590784073 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.591394901 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.591455936 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.591471910 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.593444109 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.593508005 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.593624115 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.593647957 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.594115019 CEST	443	49910	172.67.39.148	192.168.2.4
Apr 19, 2024 07:32:19.594302893 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.594475031 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.594492912 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.594604015 CEST	49910	443	192.168.2.4	172.67.39.148
Apr 19, 2024 07:32:19.594623089 CEST	443	49910	172.67.39.148	192.168.2.4
Apr 19, 2024 07:32:19.595499992 CEST	443	49910	172.67.39.148	192.168.2.4
Apr 19, 2024 07:32:19.595557928 CEST	49910	443	192.168.2.4	172.67.39.148
Apr 19, 2024 07:32:19.596168041 CEST	49910	443	192.168.2.4	172.67.39.148
Apr 19, 2024 07:32:19.596223116 CEST	443	49910	172.67.39.148	192.168.2.4
Apr 19, 2024 07:32:19.596347094 CEST	49910	443	192.168.2.4	172.67.39.148
Apr 19, 2024 07:32:19.596357107 CEST	443	49910	172.67.39.148	192.168.2.4
Apr 19, 2024 07:32:19.596968889 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.597084045 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.597101927 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.598603010 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.598634005 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.598669052 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.598685026 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.598726988 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.599481106 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.599620104 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.599627972 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.601077080 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.601805925 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.601857901 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.601867914 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.602436066 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.602495909 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.602509022 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.604424000 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.604564905 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.604573011 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.604881048 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.604923010 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.604934931 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.607043982 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.607120991 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.607130051 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.607213974 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.607275963 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.607374907 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.607422113 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.607440948 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.608072996 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.608127117 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.608562946 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.608664036 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:19.608721018 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.608721972 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:19.609220982 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.609364986 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.609373093 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.609883070 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.611258984 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.611270905 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.611834049 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.611886024 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.611893892 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.612366915 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.612664938 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.612674952 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.614130974 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.614521980 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.614530087 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.615287066 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.615348101 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.615360022 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.615916967 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.616614103 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.616692066 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.616699934 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.617388964 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.618344069 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.618354082 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.618833065 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.619828939 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.619836092 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.619899035 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.619945049 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.619952917 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.621083021 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.621198893 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.621206045 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.622065067 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.622117996 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.622139931 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.624501944 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.624502897 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.624530077 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.624560118 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.624568939 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.624881029 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.624891043 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.626808882 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.626878977 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.627024889 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.627037048 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.627084970 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.627094030 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.627391100 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.629009962 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.629110098 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.629165888 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.629177094 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.631268978 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.631292105 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.632139921 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.632152081 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.632544994 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.632567883 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.632899046 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.633428097 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.633456945 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.633470058 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.634136915 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.634778976 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.635651112 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.635678053 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.635809898 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.635819912 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.637017012 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.637048006 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.637089014 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.637100935 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.637136936 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.637213945 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.637811899 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.639142036 CEST	49910	443	192.168.2.4	172.67.39.148
Apr 19, 2024 07:32:19.639282942 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.640129089 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.640156031 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.640247107 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.640256882 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.641374111 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.641472101 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.641499043 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.641681910 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.641695023 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.641733885 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.642101049 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.644063950 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.644299984 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.644325018 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.644438982 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.644448996 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.644745111 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.645904064 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.645929098 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.645975113 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.645987988 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.646023989 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.646560907 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.648029089 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.648495913 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.648538113 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.648570061 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.648580074 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.648704052 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.650239944 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.650265932 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.650311947 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.650324106 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.650362015 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.650537968 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.651726961 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.651824951 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.651833057 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.652005911 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.652026892 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.652529001 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.652699947 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.653413057 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.653692961 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.653781891 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.653789997 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.654655933 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.654684067 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.654712915 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.654725075 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.654776096 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.655781984 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.655834913 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.655843019 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.656630039 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.657835007 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.657915115 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.657921076 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.658655882 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.658704996 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.658718109 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.659827948 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.659931898 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.660036087 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.660044909 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.660223007 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.660238028 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.661959887 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.662029982 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.662034035 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.662044048 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.662192106 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.662200928 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.663774014 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.663834095 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.663894892 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.663903952 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.663944960 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.663954020 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.665746927 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.665848017 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.665905952 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.665913105 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.665945053 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.665955067 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.667745113 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.667808056 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.667815924 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.667845011 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.667886972 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.667897940 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.669745922 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.669857025 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.669948101 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.669954062 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.669980049 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.669990063 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.671593904 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.671648026 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.671655893 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.671847105 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.671905994 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.671916962 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.673499107 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.673971891 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.674036026 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.674040079 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.674046040 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.674046993 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.675754070 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.676063061 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.676071882 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.676600933 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.676767111 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.677050114 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.677058935 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.677717924 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.678112030 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.678195000 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.678205967 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.678297997 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.679771900 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.679958105 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.679969072 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.680229902 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.680316925 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.680339098 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.680344105 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.680463076 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.681556940 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.681595087 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.681607962 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.682002068 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.683850050 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.683909893 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.683914900 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.684592009 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.684631109 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.684652090 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.684669971 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.684750080 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.685729027 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.685812950 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.685990095 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.685996056 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.686264992 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.686353922 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.687561035 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.688229084 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.688252926 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.688301086 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.688313961 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.688352108 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.689239979 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.689321995 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.689326048 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.689352989 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.689456940 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.690051079 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.691054106 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.691802979 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.691828012 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.691854000 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.691867113 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.691905022 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.692775965 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.692857027 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.692871094 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.692878008 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.692922115 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.693614006 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.694545984 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.695441008 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.695466042 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.695496082 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.695518970 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.695554018 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.696294069 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.696371078 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.696378946 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.696399927 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.696696043 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.697199106 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.697705030 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.697763920 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.698117018 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.698177099 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.698184967 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.698384047 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.698863029 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.698923111 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.698934078 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.698985100 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.699012041 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.699033976 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.699058056 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.699104071 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.700526953 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.700604916 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.700613022 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.700800896 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.702219009 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.702653885 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.702663898 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.702716112 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.702739954 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.702781916 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.702804089 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.702841997 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.703973055 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.704041958 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.704049110 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.704200983 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.705660105 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.705710888 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.705730915 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.706012011 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.706062078 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.706079960 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.706918001 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.707001925 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.707020044 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.707114935 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.707210064 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.707222939 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.708586931 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.708678961 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.708702087 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.708786964 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.708832026 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.708839893 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.710135937 CEST	49895	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.710176945 CEST	443	49895	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.710326910 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.710325956 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.710381985 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.710397005 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.710405111 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.710405111 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.710889101 CEST	49917	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.710927010 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.711057901 CEST	49917	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.711891890 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.711922884 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.711961985 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.711968899 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.711973906 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.711997032 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.712522984 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.712815046 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.713454962 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.713543892 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.713607073 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.713632107 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.713650942 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.713658094 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.714924097 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.714975119 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.715012074 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.715065956 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.715073109 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.715140104 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.715193033 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.715218067 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.716577053 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.716681957 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.716689110 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.716813087 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.716929913 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.716953993 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.718413115 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.718460083 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.718482018 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.718786955 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.718826056 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.718863010 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.718871117 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.718964100 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.719888926 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.720040083 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.720063925 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.720182896 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.721417904 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.721484900 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.721508026 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.721725941 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.721749067 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.721790075 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.721797943 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.722060919 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.722978115 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.723042011 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.723066092 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.723071098 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.723390102 CEST	49917	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.723412991 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.724061012 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.724529982 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.724538088 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.724586964 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.724594116 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.724594116 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.724616051 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.725949049 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.725972891 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.726331949 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.726340055 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.726388931 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.726706028 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.726762056 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.726768970 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.726780891 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.726826906 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.727520943 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.728184938 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.728760958 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.728785038 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.728822947 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.728833914 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.729192019 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.729723930 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.729753017 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.729774952 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.729800940 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.729837894 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.730112076 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.731201887 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.731709957 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.731729984 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.731789112 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.731796980 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.732119083 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.732496023 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.732534885 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.732580900 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.732605934 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.732645035 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.733016968 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.733756065 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.733918905 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.734133005 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.734164000 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.734219074 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.734227896 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.734455109 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.735277891 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.735337973 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.735348940 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.735359907 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.735407114 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.735440969 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.736123085 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.736155987 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.736175060 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.736340046 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.736500025 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.736737967 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.737035990 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.738038063 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.738071918 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.738096952 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.738126040 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.738184929 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.739180088 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.739195108 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.739476919 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.739893913 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.739955902 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.740808964 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.740839958 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.740884066 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.740910053 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.740999937 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.741051912 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.741168976 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.742078066 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.743453979 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.743500948 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.743525982 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.744035959 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.744117975 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.744134903 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.745480061 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.745532990 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.745556116 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.746639967 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.746712923 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.746736050 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.747952938 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.748115063 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.748130083 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.749212027 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.749603033 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.749619007 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.750494957 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.750564098 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.750583887 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.751760960 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.751810074 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.751835108 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.752999067 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.753048897 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.753072023 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.754343987 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.754426956 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.754448891 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.755497932 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.755705118 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.755727053 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.756900072 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.756956100 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.756978035 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.758210897 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.758272886 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.758296013 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.758626938 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.758788109 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.759367943 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.759383917 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.759746075 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.759773970 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.759797096 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.759818077 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.760059118 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.762043953 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.762116909 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.763233900 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.763259888 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.764146090 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.765682936 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.765724897 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.765748024 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.765772104 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.765815973 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.765856981 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.765862942 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.765872955 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.765893936 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.767751932 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.767785072 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.767812967 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.767822981 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.767846107 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.767868996 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.768882990 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.768919945 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.768944979 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.768965006 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.769010067 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.769910097 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.771059036 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.771090984 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.771148920 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.771176100 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.771218061 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.772197008 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.773257017 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.773340940 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.773366928 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.773843050 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.773893118 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.773910046 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.774801016 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.774842978 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.774861097 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.776575089 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:19.776933908 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.776968002 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.777028084 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.777055979 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.777097940 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.778007984 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.779011011 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.779046059 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.779057026 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.779079914 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.779232025 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.779959917 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.781014919 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.781037092 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.781083107 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.781106949 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.781147003 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.782027960 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.783140898 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.783173084 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.783222914 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.783251047 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.783291101 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.784075022 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.784118891 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.785427094 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.785484076 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.785538912 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.785563946 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.785603046 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.786134958 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.787106037 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.787179947 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.787245989 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.787269115 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.787311077 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.788301945 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.789167881 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.789211035 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.789262056 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.789289951 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.789330006 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.789869070 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.790949106 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.790982962 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.790996075 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.791018963 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.791205883 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.791896105 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.792862892 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.792897940 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.792934895 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.792959929 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.793005943 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.793863058 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:19.793864012 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.793884993 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:19.794553041 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.794609070 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.794631958 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.794825077 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:19.795087099 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.795134068 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.795150042 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.795942068 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.796058893 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.796078920 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.796938896 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.796986103 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.797003984 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.797804117 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.797858953 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.797877073 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.798624992 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.798681974 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.798698902 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.799550056 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.799710989 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.799732924 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.799761057 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:19.799894094 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:19.800456047 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.800514936 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.800534964 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.801175117 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:19.801296949 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.801350117 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.801367998 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.802428007 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.802555084 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.802575111 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.803060055 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.803113937 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.803128958 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.804030895 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.804156065 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.804173946 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.804955959 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.805196047 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.805216074 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.805860996 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.805913925 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.805932045 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.806732893 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.806780100 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.806797981 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.807473898 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.807523012 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.807538986 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.808315992 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.808425903 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.808444977 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.809210062 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.809267044 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.809284925 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.810142994 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.810211897 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.810230017 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.810925961 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.810971975 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.810987949 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.811503887 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.811965942 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.812057972 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.812077999 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.812396049 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.812952042 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.812971115 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.813693047 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.813719034 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.813754082 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.813771963 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.813807011 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.814455032 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.815243006 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.815273046 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.815321922 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.815345049 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.815387964 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.816128016 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.816868067 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.816894054 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.816921949 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.816943884 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.816981077 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.817763090 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.818715096 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.818739891 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.818766117 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.818789005 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.818831921 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.819250107 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.820194960 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.820234060 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.820240974 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.820255995 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.820346117 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.820837021 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.821737051 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.821762085 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.821789026 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.821804047 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.822046995 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.822489023 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.823231936 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.823256016 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.823288918 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.823302984 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.823338032 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.823879957 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.824716091 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.824742079 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.824759960 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.824773073 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.824827909 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.825486898 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.826348066 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.826370955 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.826386929 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.826399088 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.826895952 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.827131033 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.827871084 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.827896118 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.828038931 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.828048944 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.828087091 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.828533888 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.829289913 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.829318047 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.829363108 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.829379082 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.829422951 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.829984903 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.830466986 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.830509901 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.830522060 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.831167936 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.831377029 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.831386089 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.832086086 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.832180023 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.832192898 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.832578897 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.832624912 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.832633972 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.833350897 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.833395004 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.833408117 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.834095001 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.834142923 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.834152937 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.834781885 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.834820032 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.834827900 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.835534096 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.835580111 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.835589886 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.836234093 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.836282015 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.836293936 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.836926937 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.837052107 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.837061882 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.837697983 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.837769985 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.837780952 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.838440895 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.838480949 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.838490963 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.839102030 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.839153051 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.839167118 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.839941978 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.839999914 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.840010881 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.840603113 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.840804100 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.840816021 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.841226101 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.841325998 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.841336012 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.841892958 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.842307091 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.842317104 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.842616081 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.842662096 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.842669010 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.843333006 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.843590021 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.843599081 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.843983889 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.844034910 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.844050884 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.844136000 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:19.844655037 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.844702959 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.844719887 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.845915079 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.845947027 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.845959902 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.845972061 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.846051931 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.846379042 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.847090006 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.847124100 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.847141027 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.847150087 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.847182989 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.847774982 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.848463058 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.848501921 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.848526955 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.848539114 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.848583937 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.849142075 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.849844933 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.849873066 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.849917889 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.849931955 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.850167990 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.850526094 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.851187944 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.851217985 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.851252079 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.851273060 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.851308107 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.851803064 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.851855993 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.852400064 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.852504015 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.852535963 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.852550030 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.852562904 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.852605104 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.853197098 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.853825092 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.853854895 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.853884935 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.853899002 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.853935957 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.854207039 CEST	443	49910	172.67.39.148	192.168.2.4
Apr 19, 2024 07:32:19.854334116 CEST	443	49910	172.67.39.148	192.168.2.4
Apr 19, 2024 07:32:19.854377985 CEST	49910	443	192.168.2.4	172.67.39.148
Apr 19, 2024 07:32:19.854497910 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.855171919 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.855201006 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.855242968 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.855257988 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.855297089 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.855844975 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.856506109 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.856534004 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.856564999 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.856580019 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.856617928 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.857196093 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.857851028 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.857882977 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.857897043 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.857909918 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.857975960 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.858460903 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.859148026 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.859203100 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.859262943 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.859277964 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.859319925 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.859780073 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.859824896 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.860058069 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.860069036 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.860791922 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.860832930 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.860876083 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.860888004 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.860924959 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.861710072 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.861761093 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.862660885 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.862690926 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.862725019 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.862726927 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.862746000 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.862768888 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.862787962 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.863648891 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.863696098 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.863750935 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.863761902 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.864610910 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.864645004 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.864660025 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.864671946 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.864725113 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.865556955 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.865598917 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.865643024 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.865655899 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.866517067 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.866549969 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.866588116 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.866609097 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.866643906 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.867417097 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.867465973 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.867775917 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.867786884 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.868428946 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.868483067 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.868495941 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.869355917 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.869406939 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.869445086 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.869457960 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.869551897 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.870214939 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.870265007 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.870347977 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.870361090 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.871177912 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.871206045 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.871251106 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.871265888 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.871304035 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.872035980 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.872085094 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.872136116 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.872150898 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.873017073 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.873048067 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.873064995 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.873080969 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.873236895 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.873872995 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.873923063 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.874139071 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.874154091 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.874799013 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.874829054 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.874856949 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.874870062 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.874905109 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.875684023 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.875720024 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.875766993 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.875777006 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.876604080 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.876631021 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.876683950 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.876694918 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.876729965 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.877432108 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.877486944 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.877592087 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.877604961 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.878369093 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.878415108 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.878422022 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.878434896 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.878528118 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.879211903 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.879250050 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.879363060 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.879375935 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.880073071 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.880115986 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.880127907 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.880142927 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.880297899 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.881067991 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.881107092 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.881203890 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.881225109 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.881815910 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.881846905 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.881869078 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.881885052 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.881923914 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.882692099 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.882791996 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.882837057 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.882853985 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.883582115 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.883619070 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.883663893 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.883686066 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.883727074 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.884984970 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.885061979 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.885168076 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.885193110 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.885329008 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.885373116 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.885375023 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.885385036 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.885426998 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.886563063 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.886625051 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.886710882 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.886728048 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.886998892 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.887025118 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.887048006 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.887058020 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.887090921 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.887919903 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.887960911 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.888056040 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.888068914 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.888648033 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.888686895 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.888700008 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.888711929 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.888787985 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.889475107 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.889512062 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.889954090 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.889967918 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.890307903 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.890336990 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.890362978 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.890376091 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.890410900 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.891130924 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.891194105 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.891325951 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.891335964 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.891925097 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.891951084 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.891978025 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.891988039 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.892023087 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.892693996 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.892730951 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.892863035 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.892873049 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.893522978 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.893549919 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.893580914 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.893591881 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.894340992 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.894367933 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.894370079 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.894378901 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.894423962 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.895154953 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.895193100 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.895215034 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.895231962 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.895270109 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.895905972 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.895945072 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.896034002 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.896045923 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.896727085 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.896759033 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.896765947 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.896779060 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.896830082 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.897516012 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.897614956 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.897661924 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.897674084 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.898298979 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.898327112 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.898354053 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.898366928 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.898400068 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.899013996 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.899050951 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.899210930 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.899223089 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.899811029 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.899848938 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.899857998 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.900618076 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.900643110 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.900669098 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.900681019 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.900712967 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.900749922 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.901393890 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.901415110 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.901448965 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.901467085 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.901504993 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.902065992 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.902112007 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.902187109 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.902199030 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.902852058 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.902884960 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.902901888 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.902913094 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.903012991 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.903608084 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.903644085 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.903703928 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.903718948 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.904360056 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.904397964 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.904449940 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.904463053 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.904499054 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.905096054 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.905124903 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.905169964 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.905181885 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.905834913 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.905862093 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.905905962 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.905917883 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.905951977 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.906588078 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.906624079 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.906671047 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.906682014 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.907347918 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.907378912 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.907390118 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.907402992 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.907474995 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.908046007 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.908087015 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.908135891 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.908148050 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.908832073 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.908860922 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.908879995 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.908890963 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.908952951 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.909524918 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.909563065 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.909586906 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.909627914 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.909638882 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.909801006 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.910466909 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.910502911 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.910533905 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.910577059 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.910588980 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.910624027 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.911456108 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.911489964 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.911515951 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.911561012 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.911573887 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.911611080 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.912403107 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.912441015 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.912462950 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.912511110 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.912522078 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.912563086 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.913328886 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.913366079 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.913386106 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.913414001 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.913424969 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.913460970 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.914321899 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.914354086 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.914377928 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.914422035 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.914438963 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.914530993 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.915244102 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.915278912 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.915299892 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.915344000 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.915364027 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.915421963 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.916130066 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.916165113 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.916186094 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.916234016 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.916254997 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.916290045 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.917068958 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.917109966 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.917135954 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.917176008 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.917191029 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.917239904 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.918014050 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.918051004 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.918075085 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.918118954 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.918132067 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.918165922 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.918922901 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.918962955 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.918987989 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.919027090 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.919039011 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.919074059 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.919826984 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.919873953 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.919898987 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.919961929 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.919975042 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.920012951 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.920768023 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.920806885 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.920833111 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.920856953 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.920870066 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.920907021 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.921642065 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.921684980 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.921708107 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.921751976 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.921763897 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.921799898 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.922533989 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.922585011 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.923382998 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.923413992 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.923437119 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.923439026 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.923463106 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.923470020 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.924082994 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.924093008 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.924278975 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.924307108 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.924662113 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.924674034 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.924710035 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.924770117 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.925215006 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.925240040 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.925255060 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.925266027 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.925862074 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.925872087 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.926048040 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.926075935 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.926084042 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.926091909 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.926129103 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.926134109 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.926906109 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.926933050 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.926958084 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.926968098 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.926980972 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.927005053 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.927756071 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.927781105 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.927803993 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.927841902 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.927855968 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.927870989 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.928592920 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.928647041 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.928662062 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.928670883 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.929275990 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.929303885 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.929325104 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.929327011 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.929337978 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.929344893 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.929368973 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.930082083 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.930124998 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.930154085 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.930192947 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.930203915 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.930241108 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.930954933 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.930998087 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.931027889 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.931051970 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.931061983 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.931094885 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.931752920 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.931797981 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.931821108 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.931859016 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.931868076 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.931902885 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.932646036 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.932689905 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.932713032 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.932738066 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.932749987 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.932785034 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.933374882 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.933428049 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.933450937 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.933502913 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.933512926 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.933621883 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.934250116 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.934314966 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.934339046 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.934386969 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.934398890 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.934434891 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.935062885 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.935111046 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.935134888 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.935175896 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.935189962 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.935228109 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.935868025 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.935909986 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.936062098 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.936073065 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.936682940 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.936717987 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.936728954 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.936738014 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.936780930 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.936788082 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.937546968 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.937578917 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.937607050 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.937628031 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.937638998 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.937654018 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.938322067 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.938349962 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.938385963 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.938395023 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.938407898 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.938421965 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.939112902 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.939142942 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.939182043 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.939182043 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.939193964 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.939218998 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.942137003 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.942146063 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.942217112 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.942239046 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.942306995 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.944746017 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.944768906 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.944854975 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.944873095 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.944911957 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.946759939 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.946775913 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.946845055 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.946860075 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.946898937 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.949466944 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.949481964 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.949551105 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.949570894 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.949609041 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.951359034 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.951374054 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.951440096 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.951453924 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.951493025 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.954082012 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.954097033 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.954173088 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.954186916 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.954229116 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.956068993 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.956083059 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.956140041 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.956154108 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.956195116 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.958746910 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.958760977 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.958839893 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.958853960 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.958893061 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.960618019 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.960632086 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.960689068 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.960701942 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.960738897 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.963015079 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.963031054 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.963092089 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.963104963 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.963145018 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.964931965 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.964946985 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.965009928 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.965024948 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.965063095 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.966638088 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.967358112 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.967372894 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.967478037 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.967489004 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.967531919 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.968307018 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.968342066 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.968385935 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.968451023 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.968513012 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.969188929 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.969206095 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.969264030 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.969270945 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.969309092 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.971723080 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.971740961 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.971813917 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.971821070 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.971878052 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.973531961 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.973608017 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.973658085 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.973674059 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.973730087 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.973738909 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.973786116 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.975605011 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.975619078 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.975702047 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.975718975 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.975766897 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.977526903 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.977545023 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.977627993 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.977638960 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.977688074 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.979331970 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.979346991 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.979398966 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.979409933 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.979437113 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.979454994 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.981189966 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.981204033 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.981265068 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.981285095 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.981316090 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.981333017 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.981800079 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.981833935 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.981869936 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.981899977 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.981946945 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.983402967 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.983418941 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.983499050 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.983521938 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.983570099 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.985264063 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.985280037 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.985340118 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.985363007 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.985410929 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.987063885 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.987080097 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.987160921 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.987205029 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.987561941 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.988810062 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.988825083 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.988905907 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.988928080 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.988976955 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.990207911 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.990288019 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.991106987 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.991122007 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.991204023 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.991226912 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.991278887 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.992676020 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.992690086 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.992748022 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.992769003 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.992809057 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.993397951 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:19.993551970 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:19.993607044 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:19.993627071 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:19.993704081 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:19.993748903 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:19.993757010 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:19.994376898 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.994391918 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.994505882 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.994505882 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.994530916 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.994575024 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.994710922 CEST	49917	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.994724989 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.996275902 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.996284962 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.996290922 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.996346951 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.996361017 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.996390104 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.996412039 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.998166084 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.998181105 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.998249054 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.998261929 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.998301029 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.998589993 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.998610020 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.998631954 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.998642921 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.998682976 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.999494076 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.999526978 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.999543905 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:19.999562979 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:19.999813080 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.000044107 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.000061989 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.000116110 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.000128984 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.000154972 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.000314951 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.000369072 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.000617027 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.000626087 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.001899004 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.001919985 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.002006054 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.002028942 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.002065897 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.002852917 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.002866983 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.002923012 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.002934933 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.002971888 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.003865004 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.003906965 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.005001068 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.005017042 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.005075932 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.005089045 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.005125046 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.006781101 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.006814003 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.006846905 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.006866932 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.006889105 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.006906986 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.006911993 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.006979942 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.007524014 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.007776976 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.007788897 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.008594990 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.008625984 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.008650064 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.008667946 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.008688927 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.008704901 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.010308027 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.010325909 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.010368109 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.010384083 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.010401011 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.010418892 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.011255980 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.011290073 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.011312008 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.011322975 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.011431932 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.011483908 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.011499882 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.011554956 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.011568069 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.011588097 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.011603117 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.013397932 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.013412952 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.013446093 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.013458967 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.013478994 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.013499975 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.014888048 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.014940977 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.014960051 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.015022039 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.015038013 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.015072107 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.015085936 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.015105963 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.015125036 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.015341043 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.015373945 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.015383959 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.015393972 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.015434027 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.016784906 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.016802073 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.016834021 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.016848087 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.016870975 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.016886950 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.017887115 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.017908096 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.017935038 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.017949104 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.017976046 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.017991066 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.018480062 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.018542051 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.019836903 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.019853115 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.019891024 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.019906998 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.019932032 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.019958973 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.020837069 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.020853996 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.020893097 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.020906925 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.020929098 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.020947933 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.022706985 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.022803068 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.022804976 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.022816896 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.022826910 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.022877932 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.022895098 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.022912979 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.022933006 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.024205923 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.024224043 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.024291039 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.024307013 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.024343014 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.025734901 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.025768995 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.025790930 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.025803089 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.025870085 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.025885105 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.025893927 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.025940895 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.025955915 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.025994062 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.026057959 CEST	49917	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.026211023 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.026853085 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.026868105 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.026937962 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.026947975 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.026983976 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.028613091 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.028628111 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.028697014 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.028712034 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.028759956 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.029397964 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.029475927 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.029489040 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.029910088 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.029927015 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.029968023 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.029978991 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.030004978 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.030021906 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.030965090 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.031018019 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.031033993 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.031049967 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.031091928 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.031614065 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.031629086 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.031687021 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.031702042 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.031754971 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.032582998 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.032598972 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.032644987 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.032659054 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.032695055 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.032979012 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.033025980 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.034363031 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.034379005 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.034441948 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.034456015 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.034475088 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.034553051 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.035949945 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.035954952 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.035964966 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.036014080 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.036026955 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.036073923 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.036077023 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.036093950 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.037760973 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.037775993 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.037859917 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.037873030 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.037911892 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.038644075 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.038661003 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.038712025 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.038721085 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.038758039 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.040363073 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.040395975 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.040400982 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.040412903 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.040421009 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.040436029 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.040457010 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.040472984 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.040493011 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.040497065 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.040513039 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.041301966 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.041316986 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.041362047 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.041373968 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.041402102 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.041418076 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.043816090 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.043831110 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.043900013 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.043922901 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.043963909 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.044044018 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.044080973 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.044092894 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.044112921 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.044152021 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.044661999 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.044678926 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.044718027 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.044732094 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.044754028 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.044773102 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.045387983 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.045404911 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.045463085 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.045474052 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.045499086 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.045514107 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.047044992 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.047060013 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.047117949 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.047135115 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.047173977 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.048708916 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.048723936 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.048790932 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.048810005 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.048849106 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.049495935 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.049510002 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.049556017 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.049568892 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.049592018 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.049609900 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.050513029 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.050528049 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.050610065 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.050626040 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.050738096 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.052165031 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.052181959 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.052203894 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.052229881 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.052246094 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.052272081 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.052284002 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.054395914 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.054410934 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.054469109 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.054483891 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.054521084 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.055203915 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.055219889 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.055289984 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.055301905 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.055337906 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.055659056 CEST	49917	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.055783987 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.055799007 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.055850029 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.055860043 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.055907965 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.057442904 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.057459116 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.057499886 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.057513952 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.057540894 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.057557106 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.058217049 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.058231115 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.058267117 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.058279037 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.058303118 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.058319092 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.060013056 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.060026884 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.060116053 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.060132027 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.060148001 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.060173035 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.060285091 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.060326099 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.060332060 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.060338974 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.060683012 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.060957909 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.060980082 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.061032057 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.061044931 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.061067104 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.061086893 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.062009096 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.062026024 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.062105894 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.062119961 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.062158108 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.063841105 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.063857079 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.063910007 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.063925028 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.063956022 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.063970089 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.064831018 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.064845085 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.064904928 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.064922094 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.064958096 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.065836906 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.065851927 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.065891981 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.065903902 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.065928936 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.065948009 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.067485094 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.067500114 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.067555904 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.067569971 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.067590952 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.067606926 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.068447113 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.068496943 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.069272041 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.069286108 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.069334030 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.069349051 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.069384098 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.070121050 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.070136070 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.070167065 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.070179939 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.070202112 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.070218086 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.071175098 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.071191072 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.071254969 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.071269035 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.071306944 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.072194099 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.072208881 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.072264910 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.072278023 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.072313070 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.073227882 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.073241949 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.073287964 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.073301077 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.073321104 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.073338032 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.074918985 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.074934959 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.075006008 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.075018883 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.075057030 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.075807095 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.075822115 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.075905085 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.075905085 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.075921059 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.075978041 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.076601028 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.076638937 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.076672077 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.076677084 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.076786995 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.076823950 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.076845884 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.076877117 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.076889038 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.076911926 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.076936960 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.077658892 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.077677011 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.077713966 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.077729940 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.077749014 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.077780008 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.078140020 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.078156948 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.079097986 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.079113960 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.079159021 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.079173088 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.079219103 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.080069065 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.080084085 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.080127001 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.080138922 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.080172062 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.080190897 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.081113100 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.081116915 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.081190109 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.081202984 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.081259012 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.081837893 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.081854105 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.081892014 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.081902981 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.081924915 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.081943035 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.083514929 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.083539009 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.083575964 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.083590031 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.083616972 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.083636999 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.084187031 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.084202051 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.084239006 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.084249973 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.084260941 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.084279060 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.084296942 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.084301949 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.084336996 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.084346056 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.084363937 CEST	443	49903	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.084409952 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.085649014 CEST	49909	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:20.085674047 CEST	443	49909	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:20.088218927 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.088265896 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.088268995 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.088289022 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.088326931 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.091938019 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.092005968 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.096122026 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.097786903 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.097877026 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.097897053 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.099951982 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.099997044 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.100027084 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.100044012 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.100080013 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.100866079 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.100939035 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.100950956 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.103974104 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.104013920 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.104033947 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.104043007 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.104105949 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.107491970 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.107620001 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.108174086 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.108268023 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.108277082 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.108297110 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.108350039 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.114804983 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.114835024 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.114891052 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.114905119 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.114953995 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.115370989 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.115442991 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.115452051 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.116833925 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.116868973 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.116930008 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.116990089 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.117060900 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.122215033 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.122273922 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.123125076 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.123172045 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.123183012 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.125369072 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.125437975 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.126801968 CEST	49866	443	192.168.2.4	3.161.136.58
Apr 19, 2024 07:32:20.129321098 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.129395008 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.129445076 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.129491091 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.130088091 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.130137920 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.130147934 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.133390903 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.133424044 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.133451939 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.133467913 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.133521080 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.134854078 CEST	49919	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:20.134886980 CEST	443	49919	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:20.135026932 CEST	49919	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:20.135505915 CEST	49920	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:20.135550022 CEST	443	49920	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:20.135611057 CEST	49920	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:20.136603117 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.136646986 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.136909008 CEST	49921	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:20.136934042 CEST	443	49921	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:20.137010098 CEST	49921	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:20.137203932 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.137253046 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.137262106 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.137845993 CEST	49920	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:20.137873888 CEST	443	49920	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:20.138259888 CEST	49919	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:20.138273954 CEST	443	49919	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:20.139414072 CEST	49921	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:20.139431000 CEST	443	49921	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:20.141813993 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.143908978 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.143949032 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.143959999 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.143975019 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.144088984 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.144567966 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.144619942 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.144628048 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.147397041 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.147440910 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.147452116 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.147459030 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.147496939 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.148535967 CEST	49910	443	192.168.2.4	172.67.39.148
Apr 19, 2024 07:32:20.148555994 CEST	443	49910	172.67.39.148	192.168.2.4
Apr 19, 2024 07:32:20.150288105 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.150311947 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.150362968 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.150379896 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.150435925 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.151262999 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.151288033 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.151340961 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.151447058 CEST	49902	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.151463985 CEST	443	49902	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.151679039 CEST	49922	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.151706934 CEST	443	49922	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.151716948 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.151786089 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.151793957 CEST	49922	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.151797056 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.152615070 CEST	49922	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.152642012 CEST	443	49922	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.158130884 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.158272028 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.158350945 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.158364058 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.158477068 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.158509016 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.158539057 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.158550024 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.158590078 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.159420967 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.159461021 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.159471035 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.159482002 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.159518003 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.161935091 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.162019968 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.162036896 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.164871931 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.164927959 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.164938927 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.165802956 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.168093920 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.168219090 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.169168949 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.169230938 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.169245005 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.169245958 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.169312954 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.169326067 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.171452045 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.171510935 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.171519041 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.171786070 CEST	49903	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.172115088 CEST	443	49866	3.161.136.58	192.168.2.4
Apr 19, 2024 07:32:20.175786972 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.175827026 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.175837040 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.175848961 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.175892115 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.176003933 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.176062107 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.176076889 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.176237106 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.176316977 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.176331997 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.177896023 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.177963972 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.177973986 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.183135986 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.183196068 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.183213949 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.183509111 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.183603048 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.183618069 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.184163094 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.184212923 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.184415102 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.184473991 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.184487104 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.189734936 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.189811945 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.189831972 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.190813065 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.190886021 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.190900087 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.190957069 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.191109896 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.191118956 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.192069054 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.192121983 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.192131996 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.196403027 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.196527958 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.196541071 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.197586060 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.197637081 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.197643042 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.198252916 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.198307991 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.198324919 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.200232029 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.200277090 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.200284958 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.203190088 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.203392982 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.203413010 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.204241991 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.204308033 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.204317093 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.207227945 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.207290888 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.207305908 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.208750963 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.208827019 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.208868980 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.208878040 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.208961964 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.209350109 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.209408998 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.209419966 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.210015059 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.210057974 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.210067034 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.210709095 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.210767984 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.210782051 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.214350939 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.214406013 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.214421988 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.215423107 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.215482950 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.215492010 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.215714931 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.215933084 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.215948105 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.216191053 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.218919039 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.218977928 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.218986988 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.219947100 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.220011950 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.220022917 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.220103979 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.220288038 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.220297098 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.220592976 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.220732927 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.220747948 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.224873066 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.224921942 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.224934101 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.225321054 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.225589037 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.225590944 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.225610971 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.225639105 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.225649118 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.226782084 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.226830006 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.226840973 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.229207039 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.229249954 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.229262114 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.230045080 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.230129957 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.230130911 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.230134964 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.230155945 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.230186939 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.230202913 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.230230093 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.233513117 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.233582973 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.233596087 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.233886003 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.233932972 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.233939886 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.234357119 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.237407923 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.237428904 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.237483025 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.237503052 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.237554073 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.238790035 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.238857031 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.238867998 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.239806890 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.239830971 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.239869118 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.239886045 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.239924908 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.240927935 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.240988970 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.240997076 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.242116928 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.243273973 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.243319035 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.243329048 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.244143009 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.245831013 CEST	443	49866	3.161.136.58	192.168.2.4
Apr 19, 2024 07:32:20.245860100 CEST	443	49866	3.161.136.58	192.168.2.4
Apr 19, 2024 07:32:20.245867968 CEST	443	49866	3.161.136.58	192.168.2.4
Apr 19, 2024 07:32:20.245914936 CEST	443	49866	3.161.136.58	192.168.2.4
Apr 19, 2024 07:32:20.245917082 CEST	49866	443	192.168.2.4	3.161.136.58
Apr 19, 2024 07:32:20.245925903 CEST	443	49866	3.161.136.58	192.168.2.4
Apr 19, 2024 07:32:20.245937109 CEST	443	49866	3.161.136.58	192.168.2.4
Apr 19, 2024 07:32:20.245959997 CEST	443	49866	3.161.136.58	192.168.2.4
Apr 19, 2024 07:32:20.245973110 CEST	49866	443	192.168.2.4	3.161.136.58
Apr 19, 2024 07:32:20.245981932 CEST	49866	443	192.168.2.4	3.161.136.58
Apr 19, 2024 07:32:20.246001959 CEST	49866	443	192.168.2.4	3.161.136.58
Apr 19, 2024 07:32:20.246901035 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.246936083 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.246964931 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.246980906 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.247030973 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.247977972 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.247998953 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.248039007 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.248047113 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.248066902 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.248080969 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.248332977 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.248353958 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.248392105 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.248403072 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.248495102 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.251692057 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.252249956 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.252315044 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.252326012 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.252600908 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.255481958 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.255547047 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.255554914 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.256604910 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.256620884 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.256663084 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.256663084 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.256674051 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.256675959 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.256676912 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.256710052 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.256721020 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.256736040 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.256738901 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.256743908 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.256761074 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.260236979 CEST	443	49866	3.161.136.58	192.168.2.4
Apr 19, 2024 07:32:20.260310888 CEST	49866	443	192.168.2.4	3.161.136.58
Apr 19, 2024 07:32:20.260314941 CEST	443	49866	3.161.136.58	192.168.2.4
Apr 19, 2024 07:32:20.260328054 CEST	443	49866	3.161.136.58	192.168.2.4
Apr 19, 2024 07:32:20.260353088 CEST	49866	443	192.168.2.4	3.161.136.58
Apr 19, 2024 07:32:20.260374069 CEST	49866	443	192.168.2.4	3.161.136.58
Apr 19, 2024 07:32:20.260919094 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.260947943 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.260963917 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.260974884 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.260976076 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.261023998 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.261251926 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.264030933 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.264326096 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.264336109 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.264533043 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.264640093 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.264851093 CEST	49917	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.264862061 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.265146017 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.266144037 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.266168118 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.266174078 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.266246080 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.266251087 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.266275883 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.266288996 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.266298056 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.266329050 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.266349077 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.267699957 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.268341064 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.268347979 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.269270897 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.269292116 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.269294977 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.269330978 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.269346952 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.269364119 CEST	49917	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.269371033 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.269382954 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.270049095 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.270932913 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.272336006 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.272386074 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.272393942 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.273981094 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.274154902 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.274326086 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.274470091 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.274580002 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.274588108 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.274611950 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.274734974 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.274904966 CEST	49911	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.274919987 CEST	443	49911	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.275963068 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.275989056 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.276021004 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.276036978 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.276135921 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.277292013 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.277350903 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.277360916 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.277415037 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.277467966 CEST	49917	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.277477980 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.277501106 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.277580023 CEST	49917	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.277586937 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.278717995 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.280492067 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.280644894 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.280700922 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.280755997 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.280756950 CEST	49912	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.280781031 CEST	443	49912	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.280822039 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.280834913 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.282424927 CEST	49866	443	192.168.2.4	3.161.136.58
Apr 19, 2024 07:32:20.282434940 CEST	443	49866	3.161.136.58	192.168.2.4
Apr 19, 2024 07:32:20.282560110 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.282666922 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.282674074 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.285413980 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.285485983 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.285496950 CEST	49917	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.285506010 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.285536051 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.285542965 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.286865950 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.286920071 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.286926031 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.289159060 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.289319992 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.289330959 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.293242931 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.293327093 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.293337107 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.293525934 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.293569088 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.293585062 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.293592930 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.293704987 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.293761969 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.293762922 CEST	49917	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.293772936 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.293793917 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.293842077 CEST	49917	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.293848038 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.296881914 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.296926975 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.296938896 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.298127890 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.300568104 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.300646067 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.300658941 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.301740885 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.302110910 CEST	49917	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.302119017 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.302843094 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.302884102 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.303002119 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.303014994 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.304372072 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.304469109 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.305475950 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.305488110 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.307717085 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.307955027 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.308063030 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.308070898 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.309875965 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.309916973 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.309957027 CEST	49917	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.309964895 CEST	443	49917	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.310012102 CEST	49917	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.311721087 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.311770916 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.311780930 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.312211037 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.312267065 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.312278986 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.315205097 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.316893101 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.316932917 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.316952944 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.316966057 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.316994905 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.317006111 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.317051888 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.318799973 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.319531918 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.319542885 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.320934057 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.321017981 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.321024895 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.321679115 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.324382067 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.324460030 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.324471951 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.326303959 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.326344013 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.326348066 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.326359034 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.326396942 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.326591015 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.326644897 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.326657057 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.328985929 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.329063892 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.329072952 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.330954075 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.331044912 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.331173897 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.331192017 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.331199884 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.331223011 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.333650112 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.333702087 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.333712101 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.335797071 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.335871935 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.335881948 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.337825060 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.337882042 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.337896109 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.339653015 CEST	49913	443	192.168.2.4	173.194.219.93
Apr 19, 2024 07:32:20.339677095 CEST	443	49913	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.340127945 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.340250969 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.340261936 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.342209101 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.342291117 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.342299938 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.344317913 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.344479084 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.344486952 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.346410036 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.346540928 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.346548080 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.348567963 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.348674059 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.348683119 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.350960970 CEST	443	49919	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:20.351528883 CEST	49919	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:20.351538897 CEST	443	49919	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:20.351629019 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.351785898 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.351815939 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.351825953 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.351937056 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.351942062 CEST	443	49919	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:20.353040934 CEST	443	49921	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:20.353143930 CEST	443	49920	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:20.353291035 CEST	49921	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:20.353301048 CEST	443	49921	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:20.353634119 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.353796005 CEST	49919	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:20.353863955 CEST	443	49919	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:20.354363918 CEST	443	49921	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:20.354424000 CEST	49921	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:20.355182886 CEST	49919	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:20.355473995 CEST	49921	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:20.355546951 CEST	443	49921	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:20.355642080 CEST	49920	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:20.355673075 CEST	443	49920	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:20.355720043 CEST	49921	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:20.355727911 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.355729103 CEST	443	49921	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:20.355788946 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.355796099 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.356067896 CEST	443	49920	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:20.356578112 CEST	49920	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:20.356657982 CEST	443	49920	104.22.71.197	192.168.2.4
Apr 19, 2024 07:32:20.356945038 CEST	49920	443	192.168.2.4	104.22.71.197
Apr 19, 2024 07:32:20.357866049 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.357925892 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.357933998 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.359786034 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.359855890 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.359864950 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.362076044 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.362122059 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.362132072 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.363795042 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.363874912 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.363881111 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.363903046 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.364011049 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.365694046 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.367677927 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.367692947 CEST	443	49922	173.194.219.93	192.168.2.4
Apr 19, 2024 07:32:20.367749929 CEST	49915	443	192.168.2.4	142.251.15.136
Apr 19, 2024 07:32:20.367760897 CEST	443	49915	142.251.15.136	192.168.2.4
Apr 19, 2024 07:32:20.368436098 CEST	49922	443	192.168.2.4	173.194.219.93

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 19, 2024 07:31:28.597688913 CEST	192.168.2.4	1.1.1.1	0xab79	Standard query (0)	www.1040now.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:28.597935915 CEST	192.168.2.4	1.1.1.1	0x4657	Standard query (0)	www.1040now.net	65	IN (0x0001)	false
Apr 19, 2024 07:31:29.342582941 CEST	192.168.2.4	1.1.1.1	0x75a3	Standard query (0)	www.1040now.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:29.342792988 CEST	192.168.2.4	1.1.1.1	0x22ea	Standard query (0)	www.1040now.net	65	IN (0x0001)	false
Apr 19, 2024 07:31:29.447180986 CEST	192.168.2.4	1.1.1.1	0xbaec	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:29.447356939 CEST	192.168.2.4	1.1.1.1	0xb3ba	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 19, 2024 07:31:30.175630093 CEST	192.168.2.4	1.1.1.1	0x5975	Standard query (0)	dw26xg4lubooo.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:30.175827980 CEST	192.168.2.4	1.1.1.1	0x3492	Standard query (0)	dw26xg4lubooo.cloudfront.net	65	IN (0x0001)	false
Apr 19, 2024 07:31:30.761529922 CEST	192.168.2.4	1.1.1.1	0xd97f	Standard query (0)	www.1040now.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:30.761778116 CEST	192.168.2.4	1.1.1.1	0x79dc	Standard query (0)	www.1040now.net	65	IN (0x0001)	false
Apr 19, 2024 07:31:32.308571100 CEST	192.168.2.4	1.1.1.1	0x1cb5	Standard query (0)	dw26xg4lubooo.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:32.308829069 CEST	192.168.2.4	1.1.1.1	0xc6bc	Standard query (0)	dw26xg4lubooo.cloudfront.net	65	IN (0x0001)	false
Apr 19, 2024 07:31:48.335289955 CEST	192.168.2.4	1.1.1.1	0x33f2	Standard query (0)	privacy-policy.truste.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:48.335894108 CEST	192.168.2.4	1.1.1.1	0xbaff	Standard query (0)	privacy-policy.truste.com	65	IN (0x0001)	false
Apr 19, 2024 07:31:48.579818010 CEST	192.168.2.4	1.1.1.1	0x9aa2	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:48.579957008 CEST	192.168.2.4	1.1.1.1	0xfd1a	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Apr 19, 2024 07:31:48.580704927 CEST	192.168.2.4	1.1.1.1	0x10a1	Standard query (0)	code.ionicframework.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:48.580825090 CEST	192.168.2.4	1.1.1.1	0x8ff0	Standard query (0)	code.ionicframework.com	65	IN (0x0001)	false
Apr 19, 2024 07:32:15.079826117 CEST	192.168.2.4	1.1.1.1	0xf158	Standard query (0)	www.irs.gov	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:15.080059052 CEST	192.168.2.4	1.1.1.1	0x6750	Standard query (0)	www.irs.gov	65	IN (0x0001)	false
Apr 19, 2024 07:32:15.445131063 CEST	192.168.2.4	1.1.1.1	0xc40f	Standard query (0)	www.irs.gov	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:15.445275068 CEST	192.168.2.4	1.1.1.1	0x3924	Standard query (0)	www.irs.gov	65	IN (0x0001)	false
Apr 19, 2024 07:32:16.509546041 CEST	192.168.2.4	1.1.1.1	0xbf62	Standard query (0)	static.addtoany.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:16.509702921 CEST	192.168.2.4	1.1.1.1	0x1439	Standard query (0)	static.addtoany.com	65	IN (0x0001)	false
Apr 19, 2024 07:32:16.511245966 CEST	192.168.2.4	1.1.1.1	0x30fb	Standard query (0)	resources.digital-cloud-gov.medallia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:16.511594057 CEST	192.168.2.4	1.1.1.1	0xc2e7	Standard query (0)	resources.digital-cloud-gov.medallia.com	65	IN (0x0001)	false
Apr 19, 2024 07:32:16.616803885 CEST	192.168.2.4	1.1.1.1	0x16a9	Standard query (0)	dap.digitalgov.gov	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:16.616928101 CEST	192.168.2.4	1.1.1.1	0x1560	Standard query (0)	dap.digitalgov.gov	65	IN (0x0001)	false
Apr 19, 2024 07:32:17.727085114 CEST	192.168.2.4	1.1.1.1	0x6807	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:17.727598906 CEST	192.168.2.4	1.1.1.1	0x3fa7	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Apr 19, 2024 07:32:17.728440046 CEST	192.168.2.4	1.1.1.1	0x1bd4	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:17.728907108 CEST	192.168.2.4	1.1.1.1	0x2410	Standard query (0)	s.go-mpulse.net	65	IN (0x0001)	false
Apr 19, 2024 07:32:17.734949112 CEST	192.168.2.4	1.1.1.1	0x6f2c	Standard query (0)	www.irs.gov	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:17.735104084 CEST	192.168.2.4	1.1.1.1	0xabf2	Standard query (0)	www.irs.gov	65	IN (0x0001)	false
Apr 19, 2024 07:32:18.581335068 CEST	192.168.2.4	1.1.1.1	0xe276	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.581537962 CEST	192.168.2.4	1.1.1.1	0x2a0	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Apr 19, 2024 07:32:18.673284054 CEST	192.168.2.4	1.1.1.1	0xbcce	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.673671961 CEST	192.168.2.4	1.1.1.1	0xd2ce	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Apr 19, 2024 07:32:18.772545099 CEST	192.168.2.4	1.1.1.1	0x5b9b	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.772691965 CEST	192.168.2.4	1.1.1.1	0xdf02	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Apr 19, 2024 07:32:19.010799885 CEST	192.168.2.4	1.1.1.1	0x7ec4	Standard query (0)	static.addtoany.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:19.010943890 CEST	192.168.2.4	1.1.1.1	0xdffb	Standard query (0)	static.addtoany.com	65	IN (0x0001)	false
Apr 19, 2024 07:32:20.900000095 CEST	192.168.2.4	1.1.1.1	0x2093	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:20.900152922 CEST	192.168.2.4	1.1.1.1	0xf9a0	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 07:32:20.909434080 CEST	192.168.2.4	1.1.1.1	0xb816	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:20.910095930 CEST	192.168.2.4	1.1.1.1	0xc055	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 07:32:21.032907963 CEST	192.168.2.4	1.1.1.1	0xd516	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:21.033134937 CEST	192.168.2.4	1.1.1.1	0x4a6c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 19, 2024 07:32:21.512409925 CEST	192.168.2.4	1.1.1.1	0x4d88	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:21.512597084 CEST	192.168.2.4	1.1.1.1	0xd0e6	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Apr 19, 2024 07:32:22.138231993 CEST	192.168.2.4	1.1.1.1	0xb245	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:22.139746904 CEST	192.168.2.4	1.1.1.1	0xc752	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 19, 2024 07:32:24.119611979 CEST	192.168.2.4	1.1.1.1	0x793b	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.119906902 CEST	192.168.2.4	1.1.1.1	0x372f	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Apr 19, 2024 07:32:24.121454954 CEST	192.168.2.4	1.1.1.1	0x22a5	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.121607065 CEST	192.168.2.4	1.1.1.1	0x4cdf	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Apr 19, 2024 07:32:24.305121899 CEST	192.168.2.4	1.1.1.1	0xe22a	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.305263996 CEST	192.168.2.4	1.1.1.1	0xd358	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 07:32:24.310906887 CEST	192.168.2.4	1.1.1.1	0x59a6	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.311119080 CEST	192.168.2.4	1.1.1.1	0x1e70	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Apr 19, 2024 07:32:24.320583105 CEST	192.168.2.4	1.1.1.1	0x6935	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.320764065 CEST	192.168.2.4	1.1.1.1	0x1ad6	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 19, 2024 07:32:24.333940029 CEST	192.168.2.4	1.1.1.1	0x6828	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.334182024 CEST	192.168.2.4	1.1.1.1	0x4c33	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Apr 19, 2024 07:32:24.402405977 CEST	192.168.2.4	1.1.1.1	0xc4a5	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.402601004 CEST	192.168.2.4	1.1.1.1	0x8562	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Apr 19, 2024 07:32:25.130342007 CEST	192.168.2.4	1.1.1.1	0x4c14	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:25.130518913 CEST	192.168.2.4	1.1.1.1	0x6bb9	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Apr 19, 2024 07:32:25.918701887 CEST	192.168.2.4	1.1.1.1	0x9550	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:25.918827057 CEST	192.168.2.4	1.1.1.1	0xb879	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Apr 19, 2024 07:32:31.083060026 CEST	192.168.2.4	1.1.1.1	0xbaf1	Standard query (0)	secure.trust-guard.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:31.083431959 CEST	192.168.2.4	1.1.1.1	0xf461	Standard query (0)	secure.trust-guard.com	65	IN (0x0001)	false
Apr 19, 2024 07:32:31.220645905 CEST	192.168.2.4	1.1.1.1	0x9419	Standard query (0)	secure.trust-guard.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:31.220844984 CEST	192.168.2.4	1.1.1.1	0x7f71	Standard query (0)	secure.trust-guard.com	65	IN (0x0001)	false
Apr 19, 2024 07:32:32.810132980 CEST	192.168.2.4	1.1.1.1	0x54f	Standard query (0)	secure.trust-guard.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:32.810410023 CEST	192.168.2.4	1.1.1.1	0xf078	Standard query (0)	secure.trust-guard.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 19, 2024 07:31:28.769373894 CEST	1.1.1.1	192.168.2.4	0x4657	No error (0)	www.1040now.net	1040now.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:31:28.786123991 CEST	1.1.1.1	192.168.2.4	0xab79	No error (0)	www.1040now.net	1040now.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:31:28.786123991 CEST	1.1.1.1	192.168.2.4	0xab79	No error (0)	1040now.net		107.144.122.203	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:29.493489027 CEST	1.1.1.1	192.168.2.4	0x22ea	No error (0)	www.1040now.net	1040now.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:31:29.551516056 CEST	1.1.1.1	192.168.2.4	0xbaec	No error (0)	www.google.com		64.233.176.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:29.551516056 CEST	1.1.1.1	192.168.2.4	0xbaec	No error (0)	www.google.com		64.233.176.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:29.551516056 CEST	1.1.1.1	192.168.2.4	0xbaec	No error (0)	www.google.com		64.233.176.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:29.551516056 CEST	1.1.1.1	192.168.2.4	0xbaec	No error (0)	www.google.com		64.233.176.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:29.551516056 CEST	1.1.1.1	192.168.2.4	0xbaec	No error (0)	www.google.com		64.233.176.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:29.551516056 CEST	1.1.1.1	192.168.2.4	0xbaec	No error (0)	www.google.com		64.233.176.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:29.551601887 CEST	1.1.1.1	192.168.2.4	0xb3ba	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 19, 2024 07:31:29.565346003 CEST	1.1.1.1	192.168.2.4	0x75a3	No error (0)	www.1040now.net	1040now.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:31:29.565346003 CEST	1.1.1.1	192.168.2.4	0x75a3	No error (0)	1040now.net		107.144.122.203	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:30.306725025 CEST	1.1.1.1	192.168.2.4	0x5975	No error (0)	dw26xg4lubooo.cloudfront.net		13.32.66.19	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:30.306725025 CEST	1.1.1.1	192.168.2.4	0x5975	No error (0)	dw26xg4lubooo.cloudfront.net		13.32.66.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:30.306725025 CEST	1.1.1.1	192.168.2.4	0x5975	No error (0)	dw26xg4lubooo.cloudfront.net		13.32.66.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:30.306725025 CEST	1.1.1.1	192.168.2.4	0x5975	No error (0)	dw26xg4lubooo.cloudfront.net		13.32.66.227	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:30.911523104 CEST	1.1.1.1	192.168.2.4	0x79dc	No error (0)	www.1040now.net	1040now.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:31:30.935930014 CEST	1.1.1.1	192.168.2.4	0xd97f	No error (0)	www.1040now.net	1040now.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:31:30.935930014 CEST	1.1.1.1	192.168.2.4	0xd97f	No error (0)	1040now.net		107.144.122.203	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:32.415278912 CEST	1.1.1.1	192.168.2.4	0x1cb5	No error (0)	dw26xg4lubooo.cloudfront.net		13.32.66.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:32.415278912 CEST	1.1.1.1	192.168.2.4	0x1cb5	No error (0)	dw26xg4lubooo.cloudfront.net		13.32.66.19	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:32.415278912 CEST	1.1.1.1	192.168.2.4	0x1cb5	No error (0)	dw26xg4lubooo.cloudfront.net		13.32.66.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:32.415278912 CEST	1.1.1.1	192.168.2.4	0x1cb5	No error (0)	dw26xg4lubooo.cloudfront.net		13.32.66.227	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:41.573564053 CEST	1.1.1.1	192.168.2.4	0xec48	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:31:41.573564053 CEST	1.1.1.1	192.168.2.4	0xec48	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:48.440017939 CEST	1.1.1.1	192.168.2.4	0x33f2	No error (0)	privacy-policy.truste.com	d2pj9rkatqbt38.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:31:48.440017939 CEST	1.1.1.1	192.168.2.4	0x33f2	No error (0)	d2pj9rkatqbt38.cloudfront.net		3.161.163.32	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:48.440017939 CEST	1.1.1.1	192.168.2.4	0x33f2	No error (0)	d2pj9rkatqbt38.cloudfront.net		3.161.163.116	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:48.440017939 CEST	1.1.1.1	192.168.2.4	0x33f2	No error (0)	d2pj9rkatqbt38.cloudfront.net		3.161.163.58	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:48.440017939 CEST	1.1.1.1	192.168.2.4	0x33f2	No error (0)	d2pj9rkatqbt38.cloudfront.net		3.161.163.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:48.440821886 CEST	1.1.1.1	192.168.2.4	0xbaff	No error (0)	privacy-policy.truste.com	d2pj9rkatqbt38.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:31:48.684176922 CEST	1.1.1.1	192.168.2.4	0x9aa2	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:48.684176922 CEST	1.1.1.1	192.168.2.4	0x9aa2	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:48.685051918 CEST	1.1.1.1	192.168.2.4	0xfd1a	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Apr 19, 2024 07:31:48.685385942 CEST	1.1.1.1	192.168.2.4	0x10a1	No error (0)	code.ionicframework.com		104.26.6.173	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:48.685385942 CEST	1.1.1.1	192.168.2.4	0x10a1	No error (0)	code.ionicframework.com		172.67.69.29	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:48.685385942 CEST	1.1.1.1	192.168.2.4	0x10a1	No error (0)	code.ionicframework.com		104.26.7.173	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:31:48.685960054 CEST	1.1.1.1	192.168.2.4	0x8ff0	No error (0)	code.ionicframework.com			65	IN (0x0001)	false
Apr 19, 2024 07:31:55.824816942 CEST	1.1.1.1	192.168.2.4	0x9875	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:31:55.824816942 CEST	1.1.1.1	192.168.2.4	0x9875	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:15.184751987 CEST	1.1.1.1	192.168.2.4	0x6750	No error (0)	www.irs.gov	www.irs.gov.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:15.186058998 CEST	1.1.1.1	192.168.2.4	0xf158	No error (0)	www.irs.gov	www.irs.gov.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:15.550141096 CEST	1.1.1.1	192.168.2.4	0x3924	No error (0)	www.irs.gov	www.irs.gov.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:15.551620960 CEST	1.1.1.1	192.168.2.4	0xc40f	No error (0)	www.irs.gov	www.irs.gov.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:16.613687992 CEST	1.1.1.1	192.168.2.4	0xbf62	No error (0)	static.addtoany.com		104.22.71.197	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:16.613687992 CEST	1.1.1.1	192.168.2.4	0xbf62	No error (0)	static.addtoany.com		172.67.39.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:16.613687992 CEST	1.1.1.1	192.168.2.4	0xbf62	No error (0)	static.addtoany.com		104.22.70.197	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:16.615691900 CEST	1.1.1.1	192.168.2.4	0x30fb	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:16.615941048 CEST	1.1.1.1	192.168.2.4	0xc2e7	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:16.620764017 CEST	1.1.1.1	192.168.2.4	0x1439	No error (0)	static.addtoany.com			65	IN (0x0001)	false
Apr 19, 2024 07:32:16.721873999 CEST	1.1.1.1	192.168.2.4	0x16a9	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:16.721873999 CEST	1.1.1.1	192.168.2.4	0x16a9	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.161.136.58	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:16.721873999 CEST	1.1.1.1	192.168.2.4	0x16a9	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.161.136.111	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:16.721873999 CEST	1.1.1.1	192.168.2.4	0x16a9	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.161.136.28	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:16.721873999 CEST	1.1.1.1	192.168.2.4	0x16a9	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.161.136.81	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:16.722747087 CEST	1.1.1.1	192.168.2.4	0x1560	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:17.831496000 CEST	1.1.1.1	192.168.2.4	0x6807	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:17.831496000 CEST	1.1.1.1	192.168.2.4	0x6807	No error (0)	youtube-ui.l.google.com		173.194.219.93	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:17.831496000 CEST	1.1.1.1	192.168.2.4	0x6807	No error (0)	youtube-ui.l.google.com		74.125.138.136	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:17.831496000 CEST	1.1.1.1	192.168.2.4	0x6807	No error (0)	youtube-ui.l.google.com		64.233.185.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:17.831496000 CEST	1.1.1.1	192.168.2.4	0x6807	No error (0)	youtube-ui.l.google.com		64.233.177.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:17.831496000 CEST	1.1.1.1	192.168.2.4	0x6807	No error (0)	youtube-ui.l.google.com		64.233.185.93	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:17.831496000 CEST	1.1.1.1	192.168.2.4	0x6807	No error (0)	youtube-ui.l.google.com		74.125.138.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:17.831496000 CEST	1.1.1.1	192.168.2.4	0x6807	No error (0)	youtube-ui.l.google.com		74.125.138.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:17.831496000 CEST	1.1.1.1	192.168.2.4	0x6807	No error (0)	youtube-ui.l.google.com		74.125.138.93	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:17.831496000 CEST	1.1.1.1	192.168.2.4	0x6807	No error (0)	youtube-ui.l.google.com		173.194.219.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:17.831496000 CEST	1.1.1.1	192.168.2.4	0x6807	No error (0)	youtube-ui.l.google.com		64.233.177.136	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:17.831496000 CEST	1.1.1.1	192.168.2.4	0x6807	No error (0)	youtube-ui.l.google.com		173.194.219.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:17.831496000 CEST	1.1.1.1	192.168.2.4	0x6807	No error (0)	youtube-ui.l.google.com		64.233.185.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:17.831496000 CEST	1.1.1.1	192.168.2.4	0x6807	No error (0)	youtube-ui.l.google.com		173.194.219.136	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:17.831496000 CEST	1.1.1.1	192.168.2.4	0x6807	No error (0)	youtube-ui.l.google.com		64.233.185.136	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:17.831496000 CEST	1.1.1.1	192.168.2.4	0x6807	No error (0)	youtube-ui.l.google.com		64.233.177.93	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:17.831496000 CEST	1.1.1.1	192.168.2.4	0x6807	No error (0)	youtube-ui.l.google.com		64.233.177.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:17.831707001 CEST	1.1.1.1	192.168.2.4	0x3fa7	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:17.831707001 CEST	1.1.1.1	192.168.2.4	0x3fa7	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Apr 19, 2024 07:32:17.833266973 CEST	1.1.1.1	192.168.2.4	0x2410	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:17.833512068 CEST	1.1.1.1	192.168.2.4	0x1bd4	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:17.840473890 CEST	1.1.1.1	192.168.2.4	0xabf2	No error (0)	www.irs.gov	www.irs.gov.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:17.841407061 CEST	1.1.1.1	192.168.2.4	0x6f2c	No error (0)	www.irs.gov	www.irs.gov.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:18.687098026 CEST	1.1.1.1	192.168.2.4	0xe276	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:18.687098026 CEST	1.1.1.1	192.168.2.4	0xe276	No error (0)	youtube-ui.l.google.com		142.251.15.136	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.687098026 CEST	1.1.1.1	192.168.2.4	0xe276	No error (0)	youtube-ui.l.google.com		142.250.9.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.687098026 CEST	1.1.1.1	192.168.2.4	0xe276	No error (0)	youtube-ui.l.google.com		108.177.122.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.687098026 CEST	1.1.1.1	192.168.2.4	0xe276	No error (0)	youtube-ui.l.google.com		74.125.136.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.687098026 CEST	1.1.1.1	192.168.2.4	0xe276	No error (0)	youtube-ui.l.google.com		142.250.9.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.687098026 CEST	1.1.1.1	192.168.2.4	0xe276	No error (0)	youtube-ui.l.google.com		108.177.122.136	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.687098026 CEST	1.1.1.1	192.168.2.4	0xe276	No error (0)	youtube-ui.l.google.com		142.250.9.136	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.687098026 CEST	1.1.1.1	192.168.2.4	0xe276	No error (0)	youtube-ui.l.google.com		172.217.215.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.687098026 CEST	1.1.1.1	192.168.2.4	0xe276	No error (0)	youtube-ui.l.google.com		108.177.122.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.687098026 CEST	1.1.1.1	192.168.2.4	0xe276	No error (0)	youtube-ui.l.google.com		172.217.215.136	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.687098026 CEST	1.1.1.1	192.168.2.4	0xe276	No error (0)	youtube-ui.l.google.com		142.250.9.93	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.687098026 CEST	1.1.1.1	192.168.2.4	0xe276	No error (0)	youtube-ui.l.google.com		142.251.15.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.687098026 CEST	1.1.1.1	192.168.2.4	0xe276	No error (0)	youtube-ui.l.google.com		74.125.138.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.687098026 CEST	1.1.1.1	192.168.2.4	0xe276	No error (0)	youtube-ui.l.google.com		142.251.15.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.687098026 CEST	1.1.1.1	192.168.2.4	0xe276	No error (0)	youtube-ui.l.google.com		142.251.15.93	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.687098026 CEST	1.1.1.1	192.168.2.4	0xe276	No error (0)	youtube-ui.l.google.com		172.217.215.93	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.687433004 CEST	1.1.1.1	192.168.2.4	0x2a0	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:18.687433004 CEST	1.1.1.1	192.168.2.4	0x2a0	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Apr 19, 2024 07:32:18.777770996 CEST	1.1.1.1	192.168.2.4	0xbcce	No error (0)	i.ytimg.com		64.233.176.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.777770996 CEST	1.1.1.1	192.168.2.4	0xbcce	No error (0)	i.ytimg.com		64.233.185.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.777770996 CEST	1.1.1.1	192.168.2.4	0xbcce	No error (0)	i.ytimg.com		74.125.138.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.777770996 CEST	1.1.1.1	192.168.2.4	0xbcce	No error (0)	i.ytimg.com		173.194.219.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.777770996 CEST	1.1.1.1	192.168.2.4	0xbcce	No error (0)	i.ytimg.com		142.250.105.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.777770996 CEST	1.1.1.1	192.168.2.4	0xbcce	No error (0)	i.ytimg.com		142.250.9.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.777770996 CEST	1.1.1.1	192.168.2.4	0xbcce	No error (0)	i.ytimg.com		74.125.136.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.777770996 CEST	1.1.1.1	192.168.2.4	0xbcce	No error (0)	i.ytimg.com		64.233.177.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.777770996 CEST	1.1.1.1	192.168.2.4	0xbcce	No error (0)	i.ytimg.com		108.177.122.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.777770996 CEST	1.1.1.1	192.168.2.4	0xbcce	No error (0)	i.ytimg.com		172.217.215.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.777770996 CEST	1.1.1.1	192.168.2.4	0xbcce	No error (0)	i.ytimg.com		142.251.15.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.777770996 CEST	1.1.1.1	192.168.2.4	0xbcce	No error (0)	i.ytimg.com		172.253.124.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:18.876713037 CEST	1.1.1.1	192.168.2.4	0x5b9b	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:18.876749992 CEST	1.1.1.1	192.168.2.4	0xdf02	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:19.115813971 CEST	1.1.1.1	192.168.2.4	0xdffb	No error (0)	static.addtoany.com			65	IN (0x0001)	false
Apr 19, 2024 07:32:19.115852118 CEST	1.1.1.1	192.168.2.4	0x7ec4	No error (0)	static.addtoany.com		172.67.39.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:19.115852118 CEST	1.1.1.1	192.168.2.4	0x7ec4	No error (0)	static.addtoany.com		104.22.70.197	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:19.115852118 CEST	1.1.1.1	192.168.2.4	0x7ec4	No error (0)	static.addtoany.com		104.22.71.197	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:20.357254028 CEST	1.1.1.1	192.168.2.4	0x893d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:20.357254028 CEST	1.1.1.1	192.168.2.4	0x893d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:21.004236937 CEST	1.1.1.1	192.168.2.4	0x2093	No error (0)	googleads.g.doubleclick.net		173.194.219.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:21.004236937 CEST	1.1.1.1	192.168.2.4	0x2093	No error (0)	googleads.g.doubleclick.net		173.194.219.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:21.004236937 CEST	1.1.1.1	192.168.2.4	0x2093	No error (0)	googleads.g.doubleclick.net		173.194.219.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:21.004236937 CEST	1.1.1.1	192.168.2.4	0x2093	No error (0)	googleads.g.doubleclick.net		173.194.219.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:21.004616976 CEST	1.1.1.1	192.168.2.4	0xf9a0	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 07:32:21.013639927 CEST	1.1.1.1	192.168.2.4	0xb816	No error (0)	static.doubleclick.net		142.250.105.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:21.013639927 CEST	1.1.1.1	192.168.2.4	0xb816	No error (0)	static.doubleclick.net		142.250.105.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:21.137180090 CEST	1.1.1.1	192.168.2.4	0x4a6c	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 19, 2024 07:32:21.137341022 CEST	1.1.1.1	192.168.2.4	0xd516	No error (0)	www.google.com		64.233.176.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:21.137341022 CEST	1.1.1.1	192.168.2.4	0xd516	No error (0)	www.google.com		64.233.176.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:21.137341022 CEST	1.1.1.1	192.168.2.4	0xd516	No error (0)	www.google.com		64.233.176.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:21.137341022 CEST	1.1.1.1	192.168.2.4	0xd516	No error (0)	www.google.com		64.233.176.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:21.137341022 CEST	1.1.1.1	192.168.2.4	0xd516	No error (0)	www.google.com		64.233.176.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:21.137341022 CEST	1.1.1.1	192.168.2.4	0xd516	No error (0)	www.google.com		64.233.176.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:21.616564035 CEST	1.1.1.1	192.168.2.4	0xd0e6	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:21.616597891 CEST	1.1.1.1	192.168.2.4	0x4d88	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:21.616597891 CEST	1.1.1.1	192.168.2.4	0x4d88	No error (0)	photos-ugc.l.googleusercontent.com		64.233.176.132	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:22.242305040 CEST	1.1.1.1	192.168.2.4	0xb245	No error (0)	play.google.com		142.250.105.102	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:22.242305040 CEST	1.1.1.1	192.168.2.4	0xb245	No error (0)	play.google.com		142.250.105.138	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:22.242305040 CEST	1.1.1.1	192.168.2.4	0xb245	No error (0)	play.google.com		142.250.105.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:22.242305040 CEST	1.1.1.1	192.168.2.4	0xb245	No error (0)	play.google.com		142.250.105.139	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:22.242305040 CEST	1.1.1.1	192.168.2.4	0xb245	No error (0)	play.google.com		142.250.105.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:22.242305040 CEST	1.1.1.1	192.168.2.4	0xb245	No error (0)	play.google.com		142.250.105.113	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.224538088 CEST	1.1.1.1	192.168.2.4	0x793b	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:24.225078106 CEST	1.1.1.1	192.168.2.4	0x372f	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:24.225657940 CEST	1.1.1.1	192.168.2.4	0x22a5	No error (0)	i.ytimg.com		173.194.219.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.225657940 CEST	1.1.1.1	192.168.2.4	0x22a5	No error (0)	i.ytimg.com		142.250.9.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.225657940 CEST	1.1.1.1	192.168.2.4	0x22a5	No error (0)	i.ytimg.com		64.233.177.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.225657940 CEST	1.1.1.1	192.168.2.4	0x22a5	No error (0)	i.ytimg.com		108.177.122.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.225657940 CEST	1.1.1.1	192.168.2.4	0x22a5	No error (0)	i.ytimg.com		172.253.124.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.225657940 CEST	1.1.1.1	192.168.2.4	0x22a5	No error (0)	i.ytimg.com		172.217.215.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.225657940 CEST	1.1.1.1	192.168.2.4	0x22a5	No error (0)	i.ytimg.com		74.125.138.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.225657940 CEST	1.1.1.1	192.168.2.4	0x22a5	No error (0)	i.ytimg.com		142.251.15.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.225657940 CEST	1.1.1.1	192.168.2.4	0x22a5	No error (0)	i.ytimg.com		64.233.185.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.225657940 CEST	1.1.1.1	192.168.2.4	0x22a5	No error (0)	i.ytimg.com		74.125.136.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.225657940 CEST	1.1.1.1	192.168.2.4	0x22a5	No error (0)	i.ytimg.com		64.233.176.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.225657940 CEST	1.1.1.1	192.168.2.4	0x22a5	No error (0)	i.ytimg.com		142.250.105.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.409378052 CEST	1.1.1.1	192.168.2.4	0xe22a	No error (0)	googleads.g.doubleclick.net		142.251.15.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.409378052 CEST	1.1.1.1	192.168.2.4	0xe22a	No error (0)	googleads.g.doubleclick.net		142.251.15.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.409378052 CEST	1.1.1.1	192.168.2.4	0xe22a	No error (0)	googleads.g.doubleclick.net		142.251.15.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.409378052 CEST	1.1.1.1	192.168.2.4	0xe22a	No error (0)	googleads.g.doubleclick.net		142.251.15.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.409555912 CEST	1.1.1.1	192.168.2.4	0xd358	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 07:32:24.414983988 CEST	1.1.1.1	192.168.2.4	0x59a6	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:24.414983988 CEST	1.1.1.1	192.168.2.4	0x59a6	No error (0)	photos-ugc.l.googleusercontent.com		142.250.9.132	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.415211916 CEST	1.1.1.1	192.168.2.4	0x1e70	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:24.424927950 CEST	1.1.1.1	192.168.2.4	0x6935	No error (0)	play.google.com		142.250.9.138	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.424927950 CEST	1.1.1.1	192.168.2.4	0x6935	No error (0)	play.google.com		142.250.9.139	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.424927950 CEST	1.1.1.1	192.168.2.4	0x6935	No error (0)	play.google.com		142.250.9.113	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.424927950 CEST	1.1.1.1	192.168.2.4	0x6935	No error (0)	play.google.com		142.250.9.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.424927950 CEST	1.1.1.1	192.168.2.4	0x6935	No error (0)	play.google.com		142.250.9.102	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.424927950 CEST	1.1.1.1	192.168.2.4	0x6935	No error (0)	play.google.com		142.250.9.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.438143969 CEST	1.1.1.1	192.168.2.4	0x4c33	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:24.438143969 CEST	1.1.1.1	192.168.2.4	0x4c33	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Apr 19, 2024 07:32:24.438182116 CEST	1.1.1.1	192.168.2.4	0x6828	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:24.438182116 CEST	1.1.1.1	192.168.2.4	0x6828	No error (0)	youtube-ui.l.google.com		172.253.124.136	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.438182116 CEST	1.1.1.1	192.168.2.4	0x6828	No error (0)	youtube-ui.l.google.com		142.250.9.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.438182116 CEST	1.1.1.1	192.168.2.4	0x6828	No error (0)	youtube-ui.l.google.com		172.253.124.93	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.438182116 CEST	1.1.1.1	192.168.2.4	0x6828	No error (0)	youtube-ui.l.google.com		172.217.215.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.438182116 CEST	1.1.1.1	192.168.2.4	0x6828	No error (0)	youtube-ui.l.google.com		172.253.124.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.438182116 CEST	1.1.1.1	192.168.2.4	0x6828	No error (0)	youtube-ui.l.google.com		74.125.136.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.438182116 CEST	1.1.1.1	192.168.2.4	0x6828	No error (0)	youtube-ui.l.google.com		74.125.136.136	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.438182116 CEST	1.1.1.1	192.168.2.4	0x6828	No error (0)	youtube-ui.l.google.com		172.253.124.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.438182116 CEST	1.1.1.1	192.168.2.4	0x6828	No error (0)	youtube-ui.l.google.com		74.125.136.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.438182116 CEST	1.1.1.1	192.168.2.4	0x6828	No error (0)	youtube-ui.l.google.com		172.217.215.93	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.438182116 CEST	1.1.1.1	192.168.2.4	0x6828	No error (0)	youtube-ui.l.google.com		142.250.9.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.438182116 CEST	1.1.1.1	192.168.2.4	0x6828	No error (0)	youtube-ui.l.google.com		142.250.105.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.438182116 CEST	1.1.1.1	192.168.2.4	0x6828	No error (0)	youtube-ui.l.google.com		142.250.9.136	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.438182116 CEST	1.1.1.1	192.168.2.4	0x6828	No error (0)	youtube-ui.l.google.com		142.250.105.136	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.438182116 CEST	1.1.1.1	192.168.2.4	0x6828	No error (0)	youtube-ui.l.google.com		142.250.9.93	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.438182116 CEST	1.1.1.1	192.168.2.4	0x6828	No error (0)	youtube-ui.l.google.com		74.125.136.93	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:24.506509066 CEST	1.1.1.1	192.168.2.4	0xc4a5	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:25.234688044 CEST	1.1.1.1	192.168.2.4	0x4c14	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:25.234688044 CEST	1.1.1.1	192.168.2.4	0x4c14	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:25.234688044 CEST	1.1.1.1	192.168.2.4	0x4c14	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:25.235115051 CEST	1.1.1.1	192.168.2.4	0x6bb9	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:25.235115051 CEST	1.1.1.1	192.168.2.4	0x6bb9	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:26.022923946 CEST	1.1.1.1	192.168.2.4	0x9550	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:26.022923946 CEST	1.1.1.1	192.168.2.4	0x9550	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:26.022923946 CEST	1.1.1.1	192.168.2.4	0x9550	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:26.023222923 CEST	1.1.1.1	192.168.2.4	0xb879	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:26.023222923 CEST	1.1.1.1	192.168.2.4	0xb879	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 07:32:31.189026117 CEST	1.1.1.1	192.168.2.4	0xf461	No error (0)	secure.trust-guard.com			65	IN (0x0001)	false
Apr 19, 2024 07:32:31.189604044 CEST	1.1.1.1	192.168.2.4	0xbaf1	No error (0)	secure.trust-guard.com		104.25.241.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:31.189604044 CEST	1.1.1.1	192.168.2.4	0xbaf1	No error (0)	secure.trust-guard.com		104.25.242.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:31.189604044 CEST	1.1.1.1	192.168.2.4	0xbaf1	No error (0)	secure.trust-guard.com		172.67.65.15	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:31.326797009 CEST	1.1.1.1	192.168.2.4	0x7f71	No error (0)	secure.trust-guard.com			65	IN (0x0001)	false
Apr 19, 2024 07:32:31.330318928 CEST	1.1.1.1	192.168.2.4	0x9419	No error (0)	secure.trust-guard.com		104.25.241.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:31.330318928 CEST	1.1.1.1	192.168.2.4	0x9419	No error (0)	secure.trust-guard.com		104.25.242.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:31.330318928 CEST	1.1.1.1	192.168.2.4	0x9419	No error (0)	secure.trust-guard.com		172.67.65.15	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:32.919303894 CEST	1.1.1.1	192.168.2.4	0x54f	No error (0)	secure.trust-guard.com		104.25.241.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:32.919303894 CEST	1.1.1.1	192.168.2.4	0x54f	No error (0)	secure.trust-guard.com		104.25.242.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:32.919303894 CEST	1.1.1.1	192.168.2.4	0x54f	No error (0)	secure.trust-guard.com		172.67.65.15	A (IP address)	IN (0x0001)	false
Apr 19, 2024 07:32:32.920547009 CEST	1.1.1.1	192.168.2.4	0xf078	No error (0)	secure.trust-guard.com			65	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	107.144.122.203	80	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 19, 2024 07:31:28.932305098 CEST	430	OUT	GET / HTTP/1.1 Host: www.1040now.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 19, 2024 07:31:29.071125984 CEST	1250	IN	HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Thu, 21 Sep 2023 01:24:31 GMT Accept-Ranges: bytes ETag: "9014875f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:28 GMT Content-Length: 946 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 09 3c 68 65 61 64 3e 0d 0a 09 09 3c 74 69 74 6c 65 3e 31 30 34 30 4e 6f 77 20 46 72 65 65 20 4f 6e 6c 69 6e 65 20 54 61 78 20 50 72 65 70 61 72 61 74 69 6f 6e 20 26 20 45 6c 65 63 74 72 6f 6e 69 63 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0d 0a 09 09 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 46 72 6f 6e 74 50 61 67 65 20 33 2e 30 22 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 20 75 72 6c 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 31 30 34 30 6e 6f 77 2e 6e 65 74 2f 70 61 72 74 6e 65 72 2e 68 74 6d 22 3e 0d 0a 09 3c 2f 68 65 61 64 3e 0d 0a 09 3c 62 6f 64 79 3e 0d 0a 09 09 3c 50 3e 3c 53 54 52 4f 4e 47 3e 3c 46 4f 4e 54 20 73 69 7a 65 3d 22 36 22 3e 3c 46 4f 4e 54 20 73 69 7a 65 3d 22 35 22 3e 31 30 34 30 4e 6f 77 3c 2f 46 4f 4e 54 3e 20 3c 2f 46 4f 4e 54 3e 2d 20 46 72 65 65 20 46 69 6c 65 26 6e 62 73 70 3b 4f 6e 6c 69 6e 65 20 0d 0a 09 09 09 09 54 61 78 20 50 72 65 70 61 72 61 74 69 6f 6e 20 26 61 6d 70 3b 20 45 2d 46 69 6c 69 6e 67 3c 42 52 3e 0d 0a 09 09 09 09 3c 42 52 3e 0d 0a 09 09 09 3c 2f 53 54 52 4f 4e 47 3e 4c 6f 61 64 69 6e 67 20 31 30 34 30 4e 6f 77 20 66 72 65 65 20 66 69 6c 65 20 6c 61 6e 64 69 6e 67 20 70 61 67 65 2e 20 49 66 20 69 74 20 69 73 20 6e 6f 74 20 6c 6f 61 64 65 64 20 77 69 74 68 69 6e 20 66 65 77 20 0d 0a 09 09 09 6d 69 6e 75 74 65 73 2c 20 63 6c 69 63 6b 20 61 6e 79 20 6f 66 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6c 69 6e 6b 3a 3c 2f 50 3e 0d 0a 09 09 3c 55 4c 3e 0d 0a 09 09 09 3c 4c 49 3e 0d 0a 09 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 31 30 34 30 6e 6f 77 2e 6e 65 74 2f 70 61 72 74 6e 65 72 2e 68 74 6d 22 3e 31 30 34 30 4e 6f 77 20 46 72 65 65 20 46 69 6c 65 20 53 65 63 75 72 65 64 20 0d 0a 09 09 09 09 09 53 65 72 76 65 72 20 23 20 31 3c 2f 61 3e 0d 0a 09 09 09 3c 2f 4c 49 3e 0d 0a 09 09 3c 2f 55 4c 3e 0d 0a 09 09 3c 50 3e 49 66 20 79 6f 75 20 61 72 65 20 75 6e 61 62 6c 65 20 74 6f 20 74 6f 20 6c 6f 61 64 26 6e 62 73 70 3b 31 30 34 30 4e 6f 77 20 46 72 65 65 20 46 69 6c 65 20 53 65 72 76 65 72 20 61 62 6f 76 65 2c 26 6e 62 73 70 3b 70 6c 65 61 73 65 20 0d 0a 09 09 09 63 6f 6e 74 61 63 74 20 31 30 34 30 4e 6f 77 20 61 74 20 3c 41 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 63 73 40 31 30 34 30 6e 6f 77 2e 63 6f 6d 22 3e 63 73 40 31 30 34 30 6e 6f 77 2e 63 6f 6d 3c 2f 41 3e 2e 3c 42 52 3e 0d 0a 09 09 09 3c 42 52 3e 0d 0a 09 09 09 57 65 20 61 70 70 6f 6c 6f 67 69 7a 65 20 66 6f 72 20 61 6e 79 20 69 6e 63 6f 6e 76 65 6e 69 65 6e 63 65 2e 20 54 68 61 6e 6b 20 79 6f 75 20 66 6f 72 20 75 73 69 6e 67 20 31 30 34 30 4e 6f 77 3c 42 52 3e 0d 0a 09 09 09 3c 42 52 3e 0d 0a 09 09 3c 2f 50 3e 0d 0a 09 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>1040Now Free Online Tax Preparation & Electronic Filing</title><meta content="Microsoft FrontPage 3.0" name="GENERATOR"><meta http-equiv="refresh" content="0; url=http://www.1040now.net/partner.htm"></head><body><P><STRONG><FONT size="6"><FONT size="5">1040Now</FONT> </FONT>- Free File Online Tax Preparation & E-Filing<BR><BR></STRONG>Loading 1040Now free file landing page. If it is not loaded within few minutes, click any of the following link:</P><UL><LI><a href="http://www.1040now.net/partner.htm">1040Now Free File Secured Server # 1</a></LI></UL><P>If you are unable to to load 1040Now Free File Server above, please contact 1040Now at <A href="mailto:cs@1040now.com">cs@1040now.com</A>.<BR><BR>We appologize for any inconvenience. Thank you for using 1040Now<BR><BR></P></body></html>
Apr 19, 2024 07:31:29.157968998 CEST	374	OUT	GET /favicon.ico HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.1040now.net/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 19, 2024 07:31:29.311048985 CEST	1289	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Last-Modified: Thu, 21 Sep 2023 01:24:32 GMT Accept-Ranges: bytes ETag: "f096c25f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:28 GMT Content-Length: 1150 Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 96 23 00 00 96 23 00 01 96 23 00 0d 96 23 00 1f 96 23 00 20 96 23 00 0f 96 23 00 01 96 23 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 96 23 00 00 96 23 00 01 96 23 00 29 96 23 00 82 96 23 00 c1 96 23 00 da 96 23 00 db 96 23 00 c5 96 23 00 8a 96 23 00 31 96 23 00 02 96 23 00 00 00 00 00 00 00 00 00 00 00 00 00 00 96 23 00 00 96 23 00 04 96 23 00 5f 96 23 00 de 96 23 00 ff 96 23 00 ff 96 23 00 ff 96 23 00 ff 96 23 00 ff 96 23 00 ff 96 23 00 e5 96 23 00 6e 96 23 00 07 96 23 00 00 00 00 00 00 96 23 00 00 96 23 00 00 96 23 00 60 96 23 00 f1 96 23 00 ff 96 23 00 ff 95 21 00 ff 95 22 00 ff 96 23 00 ff 95 22 00 ff 95 22 00 ff 96 23 00 ff 96 23 00 f6 96 23 00 72 96 23 00 01 96 23 00 00 96 23 00 00 96 23 00 2a 96 23 00 dd 96 23 00 ff 96 22 00 ff 99 28 00 ff ab 44 00 ff bc 5e 00 ff bf 63 00 ff b6 55 00 ff a2 36 00 ff 96 23 00 ff 96 23 00 ff 96 23 00 e8 96 23 00 39 96 23 00 00 96 23 00 00 96 23 00 80 96 23 00 ff 96 22 00 ff 9b 2c 00 ff c1 66 00 ff d8 8a 00 ff db 8f 00 ff db 8f 00 ff db 8e 00 ff d2 81 00 ff ae 49 00 ff 96 23 00 ff 96 23 00 ff 96 23 00 95 96 23 00 01 96 23 00 0c 96 23 00 bd 96 23 00 ff 96 22 00 ff b8 57 00 ff db 8e 00 ff da 8d 00 ff da 8d 00 ff da 8d 00 ff da 8d 00 ff db 8e 00 ff d2 81 00 ff a2 35 00 ff 95 22 00 ff 96 23 00 cf 96 23 00 16 96 23 00 1a 96 23 00 d5 96 23 00 ff 99 27 00 ff ca 74 00 ff db 8f 00 ff da 8d 00 ff da 8d 00 ff da 8d 00 ff da 8d 00 ff da 8d 00 ff da 8d 00 ff b0 4c 00 ff 95 21 00 ff 96 23 00 e3 96 23 00 29 96 23 00 18 96 23 00 d3 96 23 00 ff 98 26 00 ff c8 70 00 ff db 8f 00 ff da 8d 00 ff da 8d 00 ff da 8d 00 ff da 8d 00 ff da 8d 00 ff da 8d 00 ff ae 49 00 ff 95 21 00 ff 96 23 00 e1 96 23 00 27 96 23 00 08 96 23 00 b5 96 23 00 ff 95 22 00 ff b1 4d 00 ff d9 8b 00 ff db 8e 00 ff da 8d 00 ff da 8d 00 ff da 8d 00 ff db 8f 00 ff cd 79 00 ff 9e 2f 00 ff 96 22 00 ff 96 23 00 c7 96 23 00 12 96 23 00 00 96 23 00 71 96 23 00 ff 96 23 00 ff 98 26 00 ff b6 55 00 ff d3 82 00 ff da 8d 00 ff da 8e 00 ff d8 8a 00 ff ca 74 00 ff a5 3b 00 ff 95 22 00 ff 96 23 00 ff 96 23 00 86 96 23 00 00 96 23 00 00 96 23 00 1d 96 23 00 cd 96 23 00 ff 96 23 00 ff 96 23 00 ff a1 34 00 ff af 49 00 ff b2 4f 00 ff a9 41 00 ff 9b 2b 00 ff 95 22 00 ff 96 23 00 ff 96 23 00 db 96 23 00 29 96 23 00 00 96 23 00 00 96 23 00 00 96 23 00 46 96 23 00 e2 96 23 00 ff 96 23 00 ff 95 22 00 ff 95 21 00 ff 95 21 00 ff 95 21 00 ff 96 22 00 ff 96 23 00 ff 96 23 00 eb 96 23 00 57 96 23 00 00 96 23 00 00 00 00 00 00 96 23 00 00 96 23 00 00 96 23 00 41 96 23 00 c4 96 23 00 fb 96 23 00 ff 96 23 00 ff 96 23 00 ff 96 23 00 ff 96 23 00 fd 96 23 00 cd 96 23 00 4e 96 23 00 02 96 23 00 00 00 00 00 00 00 00 00 00 00 00 00 00 96 23 00 00 96 23 00 00 96 23 00 14 96 23 00 Data Ascii: h( ##### ######)#######1#####_#########n#####`###!"#""###r####*##"(D^cU6####9####",fI#######"W5"#####'tL!##)###&pI!##'###"My/"####q##&Ut;"#########4IOA+"###)####F###"!!!"###W#####A#########N######
Apr 19, 2024 07:31:29.311079025 CEST	169	IN	Data Raw: 5b 96 23 00 9d 96 23 00 bc 96 23 00 be 96 23 00 a2 96 23 00 63 96 23 00 1a 96 23 00 00 96 23 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 96 23 00 00 96 23 00 00 96 23 00 02 96 23 00 0a 96 23 00 0a 96 23 00 03 96 Data Ascii: [#####c###########?
Apr 19, 2024 07:32:14.311994076 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	107.144.122.203	80	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 19, 2024 07:31:29.158823967 CEST	475	OUT	GET /partner.htm HTTP/1.1 Host: www.1040now.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://www.1040now.net/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 19, 2024 07:31:29.311849117 CEST	1289	IN	HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Thu, 21 Sep 2023 01:24:45 GMT Accept-Ranges: bytes ETag: "f0c68a672aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:28 GMT Content-Length: 1124 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 09 3c 68 65 61 64 3e 0d 0a 09 09 3c 74 69 74 6c 65 3e 31 30 34 30 4e 6f 77 20 3a 3a 20 46 72 65 65 20 4f 6e 6c 69 6e 65 20 54 61 78 20 50 72 65 70 61 72 61 74 69 6f 6e 20 26 20 45 6c 65 63 74 72 6f 6e 69 63 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0d 0a 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 62 6f 6f 6b 6d 61 72 6b 28 29 7b 0d 0a 20 20 20 20 76 61 72 20 74 69 74 6c 65 3d 22 74 69 74 6c 65 22 0d 0a 20 20 20 20 76 61 72 20 75 72 6c 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 64 6f 6d 61 69 6e 2e 63 6f 6d 22 0d 0a 0d 0a 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 73 69 64 65 62 61 72 29 20 77 69 6e 64 6f 77 2e 73 69 64 65 62 61 72 2e 61 64 64 50 61 6e 65 6c 28 74 69 74 6c 65 2c 20 75 72 6c 2c 22 22 29 3b 0d 0a 0d 0a 20 20 20 20 65 6c 73 65 20 69 66 28 20 77 69 6e 64 6f 77 2e 6f 70 65 72 61 20 26 26 20 77 69 6e 64 6f 77 2e 70 72 69 6e 74 20 29 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 76 61 72 20 6d 62 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 61 27 29 3b 0d 0a 20 20 20 20 6d 62 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 72 65 6c 27 2c 27 73 69 64 65 62 61 72 27 29 3b 0d 0a 20 20 20 20 6d 62 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 68 72 65 66 27 2c 27 68 74 74 70 3a 2f 2f 77 77 77 2e 31 30 34 30 6e 6f 77 2e 63 6f 6d 2f 27 29 3b 0d 0a 20 20 20 20 6d 62 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 74 69 74 6c 65 27 2c 27 31 30 34 30 4e 6f 77 20 4f 6e 6c 69 6e 65 20 54 61 78 20 50 72 65 70 65 72 61 74 69 6f 6e 20 26 20 45 6c 65 63 74 72 6f 6e 69 63 20 46 69 6c 69 6e 67 27 29 3b 0d 0a 20 20 20 20 6d 62 6d 2e 63 6c 69 63 6b 28 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 65 6c 73 65 20 69 66 28 20 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 20 29 20 77 69 6e 64 6f 77 2e 65 78 74 65 72 6e 61 6c 2e 41 64 64 46 61 76 6f 72 69 74 65 28 20 75 72 6c 2c 20 74 69 74 6c 65 29 3b 0d 0a 0d 0a 7d 0d 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0d 0a 09 09 0d 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 3e 0d 0a 20 09 20 20 20 20 69 66 20 28 73 63 72 65 65 6e 2e 77 69 64 74 68 20 3c 3d 20 36 39 39 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 31 30 34 30 6e 6f 77 2e 6e 65 74 2f 6d 6f 62 69 6c 65 2f 70 61 72 74 6e 65 72 2e 68 74 6d 6c 22 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 31 30 34 30 6e 6f 77 2e 6e 65 74 2f 70 61 72 74 6e 65 72 2e 68 74 6d 6c 22 3b 0d 0a 09 3c 2f 73 63 72 69 70 74 3e 0d 0a 09 09 0d 0a 09 09 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 22 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 3e 0d 0a 09 09 3c 6d 65 74 Data Ascii: <html><head><title>1040Now :: Free Online Tax Preparation & Electronic Filing</title><script type="text/javascript">function bookmark(){ var title="title" var url="http://www.domain.com" if (window.sidebar) window.sidebar.addPanel(title, url,""); else if( window.opera && window.print ) { var mbm = document.createElement('a'); mbm.setAttribute('rel','sidebar'); mbm.setAttribute('href','http://www.1040now.com/'); mbm.setAttribute('title','1040Now Online Tax Preperation & Electronic Filing'); mbm.click(); } else if( document.all ) window.external.AddFavorite( url, title);}</script><script type="text/javascript" > if (screen.width <= 699) { document.location = "https://www.1040now.net/mobile/partner.html"; } else document.location = "https://www.1040now.net/partner.html";</script><meta content="" name="keywords"><met
Apr 19, 2024 07:31:29.311865091 CEST	140	IN	Data Raw: 61 20 63 6f 6e 74 65 6e 74 3d 22 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3e 0d 0a 09 09 3c 4c 49 4e 4b 20 68 72 65 66 3d 22 73 74 79 6c 65 73 2d 65 7a 2e 63 73 73 3f 72 65 6c 6f 61 64 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 Data Ascii: a content="" name="description"><LINK href="styles-ez.css?reload" type="text/css" rel="stylesheet"></head><body></body></html>
Apr 19, 2024 07:31:29.344604969 CEST	348	OUT	GET /styles-ez.css?reload HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.1040now.net/partner.htm Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 19, 2024 07:31:29.474299908 CEST	1289	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Thu, 21 Sep 2023 01:24:50 GMT Accept-Ranges: bytes ETag: "e0e8d46a2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:29 GMT Content-Length: 2575 Data Raw: 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 20 20 0d 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 70 78 3b 0d 0a 09 0d 0a 09 62 6f 72 64 65 72 3a 20 30 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 09 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 69 6d 61 67 65 73 2d 65 7a 2f 62 67 2e 6a 70 67 29 20 72 65 70 65 61 74 2d 78 20 23 30 30 31 65 35 61 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 6c 6f 63 6b 73 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 34 70 78 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 7d 0d 0a 0d 0a 2e 62 6c 6f 63 6b 73 32 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 34 70 78 3b 20 63 6f 6c 6f 72 3a 20 23 30 31 30 31 30 31 3b 7d 0d 0a 2e 62 6c 6f 63 6b 73 32 20 61 3a 6c 69 6e 6b 20 7b 63 6f 6c 6f 72 3a 20 23 30 30 31 65 35 61 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 0d 0a 2e 62 6c 6f 63 6b 73 32 20 61 3a 76 69 73 69 74 65 64 20 7b 63 6f 6c 6f 72 3a 20 23 30 30 31 65 35 61 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 0d 0a 2e 62 6c 6f 63 6b 73 32 20 61 3a 68 6f 76 65 72 20 7b 63 6f 6c 6f 72 3a 20 23 30 33 33 37 61 30 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 7d 0d 0a 2e 62 6c 6f 63 6b 73 32 20 61 3a 61 63 74 69 76 65 20 7b 63 6f 6c 6f 72 3a 20 23 30 30 31 65 35 61 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 0d 0a 0d 0a 2e 61 64 64 72 65 73 73 20 7b 20 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 31 65 35 61 3b 0d 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 35 70 78 3b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 20 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 20 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 34 70 78 3b 20 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 64 64 72 65 73 73 20 61 3a 6c 69 6e 6b 20 7b 63 6f 6c 6f 72 3a 20 23 62 35 33 65 31 66 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 0d 0a 2e 61 64 64 72 65 73 73 20 61 3a 76 69 73 69 74 65 64 20 7b 63 6f 6c 6f 72 3a 20 23 62 35 33 65 31 66 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 0d 0a 2e 61 64 64 72 65 73 73 20 61 3a 68 6f 76 65 72 20 7b 63 6f 6c 6f 72 3a 20 23 37 34 36 63 35 64 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 7d 0d 0a 2e 61 64 64 72 65 73 73 20 61 3a 61 63 74 69 76 65 20 7b 63 6f 6c 6f 72 3a 20 23 62 35 33 Data Ascii: html, body { margin-left: 0px;margin-top: 0px;margin-right: 0px;margin-bottom: 0px;border: 0px;padding: 0px;text-align: left;background: url(images-ez/bg.jpg) repeat-x #001e5a;}.blocks {font-size: 11px; line-height: 14px; color: #ffffff;}.blocks2 {font-size: 11px; line-height: 14px; color: #010101;}.blocks2 a:link {color: #001e5a; text-decoration: none;}.blocks2 a:visited {color: #001e5a; text-decoration: none;}.blocks2 a:hover {color: #0337a0; text-decoration: underline;}.blocks2 a:active {color: #001e5a; text-decoration: none;}.address { background-color: #001e5a;padding-top: 15px;font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; color: #ffffff;}.address a:link {color: #b53e1f; text-decoration: none;}.address a:visited {color: #b53e1f; text-decoration: none;}.address a:hover {color: #746c5d; text-decoration: underline;}.address a:active {color: #b53
Apr 19, 2024 07:31:29.474368095 CEST	1289	IN	Data Raw: 65 31 66 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 0d 0a 0d 0a 2e 63 6f 70 79 72 69 67 68 74 20 7b 20 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 78 3b 20 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 Data Ascii: e1f; text-decoration: none;}.copyright { font-size: 10px; line-height: 14px;}.copyright a:link {color: #b53e1f; text-decoration: underline;}.copyright a:visited {color: #b53e1f; text-decoration: underline;}.copyright a:hover
Apr 19, 2024 07:31:29.474385023 CEST	301	IN	Data Raw: 0a 7d 0d 0a 0d 0a 74 61 62 6c 65 20 61 3a 6c 69 6e 6b 20 7b 63 6f 6c 6f 72 3a 20 23 64 39 30 33 30 35 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 0d 0a 74 61 62 6c 65 20 61 3a 76 69 73 69 74 65 64 20 7b 63 6f 6c 6f Data Ascii: }table a:link {color: #d90305; text-decoration: none;}table a:visited {color: #d90305; text-decoration: none;}table a:hover {color: #8a0203; text-decoration: underline;}table a:active {color: #d90305; text-decoration: none;}.t
Apr 19, 2024 07:32:14.483056068 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49737	107.144.122.203	80	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 19, 2024 07:32:14.122592926 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49742	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:29 UTC	690	OUT	GET /partner.html HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: http://www.1040now.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:30 UTC	325	IN	HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Tue, 02 Jan 2024 19:19:33 GMT Accept-Ranges: bytes ETag: "cfdd229eb03dda1:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:29 GMT Connection: close Content-Length: 12177
2024-04-19 05:31:30 UTC	12177	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 09 3c 68 65 61 64 3e 0d 0a 09 09 3c 74 69 74 6c 65 3e 31 30 34 30 4e 6f 77 20 3a 3a 20 46 72 65 65 20 4f 6e 6c 69 6e 65 20 54 61 78 20 50 72 65 70 61 72 61 74 69 6f 6e 20 26 20 45 6c 65 63 74 72 6f 6e 69 63 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0d 0a 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 62 6f 6f 6b 6d 61 72 6b 28 29 7b 0d 0a 20 20 20 20 76 61 72 20 74 69 74 6c 65 3d 22 74 69 74 6c 65 22 0d 0a 20 20 20 20 76 61 72 20 75 72 6c 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 64 6f 6d 61 69 6e 2e 63 6f 6d 22 0d 0a 0d 0a 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 73 69 64 65 62 61 72 29 20 77 69 6e 64 6f 77 2e 73 69 64 65 62 61 72 2e 61 64 64 Data Ascii: <html><head><title>1040Now :: Free Online Tax Preparation & Electronic Filing</title><script type="text/javascript">function bookmark(){ var title="title" var url="http://www.domain.com" if (window.sidebar) window.sidebar.add

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:30 UTC	561	OUT	GET /styles-ez.css?reload HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.1040now.net/partner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:30 UTC	323	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Thu, 21 Sep 2023 01:24:50 GMT Accept-Ranges: bytes ETag: "e0e8d46a2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:29 GMT Connection: close Content-Length: 2575
2024-04-19 05:31:30 UTC	2575	IN	Data Raw: 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 20 20 0d 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 70 78 3b 0d 0a 09 0d 0a 09 62 6f 72 64 65 72 3a 20 30 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 09 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 69 6d 61 67 65 73 2d 65 7a 2f 62 67 2e 6a 70 67 29 20 72 65 70 65 61 74 2d 78 20 23 30 30 31 65 35 61 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 6c 6f 63 6b 73 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 34 Data Ascii: html, body { margin-left: 0px;margin-top: 0px;margin-right: 0px;margin-bottom: 0px;border: 0px;padding: 0px;text-align: left;background: url(images-ez/bg.jpg) repeat-x #001e5a;}.blocks {font-size: 11px; line-height: 14

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49744	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:30 UTC	609	OUT	GET /images-ez/top-left.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/partner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:30 UTC	326	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:27 GMT Accept-Ranges: bytes ETag: "208a65802aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:30 GMT Connection: close Content-Length: 33759
2024-04-19 05:31:30 UTC	16058	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 41 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 1d 89 00 00 35 3b 00 00 56 30 00 00 83 dd ff db 00 84 00 05 04 04 04 04 04 05 04 04 05 07 05 04 05 07 09 06 05 05 06 09 0a 08 08 09 08 08 0a 0d 0a 0b 0b 0b 0b 0a 0d 0c 0c 0c 0d 0c 0c 0c 0f 0f 11 11 0f 0f 17 16 16 16 17 19 19 19 19 19 19 19 19 19 19 01 06 06 06 0a 09 0a 13 0d 0d 13 16 11 0e 11 16 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 ff c2 00 11 08 00 93 02 82 03 01 11 00 02 11 01 03 11 01 ff c4 00 ff 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 00 Data Ascii: JFIFddDuckyA&Adobed5;V0
2024-04-19 05:31:30 UTC	16384	IN	Data Raw: dc b8 22 0a 31 cb 76 fe d1 b6 5c dc 54 51 4e 71 b9 4e 74 33 98 57 58 d1 58 e2 2d d8 37 3f 77 fb 7a ca 73 df f3 6b d9 e2 99 8c b8 62 c5 f8 3e 61 44 6f b5 96 b3 a2 c8 3b 2f ac 3a b4 02 da 60 09 98 91 80 2e 47 ab b8 a3 a4 13 0b 60 eb 71 96 bb 1b 24 f3 8e 41 80 1c 8f a1 cd 05 ae 30 c6 fa 41 ea c5 e6 84 b0 e4 53 8b 0e c0 e2 e5 79 a0 fe 66 59 6f a0 81 38 c0 16 db 30 d6 5a 4a ac 00 49 a3 22 af 11 6e 2a 5d 38 9d 69 73 0d 58 48 a2 16 d0 0a 90 44 8c a9 74 29 ea 4d 52 18 15 b5 b5 46 71 1a 49 a9 10 bc de af 26 7a 19 84 78 eb ef 97 3c b1 88 5e b2 17 36 f7 7d 02 c3 02 25 70 3f 63 56 ee 0b ca 91 ad 1b 39 3d a2 c7 18 68 0e 5a f5 8c e7 31 51 3e ad 30 d0 d6 ac 5e 41 2f dd c3 08 01 ac 66 51 15 d5 7c 97 44 54 39 89 dc 17 96 17 85 ee 6a c8 04 f5 9a 05 c4 9c 37 2b 61 f6 38 a2 Data Ascii: "1v\TQNqNt3WXX-7?wzskb>aDo;/:`.G`q$A0ASyfYo80ZJI"n*]8isXHDt)MRFqI&zx<^6}%p?cV9=hZ1Q>0^A/fQ\|DT9j7+a8
2024-04-19 05:31:30 UTC	1317	IN	Data Raw: 9d a9 cb 9f a9 da fb 27 98 9f dc f2 93 fb 9e 42 7f 73 ca 4f ee 79 4f f6 9e 6b fd a7 9e ff 00 69 e5 bf da 79 3f d9 3c ff 00 ec 9e 5f f6 4f 3f fb 3c 00 41 01 cf f3 3d 67 97 fd 93 cb fe c9 e5 ff 00 64 f2 ff 00 b2 79 7f d9 3c bf ec 9e 7f f6 4f 2f fb 27 97 fd 93 cf fe c9 e7 ff 00 64 f3 ff 00 b2 1e 79 fc c3 cf 3f 98 1f fb fe d3 cf 7f b4 f2 df ed 1f fb ff 00 b4 47 fb fe d1 f3 cf e7 80 04 a3 77 e1 e5 16 18 a8 e9 0d c6 ef 02 e5 d9 f0 ad 44 72 8c f0 e5 9c 6f c0 5e 8f c2 68 84 21 08 c2 10 87 10 84 22 93 75 97 fe 88 77 94 5d 31 9e 7e 90 98 bd ac 9a 37 4c 00 79 96 ad 1b a6 12 c5 4d 9e 6c 5e 5c a5 a4 64 59 01 0d a4 dd 87 0c bb 72 27 68 5c e4 df 42 f9 7a c7 c8 10 53 23 79 76 8e 4b 57 59 ad 5f 3f b9 48 8d 97 ad 39 7a 60 95 58 96 0d 16 27 ab ca 08 82 c1 7a 77 1c c5 f3 62 Data Ascii: 'BsOyOkiy?<_O?<A=gdy<O/'dy?GwDro^h!"uw]1~7LyMl^\dYr'h\BzS#yvKWY_?H9z`X'zwb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:30 UTC	608	OUT	GET /images-ez/secured.gif HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/partner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:30 UTC	324	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Thu, 21 Sep 2023 01:25:26 GMT Accept-Ranges: bytes ETag: "70acee7f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:30 GMT Connection: close Content-Length: 7430
2024-04-19 05:31:30 UTC	7430	IN	Data Raw: 47 49 46 38 39 61 8b 00 93 00 f7 00 00 00 00 80 b4 01 01 ff ff ff 35 4d 7b 3c 51 7a f2 d3 d3 37 43 5a f6 e1 e1 60 60 b0 2b 2b 31 c2 32 32 bb 1a 1a 30 30 98 28 41 72 2b 34 48 1c 1d 22 47 5c 84 00 1e 59 76 7c 92 05 1d 4e 1a 34 64 1c 27 3d 76 74 8b eb bd bd 69 57 69 59 59 64 7c 86 9a ac ac d6 47 54 68 17 27 48 2c 41 6b 75 6c 84 4b 35 48 da 83 83 34 3a 4b 40 40 a0 7f 7f bf 80 89 9c d6 76 76 cf cf e7 08 20 52 62 73 95 60 6e 86 bf bf df 52 63 84 3b 4c 6d 5a 6b 8a 24 3d 6e 71 64 7b 74 83 9c 14 2c 5c 6d 7a 93 64 69 7a c7 42 42 05 1e 50 55 55 60 82 8c a1 32 3f 56 4f 4f 59 61 70 89 be 22 22 2b 44 75 e6 ab ab 9e 9e ce ce 58 58 7b 82 95 41 53 74 de de ef 19 30 5f 7a 8a a3 36 36 3d 00 1a 4d 00 0e 2a 00 15 3e 00 17 46 00 1d 56 00 12 35 2c 3b 51 00 1b 52 5d 69 7c 35 4a Data Ascii: GIF89a5M{<Qz7CZ``++12200(Ar+4H"G\Yv\|N4d'=vtiWiYYd\|GTh'H,AkulK5H4:K@@vv Rbs`nRc;LmZk$=nqd{t,\mzdizBBPUU`2?VOOYap""+DuXX{ASt0_z66=M*>FV5,;QR]i\|5J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49747	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:30 UTC	609	OUT	GET /images-ez/index_01.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/partner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:30 UTC	326	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:24 GMT Accept-Ranges: bytes ETag: "c0daf87e2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:30 GMT Connection: close Content-Length: 41492
2024-04-19 05:31:30 UTC	16058	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 09 0d 0b 09 0b 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 6b 02 1a 03 01 11 00 02 11 01 03 11 01 ff c4 00 c6 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 00 05 06 07 08 01 04 09 02 03 0a 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDuckyPAdobedk
2024-04-19 05:31:30 UTC	16384	IN	Data Raw: dd 77 46 f2 1d e1 7b eb 4e 8b 27 ba 49 89 dc 93 64 58 97 b6 1d 95 c6 f1 f9 52 39 c4 8e 31 b9 1e c9 b4 7b f5 14 db 21 ee 4e 57 0d db 07 f8 53 0a 7c 8a 2a 18 d5 12 d4 a1 b8 07 4f 8b 3c ba 46 b1 cc 2d dc 3c a5 45 ff 00 75 54 cf f6 9c 70 e1 cb 91 06 4b 65 30 b8 09 1a 1a e6 ed 52 96 27 ea bf 70 1a de d4 dc ef da 51 64 b0 fc 35 bd 1d 26 e9 49 9b 92 e7 8f 45 2b 0e 34 ce 41 f5 d0 c9 31 30 3c 8c 48 1a 90 ea 01 44 aa 15 43 8d 29 e9 02 f1 31 8a 53 33 96 77 f2 80 06 e4 8b 75 77 68 ab 3f fb 7b 10 39 ee 91 cd 1b 59 1b bc ee 4d b1 3b f2 bc ee 41 d0 81 e3 d8 09 a8 97 b3 09 dc 75 6c 4a ce 4f c3 ce 21 65 5a 99 b2 6c 21 b1 5e 16 45 ec 84 ca ec 1d 43 20 26 7a 77 cb 2a 45 3a 0b aa 53 82 82 07 10 2e d1 28 6f 30 6c d5 7e 31 f1 b0 92 0a 07 94 6b 6e 51 35 5e fa d9 f7 c6 3e 5e 43 Data Ascii: wF{N'IdXR91{!NWS\|O<F-<EuTpKe0R'pQd5&IE+4A10<HDC)1S3wuwh?{9YM;AulJO!eZl!^EC &zwE:S.(o0l~1knQ5^>^C
2024-04-19 05:31:30 UTC	9050	IN	Data Raw: 15 bd 6e c5 b3 1c 93 89 cb 42 e8 85 61 ee 62 45 aa e8 89 95 05 5c 81 83 f1 48 01 e9 44 80 75 0e 6f 4e d0 1a 6e 64 ad 91 9e b3 03 1c 77 15 04 0b 7e 9d d5 67 8f 97 0f 27 fa 6e 53 b2 62 60 81 a1 af 6b 9c 8f 50 6c 8d ec 3d 5c 51 a0 5d 7b 24 98 ac 36 5b bb 3c 60 65 af fc 66 b4 fd a3 6e e0 98 f6 6f 8d 37 14 a2 f1 6d a6 91 54 c4 f6 ae 41 74 c5 0e b9 08 a1 87 a4 a7 a8 3e 6d b5 00 10 9d b8 db e7 8f 7b 54 08 c6 a2 cb fb eb 32 6e 6f ed b8 cc b1 8d 38 6c 8f cb 71 1b 5c 03 cb 08 fa 9a 87 76 d2 40 f3 0b 74 5a ac 7d d1 58 99 8e f6 bd f2 cb 06 98 69 f2 24 2b e2 9a d6 5e d9 c7 51 8f d1 96 8d 6c 62 18 8e dc 5d 75 f7 e9 b9 39 09 c5 14 4a 71 35 3a 74 02 88 86 a8 67 c5 2c 8f 78 0c f0 46 02 a3 b7 76 ab dd 5d 4f b4 f9 0e 3f 13 1b 1d c7 24 69 e6 df 3b da 58 e2 be 51 07 fa 65 ab Data Ascii: nBabE\HDuoNndw~g'nSb`kPl=\Q]{$6[<`efno7mTAt>m{T2no8lq\v@tZ}Xi$+^Qlb]u9Jq5:tg,xFv]O?$i;XQe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:30 UTC	609	OUT	GET /images-ez/index_02.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/partner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:30 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:25 GMT Accept-Ranges: bytes ETag: "e0fc297f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:30 GMT Connection: close Content-Length: 4575
2024-04-19 05:31:30 UTC	4575	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 65 00 b5 03 01 11 00 02 11 01 03 11 01 ff c4 00 95 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 01 02 03 08 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobede

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:30 UTC	609	OUT	GET /images-ez/index_05.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/partner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:30 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:25 GMT Accept-Ranges: bytes ETag: "5071597f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:30 GMT Connection: close Content-Length: 4096
2024-04-19 05:31:30 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 65 00 78 03 01 11 00 02 11 01 03 11 01 ff c4 00 9a 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 04 05 02 03 06 01 07 08 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobedex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49748	13.32.66.19	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:30 UTC	615	OUT	GET /seals/privacy/12081-mini.gif HTTP/1.1 Host: dw26xg4lubooo.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:30 UTC	913	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 3207 Connection: close Date: Fri, 19 Apr 2024 05:31:30 GMT Last-Modified: Fri, 19 Apr 2024 05:16:21 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400, must-revalidate CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zJF8BwxfS3QU3PUxtqf4UOXu2eDi7Xz6N9otgv16pytmkUB%2BZ38SkMfI1iHogxBk9du0J0X8D0lNv%2FTr5pK8Oo8korFRGLluAp%2F%2FhdopdmypGsi9fEx2e2kvzpee%2BwspwdNyuX9Kw1jQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a823cfb8957f6-IAD X-Cache: Miss from cloudfront Via: 1.1 87e5d43e28f1a6046ce66c5b05b64378.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C4 X-Amz-Cf-Id: 62aMBQzgIZz2n6sXcMeGhnNR056NDfE8cLYWG-MyubTK7oqf13FcsQ==
2024-04-19 05:31:30 UTC	3207	IN	Data Raw: 47 49 46 38 39 61 64 00 28 00 f6 7f 00 ff ff ff a0 a0 a0 ff fe fe ff ff 81 66 ab 72 32 80 3f 28 6d 33 46 78 42 1d 58 26 1b 52 23 37 88 44 34 84 41 82 db 76 11 23 0d 1f 5d 29 31 7c 3d 2a 71 36 22 62 2c 69 7c 6e 2e 78 3a 0e 27 0d 15 43 1a 18 48 1e 2d 75 38 42 9c 51 33 5b 38 75 d5 6a 12 39 16 1a 4d 21 38 8b 46 75 cf 6f 24 66 2f 0f 2e 11 53 ae 5d 75 d4 6c 1f 54 27 c4 ca c7 6e c4 64 14 29 10 1b 35 27 38 67 3b 3e 96 4c 5a 9c 53 0f 1c 09 56 92 4d 44 a1 53 57 60 60 14 3d 18 3c 92 4a 26 6a 31 13 31 13 23 5b 2d 0f 34 14 3b 8f 48 75 d1 6e e1 e6 e1 40 99 4e fd fd fd 67 b8 5c f0 f1 f0 84 d5 7f 22 2c 1b df e2 df 6d 8d 70 f6 f7 f6 e3 f4 7c ea f4 ec 17 4b 1f 89 ab 8e 74 a3 52 69 b3 75 14 35 15 d2 dc d5 a2 b6 a5 8e ba 8d ba c3 bb 80 95 83 cc cf d1 6f ba 7b 8a d5 86 18 3e Data Ascii: GIF89ad(fr2?(m3FxBX&R#7D4Av#])1\|=*q6"b,i\|n.x:'CH-u8BQ3[8uj9M!8Fuo$f/.S]ulT'nd)5'8g;>LZSVMDSW``=<J&j11#[-4;Hun@Ng\",mp\|KtRiu5o{>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49749	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:30 UTC	611	OUT	GET /images-ez/bg.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/styles-ez.css?reload Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:31 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:23 GMT Accept-Ranges: bytes ETag: "904a417e2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:30 GMT Connection: close Content-Length: 1319
2024-04-19 05:31:31 UTC	1319	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 02 43 00 00 02 ee 00 00 04 18 00 00 05 25 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 01 3c 00 0a 03 01 11 00 02 11 01 03 11 01 ff c4 00 a6 00 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 04 Data Ascii: JFIFddDuckyF&AdobedC%<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49750	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:31 UTC	617	OUT	GET /images-ez/table-bg.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/styles-ez.css?reload Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:31 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:26 GMT Accept-Ranges: bytes ETag: "f0b820802aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:30 GMT Connection: close Content-Length: 1127
2024-04-19 05:31:31 UTC	1127	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 02 cb 00 00 03 1d 00 00 04 07 00 00 04 65 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 1e 03 0c 03 01 11 00 02 11 01 03 11 01 ff c4 00 97 00 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 05 Data Ascii: JFIFddDuckyF&Adobede

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49751	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:31 UTC	615	OUT	GET /images-ez/button-no-free.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/partner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:31 UTC	324	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:23 GMT Accept-Ranges: bytes ETag: "d0d7a7e2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:30 GMT Connection: close Content-Length: 4883
2024-04-19 05:31:31 UTC	4883	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 35 00 ed 03 01 11 00 02 11 01 03 11 01 ff c4 00 af 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 06 02 03 04 05 07 01 08 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49752	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:31 UTC	609	OUT	GET /images-ez/index_04.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/partner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:31 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:25 GMT Accept-Ranges: bytes ETag: "805e467f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:30 GMT Connection: close Content-Length: 1543
2024-04-19 05:31:31 UTC	1543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 1d 00 bc 03 01 11 00 02 11 01 03 11 01 ff c4 00 87 00 01 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 05 06 03 04 01 07 08 02 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49753	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:31 UTC	609	OUT	GET /images-ez/index_07.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/partner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:31 UTC	323	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:25 GMT Accept-Ranges: bytes ETag: "0fa757f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:30 GMT Connection: close Content-Length: 389
2024-04-19 05:31:31 UTC	389	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 13 00 ed 03 01 11 00 02 11 01 03 11 01 ff c4 00 51 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 08 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 10 01 01 01 Data Ascii: JFIFddDucky<AdobedQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49754	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:31 UTC	609	OUT	GET /images-ez/nav-user.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/partner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:31 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:26 GMT Accept-Ranges: bytes ETag: "c0b2cf7f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:30 GMT Connection: close Content-Length: 3550
2024-04-19 05:31:31 UTC	3550	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 04 2d 00 00 07 4e 00 00 0a 51 00 00 0d dc ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 23 00 d0 03 01 11 00 02 11 01 03 11 01 ff c4 00 dd 00 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 04 Data Ascii: JFIFddDuckyF&Adobed-NQ#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49756	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:31 UTC	360	OUT	GET /images-ez/secured.gif HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:31 UTC	324	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Thu, 21 Sep 2023 01:25:26 GMT Accept-Ranges: bytes ETag: "70acee7f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:31 GMT Connection: close Content-Length: 7430
2024-04-19 05:31:31 UTC	7430	IN	Data Raw: 47 49 46 38 39 61 8b 00 93 00 f7 00 00 00 00 80 b4 01 01 ff ff ff 35 4d 7b 3c 51 7a f2 d3 d3 37 43 5a f6 e1 e1 60 60 b0 2b 2b 31 c2 32 32 bb 1a 1a 30 30 98 28 41 72 2b 34 48 1c 1d 22 47 5c 84 00 1e 59 76 7c 92 05 1d 4e 1a 34 64 1c 27 3d 76 74 8b eb bd bd 69 57 69 59 59 64 7c 86 9a ac ac d6 47 54 68 17 27 48 2c 41 6b 75 6c 84 4b 35 48 da 83 83 34 3a 4b 40 40 a0 7f 7f bf 80 89 9c d6 76 76 cf cf e7 08 20 52 62 73 95 60 6e 86 bf bf df 52 63 84 3b 4c 6d 5a 6b 8a 24 3d 6e 71 64 7b 74 83 9c 14 2c 5c 6d 7a 93 64 69 7a c7 42 42 05 1e 50 55 55 60 82 8c a1 32 3f 56 4f 4f 59 61 70 89 be 22 22 2b 44 75 e6 ab ab 9e 9e ce ce 58 58 7b 82 95 41 53 74 de de ef 19 30 5f 7a 8a a3 36 36 3d 00 1a 4d 00 0e 2a 00 15 3e 00 17 46 00 1d 56 00 12 35 2c 3b 51 00 1b 52 5d 69 7c 35 4a Data Ascii: GIF89a5M{<Qz7CZ``++12200(Ar+4H"G\Yv\|N4d'=vtiWiYYd\|GTh'H,AkulK5H4:K@@vv Rbs`nRc;LmZk$=nqd{t,\mzdizBBPUU`2?VOOYap""+DuXX{ASt0_z66=M*>FV5,;QR]i\|5J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49757	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:31 UTC	361	OUT	GET /images-ez/index_05.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:31 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:25 GMT Accept-Ranges: bytes ETag: "5071597f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:31 GMT Connection: close Content-Length: 4096
2024-04-19 05:31:31 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 65 00 78 03 01 11 00 02 11 01 03 11 01 ff c4 00 9a 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 04 05 02 03 06 01 07 08 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobedex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49755	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:31 UTC	361	OUT	GET /images-ez/index_02.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:31 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:25 GMT Accept-Ranges: bytes ETag: "e0fc297f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:31 GMT Connection: close Content-Length: 4575
2024-04-19 05:31:31 UTC	4575	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 65 00 b5 03 01 11 00 02 11 01 03 11 01 ff c4 00 95 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 01 02 03 08 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobede

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49758	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:31 UTC	611	OUT	GET /images-ez/efile-logo.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/partner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:31 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:24 GMT Accept-Ranges: bytes ETag: "70f7a97e2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:31 GMT Connection: close Content-Length: 2375
2024-04-19 05:31:31 UTC	2375	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 03 44 00 00 04 b7 00 00 06 a8 00 00 09 45 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 1f 00 61 03 01 11 00 02 11 01 03 11 01 ff c4 00 d0 00 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 04 Data Ascii: JFIFddDuckyF&AdobedDEa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49759	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:31 UTC	613	OUT	GET /images-ez/nav-previous.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/partner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:31 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:25 GMT Accept-Ranges: bytes ETag: "902da87f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:31 GMT Connection: close Content-Length: 3517
2024-04-19 05:31:31 UTC	3517	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 04 00 00 00 06 ea 00 00 09 d0 00 00 0d bb ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 22 00 d0 03 01 11 00 02 11 01 03 11 01 ff c4 00 d8 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 Data Ascii: JFIFddDuckyF&Adobed"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49761	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:31 UTC	612	OUT	GET /images-ez/nav-privacy.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/partner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:32 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:26 GMT Accept-Ranges: bytes ETag: "2068c47f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:31 GMT Connection: close Content-Length: 3080
2024-04-19 05:31:32 UTC	3080	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 03 cb 00 00 06 5b 00 00 08 d2 00 00 0c 06 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 22 00 d0 03 01 11 00 02 11 01 03 11 01 ff c4 00 dd 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 Data Ascii: JFIFddDuckyF&Adobed["

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49760	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:31 UTC	611	OUT	GET /images-ez/block-tops.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/partner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:32 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:23 GMT Accept-Ranges: bytes ETag: "105e5d7e2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:31 GMT Connection: close Content-Length: 8693
2024-04-19 05:31:32 UTC	8693	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 08 0b 00 00 10 b7 00 00 18 37 00 00 21 f3 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 28 02 0c 03 01 11 00 02 11 01 03 11 01 ff c4 00 f4 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 Data Ascii: JFIFddDuckyF&Adobed7!(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49762	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:31 UTC	612	OUT	GET /images-ez/nav-pricing.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/partner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:32 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:25 GMT Accept-Ranges: bytes ETag: "607cb17f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:31 GMT Connection: close Content-Length: 3823
2024-04-19 05:31:32 UTC	3823	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 04 47 00 00 07 a9 00 00 0a d3 00 00 0e ed ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 22 00 d0 03 01 11 00 02 11 01 03 11 01 ff c4 00 e0 00 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 03 Data Ascii: JFIFddDuckyF&AdobedG"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49763	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:31 UTC	612	OUT	GET /images-ez/nav-federal.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/partner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:32 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:25 GMT Accept-Ranges: bytes ETag: "f0967f7f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:31 GMT Connection: close Content-Length: 3634
2024-04-19 05:31:32 UTC	3634	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 04 0f 00 00 07 14 00 00 0a 1a 00 00 0e 30 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 22 00 d0 03 01 11 00 02 11 01 03 11 01 ff c4 00 d6 00 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 Data Ascii: JFIFddDuckyF&Adobed0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49764	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:32 UTC	611	OUT	GET /images-ez/nav-online.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/partner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:32 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:25 GMT Accept-Ranges: bytes ETag: "c01a957f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:31 GMT Connection: close Content-Length: 3099
2024-04-19 05:31:32 UTC	3099	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 04 01 00 00 06 7b 00 00 08 e7 00 00 0c 19 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 22 00 da 03 01 11 00 02 11 01 03 11 01 ff c4 00 d9 00 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 03 Data Ascii: JFIFddDuckyF&Adobed{"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49765	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:32 UTC	609	OUT	GET /images-ez/index_03.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/partner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:32 UTC	324	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:25 GMT Accept-Ranges: bytes ETag: "b04b337f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:31 GMT Connection: close Content-Length: 864
2024-04-19 05:31:32 UTC	864	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 1d 00 31 03 01 11 00 02 11 01 03 11 01 ff c4 00 85 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 07 02 03 05 06 01 04 08 00 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49766	23.201.212.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:32 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 05:31:32 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=178307 Date: Fri, 19 Apr 2024 05:31:32 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49767	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:32 UTC	361	OUT	GET /images-ez/top-left.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:33 UTC	326	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:27 GMT Accept-Ranges: bytes ETag: "208a65802aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:32 GMT Connection: close Content-Length: 33759
2024-04-19 05:31:33 UTC	16058	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 41 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 1d 89 00 00 35 3b 00 00 56 30 00 00 83 dd ff db 00 84 00 05 04 04 04 04 04 05 04 04 05 07 05 04 05 07 09 06 05 05 06 09 0a 08 08 09 08 08 0a 0d 0a 0b 0b 0b 0b 0a 0d 0c 0c 0c 0d 0c 0c 0c 0f 0f 11 11 0f 0f 17 16 16 16 17 19 19 19 19 19 19 19 19 19 19 01 06 06 06 0a 09 0a 13 0d 0d 13 16 11 0e 11 16 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 ff c2 00 11 08 00 93 02 82 03 01 11 00 02 11 01 03 11 01 ff c4 00 ff 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 00 Data Ascii: JFIFddDuckyA&Adobed5;V0
2024-04-19 05:31:33 UTC	16384	IN	Data Raw: dc b8 22 0a 31 cb 76 fe d1 b6 5c dc 54 51 4e 71 b9 4e 74 33 98 57 58 d1 58 e2 2d d8 37 3f 77 fb 7a ca 73 df f3 6b d9 e2 99 8c b8 62 c5 f8 3e 61 44 6f b5 96 b3 a2 c8 3b 2f ac 3a b4 02 da 60 09 98 91 80 2e 47 ab b8 a3 a4 13 0b 60 eb 71 96 bb 1b 24 f3 8e 41 80 1c 8f a1 cd 05 ae 30 c6 fa 41 ea c5 e6 84 b0 e4 53 8b 0e c0 e2 e5 79 a0 fe 66 59 6f a0 81 38 c0 16 db 30 d6 5a 4a ac 00 49 a3 22 af 11 6e 2a 5d 38 9d 69 73 0d 58 48 a2 16 d0 0a 90 44 8c a9 74 29 ea 4d 52 18 15 b5 b5 46 71 1a 49 a9 10 bc de af 26 7a 19 84 78 eb ef 97 3c b1 88 5e b2 17 36 f7 7d 02 c3 02 25 70 3f 63 56 ee 0b ca 91 ad 1b 39 3d a2 c7 18 68 0e 5a f5 8c e7 31 51 3e ad 30 d0 d6 ac 5e 41 2f dd c3 08 01 ac 66 51 15 d5 7c 97 44 54 39 89 dc 17 96 17 85 ee 6a c8 04 f5 9a 05 c4 9c 37 2b 61 f6 38 a2 Data Ascii: "1v\TQNqNt3WXX-7?wzskb>aDo;/:`.G`q$A0ASyfYo80ZJI"n*]8isXHDt)MRFqI&zx<^6}%p?cV9=hZ1Q>0^A/fQ\|DT9j7+a8
2024-04-19 05:31:33 UTC	1317	IN	Data Raw: 9d a9 cb 9f a9 da fb 27 98 9f dc f2 93 fb 9e 42 7f 73 ca 4f ee 79 4f f6 9e 6b fd a7 9e ff 00 69 e5 bf da 79 3f d9 3c ff 00 ec 9e 5f f6 4f 3f fb 3c 00 41 01 cf f3 3d 67 97 fd 93 cb fe c9 e5 ff 00 64 f2 ff 00 b2 79 7f d9 3c bf ec 9e 7f f6 4f 2f fb 27 97 fd 93 cf fe c9 e7 ff 00 64 f3 ff 00 b2 1e 79 fc c3 cf 3f 98 1f fb fe d3 cf 7f b4 f2 df ed 1f fb ff 00 b4 47 fb fe d1 f3 cf e7 80 04 a3 77 e1 e5 16 18 a8 e9 0d c6 ef 02 e5 d9 f0 ad 44 72 8c f0 e5 9c 6f c0 5e 8f c2 68 84 21 08 c2 10 87 10 84 22 93 75 97 fe 88 77 94 5d 31 9e 7e 90 98 bd ac 9a 37 4c 00 79 96 ad 1b a6 12 c5 4d 9e 6c 5e 5c a5 a4 64 59 01 0d a4 dd 87 0c bb 72 27 68 5c e4 df 42 f9 7a c7 c8 10 53 23 79 76 8e 4b 57 59 ad 5f 3f b9 48 8d 97 ad 39 7a 60 95 58 96 0d 16 27 ab ca 08 82 c1 7a 77 1c c5 f3 62 Data Ascii: 'BsOyOkiy?<_O?<A=gdy<O/'dy?GwDro^h!"uw]1~7LyMl^\dYr'h\BzS#yvKWY_?H9z`X'zwb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49768	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:32 UTC	361	OUT	GET /images-ez/index_01.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:33 UTC	326	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:24 GMT Accept-Ranges: bytes ETag: "c0daf87e2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:32 GMT Connection: close Content-Length: 41492
2024-04-19 05:31:33 UTC	16058	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 09 0d 0b 09 0b 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 6b 02 1a 03 01 11 00 02 11 01 03 11 01 ff c4 00 c6 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 00 05 06 07 08 01 04 09 02 03 0a 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDuckyPAdobedk
2024-04-19 05:31:33 UTC	16384	IN	Data Raw: dd 77 46 f2 1d e1 7b eb 4e 8b 27 ba 49 89 dc 93 64 58 97 b6 1d 95 c6 f1 f9 52 39 c4 8e 31 b9 1e c9 b4 7b f5 14 db 21 ee 4e 57 0d db 07 f8 53 0a 7c 8a 2a 18 d5 12 d4 a1 b8 07 4f 8b 3c ba 46 b1 cc 2d dc 3c a5 45 ff 00 75 54 cf f6 9c 70 e1 cb 91 06 4b 65 30 b8 09 1a 1a e6 ed 52 96 27 ea bf 70 1a de d4 dc ef da 51 64 b0 fc 35 bd 1d 26 e9 49 9b 92 e7 8f 45 2b 0e 34 ce 41 f5 d0 c9 31 30 3c 8c 48 1a 90 ea 01 44 aa 15 43 8d 29 e9 02 f1 31 8a 53 33 96 77 f2 80 06 e4 8b 75 77 68 ab 3f fb 7b 10 39 ee 91 cd 1b 59 1b bc ee 4d b1 3b f2 bc ee 41 d0 81 e3 d8 09 a8 97 b3 09 dc 75 6c 4a ce 4f c3 ce 21 65 5a 99 b2 6c 21 b1 5e 16 45 ec 84 ca ec 1d 43 20 26 7a 77 cb 2a 45 3a 0b aa 53 82 82 07 10 2e d1 28 6f 30 6c d5 7e 31 f1 b0 92 0a 07 94 6b 6e 51 35 5e fa d9 f7 c6 3e 5e 43 Data Ascii: wF{N'IdXR91{!NWS\|O<F-<EuTpKe0R'pQd5&IE+4A10<HDC)1S3wuwh?{9YM;AulJO!eZl!^EC &zwE:S.(o0l~1knQ5^>^C
2024-04-19 05:31:33 UTC	9050	IN	Data Raw: 15 bd 6e c5 b3 1c 93 89 cb 42 e8 85 61 ee 62 45 aa e8 89 95 05 5c 81 83 f1 48 01 e9 44 80 75 0e 6f 4e d0 1a 6e 64 ad 91 9e b3 03 1c 77 15 04 0b 7e 9d d5 67 8f 97 0f 27 fa 6e 53 b2 62 60 81 a1 af 6b 9c 8f 50 6c 8d ec 3d 5c 51 a0 5d 7b 24 98 ac 36 5b bb 3c 60 65 af fc 66 b4 fd a3 6e e0 98 f6 6f 8d 37 14 a2 f1 6d a6 91 54 c4 f6 ae 41 74 c5 0e b9 08 a1 87 a4 a7 a8 3e 6d b5 00 10 9d b8 db e7 8f 7b 54 08 c6 a2 cb fb eb 32 6e 6f ed b8 cc b1 8d 38 6c 8f cb 71 1b 5c 03 cb 08 fa 9a 87 76 d2 40 f3 0b 74 5a ac 7d d1 58 99 8e f6 bd f2 cb 06 98 69 f2 24 2b e2 9a d6 5e d9 c7 51 8f d1 96 8d 6c 62 18 8e dc 5d 75 f7 e9 b9 39 09 c5 14 4a 71 35 3a 74 02 88 86 a8 67 c5 2c 8f 78 0c f0 46 02 a3 b7 76 ab dd 5d 4f b4 f9 0e 3f 13 1b 1d c7 24 69 e6 df 3b da 58 e2 be 51 07 fa 65 ab Data Ascii: nBabE\HDuoNndw~g'nSb`kPl=\Q]{$6[<`efno7mTAt>m{T2no8lq\v@tZ}Xi$+^Qlb]u9Jq5:tg,xFv]O?$i;XQe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49770	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:32 UTC	355	OUT	GET /images-ez/bg.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:33 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:23 GMT Accept-Ranges: bytes ETag: "904a417e2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:32 GMT Connection: close Content-Length: 1319
2024-04-19 05:31:33 UTC	1319	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 02 43 00 00 02 ee 00 00 04 18 00 00 05 25 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 01 3c 00 0a 03 01 11 00 02 11 01 03 11 01 ff c4 00 a6 00 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 04 Data Ascii: JFIFddDuckyF&AdobedC%<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49769	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:32 UTC	361	OUT	GET /images-ez/table-bg.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:33 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:26 GMT Accept-Ranges: bytes ETag: "f0b820802aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:32 GMT Connection: close Content-Length: 1127
2024-04-19 05:31:33 UTC	1127	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 02 cb 00 00 03 1d 00 00 04 07 00 00 04 65 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 1e 03 0c 03 01 11 00 02 11 01 03 11 01 ff c4 00 97 00 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 05 Data Ascii: JFIFddDuckyF&Adobede

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49771	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:32 UTC	367	OUT	GET /images-ez/button-no-free.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:33 UTC	324	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:23 GMT Accept-Ranges: bytes ETag: "d0d7a7e2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:32 GMT Connection: close Content-Length: 4883
2024-04-19 05:31:33 UTC	4883	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 35 00 ed 03 01 11 00 02 11 01 03 11 01 ff c4 00 af 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 06 02 03 04 05 07 01 08 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49772	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:32 UTC	361	OUT	GET /images-ez/index_04.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:33 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:25 GMT Accept-Ranges: bytes ETag: "805e467f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:32 GMT Connection: close Content-Length: 1543
2024-04-19 05:31:33 UTC	1543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 1d 00 bc 03 01 11 00 02 11 01 03 11 01 ff c4 00 87 00 01 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 05 06 03 04 01 07 08 02 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49774	13.32.66.84	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:32 UTC	380	OUT	GET /seals/privacy/12081-mini.gif HTTP/1.1 Host: dw26xg4lubooo.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:32 UTC	920	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 3207 Connection: close Date: Fri, 19 Apr 2024 05:31:30 GMT Last-Modified: Fri, 19 Apr 2024 05:16:21 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400, must-revalidate CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zJF8BwxfS3QU3PUxtqf4UOXu2eDi7Xz6N9otgv16pytmkUB%2BZ38SkMfI1iHogxBk9du0J0X8D0lNv%2FTr5pK8Oo8korFRGLluAp%2F%2FhdopdmypGsi9fEx2e2kvzpee%2BwspwdNyuX9Kw1jQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a823cfb8957f6-IAD X-Cache: Hit from cloudfront Via: 1.1 fd0cf2b8b84e6c50b25564d26b91e5e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C4 X-Amz-Cf-Id: Usk082jM8cFGMLuBoGNNoDKZJiefe1c7X9Lek-PybMOqytqej3ANwA== Age: 2
2024-04-19 05:31:32 UTC	3207	IN	Data Raw: 47 49 46 38 39 61 64 00 28 00 f6 7f 00 ff ff ff a0 a0 a0 ff fe fe ff ff 81 66 ab 72 32 80 3f 28 6d 33 46 78 42 1d 58 26 1b 52 23 37 88 44 34 84 41 82 db 76 11 23 0d 1f 5d 29 31 7c 3d 2a 71 36 22 62 2c 69 7c 6e 2e 78 3a 0e 27 0d 15 43 1a 18 48 1e 2d 75 38 42 9c 51 33 5b 38 75 d5 6a 12 39 16 1a 4d 21 38 8b 46 75 cf 6f 24 66 2f 0f 2e 11 53 ae 5d 75 d4 6c 1f 54 27 c4 ca c7 6e c4 64 14 29 10 1b 35 27 38 67 3b 3e 96 4c 5a 9c 53 0f 1c 09 56 92 4d 44 a1 53 57 60 60 14 3d 18 3c 92 4a 26 6a 31 13 31 13 23 5b 2d 0f 34 14 3b 8f 48 75 d1 6e e1 e6 e1 40 99 4e fd fd fd 67 b8 5c f0 f1 f0 84 d5 7f 22 2c 1b df e2 df 6d 8d 70 f6 f7 f6 e3 f4 7c ea f4 ec 17 4b 1f 89 ab 8e 74 a3 52 69 b3 75 14 35 15 d2 dc d5 a2 b6 a5 8e ba 8d ba c3 bb 80 95 83 cc cf d1 6f ba 7b 8a d5 86 18 3e Data Ascii: GIF89ad(fr2?(m3FxBX&R#7D4Av#])1\|=*q6"b,i\|n.x:'CH-u8BQ3[8uj9M!8Fuo$f/.S]ulT'nd)5'8g;>LZSVMDSW``=<J&j11#[-4;Hun@Ng\",mp\|KtRiu5o{>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49773	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:32 UTC	598	OUT	GET /favicon.ico HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/partner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:33 UTC	327	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Last-Modified: Thu, 21 Sep 2023 01:24:32 GMT Accept-Ranges: bytes ETag: "f096c25f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:32 GMT Connection: close Content-Length: 1150
2024-04-19 05:31:33 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 96 23 00 00 96 23 00 01 96 23 00 0d 96 23 00 1f 96 23 00 20 96 23 00 0f 96 23 00 01 96 23 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 96 23 00 00 96 23 00 01 96 23 00 29 96 23 00 82 96 23 00 c1 96 23 00 da 96 23 00 db 96 23 00 c5 96 23 00 8a 96 23 00 31 96 23 00 02 96 23 00 00 00 00 00 00 00 00 00 00 00 00 00 00 96 23 00 00 96 23 00 04 96 23 00 5f 96 23 00 de 96 23 00 ff 96 23 00 ff 96 23 00 ff 96 23 00 ff 96 23 00 ff 96 23 00 ff 96 23 00 e5 96 23 00 6e 96 23 00 07 96 23 00 00 00 00 00 00 96 Data Ascii: h( ##### ######)#######1#####_#########n##

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49778	23.201.212.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:32 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 05:31:32 UTC	531	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=178216 Date: Fri, 19 Apr 2024 05:31:32 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-19 05:31:32 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49779	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:33 UTC	361	OUT	GET /images-ez/index_07.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:33 UTC	323	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:25 GMT Accept-Ranges: bytes ETag: "0fa757f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:33 GMT Connection: close Content-Length: 389
2024-04-19 05:31:33 UTC	389	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 13 00 ed 03 01 11 00 02 11 01 03 11 01 ff c4 00 51 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 08 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 10 01 01 01 Data Ascii: JFIFddDucky<AdobedQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49780	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:33 UTC	361	OUT	GET /images-ez/nav-user.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:33 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:26 GMT Accept-Ranges: bytes ETag: "c0b2cf7f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:33 GMT Connection: close Content-Length: 3550
2024-04-19 05:31:33 UTC	3550	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 04 2d 00 00 07 4e 00 00 0a 51 00 00 0d dc ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 23 00 d0 03 01 11 00 02 11 01 03 11 01 ff c4 00 dd 00 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 04 Data Ascii: JFIFddDuckyF&Adobed-NQ#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49781	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:33 UTC	363	OUT	GET /images-ez/efile-logo.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:33 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:24 GMT Accept-Ranges: bytes ETag: "70f7a97e2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:33 GMT Connection: close Content-Length: 2375
2024-04-19 05:31:33 UTC	2375	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 03 44 00 00 04 b7 00 00 06 a8 00 00 09 45 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 1f 00 61 03 01 11 00 02 11 01 03 11 01 ff c4 00 d0 00 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 04 Data Ascii: JFIFddDuckyF&AdobedDEa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49783	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:33 UTC	365	OUT	GET /images-ez/nav-previous.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:33 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:25 GMT Accept-Ranges: bytes ETag: "902da87f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:33 GMT Connection: close Content-Length: 3517
2024-04-19 05:31:33 UTC	3517	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 04 00 00 00 06 ea 00 00 09 d0 00 00 0d bb ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 22 00 d0 03 01 11 00 02 11 01 03 11 01 ff c4 00 d8 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 Data Ascii: JFIFddDuckyF&Adobed"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49782	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:33 UTC	363	OUT	GET /images-ez/block-tops.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:33 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:23 GMT Accept-Ranges: bytes ETag: "105e5d7e2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:33 GMT Connection: close Content-Length: 8693
2024-04-19 05:31:33 UTC	8693	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 08 0b 00 00 10 b7 00 00 18 37 00 00 21 f3 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 28 02 0c 03 01 11 00 02 11 01 03 11 01 ff c4 00 f4 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 Data Ascii: JFIFddDuckyF&Adobed7!(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49784	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:33 UTC	364	OUT	GET /images-ez/nav-privacy.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:33 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:26 GMT Accept-Ranges: bytes ETag: "2068c47f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:33 GMT Connection: close Content-Length: 3080
2024-04-19 05:31:33 UTC	3080	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 03 cb 00 00 06 5b 00 00 08 d2 00 00 0c 06 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 22 00 d0 03 01 11 00 02 11 01 03 11 01 ff c4 00 dd 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 Data Ascii: JFIFddDuckyF&Adobed["

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49785	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:33 UTC	364	OUT	GET /images-ez/nav-federal.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:34 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:25 GMT Accept-Ranges: bytes ETag: "f0967f7f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:33 GMT Connection: close Content-Length: 3634
2024-04-19 05:31:34 UTC	3634	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 04 0f 00 00 07 14 00 00 0a 1a 00 00 0e 30 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 22 00 d0 03 01 11 00 02 11 01 03 11 01 ff c4 00 d6 00 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 Data Ascii: JFIFddDuckyF&Adobed0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49786	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:33 UTC	364	OUT	GET /images-ez/nav-pricing.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:34 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:25 GMT Accept-Ranges: bytes ETag: "607cb17f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:33 GMT Connection: close Content-Length: 3823
2024-04-19 05:31:34 UTC	3823	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 04 47 00 00 07 a9 00 00 0a d3 00 00 0e ed ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 22 00 d0 03 01 11 00 02 11 01 03 11 01 ff c4 00 e0 00 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 03 Data Ascii: JFIFddDuckyF&AdobedG"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49789	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:34 UTC	363	OUT	GET /images-ez/nav-online.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:34 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:25 GMT Accept-Ranges: bytes ETag: "c01a957f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:33 GMT Connection: close Content-Length: 3099
2024-04-19 05:31:34 UTC	3099	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 04 01 00 00 06 7b 00 00 08 e7 00 00 0c 19 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 22 00 da 03 01 11 00 02 11 01 03 11 01 ff c4 00 d9 00 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 03 Data Ascii: JFIFddDuckyF&Adobed{"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49787	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:34 UTC	361	OUT	GET /images-ez/index_03.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:34 UTC	324	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:25 GMT Accept-Ranges: bytes ETag: "b04b337f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:33 GMT Connection: close Content-Length: 864
2024-04-19 05:31:34 UTC	864	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 1d 00 31 03 01 11 00 02 11 01 03 11 01 ff c4 00 85 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 07 02 03 05 06 01 04 08 00 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49788	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:34 UTC	350	OUT	GET /favicon.ico HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:34 UTC	327	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Last-Modified: Thu, 21 Sep 2023 01:24:32 GMT Accept-Ranges: bytes ETag: "f096c25f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:33 GMT Connection: close Content-Length: 1150
2024-04-19 05:31:34 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 96 23 00 00 96 23 00 01 96 23 00 0d 96 23 00 1f 96 23 00 20 96 23 00 0f 96 23 00 01 96 23 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 96 23 00 00 96 23 00 01 96 23 00 29 96 23 00 82 96 23 00 c1 96 23 00 da 96 23 00 db 96 23 00 c5 96 23 00 8a 96 23 00 31 96 23 00 02 96 23 00 00 00 00 00 00 00 00 00 00 00 00 00 00 96 23 00 00 96 23 00 04 96 23 00 5f 96 23 00 de 96 23 00 ff 96 23 00 ff 96 23 00 ff 96 23 00 ff 96 23 00 ff 96 23 00 ff 96 23 00 e5 96 23 00 6e 96 23 00 07 96 23 00 00 00 00 00 00 96 Data Ascii: h( ##### ######)#######1#####_#########n##

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49794	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:41 UTC	655	OUT	GET /index.aspx?code=2 HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:41 UTC	439	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://www.1040now.net/main.aspx?code=2 Set-Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; path=/; HttpOnly; SameSite=Lax X-AspNet-Version: 4.0.30319 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:41 GMT Connection: close Content-Length: 157
2024-04-19 05:31:41 UTC	157	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 31 30 34 30 6e 6f 77 2e 6e 65 74 2f 6d 61 69 6e 2e 61 73 70 78 3f 63 6f 64 65 3d 32 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://www.1040now.net/main.aspx?code=2">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49793	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:41 UTC	706	OUT	GET /main.aspx?code=2 HTTP/1.1 Host: www.1040now.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix
2024-04-19 05:31:41 UTC	344	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 X-AspNet-Version: 4.0.30319 Set-Cookie: paper1065gd=81.181.57.52; path=/ X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:41 GMT Connection: close Content-Length: 14110
2024-04-19 05:31:41 UTC	14110	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 3e 0d 0a 3c 68 74 6d 6c 20 78 73 6c 3a 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 78 6d 6c 6e 73 3a 78 73 6c 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 58 53 4c 2f 54 72 61 6e 73 66 6f 72 6d 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 73 74 72 69 63 74 22 20 78 6d 6c 6e 73 3a 6d 73 78 6d 6c 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 78 73 6c 74 22 20 78 6d 6c 6e 73 3a 61 73 70 3d 22 52 65 6d 6f 76 65 22 3e 0d 0a 3c 68 65 61 64 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" ><html xsl:version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns="http://www.w3.org/TR/xhtml1/strict" xmlns:msxml="urn:schemas-microsoft-com:xslt" xmlns:asp="Remove"><head>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49798	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:42 UTC	631	OUT	GET /1040.css HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.1040now.net/main.aspx?code=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:42 UTC	323	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Thu, 21 Sep 2023 01:24:25 GMT Accept-Ranges: bytes ETag: "50dae15b2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:41 GMT Connection: close Content-Length: 2271
2024-04-19 05:31:42 UTC	2271	IN	Data Raw: 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0d 0a 2e 6d 65 6e 75 41 63 74 75 61 74 6f 72 20 61 20 7b 20 0d 0a 09 09 09 63 6f 6c 6f 72 3a 23 36 36 36 36 36 36 3b 0d 0a 09 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 0d 0a 09 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 3b 0d 0a 09 09 7d 0d 0a 2f 2a 0d 0a 09 09 2e 6d 65 6e 75 20 7b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 65 72 64 61 6e 61 3b 0d 0a 09 09 09 63 6f 6c 6f 72 3a 23 36 36 36 36 36 36 3b 0d 0a 09 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 3b 0d 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 20 0d 0a 09 09 09 6c 61 79 65 72 2d 62 61 63 6b 67 72 Data Ascii: /* CSS Document /.menuActuator a { color:#666666;font-weight:bold;font-size:12px;font-family:arial;}/.menu {font-family:verdana;color:#666666;font-size:10px;background-color: #ffffff; layer-backgr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49800	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:42 UTC	631	OUT	GET /main.css HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.1040now.net/main.aspx?code=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:42 UTC	236	IN	HTTP/1.1 404 Not Found Content-Type: text/html X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:41 GMT Connection: close Content-Length: 1245
2024-04-19 05:31:42 UTC	1245	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - Fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49802	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:42 UTC	634	OUT	GET /menutax.css HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.1040now.net/main.aspx?code=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:42 UTC	324	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Thu, 21 Sep 2023 01:24:44 GMT Accept-Ranges: bytes ETag: "c03dbd662aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:41 GMT Connection: close Content-Length: 11157
2024-04-19 05:31:42 UTC	11157	IN	Data Raw: 2f 2a 20 52 65 73 65 74 73 20 2a 2f 0d 0a 2f 2a 0d 0a 2a 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 7d 2a 2f 0d 0a 2f 2a 0d 0a 62 6f 64 79 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 55 62 75 6e 74 75 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 64 64 64 3b 0d 0a 7d 0d 0a 0d 0a 61 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 20 7d 0d 0a 2a 2f 0d 0a 64 69 76 2e 73 63 72 6f 6c 6c 6d 65 6e 75 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 35 46 35 46 35 3b 0d 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 Data Ascii: /* Resets //* { margin: 0; padding: 0;}//body { font-family: 'Ubuntu', sans-serif; font-weight: 400; background: #ddd;}a { text-decoration: none; }*/div.scrollmenu { background-color: #F5F5F5; overflow: aut

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49799	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:42 UTC	633	OUT	GET /menuco.css HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.1040now.net/main.aspx?code=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:42 UTC	323	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Thu, 21 Sep 2023 01:24:43 GMT Accept-Ranges: bytes ETag: "40489c662aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:41 GMT Connection: close Content-Length: 1695
2024-04-19 05:31:42 UTC	1695	IN	Data Raw: 2f 2a 0d 0a 68 74 6d 6c 20 7b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 7d 0d 0a 0d 0a 62 6f 64 79 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 7d 2a 2f 0d 0a 20 23 64 61 74 61 2d 73 69 64 65 62 61 72 20 7b 0d 0a 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 7a 2d 69 6e 64 65 78 3a 20 38 38 38 38 3b 0d 0a 20 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 0d 0a 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0d 0a 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 46 30 46 30 46 30 3b 2f 2a 23 46 46 46 30 46 35 3b 2a 2f 0d 0a 7d 0d 0a 20 23 64 Data Ascii: /html { min-height: 100%; }body { margin: 0; min-height: inherit;}/ #data-sidebar { display: none; position: fixed; height: 100%; z-index: 8888; overflow:auto; font-size: 12px; border: 2px solid #F0F0F0;/#FFF0F5;/} #d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49801	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:42 UTC	631	OUT	GET /js/IRS_fingerprint2.js HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.1040now.net/main.aspx?code=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:42 UTC	337	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Tue, 31 Oct 2023 03:24:18 GMT Accept-Ranges: bytes ETag: "b0b6b0bba9bda1:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:41 GMT Connection: close Content-Length: 66228
2024-04-19 05:31:42 UTC	16047	IN	Data Raw: 2f 2a 0d 0a 2a 20 46 69 6e 67 65 72 70 72 69 6e 74 6a 73 32 20 32 2e 31 2e 35 20 2d 20 4d 6f 64 65 72 6e 20 26 20 66 6c 65 78 69 62 6c 65 20 62 72 6f 77 73 65 72 20 66 69 6e 67 65 72 70 72 69 6e 74 20 6c 69 62 72 61 72 79 20 76 32 0d 0a 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 66 69 6e 67 65 72 70 72 69 6e 74 6a 73 2f 66 69 6e 67 65 72 70 72 69 6e 74 6a 73 0d 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 69 6e 67 65 72 70 72 69 6e 74 4a 53 2c 20 49 6e 63 2c 20 32 30 32 30 20 28 68 74 74 70 73 3a 2f 2f 66 69 6e 67 65 72 70 72 69 6e 74 6a 73 2e 63 6f 6d 29 0d 0a 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 Data Ascii: /** Fingerprintjs2 2.1.5 - Modern & flexible browser fingerprint library v2* https://github.com/fingerprintjs/fingerprintjs* Copyright (c) FingerprintJS, Inc, 2020 (https://fingerprintjs.com)* Licensed under the MIT (http://www.opensource.org/lice
2024-04-19 05:31:42 UTC	16384	IN	Data Raw: 7c 7c 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 4c 61 6e 67 75 61 67 65 20 7c 7c 20 6e 61 76 69 67 61 74 6f 72 2e 62 72 6f 77 73 65 72 4c 61 6e 67 75 61 67 65 20 7c 7c 20 6e 61 76 69 67 61 74 6f 72 2e 73 79 73 74 65 6d 4c 61 6e 67 75 61 67 65 20 7c 7c 20 6f 70 74 69 6f 6e 73 2e 4e 4f 54 5f 41 56 41 49 4c 41 42 4c 45 29 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 76 61 72 20 63 6f 6c 6f 72 44 65 70 74 68 4b 65 79 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 64 6f 6e 65 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0d 0a 20 20 20 20 20 20 64 6f 6e 65 28 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 63 6f 6c 6f 72 44 65 70 74 68 20 7c 7c 20 6f 70 74 69 6f 6e 73 2e 4e 4f 54 5f 41 56 41 49 4c 41 42 4c 45 29 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 76 61 72 20 64 65 76 69 63 65 4d 65 Data Ascii: \|\| navigator.userLanguage \|\| navigator.browserLanguage \|\| navigator.systemLanguage \|\| options.NOT_AVAILABLE) } var colorDepthKey = function (done, options) { done(window.screen.colorDepth \|\| options.NOT_AVAILABLE) } var deviceMe
2024-04-19 05:31:42 UTC	16384	IN	Data Raw: 74 20 77 69 64 74 68 20 66 6f 72 20 74 68 65 20 74 68 72 65 65 20 62 61 73 65 20 66 6f 6e 74 73 0d 0a 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 6e 64 65 78 20 3d 20 30 2c 20 6c 65 6e 67 74 68 20 3d 20 62 61 73 65 46 6f 6e 74 73 2e 6c 65 6e 67 74 68 3b 20 69 6e 64 65 78 20 3c 20 6c 65 6e 67 74 68 3b 20 69 6e 64 65 78 2b 2b 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 65 66 61 75 6c 74 57 69 64 74 68 5b 62 61 73 65 46 6f 6e 74 73 5b 69 6e 64 65 78 5d 5d 20 3d 20 62 61 73 65 46 6f 6e 74 73 53 70 61 6e 73 5b 69 6e 64 65 78 5d 2e 6f 66 66 73 65 74 57 69 64 74 68 20 2f 2f 20 77 69 64 74 68 20 66 6f 72 20 74 68 65 20 64 65 66 61 75 6c 74 20 66 6f 6e 74 0d 0a 20 20 20 20 20 20 20 20 64 65 66 61 75 6c 74 48 65 69 67 68 74 5b 62 61 73 65 46 6f 6e 74 73 5b 69 6e Data Ascii: t width for the three base fonts for (var index = 0, length = baseFonts.length; index < length; index++) { defaultWidth[baseFonts[index]] = baseFontsSpans[index].offsetWidth // width for the default font defaultHeight[baseFonts[in
2024-04-19 05:31:42 UTC	16384	IN	Data Raw: 65 79 20 21 3d 3d 20 27 70 72 65 63 69 73 69 6f 6e 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6b 65 79 20 3d 20 27 70 72 65 63 69 73 69 6f 6e 20 27 20 2b 20 6b 65 79 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6c 69 6e 65 20 3d 20 5b 27 77 65 62 67 6c 20 27 2c 20 73 68 61 64 65 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 20 27 20 73 68 61 64 65 72 20 27 2c 20 6e 75 6d 53 69 7a 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 20 27 20 27 2c 20 6e 75 6d 54 79 70 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 20 27 20 27 2c 20 6b 65 79 2c 20 27 3a 27 2c 20 66 6f 72 6d 61 74 5d 2e 6a 6f 69 6e 28 27 27 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ey !== 'precision') { key = 'precision ' + key } var line = ['webgl ', shader.toLowerCase(), ' shader ', numSize.toLowerCase(), ' ', numType.toLowerCase(), ' ', key, ':', format].join('')
2024-04-19 05:31:42 UTC	1029	IN	Data Raw: 72 72 61 79 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 43 6f 6d 70 6f 6e 65 6e 74 73 2e 70 75 73 68 28 7b 20 6b 65 79 3a 20 63 6f 6d 70 6f 6e 65 6e 74 2e 6b 65 79 2c 20 76 61 6c 75 65 3a 20 63 6f 6d 70 6f 6e 65 6e 74 2e 76 61 6c 75 65 2e 6a 6f 69 6e 28 27 7e 27 29 20 7d 29 0d 0a 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 5b 27 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 27 2c 20 27 6c 6f 63 61 6c 53 74 6f 72 61 67 65 27 2c 20 27 69 6e 64 65 78 65 64 44 62 27 2c 20 27 61 64 64 42 65 68 61 76 69 6f 72 27 2c 20 27 6f 70 65 6e 44 61 74 61 62 61 73 65 27 5d 2e 69 6e 64 65 78 4f 66 28 63 6f 6d 70 6f 6e 65 6e 74 2e 6b 65 79 29 20 21 3d 3d 20 2d 31 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 6d 70 6f 6e 65 6e 74 Data Ascii: rray newComponents.push({ key: component.key, value: component.value.join('~') }) } else if (['sessionStorage', 'localStorage', 'indexedDb', 'addBehavior', 'openDatabase'].indexOf(component.key) !== -1) { if (component

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49803	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:42 UTC	619	OUT	GET /js/sha1.js HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.1040now.net/main.aspx?code=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:42 UTC	336	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Tue, 31 Oct 2023 03:24:20 GMT Accept-Ranges: bytes ETag: "10f174bca9bda1:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:41 GMT Connection: close Content-Length: 4613
2024-04-19 05:31:42 UTC	4613	IN	Data Raw: 2f 2a 0d 0a 43 72 79 70 74 6f 4a 53 20 76 33 2e 31 2e 32 0d 0a 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 63 72 79 70 74 6f e2 80 90 6a 73 0d 0a 28 63 29 20 32 30 30 39 e2 80 90 32 30 31 33 20 62 79 20 4a 65 66 66 20 4d 6f 74 74 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 63 72 79 70 74 6f e2 80 90 6a 73 2f 77 69 6b 69 2f 4c 69 63 65 6e 73 65 0d 0a 2a 2f 0d 0a 76 61 72 20 43 72 79 70 74 6f 4a 53 3d 43 72 79 70 74 6f 4a 53 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 6d 29 7b 76 61 72 20 70 3d 7b 7d 2c 6a 3d 70 2e 6c 69 62 3d 7b 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 66 3d 6a 2e 42 61 73 65 3d 7b 0d 0a 20 20 20 20 65 78 74 65 6e 64 3a 66 75 6e 63 74 69 6f 6e Data Ascii: /CryptoJS v3.1.2code.google.com/p/cryptojs(c) 20092013 by Jeff Mott. All rights reserved.code.google.com/p/cryptojs/wiki/License/var CryptoJS=CryptoJS\|\|function(e,m){var p={},j=p.lib={},l=function(){},f=j.Base={ extend:function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49805	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:42 UTC	684	OUT	GET /images/1040.gif HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/main.aspx?code=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:42 UTC	323	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Thu, 21 Sep 2023 01:25:06 GMT Accept-Ranges: bytes ETag: "10255742aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:42 GMT Connection: close Content-Length: 3885
2024-04-19 05:31:42 UTC	3885	IN	Data Raw: 47 49 46 38 37 61 cd 01 25 00 f7 00 00 00 00 00 80 00 00 00 80 00 80 80 00 00 00 80 80 00 80 00 80 80 c0 c0 c0 c0 dc c0 a6 ca f0 00 00 00 00 00 2a 00 00 55 00 00 7f 00 00 aa 00 00 d4 00 2a 00 00 2a 2a 00 2a 55 00 2a 7f 00 2a aa 00 2a d4 00 55 00 00 55 2a 00 55 55 00 55 7f 00 55 aa 00 55 d4 00 7f 00 00 7f 2a 00 7f 55 00 7f 7f 00 7f aa 00 7f d4 00 aa 00 00 aa 2a 00 aa 55 00 aa 7f 00 aa aa 00 aa d4 00 d4 00 00 d4 2a 00 d4 55 00 d4 7f 00 d4 aa 00 d4 d4 2a 00 00 2a 00 2a 2a 00 55 2a 00 7f 2a 00 aa 2a 00 d4 2a 2a 00 2a 2a 2a 2a 2a 55 2a 2a 7f 2a 2a aa 2a 2a d4 2a 55 00 2a 55 2a 2a 55 55 2a 55 7f 2a 55 aa 2a 55 d4 2a 7f 00 2a 7f 2a 2a 7f 55 2a 7f 7f 2a 7f aa 2a 7f d4 2a aa 00 2a aa 2a 2a aa 55 2a aa 7f 2a aa aa 2a aa d4 2a d4 00 2a d4 2a 2a d4 55 2a d4 7f 2a d4 Data Ascii: GIF87a%U*UUUUUUUUUUU*U******U****UU*UUUUU**U***U***U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49806	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:42 UTC	690	OUT	GET /images/IRS%20Logo.bmp HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/main.aspx?code=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:42 UTC	324	IN	HTTP/1.1 200 OK Content-Type: image/bmp Last-Modified: Thu, 21 Sep 2023 01:25:16 GMT Accept-Ranges: bytes ETag: "c0cc427a2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:42 GMT Connection: close Content-Length: 8118
2024-04-19 05:31:42 UTC	8118	IN	Data Raw: 42 4d b6 1f 00 00 00 00 00 00 36 00 00 00 28 00 00 00 37 00 00 00 30 00 00 00 01 00 18 00 00 00 00 00 80 1f 00 00 c4 0e 00 00 c4 0e 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BM6(70

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49808	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:42 UTC	631	OUT	GET /main.css HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.1040now.net/main.aspx?code=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:43 UTC	236	IN	HTTP/1.1 404 Not Found Content-Type: text/html X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:42 GMT Connection: close Content-Length: 1245
2024-04-19 05:31:43 UTC	1245	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - Fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49810	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:42 UTC	684	OUT	GET /images/Next.bmp HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/main.aspx?code=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:43 UTC	323	IN	HTTP/1.1 200 OK Content-Type: image/bmp Last-Modified: Thu, 21 Sep 2023 01:25:17 GMT Accept-Ranges: bytes ETag: "30bbb17a2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:42 GMT Connection: close Content-Length: 438
2024-04-19 05:31:43 UTC	438	IN	Data Raw: 42 4d b6 01 00 00 00 00 00 00 76 00 00 00 28 00 00 00 28 00 00 00 10 00 00 00 01 00 04 00 00 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 80 00 00 00 80 80 00 80 00 00 00 80 00 80 00 80 80 00 00 c0 c0 c0 00 80 80 80 00 00 00 ff 00 00 ff 00 00 00 ff ff 00 ff 00 00 00 ff 00 ff 00 ff ff 00 00 ff ff ff 00 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 0f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 80 ff ff ff fc cf ff fc cf ff cc cc ff cc ff ff cc ff cc ff 78 0f ff ff fc cf ff cc cf fc cf fc cf fc cf fc cf fc cf ff 77 80 ff ff fc cf fc cc cf fc cf ff ff ff cc cc ff fc cf ff 77 Data Ascii: BMv((@DDDDDDDDDDDDDDDDDDDDxww

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49811	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:42 UTC	625	OUT	GET /js/jquery.min.js HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.1040now.net/main.aspx?code=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:43 UTC	337	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Tue, 31 Oct 2023 03:24:19 GMT Accept-Ranges: bytes ETag: "903e34bca9bda1:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:42 GMT Connection: close Content-Length: 87535
2024-04-19 05:31:43 UTC	16047	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQ
2024-04-19 05:31:43 UTC	16384	IN	Data Raw: 62 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 62 75 74 74 6f 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 74 65 78 74 22 3d 3d 3d 65 2e 74 79 70 65 26 26 28 6e 75 6c 6c 3d Data Ascii: b.pseudos.empty(e)},header:function(e){return q.test(e.nodeName)},input:function(e){return N.test(e.nodeName)},button:function(e){return fe(e,"input")&&"button"===e.type\|\|fe(e,"button")},text:function(e){var t;return fe(e,"input")&&"text"===e.type&&(null=
2024-04-19 05:31:43 UTC	16384	IN	Data Raw: 5f 71 75 65 75 65 48 6f 6f 6b 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2b 22 71 75 65 75 65 48 6f 6f 6b 73 22 3b 72 65 74 75 72 6e 20 5f 2e 67 65 74 28 65 2c 6e 29 7c 7c 5f 2e 61 63 63 65 73 73 28 65 2c 6e 2c 7b 65 6d 70 74 79 3a 63 65 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2e 61 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 72 65 6d 6f 76 65 28 65 2c 5b 74 2b 22 71 75 65 75 65 22 2c 6e 5d 29 7d 29 7d 29 7d 7d 29 2c 63 65 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 65 3d 32 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 6e 3d 74 2c 74 3d 22 66 78 22 2c 65 2d 2d 29 2c 61 72 67 75 6d 65 6e 74 Data Ascii: _queueHooks:function(e,t){var n=t+"queueHooks";return _.get(e,n)\|\|_.access(e,n,{empty:ce.Callbacks("once memory").add(function(){_.remove(e,[t+"queue",n])})})}}),ce.fn.extend({queue:function(t,n){var e=2;return"string"!=typeof t&&(n=t,t="fx",e--),argument
2024-04-19 05:31:43 UTC	16384	IN	Data Raw: 28 29 2e 61 70 70 65 6e 64 28 65 29 7d 2c 6e 75 6c 6c 2c 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 70 6c 61 63 65 57 69 74 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 63 65 2e 69 6e 41 72 72 61 79 28 74 68 69 73 2c 6e 29 3c 30 26 26 28 63 65 2e 63 6c 65 61 6e 44 61 74 61 28 53 65 28 74 68 69 73 29 29 2c 74 26 26 74 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 65 2c 74 68 69 73 29 29 7d 2c 6e 29 7d 7d 29 2c 63 65 2e 65 61 63 68 28 7b 61 70 70 65 6e 64 54 6f 3a 22 61 70 70 65 6e 64 22 2c 70 72 65 70 65 6e 64 54 6f 3a 22 70 72 65 70 65 6e Data Ascii: ().append(e)},null,e,arguments.length)},replaceWith:function(){var n=[];return $e(this,arguments,function(e){var t=this.parentNode;ce.inArray(this,n)<0&&(ce.cleanData(Se(this)),t&&t.replaceChild(e,this))},n)}}),ce.each({appendTo:"append",prependTo:"prepen
2024-04-19 05:31:43 UTC	16384	IN	Data Raw: 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 20 31 3d 3d 3d 6f 26 26 63 65 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 74 3d 63 65 2e 70 72 6f 70 46 69 78 5b 74 5d 7c 7c 74 2c 69 3d 63 65 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 5d 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 69 26 26 22 73 65 74 22 69 6e 20 69 26 26 76 6f 69 64 20 30 21 3d 3d 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 65 5b 74 5d 3d 6e 3a 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 69 2e 67 65 74 28 65 2c 74 29 29 3f 72 3a 65 5b 74 5d 7d 2c 70 72 6f 70 48 6f 6f 6b 73 3a 7b 74 61 62 49 6e 64 65 78 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 63 65 2e 66 69 6e 64 2e 61 74 74 72 28 65 2c 22 74 61 62 69 6e 64 65 78 22 29 3b Data Ascii: !==o&&2!==o)return 1===o&&ce.isXMLDoc(e)\|\|(t=ce.propFix[t]\|\|t,i=ce.propHooks[t]),void 0!==n?i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:e[t]=n:i&&"get"in i&&null!==(r=i.get(e,t))?r:e[t]},propHooks:{tabIndex:{get:function(e){var t=ce.find.attr(e,"tabindex");
2024-04-19 05:31:43 UTC	5952	IN	Data Raw: 6a 73 6f 6e 70 3a 22 63 61 6c 6c 62 61 63 6b 22 2c 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4b 74 2e 70 6f 70 28 29 7c 7c 63 65 2e 65 78 70 61 6e 64 6f 2b 22 5f 22 2b 6a 74 2e 67 75 69 64 2b 2b 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 65 5d 3d 21 30 2c 65 7d 7d 29 2c 63 65 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 28 22 6a 73 6f 6e 20 6a 73 6f 6e 70 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 3d 21 31 21 3d 3d 65 2e 6a 73 6f 6e 70 26 26 28 5a 74 2e 74 65 73 74 28 65 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 61 74 61 26 26 30 3d 3d 3d 28 65 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f Data Ascii: jsonp:"callback",jsonpCallback:function(){var e=Kt.pop()\|\|ce.expando+"_"+jt.guid++;return this[e]=!0,e}}),ce.ajaxPrefilter("json jsonp",function(e,t,n){var r,i,o,a=!1!==e.jsonp&&(Zt.test(e.url)?"url":"string"==typeof e.data&&0===(e.contentType\|\|"").indexO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49809	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:42 UTC	617	OUT	GET /main_.js HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.1040now.net/main.aspx?code=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:43 UTC	338	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Thu, 04 Jan 2024 02:45:57 GMT Accept-Ranges: bytes ETag: "909d2025b83eda1:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:42 GMT Connection: close Content-Length: 39903
2024-04-19 05:31:43 UTC	16046	IN	Data Raw: 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 66 64 64 79 30 38 39 30 39 30 30 39 30 30 31 39 30 33 36 30 39 33 30 35 32 30 31 32 30 38 35 28 29 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 65 6c 65 6d 65 6e 74 20 3d 20 47 65 74 44 6f 63 75 6d 65 6e 74 41 6c 6c 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 69 20 3d 20 30 3b 20 69 20 3c 20 65 6c 65 6d 65 6e 74 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 7b 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 6c 65 6d 65 6e 74 5b 69 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 20 21 3d 20 6e 75 6c 6c 20 26 26 20 65 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 20 3d 3d 20 Data Ascii: function fddy089090090019036093052012085() { var element = GetDocumentAll(); for (i = 0; i < element.length; i++) { if (element[i].getAttribute("type") != null && element.getAttribute("type") ==
2024-04-19 05:31:43 UTC	16384	IN	Data Raw: 2e 6e 61 6d 65 20 3d 3d 20 22 62 64 64 5f 79 30 37 32 31 30 36 30 39 38 30 33 34 30 34 38 30 38 37 30 35 30 30 30 34 30 37 38 30 39 35 30 30 35 30 39 30 30 39 30 30 39 30 30 32 33 30 35 32 30 39 33 22 29 0d 0a 09 09 09 20 20 20 20 72 65 74 75 72 6e 20 63 6f 6e 66 69 72 6d 28 22 52 65 6d 6f 76 65 20 65 6e 74 72 79 3f 22 29 3b 0d 0a 09 20 20 20 20 7d 0d 0a 09 20 20 20 20 69 66 20 28 65 76 65 6e 74 2e 74 61 72 67 65 74 2e 76 61 6c 75 65 20 3d 3d 20 22 52 65 6d 6f 76 65 22 20 7c 7c 0d 0a 09 20 20 20 20 20 20 20 20 65 76 65 6e 74 2e 74 61 72 67 65 74 2e 76 61 6c 75 65 20 3d 3d 20 22 44 65 6c 65 74 65 22 20 7c 7c 0d 0a 09 09 09 65 76 65 6e 74 2e 74 61 72 67 65 74 2e 76 61 6c 75 65 20 3d 3d 20 22 45 64 69 74 2f 43 6f 72 72 65 63 74 22 29 0d 0a 09 20 20 20 20 7b Data Ascii: .name == "bdd_y072106098034048087050004078095005090090090023052093") return confirm("Remove entry?"); } if (event.target.value == "Remove" \|\| event.target.value == "Delete" \|\|event.target.value == "Edit/Correct") {
2024-04-19 05:31:43 UTC	7473	IN	Data Raw: 32 29 20 7c 7c 20 28 28 68 79 70 68 65 6e 20 3d 3d 20 32 20 7c 7c 20 73 6c 61 73 68 20 3d 3d 20 32 29 20 26 26 20 79 65 61 72 20 3c 20 34 29 29 29 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 2e 72 65 74 75 72 6e 56 61 6c 75 65 20 3d 20 74 72 75 65 3b 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 2e 72 65 74 75 72 6e 56 61 6c 75 65 20 3d 20 66 61 6c 73 65 3b 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 7d 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 66 64 64 79 30 36 30 30 38 36 30 39 30 30 32 33 30 33 37 30 37 34 30 37 31 30 30 39 30 38 38 30 39 37 31 31 38 30 37 31 30 39 37 30 38 37 30 31 38 30 Data Ascii: 2) \|\| ((hyphen == 2 \|\| slash == 2) && year < 4))) event.returnValue = true; else event.returnValue = false; } function fddy0600860900230370740710090880971180710970870180

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49812	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:43 UTC	616	OUT	GET /main.js HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.1040now.net/main.aspx?code=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:43 UTC	338	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Thu, 04 Jan 2024 02:45:57 GMT Accept-Ranges: bytes ETag: "10a8ff24b83eda1:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:42 GMT Connection: close Content-Length: 47358
2024-04-19 05:31:43 UTC	16046	IN	Data Raw: 09 09 66 75 6e 63 74 69 6f 6e 20 73 65 6c 65 63 74 61 6c 6c 28 29 0d 0a 09 09 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 6c 65 6d 65 6e 74 20 3d 20 47 65 74 44 6f 63 75 6d 65 6e 74 41 6c 6c 28 29 3b 0d 0a 09 09 09 66 6f 72 20 28 69 20 3d 20 30 3b 20 69 20 3c 20 65 6c 65 6d 65 6e 74 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 69 66 20 28 65 6c 65 6d 65 6e 74 5b 69 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 20 21 3d 20 6e 75 6c 6c 20 26 26 20 65 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 20 3d 3d 20 22 63 68 65 63 6b 62 6f 78 22 29 0d 0a 09 09 09 09 7b 0d 0a 09 09 09 09 09 65 6c 65 6d 65 6e 74 5b 69 5d 2e 63 68 65 63 6b 65 64 20 3d 20 74 72 75 65 3b Data Ascii: function selectall(){ var element = GetDocumentAll();for (i = 0; i < element.length; i++){if (element[i].getAttribute("type") != null && element.getAttribute("type") == "checkbox"){element[i].checked = true;
2024-04-19 05:31:43 UTC	16384	IN	Data Raw: 09 0d 0a 09 09 09 69 66 20 28 20 63 68 20 3e 3d 20 22 30 22 20 7c 7c 20 63 68 20 3c 3d 20 22 39 22 20 29 0d 0a 09 09 09 09 72 65 74 20 3d 20 31 3b 0d 0a 09 09 09 0d 0a 09 09 09 72 65 74 75 72 6e 20 72 65 74 3b 09 09 09 0d 0a 09 09 7d 09 09 0d 0a 09 09 0d 0a 09 09 66 75 6e 63 74 69 6f 6e 20 49 73 4e 75 6d 28 73 74 72 29 0d 0a 09 09 7b 0d 0a 09 09 20 20 20 20 76 61 72 20 72 65 74 20 3d 20 2d 31 3b 0d 0a 09 09 20 20 20 20 69 66 20 28 20 73 74 72 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 20 29 0d 0a 09 09 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 74 3b 0d 0a 09 09 20 20 20 20 69 66 20 28 21 28 20 73 74 72 2e 63 68 61 72 41 74 28 30 29 20 3d 3d 20 22 2d 22 20 7c 7c 20 73 74 72 2e 63 68 61 72 41 74 28 30 29 20 3d 3d 20 22 2b 22 20 7c 7c 20 73 74 72 2e 63 68 61 Data Ascii: if ( ch >= "0" \|\| ch <= "9" )ret = 1;return ret;}function IsNum(str){ var ret = -1; if ( str.length == 0 ) return ret; if (!( str.charAt(0) == "-" \|\| str.charAt(0) == "+" \|\| str.cha
2024-04-19 05:31:43 UTC	14928	IN	Data Raw: 7d 0d 0a 20 20 20 20 09 09 09 7d 0d 0a 09 20 20 20 20 09 09 65 6c 73 65 20 24 28 27 2e 74 6f 67 6c 65 66 69 64 33 27 29 2e 68 69 64 65 28 29 3b 0d 0a 09 09 20 20 20 20 7d 29 3b 20 0d 0a 09 09 20 20 20 20 2f 2f 23 46 55 4e 43 09 09 0d 0a 09 09 20 20 20 20 2f 2f 46 55 4e 43 0d 0a 09 09 20 20 20 20 24 28 27 69 6e 70 75 74 2e 74 6f 67 6c 65 63 68 6b 34 27 29 2e 63 68 61 6e 67 65 28 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 09 09 20 20 20 20 7b 09 09 0d 0a 09 09 09 20 20 20 20 69 66 20 28 74 68 69 73 2e 63 68 65 63 6b 65 64 29 0d 0a 09 09 09 20 20 20 20 7b 0d 0a 09 09 09 09 20 20 20 20 24 28 27 2e 74 6f 67 6c 65 66 69 64 34 27 29 2e 73 68 6f 77 28 29 3b 20 0d 0a 09 09 09 20 20 20 20 20 20 20 20 69 66 20 28 24 28 74 68 69 73 29 2e 61 74 74 72 28 22 74 79 70 65 22 29 Data Ascii: } } else $('.toglefid3').hide(); }); //#FUNC //FUNC $('input.toglechk4').change(function() { if (this.checked) { $('.toglefid4').show(); if ($(this).attr("type")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49813	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:43 UTC	432	OUT	GET /images/1040.gif HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:43 UTC	323	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Thu, 21 Sep 2023 01:25:06 GMT Accept-Ranges: bytes ETag: "10255742aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:42 GMT Connection: close Content-Length: 3885
2024-04-19 05:31:43 UTC	3885	IN	Data Raw: 47 49 46 38 37 61 cd 01 25 00 f7 00 00 00 00 00 80 00 00 00 80 00 80 80 00 00 00 80 80 00 80 00 80 80 c0 c0 c0 c0 dc c0 a6 ca f0 00 00 00 00 00 2a 00 00 55 00 00 7f 00 00 aa 00 00 d4 00 2a 00 00 2a 2a 00 2a 55 00 2a 7f 00 2a aa 00 2a d4 00 55 00 00 55 2a 00 55 55 00 55 7f 00 55 aa 00 55 d4 00 7f 00 00 7f 2a 00 7f 55 00 7f 7f 00 7f aa 00 7f d4 00 aa 00 00 aa 2a 00 aa 55 00 aa 7f 00 aa aa 00 aa d4 00 d4 00 00 d4 2a 00 d4 55 00 d4 7f 00 d4 aa 00 d4 d4 2a 00 00 2a 00 2a 2a 00 55 2a 00 7f 2a 00 aa 2a 00 d4 2a 2a 00 2a 2a 2a 2a 2a 55 2a 2a 7f 2a 2a aa 2a 2a d4 2a 55 00 2a 55 2a 2a 55 55 2a 55 7f 2a 55 aa 2a 55 d4 2a 7f 00 2a 7f 2a 2a 7f 55 2a 7f 7f 2a 7f aa 2a 7f d4 2a aa 00 2a aa 2a 2a aa 55 2a aa 7f 2a aa aa 2a aa d4 2a d4 00 2a d4 2a 2a d4 55 2a d4 7f 2a d4 Data Ascii: GIF87a%U*UUUUUUUUUUU*U******U****UU*UUUUU**U***U***U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49815	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:43 UTC	438	OUT	GET /images/IRS%20Logo.bmp HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:43 UTC	324	IN	HTTP/1.1 200 OK Content-Type: image/bmp Last-Modified: Thu, 21 Sep 2023 01:25:16 GMT Accept-Ranges: bytes ETag: "c0cc427a2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:42 GMT Connection: close Content-Length: 8118
2024-04-19 05:31:43 UTC	8118	IN	Data Raw: 42 4d b6 1f 00 00 00 00 00 00 36 00 00 00 28 00 00 00 37 00 00 00 30 00 00 00 01 00 18 00 00 00 00 00 80 1f 00 00 c4 0e 00 00 c4 0e 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BM6(70

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49814	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:43 UTC	619	OUT	GET /menutax.js HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.1040now.net/main.aspx?code=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:43 UTC	337	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Thu, 21 Sep 2023 01:24:44 GMT Accept-Ranges: bytes ETag: "703ec6662aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:42 GMT Connection: close Content-Length: 3577
2024-04-19 05:31:43 UTC	3577	IN	Data Raw: 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 28 29 3b 0d 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0d 0a 20 20 24 28 27 2e 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 20 20 20 20 24 28 22 62 6f 64 79 22 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 27 6e 6f 5f 73 63 72 6f 6c 6c 27 29 3b 0d 0a 20 20 7d 29 3b 0d 0a 7d 29 3b 0d 0a 0d 0a 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 28 29 3b 0d 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0d 0a 20 20 24 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 69 6e 69 74 44 72 6f 70 44 6f 77 6e 73 28 24 28 22 23 6d 65 Data Ascii: jQuery.noConflict();jQuery(document).ready(function($){ $('.menu-toggler').click(function(){ $("body").toggleClass('no_scroll'); });});jQuery.noConflict();jQuery(document).ready(function($){ $(function() { initDropDowns($("#me

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49817	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:43 UTC	432	OUT	GET /images/Next.bmp HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:43 UTC	323	IN	HTTP/1.1 200 OK Content-Type: image/bmp Last-Modified: Thu, 21 Sep 2023 01:25:17 GMT Accept-Ranges: bytes ETag: "30bbb17a2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:43 GMT Connection: close Content-Length: 438
2024-04-19 05:31:43 UTC	438	IN	Data Raw: 42 4d b6 01 00 00 00 00 00 00 76 00 00 00 28 00 00 00 28 00 00 00 10 00 00 00 01 00 04 00 00 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 80 00 00 00 80 80 00 80 00 00 00 80 00 80 00 80 80 00 00 c0 c0 c0 00 80 80 80 00 00 00 ff 00 00 ff 00 00 00 ff ff 00 ff 00 00 00 ff 00 ff 00 ff ff 00 00 ff ff ff 00 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 0f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 80 ff ff ff fc cf ff fc cf ff cc cc ff cc ff ff cc ff cc ff 78 0f ff ff fc cf ff cc cf fc cf fc cf fc cf fc cf fc cf ff 77 80 ff ff fc cf fc cc cf fc cf ff ff ff cc cc ff fc cf ff 77 Data Ascii: BMv((@DDDDDDDDDDDDDDDDDDDDxww

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49816	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:43 UTC	618	OUT	GET /menuco.js HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.1040now.net/main.aspx?code=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:43 UTC	337	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Thu, 21 Sep 2023 01:24:43 GMT Accept-Ranges: bytes ETag: "3056a8662aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:43 GMT Connection: close Content-Length: 2357
2024-04-19 05:31:43 UTC	2357	IN	Data Raw: 2f 2f 24 2e 6e 6f 43 6f 6e 66 6c 69 63 74 28 29 3b 0d 0a 2f 2f 24 2e 6e 6f 43 6f 6e 66 6c 69 63 74 28 29 3b 0d 0a 2f 2f 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 28 29 3b 0d 0a 2f 2f 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 20 0d 0a 0d 0a 20 20 20 20 2f 2f 20 79 6f 75 72 20 63 6f 64 65 20 67 6f 65 73 20 68 65 72 65 0d 0a 0d 0a 2f 2f 7d 29 3b 0d 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0d 0a 2f 2f 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 2f 2f 20 73 68 6f 77 20 73 69 64 65 62 61 72 20 61 6e 64 20 6f 76 65 72 6c 61 79 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 53 69 64 65 62 61 72 28 29 Data Ascii: //$.noConflict();//$.noConflict();//jQuery.noConflict();//jQuery(function($){ // your code goes here//});jQuery(document).ready(function($){//$(document).ready(function() { // show sidebar and overlay function showSidebar()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49819	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:47 UTC	761	OUT	GET /1040now/1040Now%20Privacy%20Statement%201.htm HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:47 UTC	325	IN	HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Thu, 21 Sep 2023 01:24:58 GMT Accept-Ranges: bytes ETag: "b0e2656f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:47 GMT Connection: close Content-Length: 15124
2024-04-19 05:31:47 UTC	15124	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 09 3c 68 65 61 64 3e 0d 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 3e 0d 0a 09 20 20 20 20 20 20 76 61 72 20 74 61 62 56 61 6c 75 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 55 52 4c 3b 0d 0a 09 20 20 20 20 20 20 76 61 72 20 75 72 6c 20 3d 20 22 22 3b 0d 0a 09 20 20 20 20 20 20 69 66 20 28 74 61 62 56 61 6c 75 65 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 23 22 29 20 3e 3d 20 30 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 20 3d 20 74 61 62 56 61 6c 75 65 2e 73 75 62 73 74 72 69 6e 67 28 74 61 62 56 61 6c 75 65 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 23 22 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 22 2e Data Ascii: <html><head><script type="text/javascript" > var tabValue = document.URL; var url = ""; if (tabValue.lastIndexOf("#") >= 0) url = tabValue.substring(tabValue.lastIndexOf("#")); document.location = ".

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49818	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:48 UTC	847	OUT	GET /mobile/1040Now%20Privacy%20Statement%201.htm HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.1040now.net/1040now/1040Now%20Privacy%20Statement%201.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:48 UTC	325	IN	HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Thu, 21 Sep 2023 01:25:43 GMT Accept-Ranges: bytes ETag: "8066568a2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:47 GMT Connection: close Content-Length: 15198
2024-04-19 05:31:48 UTC	15198	IN	Data Raw: ef bb bf 3c 68 74 6d 6c 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 31 30 34 30 4e 4f 57 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 43 53 53 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 33 2e 32 2e 30 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 Data Ascii: <html> <head> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>1040NOW</title> ... CSS --> <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49820	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:48 UTC	682	OUT	GET /mobile/css/owl.carousel.min.css HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.1040now.net/mobile/1040Now%20Privacy%20Statement%201.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:48 UTC	323	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Thu, 21 Sep 2023 01:26:12 GMT Accept-Ranges: bytes ETag: "20912a9b2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:48 GMT Connection: close Content-Length: 3634
2024-04-19 05:31:48 UTC	3634	IN	Data Raw: 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 61 6e 69 6d 61 74 65 64 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 30 30 30 6d 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 30 30 30 6d 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 62 6f 74 68 3b 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 62 6f 74 68 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 61 6e 69 6d 61 74 65 64 2d 69 6e 7b 7a 2d 69 6e 64 65 78 3a 30 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 61 6e 69 6d 61 74 65 64 2d 6f 75 74 7b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 66 61 64 65 4f 75 74 7b 2d 77 65 62 6b 69 74 Data Ascii: .owl-carousel .animated{-webkit-animation-duration:1000ms;animation-duration:1000ms;-webkit-animation-fill-mode:both;animation-fill-mode:both}.owl-carousel .owl-animated-in{z-index:0}.owl-carousel .owl-animated-out{z-index:1}.owl-carousel .fadeOut{-webkit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49825	13.32.66.19	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:48 UTC	617	OUT	GET /seals/privacy/12081-header.gif HTTP/1.1 Host: dw26xg4lubooo.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:49 UTC	908	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 4255 Connection: close Date: Fri, 19 Apr 2024 05:31:49 GMT Last-Modified: Fri, 19 Apr 2024 05:16:21 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400, must-revalidate CF-Cache-Status: EXPIRED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KL1hCOqf30iXYmgUlYsaSecI36FpWK1Hq9vItIaO5YT2maTJbfydxjuzHCA6KQiRudcAODTL258As9ivfKZIa7LRfQ7ea6CoGkJHEa1f8n6S3hcsoBmhMOcGL2MNJI7ZwkiUmtcv%2BIa7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a82af3dde3ae0-IAD X-Cache: Miss from cloudfront Via: 1.1 d609bf18dc48991596c5819013c10fe2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C4 X-Amz-Cf-Id: kPcSFCmjzQMBb_2ZMFTv22ph9dgVVw5Sd4w61vGSSVwVwRrxNwoQ3A==
2024-04-19 05:31:49 UTC	4255	IN	Data Raw: 47 49 46 38 39 61 96 00 28 00 f6 7f 00 ff ff ff a0 a0 a0 fd fd fd 32 7b 3d ff ff 81 59 b1 68 4f ac 5f 39 8a 46 21 5b 2a 48 a9 58 40 9a 4f 1d 55 26 1a 4b 21 67 b8 74 23 61 2d 1a 36 18 20 3f 1f 42 9e 51 3b 8f 48 2b 63 31 29 6c 33 18 43 1d 37 85 44 2a 70 35 71 cb 67 35 82 41 3a 8d 47 74 be 80 45 a2 54 23 49 24 17 2a 13 25 65 2f 29 5b 2d 57 97 62 27 69 31 3f 97 4d 2f 6f 38 21 45 21 3d 93 4b 75 d2 6c 32 74 3b 26 4e 27 0f 21 0d 1f 50 24 28 54 2b 47 a6 57 df e5 e0 13 38 17 6b c0 60 2c 74 38 86 d3 84 e1 eb e3 2f 78 3b 19 30 16 1a 3c 1a 71 97 4e 14 3d 1a 3e 95 4c 33 80 3f 5a 79 5f 37 87 44 6e c4 65 6c 87 72 83 a8 8a 11 34 16 10 1a 0a 8a e0 7e 3c 92 4a 49 53 52 c5 c7 c8 69 a5 73 7b 98 7d f7 fa f8 11 30 13 82 be 62 62 67 6b 7d d3 77 a6 c7 a9 90 bb 97 f3 f4 f3 a6 b6 Data Ascii: GIF89a(2{=YhO_9F![HX@OU&K!gt#a-6 ?BQ;H+c1)l3C7Dp5qg5A:GtET#I$*%e/)[-Wb'i1?M/o8!E!=Kul2t;&N'!P$(T+GW8k`,t8/x;0<qN=>L3?Zy_7Dnelr4~<JISRis{}0bbgk}w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49822	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:48 UTC	671	OUT	GET /mobile/css/style.css HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.1040now.net/mobile/1040Now%20Privacy%20Statement%201.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:49 UTC	322	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Thu, 21 Sep 2023 01:26:12 GMT Accept-Ranges: bytes ETag: "0175b9b2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:48 GMT Connection: close Content-Length: 5211
2024-04-19 05:31:49 UTC	5211	IN	Data Raw: 62 6f 64 79 20 7b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 70 72 6f 78 69 6d 61 2d 6e 6f 76 61 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0d 0a 7d 0d 0a 0d 0a 70 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 37 31 37 31 37 31 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 61 2c 20 61 3a 61 63 74 69 76 65 2c 20 61 3a 66 6f 63 75 73 2c 20 61 3a 68 6f 76 65 72 20 7b 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 7d 0d 0a 0d 0a 2e 6e 61 76 3e 6c 69 3e 61 3a 68 6f 76 65 72 2c 20 2e 6e 61 76 3e 6c 69 3e 61 3a 66 6f 63 75 73 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 33 Data Ascii: body {font-family: "proxima-nova", sans-serif;font-weight: 400;}p {color: #717171;line-height: 1.4;font-size: 18px;}a, a:active, a:focus, a:hover {outline: none;}.nav>li>a:hover, .nav>li>a:focus {background-color: rgba(23

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49823	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:48 UTC	671	OUT	GET /mobile/font/font.css HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.1040now.net/mobile/1040Now%20Privacy%20Statement%201.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:49 UTC	324	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Thu, 21 Sep 2023 01:26:13 GMT Accept-Ranges: bytes ETag: "80e9e99b2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:48 GMT Connection: close Content-Length: 82578
2024-04-19 05:31:49 UTC	16060	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 70 72 6f 78 69 6d 61 2d 6e 6f 76 61 22 3b 0d 0a 73 72 63 3a 75 72 6c 28 64 61 74 61 3a 66 6f 6e 74 2f 6f 70 65 6e 74 79 70 65 3b 62 61 73 65 36 34 2c 64 30 39 47 52 67 41 42 41 41 41 41 41 46 45 55 41 42 49 41 41 41 41 41 69 47 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 47 52 6c 52 4e 41 41 41 42 6c 41 41 41 41 42 77 41 41 41 41 63 58 5a 36 74 30 6b 64 45 52 55 59 41 41 41 61 41 41 41 41 41 4e 41 41 41 41 44 77 44 30 67 52 66 52 31 42 50 55 77 41 41 42 72 51 41 41 41 53 2f 41 41 41 53 50 4e 6a 69 38 32 46 50 55 79 38 79 41 41 41 46 35 41 41 41 41 46 6b 41 41 41 42 67 66 6e 61 37 6a 56 4e 4c 56 46 41 41 41 41 74 30 41 41 Data Ascii: @font-face {font-family:"proxima-nova";src:url(data:font/opentype;base64,d09GRgABAAAAAFEUABIAAAAAiGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGRlRNAAABlAAAABwAAAAcXZ6t0kdERUYAAAaAAAAANAAAADwD0gRfR1BPUwAABrQAAAS/AAASPNji82FPUy8yAAAF5AAAAFkAAABgfna7jVNLVFAAAAt0AA
2024-04-19 05:31:49 UTC	16384	IN	Data Raw: 74 62 76 64 32 71 57 37 4f 49 73 56 2f 2b 52 34 7a 48 73 6d 56 4e 66 76 47 32 39 73 78 55 31 62 32 72 58 77 38 5a 51 78 78 4e 43 64 45 4a 48 42 4b 39 49 67 4a 79 68 68 55 59 34 4c 65 47 30 71 56 78 32 42 54 78 70 43 49 67 46 43 64 43 6d 4e 49 4d 41 76 61 43 69 48 4f 49 75 70 74 64 4c 70 4b 4b 54 6f 74 4b 61 4d 6a 4b 53 43 6c 69 4a 56 78 6b 63 62 54 6b 63 44 38 52 54 6f 65 48 59 6f 30 31 4c 35 6f 44 6e 6b 4e 4f 30 31 65 71 2b 39 71 33 39 45 72 4e 64 4c 78 53 41 32 39 77 37 49 63 38 58 50 74 6e 41 44 59 30 49 57 52 45 30 79 73 77 69 7a 72 4f 45 70 72 74 4c 57 63 4b 6a 6b 77 61 78 73 4c 57 61 6b 33 43 4b 4f 77 6a 4f 6a 55 79 70 49 73 7a 69 7a 47 70 6c 64 67 38 71 64 41 6b 4d 77 4f 6f 38 71 56 53 59 31 42 6f 6e 46 58 38 34 42 62 34 4d 2f 50 64 62 61 72 4c 53 Data Ascii: tbvd2qW7OIsV/+R4zHsmVNfvG29sxU1b2rXw8ZQxxNCdEJHBK9IgJyhhUY4LeG0qVx2BTxpCIgFCdCmNIMAvaCiHOIuptdLpKKTotKaMjKSCliJVxkcbTkcD8RToeHYo01L5oDnkNO01eq+9q39ErNdLxSA29w7Ic8XPtnADY0IWRE0yswizrOEprtLWcKjkwaxsLWak3CKOwjOjUypIszizGpldg8qdAkMwOo8qVSY1BonFX84Bb4M/PdbarLS
2024-04-19 05:31:49 UTC	16384	IN	Data Raw: 31 45 66 33 53 41 50 30 41 30 62 36 50 35 32 32 69 48 33 34 31 2b 37 33 49 58 50 63 68 63 4d 47 32 61 2b 64 4b 4a 4d 71 4e 59 53 47 48 38 4a 71 53 4b 48 53 5a 44 69 79 50 50 39 6b 6c 34 59 46 66 32 2b 49 4e 55 62 38 34 65 71 4b 54 48 6b 42 31 30 34 46 37 74 66 53 6f 4a 33 4b 6e 31 42 56 78 4b 2b 34 33 49 59 59 43 56 6d 65 45 58 72 69 42 51 77 6a 59 6f 42 69 36 53 6e 2b 55 46 69 6e 2b 61 44 36 66 6b 4e 78 43 76 6b 42 35 31 4a 2b 66 41 6b 2b 69 33 53 46 4a 6f 76 5a 5a 6c 47 70 57 71 34 42 71 78 57 6d 36 67 70 6c 37 4b 6d 57 47 31 53 51 6e 78 35 4f 5a 47 53 39 46 5a 62 74 55 48 51 57 4f 4d 54 73 6e 7a 54 70 6d 65 36 79 6d 45 52 53 77 71 70 70 7a 53 46 75 71 79 46 32 70 4c 69 51 47 6d 4a 33 2b 46 30 36 62 49 39 31 68 53 74 77 78 37 4e 36 78 79 78 78 59 57 63 Data Ascii: 1Ef3SAP0A0b6P522iH341+73IXPchcMG2a+dKJMqNYSGH8JqSKHSZDiyPP9kl4YFf2+INUb84eqKTHkB104F7tfSoJ3Kn1BVxK+43IYYCVmeEXriBQwjYoBi6Sn+UFin+aD6fkNxCvkB51J+fAk+i3SFJovZZlGpWq4BqxWm6gpl7KmWG1SQnx5OZGS9FZbtUHQWOMTsnzTpme6ymERSwqppzSFuqyF2pLiQGmJ3+F06bI91hStwx7N6xyxxYWc
2024-04-19 05:31:49 UTC	16384	IN	Data Raw: 50 52 2f 75 2b 42 67 30 74 69 55 75 56 7a 38 31 70 67 56 50 58 67 39 4d 6d 5a 4b 64 74 41 63 66 70 31 67 59 64 61 4e 38 78 68 6f 71 59 47 36 44 4a 52 50 6b 6b 66 6b 44 2b 70 52 36 63 41 4c 7a 61 75 58 50 34 41 4c 33 4d 67 6a 39 54 53 50 35 6a 54 49 49 7a 53 76 51 66 35 41 48 6f 6e 4d 47 33 52 51 48 48 42 33 48 75 6c 52 39 73 39 75 48 49 4f 42 75 77 39 42 73 31 72 42 7a 5a 34 6f 75 46 4f 59 75 61 61 6d 75 43 65 78 74 4b 39 52 71 51 43 75 47 58 6f 6c 7a 7a 7a 4a 2b 6a 70 50 7a 42 61 4e 4c 53 31 4c 69 53 32 79 4d 6f 4e 34 5a 57 64 4d 39 46 68 44 47 6f 63 2b 46 55 4d 44 6f 69 55 4d 5a 54 51 5a 51 4f 39 53 46 76 42 47 38 72 6f 41 79 6a 67 78 43 55 43 70 34 38 6a 32 55 43 65 31 75 79 69 4c 4b 58 4a 6a 46 34 34 55 39 44 56 74 33 49 70 55 66 75 4f 70 76 4c 36 6c Data Ascii: PR/u+Bg0tiUuVz81pgVPXg9MmZKdtAcfp1gYdaN8xhoqYG6DJRPkkfkD+pR6cALzauXP4AL3Mgj9TSP5jTIIzSvQf5AHonMG3RQHHB3HulR9s9uHIOBuw9Bs1rBzZ4ouFOYuaamuCextK9RqQCuGXolzzzJ+jpPzBaNLS1LiS2yMoN4ZWdM9FhDGoc+FUMDoiUMZTQZQO9SFvBG8roAyjgxCUCp48j2UCe1uyiLKXJjF44U9DVt3IpUfuOpvL6l
2024-04-19 05:31:49 UTC	16384	IN	Data Raw: 6f 4b 43 39 56 72 72 62 4d 57 71 70 38 38 5a 74 2b 35 66 50 61 6f 76 66 50 4b 39 46 66 61 76 77 55 58 57 77 63 61 32 37 55 44 4a 4a 4a 50 59 59 4d 50 46 4d 4f 42 6d 30 6f 6f 59 4d 43 64 46 44 76 6b 77 53 4c 54 43 6b 47 44 5a 67 6e 61 49 37 77 31 4f 72 42 41 49 48 56 4c 37 71 75 44 74 56 64 76 63 6f 64 75 38 70 4e 47 54 6f 68 42 6f 59 2b 35 74 78 45 65 79 64 74 59 39 45 7a 39 36 67 78 5a 42 2f 6f 74 34 64 39 53 7a 48 38 52 44 2b 4d 7a 31 57 34 48 33 39 72 47 62 37 4d 46 7a 50 39 55 6a 7a 4b 52 78 67 56 59 49 6c 6c 4c 6d 51 55 2f 4e 36 43 38 68 36 47 2b 30 61 45 4d 43 70 6f 59 52 67 66 53 41 51 67 52 39 64 38 33 4e 57 79 76 47 50 56 51 31 64 2f 2f 49 36 72 4a 39 6a 61 31 63 72 33 44 4b 37 65 39 56 35 54 6d 45 37 68 50 63 61 62 45 69 31 75 4b 2f 6a 5a 57 79 Data Ascii: oKC9VrrbMWqp88Zt+5fPaovfPK9FfavwUXWwca27UDJJJPYYMPFMOBm0ooYMCdFDvkwSLTCkGDZgnaI7w1OrBAIHVL7quDtVdvcodu8pNGTohBoY+5txEeydtY9Ez96gxZB/ot4d9SzH8RD+Mz1W4H39rGb7MFzP9UjzKRxgVYIllLmQU/N6C8h6G+0aEMCpoYRgfSAQgR9d83NWyvGPVQ1d//I6rJ9ja1cr3DK7e9V5TmE7hPcabEi1uK/jZWy
2024-04-19 05:31:49 UTC	982	IN	Data Raw: 79 46 39 67 59 58 42 69 4f 47 4d 6f 59 2b 42 6c 69 47 58 41 5a 32 42 6f 34 47 6a 67 61 55 68 72 43 47 32 59 62 33 68 78 45 48 46 59 63 39 68 30 59 48 62 67 65 4d 68 35 53 48 6e 77 65 68 42 38 65 48 7a 59 66 65 68 2b 47 48 39 41 67 4f 43 42 49 49 4b 41 67 33 43 44 6d 49 53 34 68 51 43 47 4b 49 61 6f 68 76 43 48 4f 49 65 41 69 47 69 49 6d 49 6a 49 69 58 43 4a 6f 49 6e 51 69 67 43 4c 59 49 32 67 6a 64 43 4f 41 49 36 59 6a 73 69 4f 2b 49 38 6f 6a 31 69 50 69 4a 45 59 6b 55 69 52 65 4a 47 6f 6b 70 69 53 79 4a 4c 34 6b 34 43 56 6b 4a 58 41 6c 66 43 57 49 4a 5a 51 6c 6f 43 58 75 4a 72 77 6d 79 43 62 55 4a 79 41 6e 4c 43 63 34 4a 30 51 6f 42 69 69 49 4b 4a 51 6f 6f 43 6a 69 4b 4f 34 6f 2b 69 6b 47 4b 52 49 70 50 43 6d 38 4b 63 67 70 31 43 6e 67 4b 68 67 71 4a 43 Data Ascii: yF9gYXBiOGMoY+BliGXAZ2Bo4GjgaUhrCG2Yb3hxEHFYc9h0YHbgeMh5SHnwehB8eHzYfeh+GH9AgOCBIIKAg3CDmIS4hQCGKIaohvCHOIeAiGiImIjIiXCJoInQigCLYI2gjdCOAI6YjsiO+I8oj1iPiJEYkUiReJGokpiSyJL4k4CVkJXAlfCWIJZQloCXuJrwmyCbUJyAnLCc4J0QoBiiIKJQooCjiKO4o+ikGKRIpPCm8Kcgp1CngKhgqJC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49826	104.18.11.207	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:48 UTC	573	OUT	GET /bootstrap/3.2.0/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.1040now.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:49 UTC	933	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:31:49 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"385b964b68acb68d23cb43a5218fade9" Last-Modified: Mon, 25 Jan 2021 22:03:57 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/31/2023 19:42:59 CDN-EdgeStorageId: 1070 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 8fe9d76cd98f2eaeafa58e44b4ce8e98 CDN-Cache: HIT CF-Cache-Status: HIT Age: 3148125 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 876a82afd999451a-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 05:31:49 UTC	436	IN	Data Raw: 37 63 30 62 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 32 2e 30 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 34 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 Data Ascii: 7c0b/! Bootstrap v3.2.0 (http://getbootstrap.com) * Copyright 2011-2014 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.1 \| MIT License \| git.io/normalize */html{font-family:sans
2024-04-19 05:31:49 UTC	1369	IN	Data Raw: 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 7d 5b 68 69 64 64 65 6e 5d 2c 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 64 6f 74 74 65 64 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 64 66 6e 7b 66 Data Ascii: o,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:0 0}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{f
2024-04-19 05:31:49 UTC	1369	IN	Data Raw: 74 65 6e 74 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 2e 33 35 65 6d 20 2e 36 32 35 65 6d 20 2e 37 35 65 6d 3b 6d 61 72 67 69 6e 3a 30 20 32 70 Data Ascii: tent-box;-moz-box-sizing:content-box;box-sizing:content-box;-webkit-appearance:textfield}input[type=search]::-webkit-search-cancel-button,input[type=search]::-webkit-search-decoration{-webkit-appearance:none}fieldset{padding:.35em .625em .75em;margin:0 2p
2024-04-19 05:31:49 UTC	1369	IN	Data Raw: 67 75 6c 61 72 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c Data Ascii: gular.eot);src:url(../fonts/glyphicons-halflings-regular.eot?#iefix) format('embedded-opentype'),url(../fonts/glyphicons-halflings-regular.woff) format('woff'),url(../fonts/glyphicons-halflings-regular.ttf) format('truetype'),url(../fonts/glyphicons-halfl
2024-04-19 05:31:49 UTC	1369	IN	Data Raw: 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 69 67 6e 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6f 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 6f 6d 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 69 6c Data Ascii: "}.glyphicon-zoom-out:before{content:"\e016"}.glyphicon-off:before{content:"\e017"}.glyphicon-signal:before{content:"\e018"}.glyphicon-cog:before{content:"\e019"}.glyphicon-trash:before{content:"\e020"}.glyphicon-home:before{content:"\e021"}.glyphicon-fil
2024-04-19 05:31:49 UTC	1369	IN	Data Raw: 6e 2d 69 74 61 6c 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 65 78 74 2d 68 65 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 65 78 74 2d 77 69 64 74 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 61 6c 69 67 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 61 6c 69 67 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c Data Ascii: n-italic:before{content:"\e049"}.glyphicon-text-height:before{content:"\e050"}.glyphicon-text-width:before{content:"\e051"}.glyphicon-align-left:before{content:"\e052"}.glyphicon-align-center:before{content:"\e053"}.glyphicon-align-right:before{content:"\
2024-04-19 05:31:49 UTC	1369	IN	Data Raw: 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 69 6e 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 6d 6f 76 65 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 6b 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 71 75 65 73 74 69 6f 6e 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 69 6e 66 6f 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 Data Ascii: e{content:"\e081"}.glyphicon-minus-sign:before{content:"\e082"}.glyphicon-remove-sign:before{content:"\e083"}.glyphicon-ok-sign:before{content:"\e084"}.glyphicon-question-sign:before{content:"\e085"}.glyphicon-info-sign:before{content:"\e086"}.glyphicon-s
2024-04-19 05:31:49 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 63 6c 6f 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 73 69 7a 65 2d 76 65 72 74 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 73 69 7a 65 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 32 Data Ascii: ontent:"\e115"}.glyphicon-shopping-cart:before{content:"\e116"}.glyphicon-folder-close:before{content:"\e117"}.glyphicon-folder-open:before{content:"\e118"}.glyphicon-resize-vertical:before{content:"\e119"}.glyphicon-resize-horizontal:before{content:"\e12
2024-04-19 05:31:49 UTC	1369	IN	Data Raw: 6e 2d 70 75 73 68 70 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 75 73 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 67 62 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 6f 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 35 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 6f 72 74 2d 62 79 2d 61 6c 70 68 61 62 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 35 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 6f 72 74 2d 62 79 2d 61 6c 70 68 61 62 65 74 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 35 32 22 7d 2e Data Ascii: n-pushpin:before{content:"\e146"}.glyphicon-usd:before{content:"\e148"}.glyphicon-gbp:before{content:"\e149"}.glyphicon-sort:before{content:"\e150"}.glyphicon-sort-by-alphabet:before{content:"\e151"}.glyphicon-sort-by-alphabet-alt:before{content:"\e152"}.
2024-04-19 05:31:49 UTC	1369	IN	Data Raw: 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 61 6e 73 66 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 75 74 6c 65 72 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 65 61 64 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 38 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6f 6d 70 72 65 73 73 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 38 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 61 72 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 38 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 68 6f 6e 65 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 Data Ascii: }.glyphicon-transfer:before{content:"\e178"}.glyphicon-cutlery:before{content:"\e179"}.glyphicon-header:before{content:"\e180"}.glyphicon-compressed:before{content:"\e181"}.glyphicon-earphone:before{content:"\e182"}.glyphicon-phone-alt:before{content:"\e1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49828	104.26.6.173	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:48 UTC	571	OUT	GET /ionicons/1.5.2/css/ionicons.min.css HTTP/1.1 Host: code.ionicframework.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.1040now.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:49 UTC	1059	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:31:49 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 13 Apr 2023 16:20:19 GMT Access-Control-Allow-Origin: * ETag: W/"64382bc3-a7f6" expires: Thu, 18 Apr 2024 12:03:11 GMT Cache-Control: max-age=31536000 x-proxy-cache: MISS X-GitHub-Request-Id: 89D8:2EB18:37B58B9:474EEDA:662109A5 Age: 18684 Via: 1.1 varnish X-Served-By: cache-pdk-katl1840048-PDK X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1713486026.878739,VS0,VE27 Vary: Accept-Encoding X-Fastly-Request-ID: 44592b4a97fa6d7c986c7e2b6d414f9a49267507 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oM8kxH8BY8Jo3k9DpjiuQTJL6lvS4nFh1td1919whdC3tUUhkL3OF4PyVmBHK18zO%2BPr3wI%2B2c%2B4jTq8dTG3v7lpK2WDzc29iAhEXu6yL7wvao6xHIA2UMN8jbdDwD5ZxDr6Y%2BSJ0%2FNq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a82afdd1344df-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 05:31:49 UTC	310	IN	Data Raw: 37 62 38 66 0d 0a 2f 2a 21 0a 20 20 49 6f 6e 69 63 6f 6e 73 2c 20 76 31 2e 35 2e 32 0a 20 20 43 72 65 61 74 65 64 20 62 79 20 42 65 6e 20 53 70 65 72 72 79 20 66 6f 72 20 74 68 65 20 49 6f 6e 69 63 20 46 72 61 6d 65 77 6f 72 6b 2c 20 68 74 74 70 3a 2f 2f 69 6f 6e 69 63 6f 6e 73 2e 63 6f 6d 2f 0a 20 20 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 62 65 6e 6a 73 70 65 72 72 79 20 20 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 69 6f 6e 69 63 66 72 61 6d 65 77 6f 72 6b 0a 20 20 4d 49 54 20 4c 69 63 65 6e 73 65 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 64 72 69 66 74 79 63 6f 2f 69 6f 6e 69 63 6f 6e 73 0a 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 49 6f 6e 69 63 6f 6e 73 22 Data Ascii: 7b8f/! Ionicons, v1.5.2 Created by Ben Sperry for the Ionic Framework, http://ionicons.com/ https://twitter.com/benjsperry https://twitter.com/ionicframework MIT License: https://github.com/driftyco/ionicons/@font-face{font-family:"Ionicons"
2024-04-19 05:31:49 UTC	1369	IN	Data Raw: 6f 6e 74 73 2f 69 6f 6e 69 63 6f 6e 73 2e 65 6f 74 3f 76 3d 31 2e 35 2e 32 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 69 6f 6e 69 63 6f 6e 73 2e 74 74 66 3f 76 3d 31 2e 35 2e 32 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 2c 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 69 6f 6e 69 63 6f 6e 73 2e 77 6f 66 66 3f 76 3d 31 2e 35 2e 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 69 6f 6e 69 63 6f 6e 73 2e 73 76 67 3f 76 3d 31 2e 35 2e 32 23 49 6f 6e 69 63 6f 6e 73 22 29 20 66 6f 72 6d 61 74 28 22 73 76 67 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d Data Ascii: onts/ionicons.eot?v=1.5.2#iefix") format("embedded-opentype"),url("../fonts/ionicons.ttf?v=1.5.2") format("truetype"),url("../fonts/ionicons.woff?v=1.5.2") format("woff"),url("../fonts/ionicons.svg?v=1.5.2#Ionicons") format("svg");font-weight:normal;font-
2024-04-19 05:31:49 UTC	1369	IN	Data Raw: 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 69 6e 62 6f 78 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 6b 65 79 70 61 64 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 6c 69 67 68 74 62 75 6c 62 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 6c 6f 63 61 74 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 6c 6f 63 61 74 69 6f 6e 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 6d 61 69 6c 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 6d 69 63 72 6f 70 68 6f 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 6d 69 78 65 72 3a Data Ascii: e:before,.ion-android-inbox:before,.ion-android-information:before,.ion-android-keypad:before,.ion-android-lightbulb:before,.ion-android-locate:before,.ion-android-location:before,.ion-android-mail:before,.ion-android-microphone:before,.ion-android-mixer:
2024-04-19 05:31:49 UTC	1369	IN	Data Raw: 2e 69 6f 6e 2d 61 72 72 6f 77 2d 72 65 73 69 7a 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 72 72 6f 77 2d 72 65 74 75 72 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 72 72 6f 77 2d 72 65 74 75 72 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 72 72 6f 77 2d 72 69 67 68 74 2d 61 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 72 72 6f 77 2d 72 69 67 68 74 2d 62 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 72 72 6f 77 2d 72 69 67 68 74 2d 63 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 72 72 6f 77 2d 73 68 72 69 6e 6b 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 72 72 6f 77 2d 73 77 61 70 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 72 72 6f 77 2d 75 70 2d 61 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 72 72 6f 77 2d 75 70 2d 62 3a 62 65 66 6f Data Ascii: .ion-arrow-resize:before,.ion-arrow-return-left:before,.ion-arrow-return-right:before,.ion-arrow-right-a:before,.ion-arrow-right-b:before,.ion-arrow-right-c:before,.ion-arrow-shrink:before,.ion-arrow-swap:before,.ion-arrow-up-a:before,.ion-arrow-up-b:befo
2024-04-19 05:31:49 UTC	1369	IN	Data Raw: 72 65 2c 2e 69 6f 6e 2d 64 69 73 63 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 64 6f 63 75 6d 65 6e 74 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 64 6f 63 75 6d 65 6e 74 2d 74 65 78 74 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 64 72 61 67 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 65 61 72 74 68 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 65 64 69 74 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 65 67 67 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 65 6a 65 63 74 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 65 6d 61 69 6c 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 65 79 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 65 79 65 2d 64 69 73 61 62 6c 65 64 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 66 65 6d 61 6c 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 66 69 6c 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d Data Ascii: re,.ion-disc:before,.ion-document:before,.ion-document-text:before,.ion-drag:before,.ion-earth:before,.ion-edit:before,.ion-egg:before,.ion-eject:before,.ion-email:before,.ion-eye:before,.ion-eye-disabled:before,.ion-female:before,.ion-filing:before,.ion-
2024-04-19 05:31:49 UTC	1369	IN	Data Raw: 72 72 6f 77 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 61 72 72 6f 77 2d 74 68 69 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 61 72 72 6f 77 2d 74 68 69 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 61 72 72 6f 77 2d 74 68 69 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 61 72 72 6f 77 2d 74 68 69 6e 2d 75 70 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 61 72 72 6f 77 2d 75 70 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 61 74 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 61 74 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f Data Ascii: rrow-right:before,.ion-ios7-arrow-thin-down:before,.ion-ios7-arrow-thin-left:before,.ion-ios7-arrow-thin-right:before,.ion-ios7-arrow-thin-up:before,.ion-ios7-arrow-up:before,.ion-ios7-at:before,.ion-ios7-at-outline:before,.ion-ios7-barcode:before,.ion-io
2024-04-19 05:31:49 UTC	1369	IN	Data Raw: 2d 69 6f 73 37 2d 63 6c 6f 73 65 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 63 6c 6f 75 64 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 63 6c 6f 75 64 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 63 6c 6f 75 64 79 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d Data Ascii: -ios7-close-outline:before,.ion-ios7-cloud:before,.ion-ios7-cloud-download:before,.ion-ios7-cloud-download-outline:before,.ion-ios7-cloud-outline:before,.ion-ios7-cloud-upload:before,.ion-ios7-cloud-upload-outline:before,.ion-ios7-cloudy:before,.ion-ios7-
2024-04-19 05:31:49 UTC	1369	IN	Data Raw: 68 6f 6d 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 68 6f 6d 65 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 69 6e 66 69 6e 69 74 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 69 6e 66 69 6e 69 74 65 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 69 6e 66 6f 72 6d 61 74 69 6f 6e 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 69 6e 66 6f 72 6d 61 74 69 6f 6e 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 69 6f 6e 69 63 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 6b 65 79 70 61 64 3a 62 65 66 6f Data Ascii: home:before,.ion-ios7-home-outline:before,.ion-ios7-infinite:before,.ion-ios7-infinite-outline:before,.ion-ios7-information:before,.ion-ios7-information-empty:before,.ion-ios7-information-outline:before,.ion-ios7-ionic-outline:before,.ion-ios7-keypad:befo
2024-04-19 05:31:49 UTC	1369	IN	Data Raw: 2d 70 65 72 73 6f 6e 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 70 65 72 73 6f 6e 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 70 65 72 73 6f 6e 61 64 64 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 70 65 72 73 6f 6e 61 64 64 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 70 68 6f 74 6f 73 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 70 68 6f 74 6f 73 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 70 69 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 70 69 65 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 70 6c 61 79 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 70 6c 61 79 2d 6f 75 74 Data Ascii: -person:before,.ion-ios7-person-outline:before,.ion-ios7-personadd:before,.ion-ios7-personadd-outline:before,.ion-ios7-photos:before,.ion-ios7-photos-outline:before,.ion-ios7-pie:before,.ion-ios7-pie-outline:before,.ion-ios7-play:before,.ion-ios7-play-out
2024-04-19 05:31:49 UTC	1369	IN	Data Raw: 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 73 74 61 72 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 73 74 61 72 2d 68 61 6c 66 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 73 74 61 72 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 73 74 6f 70 77 61 74 63 68 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 73 74 6f 70 77 61 74 63 68 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 73 75 6e 6e 79 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 73 75 6e 6e 79 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 74 65 6c 65 70 68 6f 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 69 6f 73 37 2d 74 65 6c 65 70 68 6f 6e 65 2d 6f 75 74 6c 69 Data Ascii: :before,.ion-ios7-star:before,.ion-ios7-star-half:before,.ion-ios7-star-outline:before,.ion-ios7-stopwatch:before,.ion-ios7-stopwatch-outline:before,.ion-ios7-sunny:before,.ion-ios7-sunny-outline:before,.ion-ios7-telephone:before,.ion-ios7-telephone-outli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49830	13.32.66.84	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:49 UTC	382	OUT	GET /seals/privacy/12081-header.gif HTTP/1.1 Host: dw26xg4lubooo.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:31:49 UTC	907	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 4255 Connection: close Date: Fri, 19 Apr 2024 05:31:49 GMT Last-Modified: Fri, 19 Apr 2024 05:16:21 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400, must-revalidate CF-Cache-Status: EXPIRED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KL1hCOqf30iXYmgUlYsaSecI36FpWK1Hq9vItIaO5YT2maTJbfydxjuzHCA6KQiRudcAODTL258As9ivfKZIa7LRfQ7ea6CoGkJHEa1f8n6S3hcsoBmhMOcGL2MNJI7ZwkiUmtcv%2BIa7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a82af3dde3ae0-IAD X-Cache: Hit from cloudfront Via: 1.1 858d9017c04d21c6e5b9054c0d1959b4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C4 X-Amz-Cf-Id: qJlx3RKKvPtPOb7PB9m5XTaRstbsPQb37Jl2QQi4mhPd8ejdC_DQhQ==
2024-04-19 05:31:49 UTC	4255	IN	Data Raw: 47 49 46 38 39 61 96 00 28 00 f6 7f 00 ff ff ff a0 a0 a0 fd fd fd 32 7b 3d ff ff 81 59 b1 68 4f ac 5f 39 8a 46 21 5b 2a 48 a9 58 40 9a 4f 1d 55 26 1a 4b 21 67 b8 74 23 61 2d 1a 36 18 20 3f 1f 42 9e 51 3b 8f 48 2b 63 31 29 6c 33 18 43 1d 37 85 44 2a 70 35 71 cb 67 35 82 41 3a 8d 47 74 be 80 45 a2 54 23 49 24 17 2a 13 25 65 2f 29 5b 2d 57 97 62 27 69 31 3f 97 4d 2f 6f 38 21 45 21 3d 93 4b 75 d2 6c 32 74 3b 26 4e 27 0f 21 0d 1f 50 24 28 54 2b 47 a6 57 df e5 e0 13 38 17 6b c0 60 2c 74 38 86 d3 84 e1 eb e3 2f 78 3b 19 30 16 1a 3c 1a 71 97 4e 14 3d 1a 3e 95 4c 33 80 3f 5a 79 5f 37 87 44 6e c4 65 6c 87 72 83 a8 8a 11 34 16 10 1a 0a 8a e0 7e 3c 92 4a 49 53 52 c5 c7 c8 69 a5 73 7b 98 7d f7 fa f8 11 30 13 82 be 62 62 67 6b 7d d3 77 a6 c7 a9 90 bb 97 f3 f4 f3 a6 b6 Data Ascii: GIF89a(2{=YhO_9F![HX@OU&K!gt#a-6 ?BQ;H+c1)l3C7Dp5qg5A:GtET#I$*%e/)[-Wb'i1?M/o8!E!=Kul2t;&N'!P$(T+GW8k`,t8/x;0<qN=>L3?Zy_7Dnelr4~<JISRis{}0bbgk}w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49824	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:51 UTC	729	OUT	GET /partnerpp.htm HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:51 UTC	325	IN	HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Tue, 02 Jan 2024 19:15:00 GMT Accept-Ranges: bytes ETag: "bf4a29fbaf3dda1:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:50 GMT Connection: close Content-Length: 11570
2024-04-19 05:31:51 UTC	11570	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 09 3c 68 65 61 64 3e 0d 0a 09 09 3c 74 69 74 6c 65 3e 31 30 34 30 4e 6f 77 20 3a 3a 20 4f 6e 6c 69 6e 65 20 54 61 78 20 50 72 65 70 61 72 61 74 69 6f 6e 20 26 20 45 6c 65 63 74 72 6f 6e 69 63 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0d 0a 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 62 6f 6f 6b 6d 61 72 6b 28 29 7b 0d 0a 20 20 20 20 76 61 72 20 74 69 74 6c 65 3d 22 74 69 74 6c 65 22 0d 0a 20 20 20 20 76 61 72 20 75 72 6c 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 64 6f 6d 61 69 6e 2e 63 6f 6d 22 0d 0a 0d 0a 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 73 69 64 65 62 61 72 29 20 77 69 6e 64 6f 77 2e 73 69 64 65 62 61 72 2e 61 64 64 50 61 6e 65 6c Data Ascii: <html><head><title>1040Now :: Online Tax Preparation & Electronic Filing</title><script type="text/javascript">function bookmark(){ var title="title" var url="http://www.domain.com" if (window.sidebar) window.sidebar.addPanel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49831	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:51 UTC	686	OUT	GET /images-ez/footer.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/partnerpp.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:51 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:24 GMT Accept-Ranges: bytes ETag: "80a6bd7e2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:51 GMT Connection: close Content-Length: 2717
2024-04-19 05:31:51 UTC	2717	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 04 b9 00 00 06 ad 00 00 08 b4 00 00 0a 9b ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 20 03 0c 03 01 11 00 02 11 01 03 11 01 ff c4 00 b0 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 Data Ascii: JFIFddDuckyF&Adobed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49835	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:52 UTC	437	OUT	GET /images-ez/footer.jpg HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:52 UTC	325	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Sep 2023 01:25:24 GMT Accept-Ranges: bytes ETag: "80a6bd7e2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:51 GMT Connection: close Content-Length: 2717
2024-04-19 05:31:52 UTC	2717	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 04 b9 00 00 06 ad 00 00 08 b4 00 00 0a 9b ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 20 03 0c 03 01 11 00 02 11 01 03 11 01 ff c4 00 b0 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 Data Ascii: JFIFddDuckyF&Adobed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49837	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:53 UTC	749	OUT	GET /1040now/Federal%20Tax%20Forms.htm HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:53 UTC	324	IN	HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Thu, 21 Sep 2023 01:25:00 GMT Accept-Ranges: bytes ETag: "103d5702aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:53 GMT Connection: close Content-Length: 58480
2024-04-19 05:31:53 UTC	16060	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0d 0a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 09 3c 68 65 61 64 3e 0d 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 3e 0d 0a 09 20 20 20 20 20 20 76 61 72 20 74 61 62 56 61 6c 75 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 55 52 4c 3b 0d 0a 09 20 20 20 20 20 20 76 61 72 20 75 72 6c 20 3d 20 22 22 3b 0d 0a 09 20 20 20 20 20 20 69 66 20 28 74 61 62 56 61 6c 75 65 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 23 22 29 20 3e 3d Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN""http://www.w3.org/TR/html4/loose.dtd"><html><head><script type="text/javascript" > var tabValue = document.URL; var url = ""; if (tabValue.lastIndexOf("#") >=
2024-04-19 05:31:53 UTC	16384	IN	Data Raw: 6e 3d 22 74 6f 70 22 20 77 69 64 74 68 3d 22 31 38 25 22 3e 3c 46 4f 4e 54 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 63 6f 6c 6f 72 3d 22 23 33 33 33 33 33 33 22 20 73 69 7a 65 3d 22 32 22 3e 0d 0a 09 09 09 09 09 09 3c 50 3e 3c 46 4f 4e 54 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 63 6f 6c 6f 72 3d 22 23 33 33 33 33 33 33 22 20 73 69 7a 65 3d 22 32 22 3e 4e 6f 20 53 74 61 74 65 20 54 61 78 3c 2f 46 4f 4e 54 3e 0d 0a 09 09 09 09 09 3c 2f 46 4f 4e 54 3e 3c 2f 50 3e 3c 2f 54 44 3e 0d 0a 09 09 09 09 3c 54 44 20 76 41 6c 69 67 6e 3d 22 74 6f 70 22 20 77 69 64 74 68 3d 22 33 35 25 22 3e 0d 0a 09 09 09 09 09 3c 50 3e 3c 46 4f 4e 54 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 63 6f 6c 6f 72 3d 22 23 33 33 33 33 33 33 22 20 73 69 7a 65 3d 22 32 22 3e 3c 2f 46 4f 4e Data Ascii: n="top" width="18%"><FONT face="Arial" color="#333333" size="2"><P><FONT face="Arial" color="#333333" size="2">No State Tax</FONT></FONT></P></TD><TD vAlign="top" width="35%"><P><FONT face="Arial" color="#333333" size="2"></FON
2024-04-19 05:31:53 UTC	16384	IN	Data Raw: 46 4f 4e 54 3e 3c 2f 50 3e 3c 2f 54 44 3e 0d 0a 09 09 09 09 3c 54 44 20 76 41 6c 69 67 6e 3d 22 74 6f 70 22 20 77 69 64 74 68 3d 22 33 35 25 22 3e 3c 46 4f 4e 54 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 63 6f 6c 6f 72 3d 22 23 33 33 33 33 33 33 22 20 73 69 7a 65 3d 22 32 22 3e 0d 0a 09 09 09 09 09 09 3c 50 3e 0d 0a 09 09 09 09 09 09 26 6e 62 73 70 3b 20 3c 2f 46 4f 4e 54 3e 3c 2f 50 3e 3c 2f 54 44 3e 0d 0a 09 09 09 3c 2f 54 52 3e 0d 0a 09 09 09 3c 54 52 3e 0d 0a 09 09 09 09 3c 54 44 20 76 41 6c 69 67 6e 3d 22 74 6f 70 22 20 77 69 64 74 68 3d 22 31 36 25 22 3e 0d 0a 09 09 09 09 09 3c 50 3e 3c 53 54 52 4f 4e 47 3e 3c 46 4f 4e 54 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 63 6f 6c 6f 72 3d 22 23 33 33 33 33 33 33 22 20 73 69 7a 65 3d 22 32 22 3e 4d 45 3c 2f Data Ascii: FONT></P></TD><TD vAlign="top" width="35%"><FONT face="Arial" color="#333333" size="2"><P>  </FONT></P></TD></TR><TR><TD vAlign="top" width="16%"><P><STRONG><FONT face="Arial" color="#333333" size="2">ME</
2024-04-19 05:31:53 UTC	9652	IN	Data Raw: 33 33 33 22 20 73 69 7a 65 3d 22 32 22 3e 50 41 3c 2f 46 4f 4e 54 3e 3c 2f 53 54 52 4f 4e 47 3e 3c 2f 50 3e 0d 0a 09 09 09 09 3c 2f 54 44 3e 0d 0a 09 09 09 09 3c 54 44 20 76 41 6c 69 67 6e 3d 22 74 6f 70 22 20 77 69 64 74 68 3d 22 32 32 25 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e 3c 46 4f 4e 54 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 73 69 7a 65 3d 22 32 22 3e 3c 46 4f 4e 54 20 63 6f 6c 6f 72 3d 22 23 33 33 33 33 33 33 22 3e 0d 0a 09 09 09 09 09 09 09 3c 50 3e 3c 53 54 52 4f 4e 47 3e 0d 0a 09 09 09 09 09 09 09 3c 46 4f 4e 54 20 63 6f 6c 6f 72 3d 22 23 33 33 33 33 33 33 22 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 73 69 7a 65 3d 22 32 22 3e 0d 0a 09 09 09 09 09 09 09 3c 46 4f 4e 54 20 63 6f 6c 6f 72 3d 22 23 33 33 33 33 33 33 22 20 73 69 7a 65 3d 22 32 Data Ascii: 333" size="2">PA</FONT></STRONG></P></TD><TD vAlign="top" width="22%" height="24"><FONT face="Arial" size="2"><FONT color="#333333"><P><STRONG><FONT color="#333333" face="Arial" size="2"><FONT color="#333333" size="2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49836	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:53 UTC	823	OUT	GET /mobile/Federal%20Tax%20Forms.htm HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.1040now.net/1040now/Federal%20Tax%20Forms.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:54 UTC	324	IN	HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Thu, 21 Sep 2023 01:26:44 GMT Accept-Ranges: bytes ETag: "0b261ae2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:53 GMT Connection: close Content-Length: 69023
2024-04-19 05:31:54 UTC	16060	IN	Data Raw: ef bb bf 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0d 0a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 31 30 34 30 4e 4f 57 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 43 53 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN""http://www.w3.org/TR/html4/loose.dtd"><html> <head> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>1040NOW</title> ... CS
2024-04-19 05:31:54 UTC	16384	IN	Data Raw: 74 68 3d 22 32 32 25 22 20 68 65 69 67 68 74 3d 22 32 38 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 50 3e 3c 53 54 52 4f 4e 47 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 46 4f 4e 54 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 63 6f 6c 6f 72 3d 22 23 33 33 33 33 33 33 22 20 73 69 7a 65 3d 22 32 22 3e 50 61 70 65 72 20 46 69 6c 69 6e 67 2a 2b 3c 2f 46 4f 4e 54 3e 3c 2f 53 54 52 4f 4e 47 3e 3c 2f 50 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 54 44 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 54 44 20 76 41 6c 69 67 6e 3d 22 74 6f 70 22 20 77 69 64 74 68 3d 22 31 38 25 22 20 68 65 69 67 68 74 3d 22 32 38 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 50 3e 3c 53 54 52 4f 4e 47 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 46 4f 4e 54 20 66 61 63 65 3d 22 41 72 69 61 Data Ascii: th="22%" height="28"><P><STRONG><FONT face="Arial" color="#333333" size="2">Paper Filing*+</FONT></STRONG></P></TD><TD vAlign="top" width="18%" height="28"><P><STRONG><FONT face="Aria
2024-04-19 05:31:54 UTC	16384	IN	Data Raw: 62 73 70 3b 26 6e 62 73 70 3b 26 6e 62 73 70 3b 20 3c 2f 46 4f 4e 54 3e 3c 2f 50 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 54 44 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 54 44 20 76 41 6c 69 67 6e 3d 22 74 6f 70 22 20 77 69 64 74 68 3d 22 31 38 25 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 46 4f 4e 54 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 63 6f 6c 6f 72 3d 22 23 33 33 33 33 33 33 22 20 73 69 7a 65 3d 22 32 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 50 3e 6e 2f 61 0d 0a 09 09 09 09 09 09 09 26 6e 62 73 70 3b 26 6e 62 73 70 3b 26 6e 62 73 70 3b 20 3c 2f 46 4f 4e 54 3e 3c 2f 50 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 54 44 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 54 44 20 76 41 6c 69 67 6e 3d 22 74 6f 70 22 20 77 69 64 74 68 3d 22 33 35 25 Data Ascii: bsp;   </FONT></P></TD><TD vAlign="top" width="18%"><FONT face="Arial" color="#333333" size="2"><P>n/a    </FONT></P></TD><TD vAlign="top" width="35%
2024-04-19 05:31:54 UTC	16384	IN	Data Raw: 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 50 3e 3c 53 54 52 4f 4e 47 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 46 4f 4e 54 20 63 6f 6c 6f 72 3d 22 23 33 33 33 33 33 33 22 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 73 69 7a 65 3d 22 32 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 46 4f 4e 54 20 63 6f 6c 6f 72 3d 22 23 33 33 33 33 33 33 22 20 73 69 7a 65 3d 22 32 22 3e 30 31 2f 32 30 32 33 3c 2f 46 4f 4e 54 3e 3c 2f 46 4f 4e 54 3e 3c 2f 53 54 52 4f 4e 47 3e 0d 0a 09 09 09 09 09 09 09 26 6e 62 73 70 3b 26 6e 62 73 70 3b 26 6e 62 73 70 3b 26 6e 62 73 70 3b 26 6e 62 73 70 3b 20 3c 2f 46 4f 4e 54 3e 3c 2f 46 4f 4e 54 3e 3c 2f 50 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 54 44 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 54 44 20 76 41 6c 69 67 6e 3d 22 74 6f 70 Data Ascii: ><P><STRONG><FONT color="#333333" face="Arial" size="2"><FONT color="#333333" size="2">01/2023</FONT></FONT></STRONG>      </FONT></FONT></P></TD><TD vAlign="top
2024-04-19 05:31:54 UTC	3811	IN	Data Raw: 70 3b 26 6e 62 73 70 3b 20 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 46 4f 4e 54 3e 3c 2f 50 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 54 44 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 54 44 20 76 41 6c 69 67 6e 3d 22 74 6f 70 22 20 77 69 64 74 68 3d 22 31 38 25 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 46 4f 4e 54 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 73 69 7a 65 3d 22 32 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 46 4f 4e 54 20 63 6f 6c 6f 72 3d 22 23 33 33 33 33 33 33 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 50 3e 3c 53 54 52 4f 4e 47 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 46 4f 4e 54 20 63 6f 6c 6f 72 3d 22 23 33 33 33 33 33 33 22 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 73 69 7a 65 3d 22 32 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 Data Ascii: p;  </FONT></P></TD><TD vAlign="top" width="18%"><FONT face="Arial" size="2"><FONT color="#333333"><P><STRONG><FONT color="#333333" face="Arial" size="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49838	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:57 UTC	737	OUT	GET /index.aspx?req1=email HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:57 UTC	355	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://www.1040now.net/main.aspx?req1=email X-AspNet-Version: 4.0.30319 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:57 GMT Connection: close Content-Length: 161
2024-04-19 05:31:57 UTC	161	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 31 30 34 30 6e 6f 77 2e 6e 65 74 2f 6d 61 69 6e 2e 61 73 70 78 3f 72 65 71 31 3d 65 6d 61 69 6c 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://www.1040now.net/main.aspx?req1=email">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49839	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:57 UTC	736	OUT	GET /main.aspx?req1=email HTTP/1.1 Host: www.1040now.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:57 UTC	298	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 X-AspNet-Version: 4.0.30319 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:57 GMT Connection: close Content-Length: 13103
2024-04-19 05:31:57 UTC	13103	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 3e 0d 0a 3c 68 74 6d 6c 20 78 73 6c 3a 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 78 6d 6c 6e 73 3a 78 73 6c 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 58 53 4c 2f 54 72 61 6e 73 66 6f 72 6d 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 73 74 72 69 63 74 22 20 78 6d 6c 6e 73 3a 6d 73 78 6d 6c 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 78 73 6c 74 22 20 78 6d 6c 6e 73 3a 61 73 70 3d 22 52 65 6d 6f 76 65 22 3e 0d 0a 3c 68 65 61 64 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" ><html xsl:version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns="http://www.w3.org/TR/xhtml1/strict" xmlns:msxml="urn:schemas-microsoft-com:xslt" xmlns:asp="Remove"><head>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49840	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:57 UTC	635	OUT	GET /main.css HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.1040now.net/main.aspx?req1=email Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:57 UTC	236	IN	HTTP/1.1 404 Not Found Content-Type: text/html X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:57 GMT Connection: close Content-Length: 1245
2024-04-19 05:31:57 UTC	1245	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - Fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49841	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:57 UTC	688	OUT	GET /images/Done.bmp HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/main.aspx?req1=email Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:58 UTC	323	IN	HTTP/1.1 200 OK Content-Type: image/bmp Last-Modified: Thu, 21 Sep 2023 01:25:11 GMT Accept-Ranges: bytes ETag: "901ccc762aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:57 GMT Connection: close Content-Length: 458
2024-04-19 05:31:58 UTC	458	IN	Data Raw: 42 4d ca 01 00 00 00 00 00 00 76 00 00 00 28 00 00 00 27 00 00 00 11 00 00 00 01 00 04 00 00 00 00 00 54 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 80 00 00 00 80 80 00 80 00 00 00 80 00 80 00 80 80 00 00 c0 c0 c0 00 80 80 80 00 00 00 ff 00 00 ff 00 00 00 ff ff 00 ff 00 00 00 ff 00 ff 00 ff ff 00 00 ff ff ff 00 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 40 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc c0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f0 ff fc cc cc cf ff ff cc cc ff fc cf fc cf ff cc cc ff ff f0 ff fc cf ff cc ff fc cf fc cf fc cf fc cf fc cf fc cf ff f0 ff fc cf ff fc cf fc cf fc cf fc cf fc cf fc cf ff Data Ascii: BMv('TDDDDDDDDDDDDDDDDDDD@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49842	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:31:58 UTC	432	OUT	GET /images/Done.bmp HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:31:58 UTC	323	IN	HTTP/1.1 200 OK Content-Type: image/bmp Last-Modified: Thu, 21 Sep 2023 01:25:11 GMT Accept-Ranges: bytes ETag: "901ccc762aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:31:58 GMT Connection: close Content-Length: 458
2024-04-19 05:31:58 UTC	458	IN	Data Raw: 42 4d ca 01 00 00 00 00 00 00 76 00 00 00 28 00 00 00 27 00 00 00 11 00 00 00 01 00 04 00 00 00 00 00 54 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 80 00 00 00 80 80 00 80 00 00 00 80 00 80 00 80 80 00 00 c0 c0 c0 00 80 80 80 00 00 00 ff 00 00 ff 00 00 00 ff ff 00 ff 00 00 00 ff 00 ff 00 ff ff 00 00 ff ff ff 00 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 40 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc c0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f0 ff fc cc cc cf ff ff cc cc ff fc cf fc cf ff cc cc ff ff f0 ff fc cf ff cc ff fc cf fc cf fc cf fc cf fc cf fc cf ff f0 ff fc cf ff fc cf fc cf fc cf fc cf fc cf fc cf ff Data Ascii: BMv('TDDDDDDDDDDDDDDDDDDD@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49821	3.161.163.32	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:01 UTC	589	OUT	GET /privacy-seal/1040Now/asc?rid=202ca784-86d2-499e-8585-821c00075510 HTTP/1.1 Host: privacy-policy.truste.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.1040now.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49844	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:03 UTC	745	OUT	GET /1040now/1040Now%20Pricing.htm HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:32:03 UTC	324	IN	HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Thu, 21 Sep 2023 01:24:58 GMT Accept-Ranges: bytes ETag: "50602a6f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:32:02 GMT Connection: close Content-Length: 4411
2024-04-19 05:32:03 UTC	4411	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 09 3c 68 65 61 64 3e 0d 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 3e 0d 0a 09 20 20 20 20 20 20 76 61 72 20 74 61 62 56 61 6c 75 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 55 52 4c 3b 0d 0a 09 20 20 20 20 20 20 76 61 72 20 75 72 6c 20 3d 20 22 22 3b 0d 0a 09 20 20 20 20 20 20 69 66 20 28 74 61 62 56 61 6c 75 65 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 23 22 29 20 3e 3d 20 30 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 20 3d 20 74 61 62 56 61 6c 75 65 2e 73 75 62 73 74 72 69 6e 67 28 74 61 62 56 61 6c 75 65 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 23 22 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 22 2e Data Ascii: <html><head><script type="text/javascript" > var tabValue = document.URL; var url = ""; if (tabValue.lastIndexOf("#") >= 0) url = tabValue.substring(tabValue.lastIndexOf("#")); document.location = ".

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49843	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:03 UTC	718	OUT	GET /1040now/images/1040header2004-01.gif HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/1040now/1040Now%20Pricing.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:32:03 UTC	324	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Thu, 21 Sep 2023 01:25:04 GMT Accept-Ranges: bytes ETag: "90bfb4722aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:32:02 GMT Connection: close Content-Length: 4256
2024-04-19 05:32:03 UTC	4256	IN	Data Raw: 47 49 46 38 37 61 3d 02 29 00 f7 00 00 00 00 00 80 00 00 00 80 00 80 80 00 00 00 80 80 00 80 00 80 80 c0 c0 c0 c0 dc c0 a6 ca f0 00 00 00 00 00 2a 00 00 55 00 00 7f 00 00 aa 00 00 d4 00 2a 00 00 2a 2a 00 2a 55 00 2a 7f 00 2a aa 00 2a d4 00 55 00 00 55 2a 00 55 55 00 55 7f 00 55 aa 00 55 d4 00 7f 00 00 7f 2a 00 7f 55 00 7f 7f 00 7f aa 00 7f d4 00 aa 00 00 aa 2a 00 aa 55 00 aa 7f 00 aa aa 00 aa d4 00 d4 00 00 d4 2a 00 d4 55 00 d4 7f 00 d4 aa 00 d4 d4 2a 00 00 2a 00 2a 2a 00 55 2a 00 7f 2a 00 aa 2a 00 d4 2a 2a 00 2a 2a 2a 2a 2a 55 2a 2a 7f 2a 2a aa 2a 2a d4 2a 55 00 2a 55 2a 2a 55 55 2a 55 7f 2a 55 aa 2a 55 d4 2a 7f 00 2a 7f 2a 2a 7f 55 2a 7f 7f 2a 7f aa 2a 7f d4 2a aa 00 2a aa 2a 2a aa 55 2a aa 7f 2a aa aa 2a aa d4 2a d4 00 2a d4 2a 2a d4 55 2a d4 7f 2a d4 Data Ascii: GIF87a=)U*UUUUUUUUUUU*U******U****UU*UUUUU**U***U***U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49845	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:03 UTC	816	OUT	GET /mobile/1040Now%20Pricing.html HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.1040now.net/1040now/1040Now%20Pricing.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:32:03 UTC	323	IN	HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Thu, 21 Sep 2023 01:25:43 GMT Accept-Ranges: bytes ETag: "60f878a2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:32:02 GMT Connection: close Content-Length: 2558
2024-04-19 05:32:03 UTC	2558	IN	Data Raw: ef bb bf 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0d 0a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 09 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 31 30 34 30 4e 4f 57 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 43 53 53 20 2d Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN""http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>1040NOW</title> ... CSS -

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49846	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:03 UTC	453	OUT	GET /1040now/images/1040header2004-01.gif HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:32:03 UTC	324	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Thu, 21 Sep 2023 01:25:04 GMT Accept-Ranges: bytes ETag: "90bfb4722aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:32:03 GMT Connection: close Content-Length: 4256
2024-04-19 05:32:03 UTC	4256	IN	Data Raw: 47 49 46 38 37 61 3d 02 29 00 f7 00 00 00 00 00 80 00 00 00 80 00 80 80 00 00 00 80 80 00 80 00 80 80 c0 c0 c0 c0 dc c0 a6 ca f0 00 00 00 00 00 2a 00 00 55 00 00 7f 00 00 aa 00 00 d4 00 2a 00 00 2a 2a 00 2a 55 00 2a 7f 00 2a aa 00 2a d4 00 55 00 00 55 2a 00 55 55 00 55 7f 00 55 aa 00 55 d4 00 7f 00 00 7f 2a 00 7f 55 00 7f 7f 00 7f aa 00 7f d4 00 aa 00 00 aa 2a 00 aa 55 00 aa 7f 00 aa aa 00 aa d4 00 d4 00 00 d4 2a 00 d4 55 00 d4 7f 00 d4 aa 00 d4 d4 2a 00 00 2a 00 2a 2a 00 55 2a 00 7f 2a 00 aa 2a 00 d4 2a 2a 00 2a 2a 2a 2a 2a 55 2a 2a 7f 2a 2a aa 2a 2a d4 2a 55 00 2a 55 2a 2a 55 55 2a 55 7f 2a 55 aa 2a 55 d4 2a 7f 00 2a 7f 2a 2a 7f 55 2a 7f 7f 2a 7f aa 2a 7f d4 2a aa 00 2a aa 2a 2a aa 55 2a aa 7f 2a aa aa 2a aa d4 2a d4 00 2a d4 2a 2a d4 55 2a d4 7f 2a d4 Data Ascii: GIF87a=)U*UUUUUUUUUUU*U******U****UU*UUUUU**U***U***U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49848	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:05 UTC	742	OUT	GET /1040now/1040Now%20Year.htm HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:32:05 UTC	324	IN	HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Thu, 21 Sep 2023 01:24:58 GMT Accept-Ranges: bytes ETag: "3032786f2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:32:05 GMT Connection: close Content-Length: 1478
2024-04-19 05:32:05 UTC	1478	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 09 3c 68 65 61 64 3e 0d 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 3e 0d 0a 09 20 20 20 20 20 20 76 61 72 20 74 61 62 56 61 6c 75 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 55 52 4c 3b 0d 0a 09 20 20 20 20 20 20 76 61 72 20 75 72 6c 20 3d 20 22 22 3b 0d 0a 09 20 20 20 20 20 20 69 66 20 28 74 61 62 56 61 6c 75 65 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 23 22 29 20 3e 3d 20 30 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 20 3d 20 74 61 62 56 61 6c 75 65 2e 73 75 62 73 74 72 69 6e 67 28 74 61 62 56 61 6c 75 65 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 23 22 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 22 2e Data Ascii: <html><head><script type="text/javascript" > var tabValue = document.URL; var url = ""; if (tabValue.lastIndexOf("#") >= 0) url = tabValue.substring(tabValue.lastIndexOf("#")); document.location = ".

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49847	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:05 UTC	810	OUT	GET /mobile/1040Now%20Year.html HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.1040now.net/1040now/1040Now%20Year.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:32:06 UTC	324	IN	HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Mon, 04 Dec 2023 20:05:27 GMT Accept-Ranges: bytes ETag: "2fdb6039ed26da1:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:32:05 GMT Connection: close Content-Length: 2452
2024-04-19 05:32:06 UTC	2452	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 31 30 34 30 4e 4f 57 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 43 53 53 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 33 2e 32 2e 30 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 Data Ascii: <html> <head> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>1040NOW</title> ... CSS --> <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.mi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49849	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:07 UTC	741	OUT	GET /1040now/1040now%20FAQ.htm HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:32:07 UTC	324	IN	HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Thu, 21 Sep 2023 01:24:53 GMT Accept-Ranges: bytes ETag: "0ce1e6c2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:32:06 GMT Connection: close Content-Length: 44001
2024-04-19 05:32:07 UTC	16060	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 09 3c 68 65 61 64 3e 0d 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 3e 0d 0a 09 20 20 20 20 20 20 76 61 72 20 74 61 62 56 61 6c 75 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 55 52 4c 3b 0d 0a 09 20 20 20 20 20 20 76 61 72 20 75 72 6c 20 3d 20 22 22 3b 0d 0a 09 20 20 20 20 20 20 69 66 20 28 74 61 62 56 61 6c 75 65 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 23 22 29 20 3e 3d 20 30 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 20 3d 20 74 61 62 56 61 6c 75 65 2e 73 75 62 73 74 72 69 6e 67 28 74 61 62 56 61 6c 75 65 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 23 22 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 22 2e Data Ascii: <html><head><script type="text/javascript" > var tabValue = document.URL; var url = ""; if (tabValue.lastIndexOf("#") >= 0) url = tabValue.substring(tabValue.lastIndexOf("#")); document.location = ".
2024-04-19 05:32:07 UTC	16384	IN	Data Raw: 6e 6c 69 6e 65 20 0d 0a 09 09 09 09 09 09 09 53 65 72 76 69 63 65 3f 3c 2f 61 3e 3c 2f 70 3e 0d 0a 09 09 09 3c 2f 62 6c 6f 63 6b 71 75 6f 74 65 3e 0d 0a 09 09 09 3c 64 69 72 3e 0d 0a 09 09 09 09 3c 64 69 72 3e 0d 0a 09 09 09 09 09 3c 2f 49 3e 3c 70 3e 4e 6f 2c 20 79 6f 75 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 64 6f 77 6e 6c 6f 61 64 20 61 6e 79 20 6f 74 68 65 72 20 73 6f 66 74 77 61 72 65 2e 20 54 68 65 20 6f 6e 6c 79 20 73 6f 66 74 77 61 72 65 20 79 6f 75 20 0d 0a 09 09 09 09 09 09 6e 65 65 64 20 66 6f 72 20 76 69 65 77 69 6e 67 20 61 6e 64 20 70 72 69 6e 74 69 6e 67 20 6f 66 20 79 6f 75 72 20 74 61 78 20 72 65 74 75 72 6e 20 69 73 20 41 64 6f 62 65 ae 20 41 63 72 6f 62 61 74 ae 20 52 65 61 64 65 72 ae 20 61 73 20 0d 0a 09 09 09 09 09 09 73 74 Data Ascii: nline Service?</a></p></blockquote><dir><dir></I><p>No, you do not need to download any other software. The only software you need for viewing and printing of your tax return is Adobe Acrobat Reader as st
2024-04-19 05:32:07 UTC	11557	IN	Data Raw: 3c 2f 41 3e 3c 42 52 3e 0d 0a 09 09 09 09 09 09 3c 41 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 63 63 65 73 73 69 64 61 68 6f 2e 6f 72 67 2f 73 65 63 75 72 65 2f 69 73 74 63 2f 72 65 66 75 6e 64 2f 73 74 61 74 75 73 2e 68 74 6d 6c 22 20 74 61 72 67 65 74 3d 22 63 61 22 3e 3c 53 54 52 4f 4e 47 3e 0d 0a 09 09 09 09 09 09 09 09 49 44 3c 2f 53 54 52 4f 4e 47 3e 20 26 6e 62 73 70 3b 54 61 78 20 52 65 66 75 6e 64 20 53 74 61 74 75 73 3c 2f 41 3e 3c 42 52 3e 0d 0a 09 09 09 09 09 09 3c 41 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 76 65 6e 75 65 2e 73 74 61 74 65 2e 69 6c 2e 75 73 2f 61 70 70 2f 72 65 66 75 6e 64 2f 73 65 72 76 6c 65 74 2f 52 65 66 75 6e 64 53 74 61 74 75 73 22 20 74 61 72 67 65 74 3d 22 63 61 22 3e 0d 0a 09 Data Ascii: </A><BR><A href="https://www.accessidaho.org/secure/istc/refund/status.html" target="ca"><STRONG>ID</STRONG>  Tax Refund Status</A><BR><A href="https://www.revenue.state.il.us/app/refund/servlet/RefundStatus" target="ca">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49850	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:07 UTC	807	OUT	GET /mobile/1040now%20FAQ.htm HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.1040now.net/1040now/1040now%20FAQ.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:32:07 UTC	325	IN	HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Fri, 19 Jan 2024 14:09:39 GMT Accept-Ranges: bytes ETag: "d0721824e14ada1:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:32:06 GMT Connection: close Content-Length: 44386
2024-04-19 05:32:07 UTC	16059	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 31 30 34 30 4e 4f 57 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 43 53 53 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 33 2e 32 2e 30 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 Data Ascii: <html> <head> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>1040NOW</title> ... CSS --> <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.mi
2024-04-19 05:32:07 UTC	16384	IN	Data Raw: 09 3c 64 69 72 3e 0d 0a 09 09 09 09 09 3c 2f 49 3e 3c 70 3e 59 6f 75 20 6e 65 65 64 20 74 68 65 20 73 61 6d 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 73 20 69 66 20 79 6f 75 20 66 69 6c 65 20 61 20 74 72 61 64 69 74 69 6f 6e 61 6c 20 70 61 70 65 72 20 72 65 74 75 72 6e 2e 20 57 65 20 0d 0a 09 09 09 09 09 09 68 61 76 65 20 61 20 54 61 78 20 46 69 6c 69 6e 67 20 63 68 65 63 6b 6c 69 73 74 20 74 68 61 74 20 79 6f 75 20 63 61 6e 20 72 65 66 65 72 20 74 6f 20 69 6e 20 74 68 65 20 70 72 6f 63 65 73 73 20 6f 66 20 67 61 74 68 65 72 69 6e 67 20 0d 0a 09 09 09 09 09 09 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 70 72 65 70 61 72 65 20 79 6f 75 72 20 74 61 78 20 72 65 74 75 72 6e 2e 26 6e 62 73 70 3b 3c 2f 70 3e 0d 0a 09 09 09 09 3c 2f 64 69 72 3e 0d 0a 09 09 Data Ascii: <dir></I><p>You need the same information as if you file a traditional paper return. We have a Tax Filing checklist that you can refer to in the process of gathering information to prepare your tax return. </p></dir>
2024-04-19 05:32:07 UTC	11943	IN	Data Raw: 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 63 74 2e 67 6f 76 2f 6d 79 72 65 66 75 6e 64 22 0d 0a 09 09 09 09 09 09 09 74 61 72 67 65 74 3d 22 63 61 22 3e 3c 53 54 52 4f 4e 47 3e 43 54 3c 2f 53 54 52 4f 4e 47 3e 20 26 6e 62 73 70 3b 54 61 78 20 52 65 66 75 6e 64 20 53 74 61 74 75 73 3c 2f 41 3e 3c 42 52 3e 0d 0a 09 09 09 09 09 09 3c 41 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 79 74 61 78 2e 64 63 2e 67 6f 76 22 0d 0a 09 09 09 09 09 09 09 74 61 72 67 65 74 3d 22 63 61 22 3e 3c 53 54 52 4f 4e 47 3e 44 43 3c 2f 53 54 52 4f 4e 47 3e 20 26 6e 62 73 70 3b 54 61 78 20 52 65 66 75 6e 64 20 53 74 61 74 75 73 3c 2f 41 3e 3c 42 52 3e 0d 0a 09 09 09 09 09 09 3c 41 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 6f 72 77 65 62 2e 72 65 76 65 6e 75 65 2e Data Ascii: href="http://www.ct.gov/myrefund"target="ca"><STRONG>CT</STRONG>  Tax Refund Status</A><BR><A href="https://mytax.dc.gov"target="ca"><STRONG>DC</STRONG>  Tax Refund Status</A><BR><A href="https://dorweb.revenue.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49851	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:09 UTC	741	OUT	GET /1040now/1040Now%20FAQ.htm HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:32:09 UTC	324	IN	HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Thu, 21 Sep 2023 01:24:53 GMT Accept-Ranges: bytes ETag: "0ce1e6c2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:32:09 GMT Connection: close Content-Length: 44001
2024-04-19 05:32:09 UTC	16060	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 09 3c 68 65 61 64 3e 0d 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 3e 0d 0a 09 20 20 20 20 20 20 76 61 72 20 74 61 62 56 61 6c 75 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 55 52 4c 3b 0d 0a 09 20 20 20 20 20 20 76 61 72 20 75 72 6c 20 3d 20 22 22 3b 0d 0a 09 20 20 20 20 20 20 69 66 20 28 74 61 62 56 61 6c 75 65 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 23 22 29 20 3e 3d 20 30 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 20 3d 20 74 61 62 56 61 6c 75 65 2e 73 75 62 73 74 72 69 6e 67 28 74 61 62 56 61 6c 75 65 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 23 22 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 22 2e Data Ascii: <html><head><script type="text/javascript" > var tabValue = document.URL; var url = ""; if (tabValue.lastIndexOf("#") >= 0) url = tabValue.substring(tabValue.lastIndexOf("#")); document.location = ".
2024-04-19 05:32:09 UTC	16384	IN	Data Raw: 6e 6c 69 6e 65 20 0d 0a 09 09 09 09 09 09 09 53 65 72 76 69 63 65 3f 3c 2f 61 3e 3c 2f 70 3e 0d 0a 09 09 09 3c 2f 62 6c 6f 63 6b 71 75 6f 74 65 3e 0d 0a 09 09 09 3c 64 69 72 3e 0d 0a 09 09 09 09 3c 64 69 72 3e 0d 0a 09 09 09 09 09 3c 2f 49 3e 3c 70 3e 4e 6f 2c 20 79 6f 75 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 64 6f 77 6e 6c 6f 61 64 20 61 6e 79 20 6f 74 68 65 72 20 73 6f 66 74 77 61 72 65 2e 20 54 68 65 20 6f 6e 6c 79 20 73 6f 66 74 77 61 72 65 20 79 6f 75 20 0d 0a 09 09 09 09 09 09 6e 65 65 64 20 66 6f 72 20 76 69 65 77 69 6e 67 20 61 6e 64 20 70 72 69 6e 74 69 6e 67 20 6f 66 20 79 6f 75 72 20 74 61 78 20 72 65 74 75 72 6e 20 69 73 20 41 64 6f 62 65 ae 20 41 63 72 6f 62 61 74 ae 20 52 65 61 64 65 72 ae 20 61 73 20 0d 0a 09 09 09 09 09 09 73 74 Data Ascii: nline Service?</a></p></blockquote><dir><dir></I><p>No, you do not need to download any other software. The only software you need for viewing and printing of your tax return is Adobe Acrobat Reader as st
2024-04-19 05:32:09 UTC	11557	IN	Data Raw: 3c 2f 41 3e 3c 42 52 3e 0d 0a 09 09 09 09 09 09 3c 41 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 63 63 65 73 73 69 64 61 68 6f 2e 6f 72 67 2f 73 65 63 75 72 65 2f 69 73 74 63 2f 72 65 66 75 6e 64 2f 73 74 61 74 75 73 2e 68 74 6d 6c 22 20 74 61 72 67 65 74 3d 22 63 61 22 3e 3c 53 54 52 4f 4e 47 3e 0d 0a 09 09 09 09 09 09 09 09 49 44 3c 2f 53 54 52 4f 4e 47 3e 20 26 6e 62 73 70 3b 54 61 78 20 52 65 66 75 6e 64 20 53 74 61 74 75 73 3c 2f 41 3e 3c 42 52 3e 0d 0a 09 09 09 09 09 09 3c 41 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 76 65 6e 75 65 2e 73 74 61 74 65 2e 69 6c 2e 75 73 2f 61 70 70 2f 72 65 66 75 6e 64 2f 73 65 72 76 6c 65 74 2f 52 65 66 75 6e 64 53 74 61 74 75 73 22 20 74 61 72 67 65 74 3d 22 63 61 22 3e 0d 0a 09 Data Ascii: </A><BR><A href="https://www.accessidaho.org/secure/istc/refund/status.html" target="ca"><STRONG>ID</STRONG>  Tax Refund Status</A><BR><A href="https://www.revenue.state.il.us/app/refund/servlet/RefundStatus" target="ca">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49864	104.22.71.197	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:17 UTC	526	OUT	GET /menu/page.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:17 UTC	938	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:17 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=86400, stale-while-revalidate=30, public Cf-Bgj: minify ETag: W/"e346c2841e4abbb66ee259e9540abb61" NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aoX1tm9Q5UjxS6xBqlUdfbbNxCx9v3kocJnsX5AHJSTeMf%2FexS92We3yPXFltvoyf50t83podO6woGXr%2Fk%2FTE%2B%2BBYphiZzJ1sMqcsVTznO0jLogd0BxuWGcbjsDravekRT0uL3at1372PH1vOyRVRlE2"}],"group":"cf-nel","max_age":604800} Vary: Accept-Encoding referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff CF-Cache-Status: HIT Age: 22705 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 876a8362bd24ad58-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 05:32:17 UTC	431	IN	Data Raw: 62 62 62 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 7d 76 61 72 20 6e 2c 64 2c 73 2c 6c 2c 63 2c 75 2c 66 2c 6d 2c 65 2c 61 2c 74 2c 70 2c 79 2c 76 2c 68 3d 22 2e 42 52 51 6e 7a 4f 38 76 22 2c 5f 3d 6f 2e 68 65 61 64 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 5b 5d 2e 69 6e 64 65 78 4f 66 26 26 5f 26 26 28 69 2e 61 32 61 3d 69 2e 61 32 61 7c 7c 7b 7d 2c 6e 3d 69 2e 61 32 61 5f 63 6f 6e 66 69 67 3d 69 2e 61 32 61 5f 63 6f 6e 66 69 67 7c 7c 7b 7d 2c 65 3d 28 64 3d 6f 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 29 26 26 64 2e 73 72 63 3f 64 2e 73 72 63 3a 22 22 2c 4e 6f 64 65 4c 69 73 74 26 26 4e 6f 64 65 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 26 26 28 69 2e 61 32 61 2e 69 Data Ascii: bbb!function(o,i){function r(){}var n,d,s,l,c,u,f,m,e,a,t,p,y,v,h=".BRQnzO8v",_=o.head;"function"==typeof[].indexOf&&_&&(i.a2a=i.a2a\|\|{},n=i.a2a_config=i.a2a_config\|\|{},e=(d=o.currentScript)&&d.src?d.src:"",NodeList&&NodeList.prototype.forEach&&(i.a2a.i
2024-04-19 05:32:17 UTC	1369	IN	Data Raw: 29 3b 65 2e 61 32 61 5f 69 6e 64 65 78 7c 7c 6e 75 6c 6c 21 3d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 32 61 2d 75 72 6c 22 29 7c 7c 65 2e 6d 61 74 63 68 65 73 28 22 2e 61 32 61 5f 6b 69 74 20 2e 61 32 61 5f 64 64 22 29 7c 7c 28 65 2e 64 61 74 61 73 65 74 2e 61 32 61 55 72 6c 3d 61 2e 6c 69 6e 6b 75 72 6c 7c 7c 22 22 2c 61 2e 6c 69 6e 6b 6e 61 6d 65 26 26 28 65 2e 64 61 74 61 73 65 74 2e 61 32 61 54 69 74 6c 65 3d 61 2e 6c 69 6e 6b 6e 61 6d 65 29 29 7d 29 2c 64 65 6c 65 74 65 20 6e 2e 6c 69 6e 6b 75 72 6c 2c 64 65 6c 65 74 65 20 6e 2e 6c 69 6e 6b 6e 61 6d 65 7d 2c 69 2e 61 32 61 5f 69 6e 69 74 3d 69 2e 61 32 61 2e 69 6e 69 74 2c 21 64 7c 7c 64 2e 61 73 79 6e 63 7c 7c 64 2e 64 65 66 65 72 7c 7c 69 2e 61 32 61 2e 69 6e 69 74 28 Data Ascii: );e.a2a_index\|\|null!==e.getAttribute("data-a2a-url")\|\|e.matches(".a2a_kit .a2a_dd")\|\|(e.dataset.a2aUrl=a.linkurl\|\|"",a.linkname&&(e.dataset.a2aTitle=a.linkname))}),delete n.linkurl,delete n.linkname},i.a2a_init=i.a2a.init,!d\|\|d.async\|\|d.defer\|\|i.a2a.init(
2024-04-19 05:32:17 UTC	1210	IN	Data Raw: 65 72 76 69 63 65 73 2c 6f 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 29 7d 29 2c 65 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 2c 61 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 74 3d 65 2e 73 74 79 6c 65 2c 6e 3d 61 2e 73 74 79 6c 65 2c 65 2e 69 64 3d 66 2c 74 2e 77 69 64 74 68 3d 74 2e 68 65 69 67 68 74 3d 6e 2e 77 69 64 74 68 3d 6e 2e 68 65 69 67 68 74 3d 22 31 70 78 22 2c 74 2e 74 6f 70 3d 74 2e 6c 65 66 74 3d 74 2e 62 6f 72 64 65 72 3d 22 30 22 2c 74 2e 70 6f 73 69 74 69 6f 6e 3d 6e 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 74 2e 7a 49 6e 64 65 78 3d 6e 2e 7a 49 6e 64 65 78 3d 22 31 30 30 30 30 Data Ascii: ervices,o.getElementById(f).style.display="none")}),e=o.createElement("iframe"),a=o.createElement("div"),t=e.style,n=a.style,e.id=f,t.width=t.height=n.width=n.height="1px",t.top=t.left=t.border="0",t.position=n.position="absolute",t.zIndex=n.zIndex="10000
2024-04-19 05:32:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49879	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:18 UTC	812	OUT	GET /embed/s09YWoGtftM?autoplay=0&start=0&rel=0 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:18 UTC	2099	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 05:32:18 GMT Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Resource-Policy: cross-origin Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=f1-5tvjMEco; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_INFO1_LIVE=cgMzCAaLops; Domain=.youtube.com; Expires=Wed, 16-Oct-2024 05:32:18 GMT; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; Domain=.youtube.com; Expires=Wed, 16-Oct-2024 05:32:18 GMT; Path=/; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 49 66 38 34 35 6d 35 61 51 65 64 4a 4a 37 42 69 64 32 71 4e 7a 51 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="If845m5aQedJJ7Bid2qNzQ">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b 31 43 38 30 2d 31 43 38 38 2c 55 2b 32 30 42 34 2c 55 Data Ascii: C,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 20 68 72 65 66 3d 22 2f 73 2f 70 6c 61 79 65 72 2f 30 61 66 36 65 33 32 37 2f 77 77 77 2d 70 6c 61 79 65 72 2e 63 73 73 22 20 6e 61 6d 65 3d 22 77 77 77 2d 70 6c 61 79 65 72 22 20 6e 6f 6e 63 65 3d 22 4f 30 53 71 43 4d 50 55 66 64 4b 2d 44 30 4a 52 2d 71 41 75 67 51 22 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4f 30 53 71 43 4d 50 55 66 64 4b 2d 44 30 4a 52 2d 71 41 75 67 51 22 3e 68 74 6d 6c 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 7d 62 6f 64 79 20 7b 66 6f 6e 74 3a 20 31 32 70 78 20 52 6f 62 6f 74 6f 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 77 69 64 74 68 3a 20 Data Ascii: href="/s/player/0af6e327/www-player.css" name="www-player" nonce="O0SqCMPUfdK-D0JR-qAugQ"><style nonce="O0SqCMPUfdK-D0JR-qAugQ">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width:
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 29 3c 30 7d 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3a 6e 75 6c 6c 29 3b 76 61 72 20 69 73 50 72 65 72 65 6e 64 65 72 3d 28 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 3d 3d 22 70 72 65 72 65 6e 64 65 72 22 3b 76 61 72 20 76 4e 61 6d 65 3d 21 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 Data Ascii: )<0}ytcsi.setStart(w.performance?w.performance.timing.responseStart:null);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrer
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 61 72 69 5f 75 69 5f 73 74 61 74 75 73 5f 63 68 65 63 6b 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 73 69 6d 70 6c 65 5f 6d 69 78 65 64 5f 64 69 72 65 63 74 69 6f 6e 5f 66 6f 72 6d 61 74 74 65 64 5f 73 74 72 69 6e 67 73 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 74 68 75 6d 62 6e 61 69 6c 5f 70 72 65 6c 6f 61 64 69 6e 67 22 3a 74 72 75 65 2c 22 65 6d 62 65 64 73 5f 74 72 61 6e 73 70 6f 72 74 5f 75 73 65 5f 73 63 68 65 64 75 6c 65 72 22 3a 74 72 75 65 2c 22 65 6d 62 65 64 73 5f 77 65 62 5f 6e 77 6c 5f 64 69 73 61 62 6c 65 5f 6e 6f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 62 5f 72 65 70 6f 72 74 5f 6f 6e 5f 65 72 72 6f 72 73 63 72 65 65 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 62 5f 72 70 5f 69 6e 74 22 3a 74 72 Data Ascii: ari_ui_status_check":true,"disable_simple_mixed_direction_formatted_strings":true,"disable_thumbnail_preloading":true,"embeds_transport_use_scheduler":true,"embeds_web_nwl_disable_nocookie":true,"enable_ab_report_on_errorscreen":true,"enable_ab_rp_int":tr
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 72 75 65 2c 22 68 69 64 65 5f 65 6e 64 70 6f 69 6e 74 5f 6f 76 65 72 66 6c 6f 77 5f 6f 6e 5f 79 74 64 5f 64 69 73 70 6c 61 79 5f 61 64 5f 72 65 6e 64 65 72 65 72 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 65 6e 61 62 6c 65 5f 61 64 73 5f 63 6c 69 65 6e 74 5f 6d 6f 6e 69 74 6f 72 69 6e 67 5f 6c 6f 67 5f 74 76 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 65 6e 61 62 6c 65 5f 73 69 6e 67 6c 65 5f 76 69 64 65 6f 5f 76 6f 64 5f 69 76 61 72 5f 6f 6e 5f 70 61 63 66 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 66 6f 72 63 65 5f 64 65 62 75 67 5f 64 61 74 61 5f 66 6f 72 5f 63 6c 69 65 6e 74 5f 74 6d 70 5f 6c 6f 67 73 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 6c 6f 67 5f 74 72 69 67 67 65 72 5f 65 76 65 6e 74 73 5f 77 69 74 68 5f 64 65 62 75 67 5f 64 61 74 61 22 3a 74 72 Data Ascii: rue,"hide_endpoint_overflow_on_ytd_display_ad_renderer":true,"html5_enable_ads_client_monitoring_log_tv":true,"html5_enable_single_video_vod_ivar_on_pacf":true,"html5_force_debug_data_for_client_tmp_logs":true,"html5_log_trigger_events_with_debug_data":tr
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 65 22 3a 74 72 75 65 2c 22 75 73 65 5f 6e 65 77 5f 6e 77 6c 5f 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 75 73 65 5f 6e 65 77 5f 6e 77 6c 5f 73 74 77 22 3a 74 72 75 65 2c 22 75 73 65 5f 6e 65 77 5f 6e 77 6c 5f 77 74 73 22 3a 74 72 75 65 2c 22 75 73 65 5f 70 6c 61 79 65 72 5f 61 62 75 73 65 5f 62 67 5f 6c 69 62 72 61 72 79 22 3a 74 72 75 65 2c 22 75 73 65 5f 72 65 71 75 65 73 74 5f 74 69 6d 65 5f 6d 73 5f 68 65 61 64 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 73 65 73 73 69 6f 6e 5f 62 61 73 65 64 5f 73 61 6d 70 6c 69 6e 67 22 3a 74 72 75 65 2c 22 75 73 65 5f 74 73 5f 76 69 73 69 62 69 6c 69 74 79 6c 6f 67 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f Data Ascii: e":true,"use_new_nwl_initialization":true,"use_new_nwl_stw":true,"use_new_nwl_wts":true,"use_player_abuse_bg_library":true,"use_request_time_ms_header":true,"use_session_based_sampling":true,"use_ts_visibilitylogger":true,"use_watch_fragments2":true,"vss_
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 6e 64 5f 68 65 61 72 74 62 65 61 74 5f 69 6e 74 65 72 76 61 6c 5f 6d 73 22 3a 32 38 30 30 30 2c 22 77 65 62 5f 67 65 6c 5f 64 65 62 6f 75 6e 63 65 5f 6d 73 22 3a 31 30 30 30 30 2c 22 77 65 62 5f 6c 6f 67 67 69 6e 67 5f 6d 61 78 5f 62 61 74 63 68 22 3a 31 30 30 2c 22 77 65 62 5f 73 6d 6f 6f 74 68 6e 65 73 73 5f 74 65 73 74 5f 64 75 72 61 74 69 6f 6e 5f 6d 73 22 3a 30 2c 22 77 65 62 5f 73 6d 6f 6f 74 68 6e 65 73 73 5f 74 65 73 74 5f 6d 65 74 68 6f 64 22 3a 30 2c 22 77 69 6c 5f 69 63 6f 6e 5f 6d 61 78 5f 63 6f 6e 63 75 72 72 65 6e 74 5f 66 65 74 63 68 65 73 22 3a 39 39 39 39 2c 22 79 74 69 64 62 5f 72 65 6d 61 6b 65 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 79 74 69 64 62 5f 72 65 6f 70 65 6e 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 57 65 62 43 Data Ascii: nd_heartbeat_interval_ms":28000,"web_gel_debounce_ms":10000,"web_logging_max_batch":100,"web_smoothness_test_duration_ms":0,"web_smoothness_test_method":0,"wil_icon_max_concurrent_fetches":9999,"ytidb_remake_db_retries":3,"ytidb_reopen_db_retries":3,"WebC
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 73 4f 76 42 52 44 30 71 37 41 46 45 4e 36 49 5f 78 49 51 76 6f 71 77 42 52 44 4f 32 4c 41 46 45 4c 37 59 73 41 55 51 31 59 69 77 42 52 44 72 6b 36 34 46 45 4f 48 79 72 77 55 51 6b 76 32 33 49 68 43 39 77 37 41 46 4b 68 78 44 51 55 31 54 52 48 68 56 54 53 31 61 63 53 31 45 53 55 39 36 4f 55 46 32 62 58 42 6e 53 57 52 43 64 7a 30 39 22 7d 2c 22 62 72 6f 77 73 65 72 4e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 62 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 2c 22 61 63 63 65 70 74 48 65 61 64 65 72 22 3a 22 74 65 78 74 2f 68 74 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 6d 6c 3b 71 5c 75 30 30 33 64 30 2e 39 2c 69 6d 61 67 65 2f 61 76 69 66 2c 69 6d 61 Data Ascii: sOvBRD0q7AFEN6I_xIQvoqwBRDO2LAFEL7YsAUQ1YiwBRDrk64FEOHyrwUQkv23IhC9w7AFKhxDQU1TRHhVTS1acS1ESU96OUF2bXBnSWRCdz09"},"browserName":"Chrome","browserVersion":"117.0.0.0","acceptHeader":"text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,ima
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 72 75 65 5c 75 30 30 32 36 61 31 31 79 5f 68 35 5f 61 73 73 6f 63 69 61 74 65 5f 73 75 72 76 65 79 5f 71 75 65 73 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 61 70 62 5f 62 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 65 6c 5f 68 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 66 65 74 5f 77 72 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 66 65 74 5f 77 72 5f 65 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 67 65 6e 5f 72 65 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 63 74 69 6f 6e 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 63 65 6e 74 65 72 5f 61 6c 69 67 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c Data Ascii: rue\u0026a11y_h5_associate_survey_question\u003dtrue\u0026ab_det_apb_b\u003dtrue\u0026ab_det_el_h\u003dtrue\u0026ab_det_fet_wr\u003dtrue\u0026ab_det_fet_wr_en\u003dtrue\u0026ab_det_gen_re\u003dtrue\u0026action_companion_center_align_description\u003dtrue\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49884	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:18 UTC	812	OUT	GET /embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:18 UTC	2099	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 05:32:18 GMT Strict-Transport-Security: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=Z0vXQz-aLKQ; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_INFO1_LIVE=LcDUAFu5ydw; Domain=.youtube.com; Expires=Wed, 16-Oct-2024 05:32:18 GMT; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgVQ%3D%3D; Domain=.youtube.com; Expires=Wed, 16-Oct-2024 05:32:18 GMT; Path=/; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 41 6e 6d 35 2d 45 5f 34 37 72 4c 6d 79 33 65 58 4a 30 59 38 4a 77 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="Anm5-E_47rLmy3eXJ0Y8Jw">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b 31 43 38 30 2d 31 43 38 38 2c 55 2b 32 30 42 34 2c 55 Data Ascii: C,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 20 68 72 65 66 3d 22 2f 73 2f 70 6c 61 79 65 72 2f 30 61 66 36 65 33 32 37 2f 77 77 77 2d 70 6c 61 79 65 72 2e 63 73 73 22 20 6e 61 6d 65 3d 22 77 77 77 2d 70 6c 61 79 65 72 22 20 6e 6f 6e 63 65 3d 22 31 44 50 53 55 43 79 37 31 76 7a 47 32 6d 49 58 73 52 6e 4b 6b 51 22 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 31 44 50 53 55 43 79 37 31 76 7a 47 32 6d 49 58 73 52 6e 4b 6b 51 22 3e 68 74 6d 6c 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 7d 62 6f 64 79 20 7b 66 6f 6e 74 3a 20 31 32 70 78 20 52 6f 62 6f 74 6f 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 77 69 64 74 68 3a 20 Data Ascii: href="/s/player/0af6e327/www-player.css" name="www-player" nonce="1DPSUCy71vzG2mIXsRnKkQ"><style nonce="1DPSUCy71vzG2mIXsRnKkQ">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width:
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 29 3c 30 7d 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3a 6e 75 6c 6c 29 3b 76 61 72 20 69 73 50 72 65 72 65 6e 64 65 72 3d 28 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 3d 3d 22 70 72 65 72 65 6e 64 65 72 22 3b 76 61 72 20 76 4e 61 6d 65 3d 21 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 Data Ascii: )<0}ytcsi.setStart(w.performance?w.performance.timing.responseStart:null);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrer
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 73 69 6d 70 6c 65 5f 6d 69 78 65 64 5f 64 69 72 65 63 74 69 6f 6e 5f 66 6f 72 6d 61 74 74 65 64 5f 73 74 72 69 6e 67 73 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 74 68 75 6d 62 6e 61 69 6c 5f 70 72 65 6c 6f 61 64 69 6e 67 22 3a 74 72 75 65 2c 22 65 6d 62 65 64 73 5f 74 72 61 6e 73 70 6f 72 74 5f 75 73 65 5f 73 63 68 65 64 75 6c 65 72 22 3a 74 72 75 65 2c 22 65 6d 62 65 64 73 5f 77 65 62 5f 6e 77 6c 5f 64 69 73 61 62 6c 65 5f 6e 6f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 62 5f 72 65 70 6f 72 74 5f 6f 6e 5f 65 72 72 6f 72 73 63 72 65 65 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 62 5f 72 70 5f 69 6e 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 63 74 69 76 65 5f 76 69 Data Ascii: :true,"disable_simple_mixed_direction_formatted_strings":true,"disable_thumbnail_preloading":true,"embeds_transport_use_scheduler":true,"embeds_web_nwl_disable_nocookie":true,"enable_ab_report_on_errorscreen":true,"enable_ab_rp_int":true,"enable_active_vi
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 76 65 72 66 6c 6f 77 5f 6f 6e 5f 79 74 64 5f 64 69 73 70 6c 61 79 5f 61 64 5f 72 65 6e 64 65 72 65 72 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 65 6e 61 62 6c 65 5f 61 64 73 5f 63 6c 69 65 6e 74 5f 6d 6f 6e 69 74 6f 72 69 6e 67 5f 6c 6f 67 5f 74 76 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 65 6e 61 62 6c 65 5f 73 69 6e 67 6c 65 5f 76 69 64 65 6f 5f 76 6f 64 5f 69 76 61 72 5f 6f 6e 5f 70 61 63 66 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 6c 6f 67 5f 74 72 69 67 67 65 72 5f 65 76 65 6e 74 73 5f 77 69 74 68 5f 64 65 62 75 67 5f 64 61 74 61 22 3a 74 72 75 65 2c 22 69 6c 5f 61 74 74 61 63 68 5f 63 61 63 68 65 5f 6c 69 6d 69 74 22 3a 74 72 75 65 2c 22 69 6c 5f 75 73 65 5f 76 69 65 77 5f 6d 6f 64 65 6c 5f 6c 6f 67 67 69 6e 67 5f 63 6f 6e 74 65 78 74 22 3a 74 72 Data Ascii: verflow_on_ytd_display_ad_renderer":true,"html5_enable_ads_client_monitoring_log_tv":true,"html5_enable_single_video_vod_ivar_on_pacf":true,"html5_log_trigger_events_with_debug_data":true,"il_attach_cache_limit":true,"il_use_view_model_logging_context":tr
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 6e 65 77 5f 6e 77 6c 5f 77 74 73 22 3a 74 72 75 65 2c 22 75 73 65 5f 70 6c 61 79 65 72 5f 61 62 75 73 65 5f 62 67 5f 6c 69 62 72 61 72 79 22 3a 74 72 75 65 2c 22 75 73 65 5f 72 65 71 75 65 73 74 5f 74 69 6d 65 5f 6d 73 5f 68 65 61 64 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 73 65 73 73 69 6f 6e 5f 62 61 73 65 64 5f 73 61 6d 70 6c 69 6e 67 22 3a 74 72 75 65 2c 22 75 73 65 5f 74 73 5f 76 69 73 69 62 69 6c 69 74 79 6c 6f 67 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 Data Ascii: new_nwl_wts":true,"use_player_abuse_bg_library":true,"use_request_time_ms_header":true,"use_session_based_sampling":true,"use_ts_visibilitylogger":true,"use_watch_fragments2":true,"vss_final_ping_send_and_write":true,"vss_playback_use_send_and_write":true
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 6e 67 5f 6d 61 78 5f 62 61 74 63 68 22 3a 31 30 30 2c 22 77 65 62 5f 73 6d 6f 6f 74 68 6e 65 73 73 5f 74 65 73 74 5f 64 75 72 61 74 69 6f 6e 5f 6d 73 22 3a 30 2c 22 77 65 62 5f 73 6d 6f 6f 74 68 6e 65 73 73 5f 74 65 73 74 5f 6d 65 74 68 6f 64 22 3a 30 2c 22 77 69 6c 5f 69 63 6f 6e 5f 6d 61 78 5f 63 6f 6e 63 75 72 72 65 6e 74 5f 66 65 74 63 68 65 73 22 3a 39 39 39 39 2c 22 79 74 69 64 62 5f 72 65 6d 61 6b 65 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 79 74 69 64 62 5f 72 65 6f 70 65 6e 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 57 65 62 43 6c 69 65 6e 74 52 65 6c 65 61 73 65 50 72 6f 63 65 73 73 43 72 69 74 69 63 61 6c 5f 5f 79 6f 75 74 75 62 65 5f 65 6d 62 65 64 73 5f 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 5f 6f 76 65 72 72 69 64 65 22 3a 22 Data Ascii: ng_max_batch":100,"web_smoothness_test_duration_ms":0,"web_smoothness_test_method":0,"wil_icon_max_concurrent_fetches":9999,"ytidb_remake_db_retries":3,"ytidb_reopen_db_retries":3,"WebClientReleaseProcessCritical__youtube_embeds_client_version_override":"
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 69 45 4e 6e 4a 72 77 55 51 73 5a 33 5f 45 68 43 52 5f 62 63 69 45 4e 76 5a 73 41 55 71 48 45 4e 42 54 56 4e 45 65 46 56 4e 4c 56 70 78 4c 55 52 4a 54 33 6f 35 51 58 5a 74 63 47 64 4a 5a 45 4a 33 50 54 30 25 33 44 22 7d 2c 22 62 72 6f 77 73 65 72 4e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 62 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 2c 22 61 63 63 65 70 74 48 65 61 64 65 72 22 3a 22 74 65 78 74 2f 68 74 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 6d 6c 3b 71 5c 75 30 30 33 64 30 2e 39 2c 69 6d 61 67 65 2f 61 76 69 66 2c 69 6d 61 67 65 2f 77 65 62 70 2c 69 6d 61 67 65 2f 61 70 6e 67 2c 2a 2f 2a 3b 71 5c 75 30 30 33 64 30 2e 38 2c 61 70 70 6c 69 63 Data Ascii: iENnJrwUQsZ3_EhCR_bciENvZsAUqHENBTVNEeFVNLVpxLURJT3o5QXZtcGdJZEJ3PT0%3D"},"browserName":"Chrome","browserVersion":"117.0.0.0","acceptHeader":"text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,/;q\u003d0.8,applic
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 5f 68 35 5f 61 73 73 6f 63 69 61 74 65 5f 73 75 72 76 65 79 5f 71 75 65 73 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 65 6c 5f 68 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 66 65 74 5f 77 72 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 66 65 74 5f 77 72 5f 65 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 67 65 6e 5f 72 65 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 63 74 69 6f 6e 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 63 65 6e 74 65 72 5f 61 6c 69 67 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 64 5f 70 6f 64 5f 64 69 73 61 62 6c 65 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 70 65 72 73 69 73 74 5f 61 64 73 Data Ascii: _h5_associate_survey_question\u003dtrue\u0026ab_det_el_h\u003dtrue\u0026ab_det_fet_wr\u003dtrue\u0026ab_det_fet_wr_en\u003dtrue\u0026ab_det_gen_re\u003dtrue\u0026action_companion_center_align_description\u003dtrue\u0026ad_pod_disable_companion_persist_ads

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49878	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:18 UTC	812	OUT	GET /embed/yiQ-C7lGw0o?autoplay=0&start=0&rel=0 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:18 UTC	2099	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 05:32:18 GMT Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=guGxIDTBzds; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_INFO1_LIVE=HF_l3ckmeBg; Domain=.youtube.com; Expires=Wed, 16-Oct-2024 05:32:18 GMT; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWQ%3D%3D; Domain=.youtube.com; Expires=Wed, 16-Oct-2024 05:32:18 GMT; Path=/; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4e 63 68 49 5f 47 7a 66 78 4c 63 36 70 57 52 36 75 38 33 5f 35 77 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="NchI_GzfxLc6pWR6u83_5w">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b 31 43 38 30 2d 31 43 38 38 2c 55 2b 32 30 42 34 2c 55 Data Ascii: C,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 20 68 72 65 66 3d 22 2f 73 2f 70 6c 61 79 65 72 2f 30 61 66 36 65 33 32 37 2f 77 77 77 2d 70 6c 61 79 65 72 2e 63 73 73 22 20 6e 61 6d 65 3d 22 77 77 77 2d 70 6c 61 79 65 72 22 20 6e 6f 6e 63 65 3d 22 38 44 4e 46 71 48 53 4b 72 42 45 73 50 4d 64 65 77 67 47 7a 74 77 22 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 38 44 4e 46 71 48 53 4b 72 42 45 73 50 4d 64 65 77 67 47 7a 74 77 22 3e 68 74 6d 6c 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 7d 62 6f 64 79 20 7b 66 6f 6e 74 3a 20 31 32 70 78 20 52 6f 62 6f 74 6f 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 77 69 64 74 68 3a 20 Data Ascii: href="/s/player/0af6e327/www-player.css" name="www-player" nonce="8DNFqHSKrBEsPMdewgGztw"><style nonce="8DNFqHSKrBEsPMdewgGztw">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width:
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 29 3c 30 7d 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3a 6e 75 6c 6c 29 3b 76 61 72 20 69 73 50 72 65 72 65 6e 64 65 72 3d 28 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 3d 3d 22 70 72 65 72 65 6e 64 65 72 22 3b 76 61 72 20 76 4e 61 6d 65 3d 21 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 Data Ascii: )<0}ytcsi.setStart(w.performance?w.performance.timing.responseStart:null);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrer
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 61 72 69 5f 75 69 5f 73 74 61 74 75 73 5f 63 68 65 63 6b 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 73 69 6d 70 6c 65 5f 6d 69 78 65 64 5f 64 69 72 65 63 74 69 6f 6e 5f 66 6f 72 6d 61 74 74 65 64 5f 73 74 72 69 6e 67 73 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 74 68 75 6d 62 6e 61 69 6c 5f 70 72 65 6c 6f 61 64 69 6e 67 22 3a 74 72 75 65 2c 22 65 6d 62 65 64 73 5f 74 72 61 6e 73 70 6f 72 74 5f 75 73 65 5f 73 63 68 65 64 75 6c 65 72 22 3a 74 72 75 65 2c 22 65 6d 62 65 64 73 5f 77 65 62 5f 6e 77 6c 5f 64 69 73 61 62 6c 65 5f 6e 6f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 62 5f 72 65 70 6f 72 74 5f 6f 6e 5f 65 72 72 6f 72 73 63 72 65 65 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 62 5f 72 70 5f 69 6e 74 22 3a 74 72 Data Ascii: ari_ui_status_check":true,"disable_simple_mixed_direction_formatted_strings":true,"disable_thumbnail_preloading":true,"embeds_transport_use_scheduler":true,"embeds_web_nwl_disable_nocookie":true,"enable_ab_report_on_errorscreen":true,"enable_ab_rp_int":tr
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 74 65 72 5f 62 65 66 6f 72 65 5f 75 70 64 61 74 65 5f 6d 61 73 74 68 65 61 64 22 3a 74 72 75 65 2c 22 68 69 64 65 5f 63 74 61 5f 66 6f 72 5f 68 6f 6d 65 5f 77 65 62 5f 76 69 64 65 6f 5f 61 64 73 22 3a 74 72 75 65 2c 22 68 69 64 65 5f 65 6e 64 70 6f 69 6e 74 5f 6f 76 65 72 66 6c 6f 77 5f 6f 6e 5f 79 74 64 5f 64 69 73 70 6c 61 79 5f 61 64 5f 72 65 6e 64 65 72 65 72 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 65 6e 61 62 6c 65 5f 61 64 73 5f 63 6c 69 65 6e 74 5f 6d 6f 6e 69 74 6f 72 69 6e 67 5f 6c 6f 67 5f 74 76 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 65 6e 61 62 6c 65 5f 73 69 6e 67 6c 65 5f 76 69 64 65 6f 5f 76 6f 64 5f 69 76 61 72 5f 6f 6e 5f 70 61 63 66 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 6c 6f 67 5f 74 72 69 67 67 65 72 5f 65 76 65 6e 74 73 5f 77 Data Ascii: ter_before_update_masthead":true,"hide_cta_for_home_web_video_ads":true,"hide_endpoint_overflow_on_ytd_display_ad_renderer":true,"html5_enable_ads_client_monitoring_log_tv":true,"html5_enable_single_video_vod_ivar_on_pacf":true,"html5_log_trigger_events_w
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 77 5f 69 6e 5f 6d 65 6d 6f 72 79 5f 73 74 6f 72 61 67 65 22 3a 74 72 75 65 2c 22 75 73 65 5f 6e 65 77 5f 6e 77 6c 5f 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 75 73 65 5f 6e 65 77 5f 6e 77 6c 5f 73 74 77 22 3a 74 72 75 65 2c 22 75 73 65 5f 6e 65 77 5f 6e 77 6c 5f 77 74 73 22 3a 74 72 75 65 2c 22 75 73 65 5f 70 6c 61 79 65 72 5f 61 62 75 73 65 5f 62 67 5f 6c 69 62 72 61 72 79 22 3a 74 72 75 65 2c 22 75 73 65 5f 72 65 71 75 65 73 74 5f 74 69 6d 65 5f 6d 73 5f 68 65 61 64 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 73 65 73 73 69 6f 6e 5f 62 61 73 65 64 5f 73 61 6d 70 6c 69 6e 67 22 3a 74 72 75 65 2c 22 75 73 65 5f 74 73 5f 76 69 73 69 62 69 6c 69 74 79 6c 6f 67 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 Data Ascii: w_in_memory_storage":true,"use_new_nwl_initialization":true,"use_new_nwl_stw":true,"use_new_nwl_wts":true,"use_player_abuse_bg_library":true,"use_request_time_ms_header":true,"use_session_based_sampling":true,"use_ts_visibilitylogger":true,"use_watch_frag
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 74 22 3a 34 2c 22 77 65 62 5f 66 6f 72 65 67 72 6f 75 6e 64 5f 68 65 61 72 74 62 65 61 74 5f 69 6e 74 65 72 76 61 6c 5f 6d 73 22 3a 32 38 30 30 30 2c 22 77 65 62 5f 67 65 6c 5f 64 65 62 6f 75 6e 63 65 5f 6d 73 22 3a 31 30 30 30 30 2c 22 77 65 62 5f 6c 6f 67 67 69 6e 67 5f 6d 61 78 5f 62 61 74 63 68 22 3a 31 30 30 2c 22 77 65 62 5f 73 6d 6f 6f 74 68 6e 65 73 73 5f 74 65 73 74 5f 64 75 72 61 74 69 6f 6e 5f 6d 73 22 3a 30 2c 22 77 65 62 5f 73 6d 6f 6f 74 68 6e 65 73 73 5f 74 65 73 74 5f 6d 65 74 68 6f 64 22 3a 30 2c 22 77 69 6c 5f 69 63 6f 6e 5f 6d 61 78 5f 63 6f 6e 63 75 72 72 65 6e 74 5f 66 65 74 63 68 65 73 22 3a 39 39 39 39 2c 22 79 74 69 64 62 5f 72 65 6d 61 6b 65 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 79 74 69 64 62 5f 72 65 6f 70 65 6e 5f 64 Data Ascii: t":4,"web_foreground_heartbeat_interval_ms":28000,"web_gel_debounce_ms":10000,"web_logging_max_batch":100,"web_smoothness_test_duration_ms":0,"web_smoothness_test_method":0,"wil_icon_max_concurrent_fetches":9999,"ytidb_remake_db_retries":3,"ytidb_reopen_d
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 77 42 52 43 39 6d 62 41 46 45 4c 65 72 73 41 55 51 70 63 4c 2d 45 68 43 64 30 4c 41 46 45 4a 43 79 73 41 55 51 37 37 4b 77 42 52 43 38 32 4c 41 46 45 4d 7a 66 72 67 55 51 30 2d 43 77 42 52 44 72 36 50 34 53 45 4e 44 67 73 41 55 51 73 39 4f 77 42 52 43 71 32 4c 41 46 45 49 4b 69 5f 78 49 51 30 49 32 77 42 52 44 76 7a 62 41 46 45 4a 48 39 74 79 49 51 73 4a 33 5f 45 69 6f 63 51 30 46 4e 55 30 52 34 56 55 30 74 57 6e 45 74 52 45 6c 50 65 6a 6c 42 64 6d 31 77 5a 30 6c 6b 51 6e 63 39 50 51 25 33 44 25 33 44 22 7d 2c 22 62 72 6f 77 73 65 72 4e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 62 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 2c 22 61 63 63 65 70 74 48 65 61 64 65 72 22 3a 22 74 65 78 74 2f 68 74 6d 6c 2c 61 70 70 6c 69 Data Ascii: wBRC9mbAFELersAUQpcL-EhCd0LAFEJCysAUQ77KwBRC82LAFEMzfrgUQ0-CwBRDr6P4SENDgsAUQs9OwBRCq2LAFEIKi_xIQ0I2wBRDvzbAFEJH9tyIQsJ3_EiocQ0FNU0R4VU0tWnEtRElPejlBdm1wZ0lkQnc9PQ%3D%3D"},"browserName":"Chrome","browserVersion":"117.0.0.0","acceptHeader":"text/html,appli
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 5c 75 30 30 32 36 48 35 5f 65 6e 61 62 6c 65 5f 66 75 6c 6c 5f 70 61 63 66 5f 6c 6f 67 67 69 6e 67 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 48 35 5f 75 73 65 5f 61 73 79 6e 63 5f 6c 6f 67 67 69 6e 67 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 31 31 79 5f 68 35 5f 61 73 73 6f 63 69 61 74 65 5f 73 75 72 76 65 79 5f 71 75 65 73 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 61 70 62 5f 62 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 65 6c 5f 68 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 66 65 74 5f 77 72 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 66 65 74 5f 77 72 5f 65 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 Data Ascii: \u0026H5_enable_full_pacf_logging\u003dtrue\u0026H5_use_async_logging\u003dtrue\u0026a11y_h5_associate_survey_question\u003dtrue\u0026ab_det_apb_b\u003dtrue\u0026ab_det_el_h\u003dtrue\u0026ab_det_fet_wr\u003dtrue\u0026ab_det_fet_wr_en\u003dtrue\u0026ab_de

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49882	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:18 UTC	812	OUT	GET /embed/zmUPHj3AvZc?autoplay=0&start=0&rel=0 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:18 UTC	2099	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 05:32:18 GMT Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Cross-Origin-Resource-Policy: cross-origin Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=MHMLuB7T9CA; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_INFO1_LIVE=hlrBojVtm44; Domain=.youtube.com; Expires=Wed, 16-Oct-2024 05:32:18 GMT; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D; Domain=.youtube.com; Expires=Wed, 16-Oct-2024 05:32:18 GMT; Path=/; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 32 48 68 43 59 52 67 63 4d 48 6c 35 32 7a 39 2d 31 56 7a 4b 69 67 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="2HhCYRgcMHl52z9-1VzKig">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b 31 43 38 30 2d 31 43 38 38 2c 55 2b 32 30 42 34 2c 55 Data Ascii: C,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 20 68 72 65 66 3d 22 2f 73 2f 70 6c 61 79 65 72 2f 30 61 66 36 65 33 32 37 2f 77 77 77 2d 70 6c 61 79 65 72 2e 63 73 73 22 20 6e 61 6d 65 3d 22 77 77 77 2d 70 6c 61 79 65 72 22 20 6e 6f 6e 63 65 3d 22 75 4b 59 71 72 6c 44 58 70 37 68 6c 59 6e 63 42 43 2d 69 6a 35 67 22 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 75 4b 59 71 72 6c 44 58 70 37 68 6c 59 6e 63 42 43 2d 69 6a 35 67 22 3e 68 74 6d 6c 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 7d 62 6f 64 79 20 7b 66 6f 6e 74 3a 20 31 32 70 78 20 52 6f 62 6f 74 6f 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 77 69 64 74 68 3a 20 Data Ascii: href="/s/player/0af6e327/www-player.css" name="www-player" nonce="uKYqrlDXp7hlYncBC-ij5g"><style nonce="uKYqrlDXp7hlYncBC-ij5g">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width:
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 29 3c 30 7d 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3a 6e 75 6c 6c 29 3b 76 61 72 20 69 73 50 72 65 72 65 6e 64 65 72 3d 28 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 3d 3d 22 70 72 65 72 65 6e 64 65 72 22 3b 76 61 72 20 76 4e 61 6d 65 3d 21 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 Data Ascii: )<0}ytcsi.setStart(w.performance?w.performance.timing.responseStart:null);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrer
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 73 69 6d 70 6c 65 5f 6d 69 78 65 64 5f 64 69 72 65 63 74 69 6f 6e 5f 66 6f 72 6d 61 74 74 65 64 5f 73 74 72 69 6e 67 73 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 74 68 75 6d 62 6e 61 69 6c 5f 70 72 65 6c 6f 61 64 69 6e 67 22 3a 74 72 75 65 2c 22 65 6d 62 65 64 73 5f 74 72 61 6e 73 70 6f 72 74 5f 75 73 65 5f 73 63 68 65 64 75 6c 65 72 22 3a 74 72 75 65 2c 22 65 6d 62 65 64 73 5f 77 65 62 5f 6e 77 6c 5f 64 69 73 61 62 6c 65 5f 6e 6f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 62 5f 72 65 70 6f 72 74 5f 6f 6e 5f 65 72 72 6f 72 73 63 72 65 65 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 62 5f 72 70 5f 69 6e 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 63 74 69 76 65 5f 76 69 Data Ascii: :true,"disable_simple_mixed_direction_formatted_strings":true,"disable_thumbnail_preloading":true,"embeds_transport_use_scheduler":true,"embeds_web_nwl_disable_nocookie":true,"enable_ab_report_on_errorscreen":true,"enable_ab_rp_int":true,"enable_active_vi
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 70 64 61 74 65 5f 6d 61 73 74 68 65 61 64 22 3a 74 72 75 65 2c 22 68 69 64 65 5f 65 6e 64 70 6f 69 6e 74 5f 6f 76 65 72 66 6c 6f 77 5f 6f 6e 5f 79 74 64 5f 64 69 73 70 6c 61 79 5f 61 64 5f 72 65 6e 64 65 72 65 72 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 65 6e 61 62 6c 65 5f 61 64 73 5f 63 6c 69 65 6e 74 5f 6d 6f 6e 69 74 6f 72 69 6e 67 5f 6c 6f 67 5f 74 76 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 65 6e 61 62 6c 65 5f 73 69 6e 67 6c 65 5f 76 69 64 65 6f 5f 76 6f 64 5f 69 76 61 72 5f 6f 6e 5f 70 61 63 66 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 6c 6f 67 5f 74 72 69 67 67 65 72 5f 65 76 65 6e 74 73 5f 77 69 74 68 5f 64 65 62 75 67 5f 64 61 74 61 22 3a 74 72 75 65 2c 22 69 6c 5f 61 74 74 61 63 68 5f 63 61 63 68 65 5f 6c 69 6d 69 74 22 3a 74 72 75 65 2c 22 Data Ascii: pdate_masthead":true,"hide_endpoint_overflow_on_ytd_display_ad_renderer":true,"html5_enable_ads_client_monitoring_log_tv":true,"html5_enable_single_video_vod_ivar_on_pacf":true,"html5_log_trigger_events_with_debug_data":true,"il_attach_cache_limit":true,"
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 6f 6e 22 3a 74 72 75 65 2c 22 75 73 65 5f 6e 65 77 5f 6e 77 6c 5f 73 74 77 22 3a 74 72 75 65 2c 22 75 73 65 5f 6e 65 77 5f 6e 77 6c 5f 77 74 73 22 3a 74 72 75 65 2c 22 75 73 65 5f 70 6c 61 79 65 72 5f 61 62 75 73 65 5f 62 67 5f 6c 69 62 72 61 72 79 22 3a 74 72 75 65 2c 22 75 73 65 5f 72 65 71 75 65 73 74 5f 74 69 6d 65 5f 6d 73 5f 68 65 61 64 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 73 65 73 73 69 6f 6e 5f 62 61 73 65 64 5f 73 61 6d 70 6c 69 6e 67 22 3a 74 72 75 65 2c 22 75 73 65 5f 74 73 5f 76 69 73 69 62 69 6c 69 74 79 6c 6f 67 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 Data Ascii: on":true,"use_new_nwl_stw":true,"use_new_nwl_wts":true,"use_player_abuse_bg_library":true,"use_request_time_ms_header":true,"use_session_based_sampling":true,"use_ts_visibilitylogger":true,"use_watch_fragments2":true,"vss_final_ping_send_and_write":true,"
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 77 65 62 5f 67 65 6c 5f 64 65 62 6f 75 6e 63 65 5f 6d 73 22 3a 31 30 30 30 30 2c 22 77 65 62 5f 6c 6f 67 67 69 6e 67 5f 6d 61 78 5f 62 61 74 63 68 22 3a 31 30 30 2c 22 77 65 62 5f 73 6d 6f 6f 74 68 6e 65 73 73 5f 74 65 73 74 5f 64 75 72 61 74 69 6f 6e 5f 6d 73 22 3a 30 2c 22 77 65 62 5f 73 6d 6f 6f 74 68 6e 65 73 73 5f 74 65 73 74 5f 6d 65 74 68 6f 64 22 3a 30 2c 22 77 69 6c 5f 69 63 6f 6e 5f 6d 61 78 5f 63 6f 6e 63 75 72 72 65 6e 74 5f 66 65 74 63 68 65 73 22 3a 39 39 39 39 2c 22 79 74 69 64 62 5f 72 65 6d 61 6b 65 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 79 74 69 64 62 5f 72 65 6f 70 65 6e 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 57 65 62 43 6c 69 65 6e 74 52 65 6c 65 61 73 65 50 72 6f 63 65 73 73 43 72 69 74 69 63 61 6c 5f 5f 79 6f 75 74 Data Ascii: web_gel_debounce_ms":10000,"web_logging_max_batch":100,"web_smoothness_test_duration_ms":0,"web_smoothness_test_method":0,"wil_icon_max_concurrent_fetches":9999,"ytidb_remake_db_retries":3,"ytidb_reopen_db_retries":3,"WebClientReleaseProcessCritical__yout
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 37 59 73 41 55 51 6c 63 2d 77 42 52 44 75 73 37 41 46 45 4c 65 72 73 41 55 51 39 65 43 77 42 52 43 39 74 71 34 46 45 49 47 68 5f 78 49 51 6b 66 32 33 49 68 44 59 79 62 41 46 45 4c 57 6c 5f 78 49 71 48 45 4e 42 54 56 4e 45 65 46 56 4e 4c 56 70 78 4c 55 52 4a 54 33 6f 35 51 58 5a 74 63 47 64 4a 5a 45 4a 33 50 54 30 25 33 44 22 7d 2c 22 62 72 6f 77 73 65 72 4e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 62 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 2c 22 61 63 63 65 70 74 48 65 61 64 65 72 22 3a 22 74 65 78 74 2f 68 74 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 6d 6c 3b 71 5c 75 30 30 33 64 30 2e 39 2c 69 6d 61 67 65 2f 61 76 69 66 2c 69 6d 61 67 65 2f Data Ascii: 7YsAUQlc-wBRDus7AFELersAUQ9eCwBRC9tq4FEIGh_xIQkf23IhDYybAFELWl_xIqHENBTVNEeFVNLVpxLURJT3o5QXZtcGdJZEJ3PT0%3D"},"browserName":"Chrome","browserVersion":"117.0.0.0","acceptHeader":"text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 75 73 65 5f 61 73 79 6e 63 5f 6c 6f 67 67 69 6e 67 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 31 31 79 5f 68 35 5f 61 73 73 6f 63 69 61 74 65 5f 73 75 72 76 65 79 5f 71 75 65 73 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 65 6c 5f 68 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 66 65 74 5f 77 72 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 66 65 74 5f 77 72 5f 65 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 67 65 6e 5f 72 65 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 63 74 69 6f 6e 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 63 65 6e 74 65 72 5f 61 6c 69 67 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 Data Ascii: use_async_logging\u003dtrue\u0026a11y_h5_associate_survey_question\u003dtrue\u0026ab_det_el_h\u003dtrue\u0026ab_det_fet_wr\u003dtrue\u0026ab_det_fet_wr_en\u003dtrue\u0026ab_det_gen_re\u003dtrue\u0026action_companion_center_align_description\u003dtrue\u002

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49883	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:18 UTC	812	OUT	GET /embed/qP5c-ZOMct4?autoplay=0&start=0&rel=0 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:18 UTC	2099	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 05:32:18 GMT Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Resource-Policy: cross-origin P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=O-fUBinE6wY; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_INFO1_LIVE=Qe5EM4qNrkk; Domain=.youtube.com; Expires=Wed, 16-Oct-2024 05:32:18 GMT; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D; Domain=.youtube.com; Expires=Wed, 16-Oct-2024 05:32:18 GMT; Path=/; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4b 31 6d 68 77 67 4a 44 58 6b 6a 30 32 58 62 39 7a 56 74 54 4f 41 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="K1mhwgJDXkj02Xb9zVtTOA">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b 31 43 38 30 2d 31 43 38 38 2c 55 2b 32 30 42 34 2c 55 Data Ascii: C,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 20 68 72 65 66 3d 22 2f 73 2f 70 6c 61 79 65 72 2f 30 61 66 36 65 33 32 37 2f 77 77 77 2d 70 6c 61 79 65 72 2e 63 73 73 22 20 6e 61 6d 65 3d 22 77 77 77 2d 70 6c 61 79 65 72 22 20 6e 6f 6e 63 65 3d 22 4a 35 34 36 72 5a 44 65 58 4c 45 44 56 57 34 4b 35 37 4a 76 31 77 22 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4a 35 34 36 72 5a 44 65 58 4c 45 44 56 57 34 4b 35 37 4a 76 31 77 22 3e 68 74 6d 6c 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 7d 62 6f 64 79 20 7b 66 6f 6e 74 3a 20 31 32 70 78 20 52 6f 62 6f 74 6f 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 77 69 64 74 68 3a 20 Data Ascii: href="/s/player/0af6e327/www-player.css" name="www-player" nonce="J546rZDeXLEDVW4K57Jv1w"><style nonce="J546rZDeXLEDVW4K57Jv1w">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width:
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 29 3c 30 7d 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3a 6e 75 6c 6c 29 3b 76 61 72 20 69 73 50 72 65 72 65 6e 64 65 72 3d 28 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 3d 3d 22 70 72 65 72 65 6e 64 65 72 22 3b 76 61 72 20 76 4e 61 6d 65 3d 21 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 Data Ascii: )<0}ytcsi.setStart(w.performance?w.performance.timing.responseStart:null);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrer
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 61 72 69 5f 75 69 5f 73 74 61 74 75 73 5f 63 68 65 63 6b 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 73 69 6d 70 6c 65 5f 6d 69 78 65 64 5f 64 69 72 65 63 74 69 6f 6e 5f 66 6f 72 6d 61 74 74 65 64 5f 73 74 72 69 6e 67 73 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 74 68 75 6d 62 6e 61 69 6c 5f 70 72 65 6c 6f 61 64 69 6e 67 22 3a 74 72 75 65 2c 22 65 6d 62 65 64 73 5f 74 72 61 6e 73 70 6f 72 74 5f 75 73 65 5f 73 63 68 65 64 75 6c 65 72 22 3a 74 72 75 65 2c 22 65 6d 62 65 64 73 5f 77 65 62 5f 6e 77 6c 5f 64 69 73 61 62 6c 65 5f 6e 6f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 62 5f 72 65 70 6f 72 74 5f 6f 6e 5f 65 72 72 6f 72 73 63 72 65 65 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 62 5f 72 70 5f 69 6e 74 22 3a 74 72 Data Ascii: ari_ui_status_check":true,"disable_simple_mixed_direction_formatted_strings":true,"disable_thumbnail_preloading":true,"embeds_transport_use_scheduler":true,"embeds_web_nwl_disable_nocookie":true,"enable_ab_report_on_errorscreen":true,"enable_ab_rp_int":tr
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 5f 61 6e 64 5f 66 69 6c 74 65 72 5f 62 65 66 6f 72 65 5f 75 70 64 61 74 65 5f 6d 61 73 74 68 65 61 64 22 3a 74 72 75 65 2c 22 68 69 64 65 5f 65 6e 64 70 6f 69 6e 74 5f 6f 76 65 72 66 6c 6f 77 5f 6f 6e 5f 79 74 64 5f 64 69 73 70 6c 61 79 5f 61 64 5f 72 65 6e 64 65 72 65 72 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 65 6e 61 62 6c 65 5f 61 64 73 5f 63 6c 69 65 6e 74 5f 6d 6f 6e 69 74 6f 72 69 6e 67 5f 6c 6f 67 5f 74 76 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 65 6e 61 62 6c 65 5f 73 69 6e 67 6c 65 5f 76 69 64 65 6f 5f 76 6f 64 5f 69 76 61 72 5f 6f 6e 5f 70 61 63 66 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 6c 6f 67 5f 74 72 69 67 67 65 72 5f 65 76 65 6e 74 73 5f 77 69 74 68 5f 64 65 62 75 67 5f 64 61 74 61 22 3a 74 72 75 65 2c 22 69 6c 5f 61 74 74 61 63 68 Data Ascii: _and_filter_before_update_masthead":true,"hide_endpoint_overflow_on_ytd_display_ad_renderer":true,"html5_enable_ads_client_monitoring_log_tv":true,"html5_enable_single_video_vod_ivar_on_pacf":true,"html5_log_trigger_events_with_debug_data":true,"il_attach
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 77 5f 6e 77 6c 5f 73 74 77 22 3a 74 72 75 65 2c 22 75 73 65 5f 6e 65 77 5f 6e 77 6c 5f 77 74 73 22 3a 74 72 75 65 2c 22 75 73 65 5f 70 6c 61 79 65 72 5f 61 62 75 73 65 5f 62 67 5f 6c 69 62 72 61 72 79 22 3a 74 72 75 65 2c 22 75 73 65 5f 72 65 71 75 65 73 74 5f 74 69 6d 65 5f 6d 73 5f 68 65 61 64 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 73 65 73 73 69 6f 6e 5f 62 61 73 65 64 5f 73 61 6d 70 6c 69 6e 67 22 3a 74 72 75 65 2c 22 75 73 65 5f 74 73 5f 76 69 73 69 62 69 6c 69 74 79 6c 6f 67 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 Data Ascii: w_nwl_stw":true,"use_new_nwl_wts":true,"use_player_abuse_bg_library":true,"use_request_time_ms_header":true,"use_session_based_sampling":true,"use_ts_visibilitylogger":true,"use_watch_fragments2":true,"vss_final_ping_send_and_write":true,"vss_playback_use
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 5f 6d 73 22 3a 31 30 30 30 30 2c 22 77 65 62 5f 6c 6f 67 67 69 6e 67 5f 6d 61 78 5f 62 61 74 63 68 22 3a 31 30 30 2c 22 77 65 62 5f 73 6d 6f 6f 74 68 6e 65 73 73 5f 74 65 73 74 5f 64 75 72 61 74 69 6f 6e 5f 6d 73 22 3a 30 2c 22 77 65 62 5f 73 6d 6f 6f 74 68 6e 65 73 73 5f 74 65 73 74 5f 6d 65 74 68 6f 64 22 3a 30 2c 22 77 69 6c 5f 69 63 6f 6e 5f 6d 61 78 5f 63 6f 6e 63 75 72 72 65 6e 74 5f 66 65 74 63 68 65 73 22 3a 39 39 39 39 2c 22 79 74 69 64 62 5f 72 65 6d 61 6b 65 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 79 74 69 64 62 5f 72 65 6f 70 65 6e 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 57 65 62 43 6c 69 65 6e 74 52 65 6c 65 61 73 65 50 72 6f 63 65 73 73 43 72 69 74 69 63 61 6c 5f 5f 79 6f 75 74 75 62 65 5f 65 6d 62 65 64 73 5f 63 6c 69 65 6e Data Ascii: _ms":10000,"web_logging_max_batch":100,"web_smoothness_test_duration_ms":0,"web_smoothness_test_method":0,"wil_icon_max_concurrent_fetches":9999,"ytidb_remake_db_retries":3,"ytidb_reopen_db_retries":3,"WebClientReleaseProcessCritical__youtube_embeds_clien
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 63 69 45 4c 47 64 5f 78 49 71 48 45 4e 42 54 56 4e 45 65 46 56 4e 4c 56 70 78 4c 55 52 4a 54 33 6f 35 51 58 5a 74 63 47 64 4a 5a 45 4a 33 50 54 30 25 33 44 22 7d 2c 22 62 72 6f 77 73 65 72 4e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 62 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 2c 22 61 63 63 65 70 74 48 65 61 64 65 72 22 3a 22 74 65 78 74 2f 68 74 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 6d 6c 3b 71 5c 75 30 30 33 64 30 2e 39 2c 69 6d 61 67 65 2f 61 76 69 66 2c 69 6d 61 67 65 2f 77 65 62 70 2c 69 6d 61 67 65 2f 61 70 6e 67 2c 2a 2f 2a 3b 71 5c 75 30 30 33 64 30 2e 38 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 73 69 67 6e 65 64 2d 65 78 63 68 61 6e Data Ascii: ciELGd_xIqHENBTVNEeFVNLVpxLURJT3o5QXZtcGdJZEJ3PT0%3D"},"browserName":"Chrome","browserVersion":"117.0.0.0","acceptHeader":"text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,/;q\u003d0.8,application/signed-exchan
2024-04-19 05:32:18 UTC	2099	IN	Data Raw: 62 5f 64 65 74 5f 61 70 62 5f 62 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 65 6c 5f 68 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 66 65 74 5f 77 72 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 66 65 74 5f 77 72 5f 65 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 67 65 6e 5f 72 65 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 63 74 69 6f 6e 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 63 65 6e 74 65 72 5f 61 6c 69 67 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 64 5f 70 6f 64 5f 64 69 73 61 62 6c 65 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 70 65 72 73 69 73 74 5f 61 64 73 5f 71 75 61 6c 69 74 79 5c 75 30 30 33 64 74 72 75 65 Data Ascii: b_det_apb_b\u003dtrue\u0026ab_det_el_h\u003dtrue\u0026ab_det_fet_wr\u003dtrue\u0026ab_det_fet_wr_en\u003dtrue\u0026ab_det_gen_re\u003dtrue\u0026action_companion_center_align_description\u003dtrue\u0026ad_pod_disable_companion_persist_ads_quality\u003dtrue

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49895	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:18 UTC	804	OUT	GET /s/player/0af6e327/www-player.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=guGxIDTBzds; VISITOR_INFO1_LIVE=HF_l3ckmeBg; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWQ%3D%3D
2024-04-19 05:32:18 UTC	682	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 381443 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 17 Apr 2024 13:12:47 GMT Expires: Thu, 17 Apr 2025 13:12:47 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 17 Apr 2024 04:21:26 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 145171 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:18 UTC	573	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 6f 75 54 75 62 65 20 4e 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 65 65 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 77 65 62 6b 69 74 2d Data Ascii: @charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-
2024-04-19 05:32:18 UTC	1255	IN	Data Raw: 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 3a 6e 6f 74 28 2e 79 74 70 2d 74 72 61 6e 73 70 61 72 65 6e 74 29 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 75 6e 73 74 61 72 74 65 64 2d 6d 6f 64 65 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 61 64 2d 73 68 6f 77 69 6e 67 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 Data Ascii: deo-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masth
2024-04-19 05:32:18 UTC	1255	IN	Data Raw: 6d 62 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 38 65 38 65 38 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 34 32 34 32 34 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 3a 6e 6f 74 28 2e 79 74 70 2d 74 6f 75 63 68 2d 6d 6f 64 65 29 20 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 7d 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 7a 2d 69 6e 64 65 78 3a 31 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 79 74 70 2d 65 6d 62 65 64 2d 65 72 72 6f 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d Data Ascii: mb{background-color:#8e8e8e;border:1px solid #424242;border-radius:5px}.ytp-big-mode:not(.ytp-touch-mode) ::-webkit-scrollbar-thumb{border-radius:8px}.html5-video-container{z-index:10;position:relative}.ytp-embed-error .html5-video-container{display:none}
2024-04-19 05:32:18 UTC	1255	IN	Data Raw: 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 74 74 6f 6d 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 2c 74 6f 70 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 7d 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 34 39 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 35 33 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 3a 6e 6f 74 28 2e 61 64 2d 73 68 6f 77 69 6e 67 29 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 79 74 70 2d 75 70 6e 65 78 74 29 7b 74 6f 70 3a 36 30 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 Data Ascii: ransition:bottom .25s cubic-bezier(0,0,.2,1),top .25s cubic-bezier(0,0,.2,1)}.ytp-small-mode .ytp-player-content{bottom:49px}.ytp-embed .ytp-player-content{bottom:53px}.ytp-embed:not(.ad-showing) .ytp-player-content:not(.ytp-upnext){top:60px}.ytp-big-mode
2024-04-19 05:32:18 UTC	1255	IN	Data Raw: 74 28 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 29 20 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2c 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 2e 79 74 70 2d 68 69 64 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 32 34 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 31 36 30 70 78 7d 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 61 64 64 69 6e 67 3a 30 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 Data Ascii: t(.ytp-ad-overlay-open) .ytp-iv-player-content,.ytp-big-mode.ytp-hide-controls .ytp-iv-player-content{bottom:24px}.ytp-big-mode.ytp-ad-overlay-open .ytp-player-content{bottom:160px}.ytp-button{border:none;background-color:transparent;padding:0;color:inher
2024-04-19 05:32:18 UTC	1255	IN	Data Raw: 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 72 69 67 68 74 3a 30 7d 2e 79 74 70 2d 67 76 6e 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 2c 2e 79 74 70 2d 67 76 6e 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 7b 74 6f 70 3a 32 30 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 62 6f 74 74 6f 6d 7b 62 6f 74 74 6f 6d 3a 30 3b 68 65 69 67 68 74 3a 34 38 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 35 39 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 7d 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 62 6f 74 74 6f 6d 7b Data Ascii: on:column;flex-direction:column;right:0}.ytp-gvn .ytp-chrome-top,.ytp-gvn.ytp-big-mode .ytp-chrome-top{top:20px}.ytp-chrome-bottom{bottom:0;height:48px;width:100%;z-index:59;padding-top:3px;text-align:left;direction:ltr}.ytp-small-mode .ytp-chrome-bottom{
2024-04-19 05:32:18 UTC	1255	IN	Data Raw: 3a 30 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 72 65 6d 6f 74 65 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 20 34 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 72 65 70 6c 61 79 2d 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d Data Ascii: :0}.ytp-chrome-controls .ytp-button.ytp-miniplayer-button,.ytp-chrome-controls .ytp-button.ytp-remote-button{padding:0 4px}.ytp-embed .ytp-chrome-controls .ytp-button,.ytp-embed .ytp-replay-button{width:40px;padding:0}.ytp-embed .ytp-chrome-controls .ytp-
2024-04-19 05:32:18 UTC	1255	IN	Data Raw: 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 70 78 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 2d 31 32 70 78 7d 2e 79 74 70 2d 66 75 6c 6c 73 63 72 65 65 6e 2d 62 75 74 74 6f 6e 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 70 78 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 31 30 30 25 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 72 65 76 2d 62 75 74 74 6f 6e 3a 3a 62 65 66 6f 72 65 2c 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 79 74 70 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 2d 70 6c 61 79 6c 69 73 74 29 3a 3a 62 65 66 6f 72 Data Ascii: absolute;top:5px;bottom:0;left:-12px}.ytp-fullscreen-button::after{content:"";display:block;width:12px;position:absolute;top:5px;bottom:0;left:100%}.ytp-big-mode .ytp-prev-button::before,.ytp-big-mode .ytp-play-button:not(.ytp-play-button-playlist)::befor
2024-04-19 05:32:18 UTC	1255	IN	Data Raw: 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 79 74 2d 73 70 65 63 2d 72 65 64 2d 69 6e 64 69 63 61 74 6f 72 2c 23 66 66 61 35 30 30 29 7d 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 6c 65 66 74 3a 31 38 70 78 3b 62 6f 74 74 6f 6d 3a 36 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 Data Ascii: chrome-controls .ytp-button[aria-pressed]:after{background-color:var(--yt-spec-red-indicator,#ffa500)}.ytp-small-mode .ytp-chrome-controls .ytp-button[aria-pressed]:after{left:18px;bottom:6px}.ytp-embed .ytp-chrome-controls .ytp-button[aria-pressed]:after
2024-04-19 05:32:18 UTC	1255	IN	Data Raw: 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 64 7d 2e 79 74 70 2d 63 6f 6c 6f 72 2d 70 61 72 74 79 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 79 74 70 2d 70 61 72 74 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 79 74 70 2d 70 61 72 74 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 2d 62 75 74 74 6f Data Ascii: aria-pressed]:after{background-color:#ddd}.ytp-color-party .ytp-chrome-controls .ytp-button[aria-pressed]:after{-webkit-animation:ytp-party-background-color .1s linear infinite;animation:ytp-party-background-color .1s linear infinite}.ytp-chrome-top-butto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49904	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:18 UTC	808	OUT	GET /s/player/0af6e327/player_ias.vflset/en_US/embed.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:19 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 58775 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 18 Apr 2024 18:51:52 GMT Expires: Fri, 18 Apr 2025 18:51:52 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 17 Apr 2024 04:21:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 38427 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:19 UTC	568	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 0a 20 55 73 65 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 74 68 61 74 20 63 61 6e 20 62 65 0a 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 61 74 20 68 74 74 70 73 3a 2f 2f 61 6e 67 75 6c 61 72 2e 69 6f 2f 6c 69 63 65 6e 73 65 0a 2a 2f 0a 2f 2a Data Ascii: (function(g){var window=this;/* SPDX-License-Identifier: Apache-2.0// Copyright Google LLC All Rights Reserved. Use of this source code is governed by an MIT-style license that can be found in the LICENSE file at https://angular.io/license//
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 67 2d 66 69 6c 6c 22 2c 58 3a 7b 64 3a 22 4d 20 31 36 2e 36 38 2c 2e 39 39 20 43 20 31 33 2e 35 35 2c 31 2e 30 33 20 37 2e 30 32 2c 31 2e 31 36 20 34 2e 39 39 2c 31 2e 36 38 20 63 20 2d 31 2e 34 39 2c 2e 34 20 2d 32 2e 35 39 2c 31 2e 36 20 2d 32 2e 39 39 2c 33 20 2d 30 2e 36 39 2c 32 2e 37 20 2d 30 2e 36 38 2c 38 2e 33 31 20 2d 30 2e 36 38 2c 38 2e 33 31 20 30 2c 30 20 2d 30 2e 30 31 2c 35 2e 36 31 20 2e 36 38 2c 38 2e 33 31 20 2e 33 39 2c 31 2e 35 20 31 2e 35 39 2c 32 2e 36 20 32 2e 39 39 2c 33 20 32 2e 36 39 2c 2e 37 20 31 33 2e 34 30 2c 2e 36 38 20 31 33 2e 34 30 2c 2e 36 38 20 30 2c 30 20 31 30 2e 37 30 2c 2e 30 31 20 31 33 2e 34 30 2c 2d 30 2e 36 38 20 31 2e 35 2c 2d 30 2e 34 20 32 2e 35 39 2c 2d 31 2e 36 20 32 2e 39 39 2c 2d 33 20 2e 36 39 2c 2d 32 Data Ascii: g-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 2d 30 2e 32 31 20 63 20 30 2c 31 20 2d 30 2e 30 38 2c 31 2e 36 20 2d 30 2e 32 38 2c 32 20 2d 30 2e 31 2c 2e 34 20 2d 30 2e 35 2c 2e 36 32 20 2d 31 2c 2e 36 32 20 2d 30 2e 33 2c 30 20 2d 30 2e 36 31 2c 2d 30 2e 31 31 20 2d 30 2e 38 31 2c 2d 30 2e 33 31 20 2d 30 2e 32 2c 2d 30 2e 33 20 2d 30 2e 33 30 2c 2d 30 2e 35 39 20 2d 30 2e 34 30 2c 2d 31 2e 30 39 20 2d 30 2e 31 2c 2d 30 2e 35 20 2d 30 2e 30 39 2c 2d 31 2e 32 31 20 2d 30 2e 30 39 2c 2d 32 2e 32 31 20 6c 20 30 2c 2d 30 2e 37 38 20 35 2e 37 31 2c 2d 30 2e 30 39 20 30 2c 2d 32 2e 36 32 20 63 20 30 2c 2d 31 2e 36 20 2d 30 2e 31 30 2c 2d 32 2e 37 38 20 2d 30 2e 34 30 2c 2d 33 2e 36 38 20 2d 30 2e 32 2c 2d 30 2e 38 39 20 2d 30 2e 37 31 2c 2d 31 2e 35 39 20 2d 31 2e 33 31 2c 2d 31 2e 39 39 20 2d 30 2e 37 2c Data Ascii: -0.21 c 0,1 -0.08,1.6 -0.28,2 -0.1,.4 -0.5,.62 -1,.62 -0.3,0 -0.61,-0.11 -0.81,-0.31 -0.2,-0.3 -0.30,-0.59 -0.40,-1.09 -0.1,-0.5 -0.09,-1.21 -0.09,-2.21 l 0,-0.78 5.71,-0.09 0,-2.62 c 0,-1.6 -0.10,-2.78 -0.40,-3.68 -0.2,-0.89 -0.71,-1.59 -1.31,-1.99 -0.7,
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 30 2c 30 20 2d 33 2e 34 30 2c 2e 30 30 20 2d 33 2e 34 30 2c 2d 30 2e 30 39 20 7a 20 6d 20 32 30 2e 39 30 2c 32 2e 30 39 20 63 20 2e 34 2c 30 20 2e 35 38 2c 2e 31 31 20 2e 37 38 2c 2e 33 31 20 2e 32 2c 2e 33 20 2e 33 30 2c 2e 35 39 20 2e 34 30 2c 31 2e 30 39 20 2e 31 2c 2e 35 20 2e 30 39 2c 31 2e 32 31 20 2e 30 39 2c 32 2e 32 31 20 6c 20 30 2c 31 2e 30 39 20 2d 32 2e 35 2c 30 20 30 2c 2d 31 2e 30 39 20 63 20 30 2c 2d 31 20 2d 30 2e 30 30 2c 2d 31 2e 37 31 20 2e 30 39 2c 2d 32 2e 32 31 20 30 2c 2d 30 2e 34 20 2e 31 31 2c 2d 30 2e 38 20 2e 33 31 2c 2d 31 20 2e 32 2c 2d 30 2e 33 20 2e 35 31 2c 2d 30 2e 34 30 20 2e 38 31 2c 2d 30 2e 34 30 20 7a 20 6d 20 2d 35 30 2e 34 39 2c 2e 31 32 20 63 20 2e 35 2c 30 20 2e 38 2c 2e 31 38 20 31 2c 2e 36 38 20 2e 31 39 2c 2e Data Ascii: 0,0 -3.40,.00 -3.40,-0.09 z m 20.90,2.09 c .4,0 .58,.11 .78,.31 .2,.3 .30,.59 .40,1.09 .1,.5 .09,1.21 .09,2.21 l 0,1.09 -2.5,0 0,-1.09 c 0,-1 -0.00,-1.71 .09,-2.21 0,-0.4 .11,-0.8 .31,-1 .2,-0.3 .51,-0.40 .81,-0.40 z m -50.49,.12 c .5,0 .8,.18 1,.68 .19,.
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 7b 62 3d 61 3b 76 61 72 20 65 3d 64 2c 66 3d 63 5b 64 5d 3b 30 3c 3d 65 2e 69 6e 64 65 78 4f 66 28 22 2d 22 29 3f 62 2e 73 65 74 50 72 6f 70 65 72 74 79 28 65 2c 66 29 3a 62 5b 65 5d 3d 66 7d 7d 7d 2c 66 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 74 79 70 65 6f 66 20 63 3b 0a 22 6f 62 6a 65 63 74 22 3d 3d 3d 64 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 64 3f 61 5b 62 5d 3d 63 3a 63 72 62 28 61 2c 62 2c 63 29 7d 2c 67 72 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6e 65 77 20 61 72 62 3b 0a 61 2e 5f 5f 64 65 66 61 75 6c 74 3d 66 72 62 3b 61 2e 73 74 79 6c 65 3d 65 72 62 3b 72 65 74 75 72 6e 20 61 7d 2c 68 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 28 64 5b 62 5d 7c 7c 64 2e 5f 5f 64 65 66 Data Ascii: {b=a;var e=d,f=c[d];0<=e.indexOf("-")?b.setProperty(e,f):b[e]=f}}},frb=function(a,b,c){var d=typeof c;"object"===d\|\|"function"===d?a[b]=c:crb(a,b,c)},grb=function(){var a=new arb;a.__default=frb;a.style=erb;return a},hrb=function(a,b,c,d){(d[b]\|\|d.__def
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 63 3d 28 64 3d 22 73 76 67 22 3d 3d 3d 61 3f 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3a 22 6d 61 74 68 22 3d 3d 3d 61 3f 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 38 2f 4d 61 74 68 2f 4d 61 74 68 4d 4c 22 3a 6e 75 6c 6c 3d 3d 64 7c 7c 22 66 6f 72 65 69 67 6e 4f 62 6a 65 63 74 22 3d 3d 3d 65 35 28 64 29 2e 42 3f 6e 75 6c 6c 3a 64 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 29 3f 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 64 2c 61 29 3a 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 29 2c 6b 72 62 28 63 2c 61 2c 62 29 2c 61 3d 63 29 2c 68 35 2e 63 72 65 61 74 65 64 2e 70 75 73 68 28 61 29 2c 63 3d 61 29 3b 61 3d 63 3b 69 66 28 61 21 3d 3d 6a 35 29 7b 69 66 28 30 3c 3d 6d 35 2e 69 Data Ascii: c=(d="svg"===a?"http://www.w3.org/2000/svg":"math"===a?"http://www.w3.org/1998/Math/MathML":null==d\|\|"foreignObject"===e5(d).B?null:d.namespaceURI)?c.createElementNS(d,a):c.createElement(a),krb(c,a,b),a=c),h5.created.push(a),c=a);a=c;if(a!==j5){if(0<=m5.i
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 63 74 2e 69 73 28 61 2c 62 29 7d 2c 73 35 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 72 62 3b 0a 74 72 62 3d 61 3b 72 65 74 75 72 6e 20 62 7d 2c 75 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 59 6c 3d 21 30 3b 0a 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 2e 62 6b 29 7b 76 61 72 20 62 3d 74 35 3b 74 35 3d 21 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 63 3d 67 2e 75 28 61 2e 62 6b 29 2c 64 3d 63 2e 6e 65 78 74 28 29 3b 21 64 2e 64 6f 6e 65 3b 64 3d 63 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 65 3d 64 2e 76 61 6c 75 65 3b 65 2e 59 6c 7c 7c 75 72 62 28 65 29 7d 7d 66 69 6e 61 6c 6c 79 7b 74 35 3d 62 7d 7d 76 61 72 20 66 3b 6e 75 6c 6c 3d 3d 28 66 3d 61 2e 6a 57 29 7c 7c 66 2e 63 61 6c 6c 28 61 2c 61 29 7d 2c 76 72 62 3d 66 75 6e 63 74 69 6f Data Ascii: ct.is(a,b)},s5=function(a){var b=trb;trb=a;return b},urb=function(a){a.Yl=!0;if(void 0!==a.bk){var b=t5;t5=!0;try{for(var c=g.u(a.bk),d=c.next();!d.done;d=c.next()){var e=d.value;e.Yl\|\|urb(e)}}finally{t5=b}}var f;null==(f=a.jW)\|\|f.call(a,a)},vrb=functio
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 7b 7d 3b 65 2e 70 42 3d 28 61 2e 6e 6f 74 69 66 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 72 62 28 65 29 7d 2c 61 2e 57 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 3d 65 2e 4d 73 29 7b 69 66 28 74 35 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 63 68 65 64 75 6c 65 72 73 20 63 61 6e 6e 6f 74 20 73 79 6e 63 68 72 6f 6e 6f 75 73 6c 79 20 65 78 65 63 75 74 65 20 77 61 74 63 68 65 73 20 77 68 69 6c 65 20 73 63 68 65 64 75 6c 69 6e 67 2e 22 29 3b 0a 65 2e 59 6c 3d 21 31 3b 69 66 28 21 65 2e 57 58 7c 7c 7a 72 62 28 65 29 29 7b 65 2e 57 58 3d 21 30 3b 76 61 72 20 66 3d 76 72 62 28 65 29 3b 74 72 79 7b 65 2e 5a 79 28 29 2c 65 2e 5a 79 3d 42 72 62 2c 65 2e 4d 73 28 64 29 7d 66 69 6e 61 6c 6c 79 7b 79 72 62 28 65 2c 66 29 Data Ascii: {};e.pB=(a.notify=function(){return urb(e)},a.WF=function(){if(null!==e.Ms){if(t5)throw Error("Schedulers cannot synchronously execute watches while scheduling.");e.Yl=!1;if(!e.WX\|\|zrb(e)){e.WX=!0;var f=vrb(e);try{e.Zy(),e.Zy=Brb,e.Ms(d)}finally{yrb(e,f)
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 3d 4b 72 62 26 26 28 62 2e 65 44 7c 7c 28 62 2e 65 44 3d 5b 5d 29 2c 62 2e 65 44 2e 70 75 73 68 28 61 29 29 7d 2c 79 35 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 70 72 6f 70 73 3d 61 3b 0a 74 68 69 73 2e 43 3d 21 31 7d 2c 4d 72 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 7a 35 26 26 7a 35 2e 75 77 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 52 65 61 63 74 69 76 65 20 63 6f 6d 70 6f 6e 65 6e 74 73 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 75 73 65 20 75 73 65 53 74 61 74 65 20 6f 72 20 6f 74 68 65 72 20 6d 65 6d 6f 69 7a 61 74 69 6f 6e 20 62 61 73 65 64 20 68 6f 6f 6b 73 2e 22 29 3b 0a 72 65 74 75 72 6e 20 41 35 7d 2c 4e 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 7a 35 3d 28 6e 75 6c 6c 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 Data Ascii: =Krb&&(b.eD\|\|(b.eD=[]),b.eD.push(a))},y5=function(a){this.props=a;this.C=!1},Mrb=function(){if(z5&&z5.uw)throw Error("Reactive components are not allowed to use useState or other memoization based hooks.");return A5},Nrb=function(a){z5=(null==a?void 0:a
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 47 35 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 46 35 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 5b 61 2c 0a 62 5d 2e 63 6f 6e 63 61 74 28 67 2e 71 61 28 67 2e 49 61 2e 61 70 70 6c 79 28 32 2c 61 72 67 75 6d 65 6e 74 73 29 29 29 29 7d 2c 48 35 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 46 35 3b 0a 46 35 3d 61 3b 74 72 79 7b 72 65 74 75 72 6e 20 62 28 29 7d 66 69 6e 61 6c 6c 79 7b 46 35 3d 63 7d 7d 2c 49 35 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 22 22 29 7d 2c 4a 35 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 53 74 72 69 6e 67 28 61 29 29 3b 0a 61 2e 5f 69 73 Data Ascii: G5=function(a,b){return F5.apply(null,[a,b].concat(g.qa(g.Ia.apply(2,arguments))))},H5=function(a,b){var c=F5;F5=a;try{return b()}finally{F5=c}},I5=function(){return document.createTextNode("")},J5=function(a){a=document.createTextNode(String(a));a._is

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49900	142.251.15.136	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:18 UTC	721	OUT	GET /iframe_api HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:19 UTC	1581	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 X-Content-Type-Options: nosniff Expires: Fri, 19 Apr 2024 05:32:19 GMT Date: Fri, 19 Apr 2024 05:32:19 GMT Cache-Control: private, max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:19 UTC	1062	IN	Data Raw: 34 31 66 0d 0a 76 61 72 20 73 63 72 69 70 74 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 5c 2f 73 5c 2f 70 6c 61 79 65 72 5c 2f 30 61 66 36 65 33 32 37 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 76 66 6c 73 65 74 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 6a 73 27 3b 77 69 6e 64 6f 77 5b 27 79 74 5f 65 6d 62 65 64 73 45 6e 61 62 6c 65 49 66 72 61 6d 65 44 65 66 61 75 6c 74 52 65 66 65 72 72 65 72 50 6f 6c 69 63 79 27 5d 20 3d 20 20 74 72 75 65 20 3b 74 72 79 7b 76 61 72 20 74 74 50 6f 6c 69 63 79 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 79 6f 75 74 75 62 65 2d 77 69 64 67 65 74 2d 61 70 69 22 2c 7b 63 72 65 61 74 65 53 63 72 69 70 Data Ascii: 41fvar scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/0af6e327\/www-widgetapi.vflset\/www-widgetapi.js';window['yt_embedsEnableIframeDefaultReferrerPolicy'] = true ;try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScrip
2024-04-19 05:32:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49902	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:19 UTC	819	OUT	GET /s/player/0af6e327/www-embed-player.vflset/www-embed-player.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:19 UTC	689	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 327826 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 17 Apr 2024 13:12:47 GMT Expires: Thu, 17 Apr 2025 13:12:47 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 17 Apr 2024 04:21:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 145172 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:19 UTC	566	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 6d 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 66 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 Data Ascii: );function u(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(f){if(thi
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6d 61 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 76 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c Data Ascii: th)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function ma(a){if(!(a instanceof Array)){a=v(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function na(a,b){return Object.prototype.hasOwnProperty.call
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 77 61 3d 73 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 71 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 77 61 29 77 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 22 70 72 6f 74 6f 74 79 70 65 22 21 3d 63 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e Data Ascii: r(a+" is not extensible");return a}:null}var wa=sa;function w(a,b){a.prototype=qa(b.prototype);a.prototype.constructor=a;if(wa)wa(a,b);else for(var c in b)if("prototype"!=c)if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 65 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 65 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 61 2e 68 2e 75 3d 21 31 2c 65 3b 76 61 72 20 66 3d 65 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 20 61 2e 68 2e 6d 3d 6e 75 6c 6c 2c 7a 61 28 61 2e 68 2c 67 29 2c 49 61 28 61 29 7d 61 2e 68 2e 6d 3d 6e 75 6c 6c 3b 64 2e 63 61 6c 6c 28 61 2e 68 2c 66 29 3b 72 65 74 75 72 6e 20 49 61 28 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 29 7b 66 6f 72 28 3b 61 2e 68 2e 68 3b 29 74 72 79 7b 76 61 72 20 62 3d 61 2e 69 28 61 2e 68 29 3b 69 66 28 62 29 72 65 74 75 72 6e 20 61 2e 68 2e 75 3d 21 31 2c 7b 76 61 6c 75 65 3a 62 2e 76 Data Ascii: TypeError("Iterator result "+e+" is not an object");if(!e.done)return a.h.u=!1,e;var f=e.value}catch(g){return a.h.m=null,za(a.h,g),Ia(a)}a.h.m=null;d.call(a.h,f);return Ia(a)}function Ia(a){for(;a.h.h;)try{var b=a.i(a.h);if(b)return a.h.u=!1,{value:b.v
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 75 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 67 29 7b 74 68 69 73 2e 68 3d 30 3b 74 68 69 73 2e 6a 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 69 3d 5b 5d 3b 74 68 69 73 2e 75 3d 21 31 3b 76 61 72 20 68 3d 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 67 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6b 29 7b 68 2e 72 65 6a 65 63 74 28 6b 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 3f 67 3a 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 67 29 7d 29 7d 0a 69 66 Data Ascii: eturn!1}}:null});u("Promise",function(a){function b(g){this.h=0;this.j=void 0;this.i=[];this.u=!1;var h=this.l();try{g(h.resolve,h.reject)}catch(k){h.reject(k)}}function c(){this.h=null}function d(g){return g instanceof b?g:new b(function(h){h(g)})}if
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 28 31 2c 67 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 65 74 74 6c 65 28 22 2b 67 2b 22 2c 20 22 2b 68 2b 22 29 3a 20 50 72 6f 6d 69 73 65 20 61 6c 72 65 61 64 79 20 73 65 74 74 6c 65 64 20 69 6e 20 73 74 61 74 65 22 2b 74 68 69 73 2e 68 29 3b 74 68 69 73 2e 68 3d 67 3b 74 68 69 73 2e 6a 3d 68 3b 32 3d 3d 3d 74 68 69 73 2e 68 26 26 74 68 69 73 2e 66 61 28 29 3b 74 68 69 73 2e 49 28 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 66 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 2e 55 28 29 29 7b 76 61 72 20 68 3d 66 61 2e 63 6f Data Ascii: (1,g)};b.prototype.D=function(g,h){if(0!=this.h)throw Error("Cannot settle("+g+", "+h+"): Promise already settled in state"+this.h);this.h=g;this.j=h;2===this.h&&this.fa();this.I()};b.prototype.fa=function(){var g=this;e(function(){if(g.U()){var h=fa.co
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 2e 57 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 68 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 68 29 3b 7d 7d 0a 76 61 72 20 6c 3d 74 68 69 73 3b 6e 75 6c 6c 3d 3d 74 68 69 73 2e 69 3f 66 2e 69 28 6b 29 3a 74 68 69 73 2e 69 2e 70 75 73 68 28 6b 29 3b 74 68 69 73 2e 75 3d 21 30 7d 3b 0a 62 2e 72 65 73 6f 6c 76 65 3d 64 3b 62 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 6b 28 67 29 7d Data Ascii: .Wb=function(g,h){function k(){switch(l.h){case 1:g(l.j);break;case 2:h(l.j);break;default:throw Error("Unexpected state: "+l.h);}}var l=this;null==this.i?f.i(k):this.i.push(k);this.u=!0};b.resolve=d;b.reject=function(g){return new b(function(h,k){k(g)}
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 28 6b 29 3b 6e 2e 73 65 74 28 6c 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6b 29 26 26 34 3d 3d 6e 2e 67 65 74 28 6c 29 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 67 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 66 28 22 66 72 65 65 7a 65 22 29 3b 66 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 66 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 64 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 65 28 6b 29 3b 69 66 28 21 6e 61 28 6b 2c Data Ascii: (k);n.set(l,4);return!n.has(k)&&4==n.get(l)}catch(p){return!1}}())return a;var g="$jscomp_hidden_"+Math.random();f("freeze");f("preventExtensions");f("seal");var h=0;b.prototype.set=function(k,l){if(!d(k))throw Error("Invalid WeakMap key");e(k);if(!na(k,
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 76 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6b 2e 67 65 74 28 68 29 7c 7c 31 21 3d 6b 2e 73 69 7a 65 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 32 21 3d 6b 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6c 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 6e 3d 6c 2e 6e 65 78 74 Data Ascii: n(){if(!a\|\|"function"!=typeof a\|\|!a.prototype.entries\|\|"function"!=typeof Object.seal)return!1;try{var h=Object.seal({x:4}),k=new a(v([[h,"s"]]));if("s"!=k.get(h)\|\|1!=k.size\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|2!=k.size)return!1;var l=k.entries(),n=l.next

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49903	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:19 UTC	807	OUT	GET /s/player/0af6e327/player_ias.vflset/en_US/base.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:19 UTC	690	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2546025 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 17 Apr 2024 10:50:43 GMT Expires: Thu, 17 Apr 2025 10:50:43 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 17 Apr 2024 04:21:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 153696 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:19 UTC	565	IN	Data Raw: 76 61 72 20 5f 79 74 5f 70 6c 61 79 65 72 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 28 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 34 20 62 79 20 56 69 74 61 6c 79 20 50 75 7a 72 69 6e 0a 0a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 Data Ascii: var _yt_player={};(function(g){var window=this;/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// SPDX-License-Identifier: Apache-2.0// (The MIT License) Copyright (C) 2014 by Vitaly Puzrin Permission is her
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 0a 20 61 6c 6c 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 Data Ascii: tware, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 69 73 73 69 6f 6e 20 69 73 20 67 72 61 6e 74 65 64 20 74 6f 20 61 6e 79 6f 6e 65 20 74 6f 20 75 73 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 66 6f 72 20 61 6e 79 20 70 75 72 70 6f 73 65 2c 0a 20 20 20 69 6e 63 6c 75 64 69 6e 67 20 63 6f 6d 6d 65 72 63 69 61 6c 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2c 20 61 6e 64 20 74 6f 20 61 6c 74 65 72 20 69 74 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 20 69 74 0a 20 20 20 66 72 65 65 6c 79 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 72 65 73 74 72 69 63 74 69 6f 6e 73 3a 0a 20 20 20 31 2e 20 54 68 65 20 6f 72 69 67 69 6e 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6d 69 73 72 65 70 72 65 73 65 6e 74 65 64 3b 20 79 6f 75 Data Ascii: ission is granted to anyone to use this software for any purpose, including commercial applications, and to alter it and redistribute it freely, subject to the following restrictions: 1. The origin of this software must not be misrepresented; you
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 77 69 74 68 6f 75 74 20 6c 69 6d 69 74 61 74 69 6f 6e 20 74 68 65 20 72 69 67 68 74 73 0a 20 74 6f 20 75 73 65 2c 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 6d 65 72 67 65 2c 20 70 75 62 6c 69 73 68 2c 20 64 69 73 74 72 69 62 75 74 65 2c 20 73 75 62 6c 69 63 65 6e 73 65 2c 20 61 6e 64 2f 6f 72 20 73 65 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 Data Ascii: without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 62 61 2c 6f 65 2c 71 65 2c 43 62 61 2c 41 62 61 2c 42 62 61 2c 45 62 61 2c 46 62 61 2c 79 65 2c 7a 65 2c 48 62 61 2c 42 65 2c 49 62 61 2c 4a 62 61 2c 4b 62 61 2c 4f 62 61 2c 4e 62 61 2c 4b 65 2c 4d 65 2c 50 62 61 2c 52 65 2c 57 65 2c 58 65 2c 51 62 61 2c 0a 24 65 2c 66 66 2c 67 66 2c 52 62 61 2c 53 62 61 2c 54 62 61 2c 55 62 61 2c 72 66 2c 77 66 2c 42 66 2c 58 62 61 2c 5a 62 61 2c 59 62 61 2c 44 66 2c 48 66 2c 24 62 61 2c 45 66 2c 52 66 2c 71 66 2c 58 66 2c 62 63 61 2c 5a 66 2c 59 66 2c 70 66 2c 66 67 2c 63 63 61 2c 67 67 2c 68 67 2c 69 67 2c 64 63 61 2c 66 63 61 2c 68 63 61 2c 77 67 2c 78 67 2c 79 67 2c 6c 63 61 2c 6e 63 61 2c 41 67 2c 6f 63 61 2c 7a 67 2c 73 63 61 2c 6e 67 2c 6a 63 61 2c 75 63 61 2c 72 63 61 2c 70 63 61 2c 71 63 61 2c 76 63 61 2c 74 63 Data Ascii: ba,oe,qe,Cba,Aba,Bba,Eba,Fba,ye,ze,Hba,Be,Iba,Jba,Kba,Oba,Nba,Ke,Me,Pba,Re,We,Xe,Qba,$e,ff,gf,Rba,Sba,Tba,Uba,rf,wf,Bf,Xba,Zba,Yba,Df,Hf,$ba,Ef,Rf,qf,Xf,bca,Zf,Yf,pf,fg,cca,gg,hg,ig,dca,fca,hca,wg,xg,yg,lca,nca,Ag,oca,zg,sca,ng,jca,uca,rca,pca,qca,vca,tc
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 2c 79 66 61 2c 54 6d 2c 7a 66 61 2c 56 6d 2c 41 66 61 2c 44 66 61 2c 57 6d 2c 58 6d 2c 59 6d 2c 5a 6d 2c 46 66 61 2c 63 6e 2c 47 66 61 2c 64 6e 2c 65 6e 2c 66 6e 2c 48 66 61 2c 49 66 61 2c 4b 6e 2c 4a 66 61 2c 4c 6e 2c 4d 6e 2c 4d 66 61 2c 4f 66 61 2c 50 66 61 2c 52 66 61 2c 51 66 61 2c 53 66 61 2c 4f 6e 2c 54 66 61 2c 52 6e 2c 56 6e 2c 57 6e 2c 58 6e 2c 57 66 61 2c 58 66 61 2c 59 66 61 2c 59 6e 2c 24 66 61 2c 5a 6e 2c 61 67 61 2c 63 67 61 2c 66 67 61 2c 65 67 61 2c 64 67 61 2c 69 67 61 2c 67 67 61 2c 61 6f 2c 63 6f 2c 6a 67 61 2c 65 6f 2c 66 6f 2c 62 6f 2c 67 6f 2c 68 6f 2c 69 6f 2c 6b 6f 2c 6b 67 61 2c 6c 6f 2c 6d 6f 2c 6d 67 61 2c 6c 67 61 2c 6e 67 61 2c 6f 67 61 2c 70 67 61 2c 72 67 61 2c 6e 6f 2c 6f 6f 2c 70 6f 2c 71 6f 2c 72 6f 2c 73 6f 2c 74 6f 2c Data Ascii: ,yfa,Tm,zfa,Vm,Afa,Dfa,Wm,Xm,Ym,Zm,Ffa,cn,Gfa,dn,en,fn,Hfa,Ifa,Kn,Jfa,Ln,Mn,Mfa,Ofa,Pfa,Rfa,Qfa,Sfa,On,Tfa,Rn,Vn,Wn,Xn,Wfa,Xfa,Yfa,Yn,$fa,Zn,aga,cga,fga,ega,dga,iga,gga,ao,co,jga,eo,fo,bo,go,ho,io,ko,kga,lo,mo,mga,lga,nga,oga,pga,rga,no,oo,po,qo,ro,so,to,
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 74 6a 61 2c 78 6a 61 2c 41 6a 61 2c 7a 6a 61 2c 58 74 2c 42 6a 61 2c 43 6a 61 2c 44 6a 61 2c 46 6a 61 2c 45 6a 61 2c 47 6a 61 2c 59 74 2c 48 6a 61 2c 49 6a 61 2c 24 74 2c 4a 6a 61 2c 4b 6a 61 2c 4c 6a 61 2c 4d 6a 61 2c 61 75 2c 4e 6a 61 2c 62 75 2c 4f 6a 61 2c 63 75 2c 64 75 2c 0a 51 6a 61 2c 65 75 2c 52 6a 61 2c 66 75 2c 67 75 2c 53 6a 61 2c 54 6a 61 2c 68 75 2c 6a 75 2c 56 6a 61 2c 6b 75 2c 55 6a 61 2c 57 6a 61 2c 58 6a 61 2c 59 6a 61 2c 24 6a 61 2c 6c 75 2c 61 6b 61 2c 6f 75 2c 70 75 2c 63 6b 61 2c 64 6b 61 2c 67 6b 61 2c 68 6b 61 2c 71 75 2c 72 75 2c 74 75 2c 75 75 2c 76 75 2c 77 75 2c 78 75 2c 79 75 2c 7a 75 2c 41 75 2c 42 75 2c 43 75 2c 44 75 2c 6c 6b 61 2c 6b 6b 61 2c 6d 6b 61 2c 6f 6b 61 2c 6e 6b 61 2c 71 6b 61 2c 6a 6b 61 2c 70 6b 61 2c 69 6b 61 Data Ascii: tja,xja,Aja,zja,Xt,Bja,Cja,Dja,Fja,Eja,Gja,Yt,Hja,Ija,$t,Jja,Kja,Lja,Mja,au,Nja,bu,Oja,cu,du,Qja,eu,Rja,fu,gu,Sja,Tja,hu,ju,Vja,ku,Uja,Wja,Xja,Yja,$ja,lu,aka,ou,pu,cka,dka,gka,hka,qu,ru,tu,uu,vu,wu,xu,yu,zu,Au,Bu,Cu,Du,lka,kka,mka,oka,nka,qka,jka,pka,ika
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 6e 61 2c 68 7a 2c 69 7a 2c 64 6e 61 2c 6a 7a 2c 65 6e 61 2c 6b 7a 2c 66 6e 61 2c 67 6e 61 2c 68 6e 61 2c 6c 7a 2c 69 6e 61 2c 6d 7a 2c 6e 7a 2c 6f 7a 2c 6a 6e 61 2c 70 7a 2c 6b 6e 61 2c 71 7a 2c 72 7a 2c 73 7a 2c 74 7a 2c 77 7a 2c 78 7a 2c 79 7a 2c 6c 6e 61 2c 7a 7a 2c 41 7a 2c 42 7a 2c 6d 6e 61 2c 43 7a 2c 44 7a 2c 45 7a 2c 46 7a 2c 6e 6e 61 2c 47 7a 2c 48 7a 2c 49 7a 2c 4a 7a 2c 4b 7a 2c 6f 6e 61 2c 4c 7a 2c 70 6e 61 2c 4d 7a 2c 71 6e 61 2c 72 6e 61 2c 4e 7a 2c 4f 7a 2c 73 6e 61 2c 50 7a 2c 51 7a 2c 52 7a 2c 74 6e 61 2c 75 6e 61 2c 76 6e 61 2c 77 6e 61 2c 53 7a 2c 54 7a 2c 78 6e 61 2c 55 7a 2c 79 6e 61 2c 7a 6e 61 2c 41 6e 61 2c 42 6e 61 2c 43 6e 61 2c 56 7a 2c 57 7a 2c 44 6e 61 2c 45 6e 61 2c 58 7a 2c 59 7a 2c 46 6e 61 2c 5a 7a 2c 47 6e 61 2c 48 6e 61 Data Ascii: na,hz,iz,dna,jz,ena,kz,fna,gna,hna,lz,ina,mz,nz,oz,jna,pz,kna,qz,rz,sz,tz,wz,xz,yz,lna,zz,Az,Bz,mna,Cz,Dz,Ez,Fz,nna,Gz,Hz,Iz,Jz,Kz,ona,Lz,pna,Mz,qna,rna,Nz,Oz,sna,Pz,Qz,Rz,tna,una,vna,wna,Sz,Tz,xna,Uz,yna,zna,Ana,Bna,Cna,Vz,Wz,Dna,Ena,Xz,Yz,Fna,Zz,Gna,Hna
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 47 72 61 2c 48 72 61 2c 4a 72 61 2c 49 72 61 2c 64 44 2c 44 72 61 2c 4d 72 61 2c 4e 72 61 2c 69 44 2c 4c 72 61 2c 4f 72 61 2c 50 72 61 2c 6a 44 2c 6b 44 2c 51 72 61 2c 53 72 61 2c 6d 44 2c 54 72 61 2c 55 72 61 2c 57 72 61 2c 59 72 61 2c 70 44 2c 5a 72 61 2c 24 72 61 2c 61 73 61 2c 62 73 61 2c 0a 63 73 61 2c 64 73 61 2c 65 73 61 2c 66 73 61 2c 72 44 2c 67 73 61 2c 74 44 2c 69 73 61 2c 6a 73 61 2c 6b 73 61 2c 6c 73 61 2c 6d 73 61 2c 6e 73 61 2c 79 44 2c 71 73 61 2c 74 73 61 2c 7a 44 2c 75 73 61 2c 77 73 61 2c 70 73 61 2c 78 73 61 2c 79 73 61 2c 7a 73 61 2c 72 73 61 2c 73 73 61 2c 75 44 2c 6f 73 61 2c 78 44 2c 76 73 61 2c 77 44 2c 76 44 2c 41 73 61 2c 42 73 61 2c 43 73 61 2c 44 73 61 2c 45 73 61 2c 46 73 61 2c 4c 73 61 2c 47 73 61 2c 43 44 2c 44 44 2c 45 44 Data Ascii: Gra,Hra,Jra,Ira,dD,Dra,Mra,Nra,iD,Lra,Ora,Pra,jD,kD,Qra,Sra,mD,Tra,Ura,Wra,Yra,pD,Zra,$ra,asa,bsa,csa,dsa,esa,fsa,rD,gsa,tD,isa,jsa,ksa,lsa,msa,nsa,yD,qsa,tsa,zD,usa,wsa,psa,xsa,ysa,zsa,rsa,ssa,uD,osa,xD,vsa,wD,vD,Asa,Bsa,Csa,Dsa,Esa,Fsa,Lsa,Gsa,CD,DD,ED
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 78 61 2c 54 78 61 2c 52 78 61 2c 55 78 61 2c 69 47 2c 6c 47 2c 6e 47 2c 57 78 61 2c 56 78 61 2c 70 47 2c 58 78 61 2c 59 78 61 2c 71 47 2c 72 47 2c 73 47 2c 7a 47 2c 43 47 2c 24 78 61 2c 44 47 2c 45 47 2c 46 47 2c 47 47 2c 61 79 61 2c 62 79 61 2c 4a 47 2c 63 79 61 2c 4b 47 2c 66 79 61 2c 68 79 61 2c 6a 79 61 2c 6c 79 61 2c 6e 79 61 2c 70 79 61 2c 4d 47 2c 71 79 61 2c 4e 47 2c 72 79 61 2c 75 79 61 2c 76 79 61 2c 77 79 61 2c 50 47 2c 51 47 2c 79 79 61 2c 7a 79 61 2c 53 47 2c 54 47 2c 55 47 2c 42 79 61 2c 56 47 2c 57 47 2c 58 47 2c 43 79 61 2c 59 47 2c 41 79 61 2c 44 79 61 2c 5a 47 2c 46 79 61 2c 45 79 61 2c 24 47 2c 48 79 61 2c 61 48 2c 62 48 2c 64 48 2c 49 79 61 2c 4a 79 61 2c 66 48 2c 67 48 2c 69 48 2c 75 48 2c 74 48 2c 4c 79 61 2c 68 48 2c 4f 79 61 2c 50 Data Ascii: xa,Txa,Rxa,Uxa,iG,lG,nG,Wxa,Vxa,pG,Xxa,Yxa,qG,rG,sG,zG,CG,$xa,DG,EG,FG,GG,aya,bya,JG,cya,KG,fya,hya,jya,lya,nya,pya,MG,qya,NG,rya,uya,vya,wya,PG,QG,yya,zya,SG,TG,UG,Bya,VG,WG,XG,Cya,YG,Aya,Dya,ZG,Fya,Eya,$G,Hya,aH,bH,dH,Iya,Jya,fH,gH,iH,uH,tH,Lya,hH,Oya,P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49909	104.22.71.197	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:19 UTC	569	OUT	GET /menu/modules/core.BRQnzO8v.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.irs.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:19 UTC	920	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:19 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=315360000, immutable Cf-Bgj: minify ETag: W/"25da5432b1057724b8210f17e9b9db05" NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j8Py3LIy8sMm3aPaWoLCf%2FOfCMdRsEpKd3s2wbTkAuu%2F5UjuQ4kXGUaiizSnFFxf8A2f2FpUWZ7ILicmiskSK%2Fgfe0%2FxnSLukLexusuhAAI1A34EJV62ivPi3ay2%2BfZ1MYmq12ysJUFkL%2BBBMaYXgpVT"}],"group":"cf-nel","max_age":604800} Vary: Accept-Encoding referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff CF-Cache-Status: HIT Age: 22696 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 876a836d7ecf673e-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 05:32:19 UTC	449	IN	Data Raw: 33 38 38 31 0d 0a 63 6f 6e 73 74 20 74 3d 22 2e 42 52 51 6e 7a 4f 38 76 22 2c 4a 3d 77 69 6e 64 6f 77 2c 4b 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 58 3d 76 6f 69 64 20 30 3b 4a 2e 61 32 61 5f 63 6f 6e 66 69 67 3d 4a 2e 61 32 61 5f 63 6f 6e 66 69 67 7c 7c 7b 7d 3b 76 61 72 20 65 3d 7b 6c 6f 63 61 6c 69 7a 65 3a 4a 2e 61 32 61 5f 6c 6f 63 61 6c 69 7a 65 7c 7c 7b 7d 2c 73 74 61 74 69 63 5f 73 65 72 76 65 72 3a 4a 2e 61 32 61 5f 63 6f 6e 66 69 67 2e 73 74 61 74 69 63 5f 73 65 72 76 65 72 7c 7c 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 61 64 64 74 6f 61 6e 79 2e 63 6f 6d 2f 6d 65 6e 75 22 2c 74 65 6d 70 6c 61 74 65 73 3a 7b 7d 2c 6e 61 74 69 76 65 3a 58 2c 6f 6e 63 6c 69 63 6b 3a 32 2c 6f 72 69 65 6e 74 61 74 69 6f 6e Data Ascii: 3881const t=".BRQnzO8v",J=window,K=document,p=function(){},X=void 0;J.a2a_config=J.a2a_config\|\|{};var e={localize:J.a2a_localize\|\|{},static_server:J.a2a_config.static_server\|\|"https://static.addtoany.com/menu",templates:{},native:X,onclick:2,orientation
2024-04-19 05:32:19 UTC	1369	IN	Data Raw: 65 78 74 5f 68 6f 76 65 72 3a 58 2c 63 6f 75 6e 74 73 3a 58 2c 6f 76 65 72 6c 61 79 73 3a 5b 5d 7d 3b 63 6f 6e 73 74 20 4c 3d 7b 6e 75 6d 5f 73 65 72 76 69 63 65 73 3a 38 2c 70 72 69 6f 72 69 74 69 7a 65 3a 58 2c 65 78 63 6c 75 64 65 5f 73 65 72 76 69 63 65 73 3a 58 2c 63 75 73 74 6f 6d 5f 73 65 72 76 69 63 65 73 3a 58 2c 64 65 6c 61 79 3a 30 2c 73 68 6f 77 5f 6d 65 6e 75 3a 58 2c 62 6f 6f 6b 6d 61 72 6b 6c 65 74 3a 58 7d 2c 6d 3d 7b 6c 69 6e 6b 6d 65 64 69 61 3a 58 2c 6c 69 6e 6b 6e 61 6d 65 3a 58 2c 6c 69 6e 6b 75 72 6c 3a 58 2c 6c 69 6e 6b 6e 61 6d 65 5f 65 73 63 61 70 65 3a 58 2c 6d 65 6e 75 5f 74 79 70 65 3a 58 2c 74 61 72 67 65 74 3a 58 7d 2c 5a 3d 7b 2e 2e 2e 65 2c 2e 2e 2e 4c 2c 2e 2e 2e 6d 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 Data Ascii: ext_hover:X,counts:X,overlays:[]};const L={num_services:8,prioritize:X,exclude_services:X,custom_services:X,delay:0,show_menu:X,bookmarklet:X},m={linkmedia:X,linkname:X,linkurl:X,linkname_escape:X,menu_type:X,target:X},Z={...e,...L,...m},v=function(){for(
2024-04-19 05:32:19 UTC	1369	IN	Data Raw: 35 22 2c 7b 70 75 3a 31 2c 6e 61 3a 31 7d 5d 2c 5b 22 57 68 61 74 73 41 70 70 22 2c 22 77 68 61 74 73 61 70 70 22 2c 22 77 68 61 74 73 61 70 70 22 2c 22 31 32 41 46 30 41 22 2c 7b 70 75 3a 31 2c 6e 61 3a 31 7d 5d 2c 5b 22 45 6d 61 69 6c 22 2c 22 65 6d 61 69 6c 22 2c 22 65 6d 61 69 6c 22 2c 22 38 38 38 39 39 30 22 2c 7b 75 72 6c 3a 22 6d 61 69 6c 74 6f 3a 3f 73 75 62 6a 65 63 74 3d 24 7b 74 69 74 6c 65 7d 26 62 6f 64 79 3d 24 7b 6c 69 6e 6b 7d 22 7d 5d 2c 5b 22 50 69 6e 74 65 72 65 73 74 22 2c 22 70 69 6e 74 65 72 65 73 74 22 2c 22 70 69 6e 74 65 72 65 73 74 22 2c 22 65 36 30 30 32 33 22 2c 7b 74 79 70 65 3a 22 6a 73 22 2c 73 72 63 3a 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 70 69 6e 74 65 72 65 73 74 2e 63 6f 6d 2f 6a 73 2f 70 69 6e 6d 61 72 6b 6c Data Ascii: 5",{pu:1,na:1}],["WhatsApp","whatsapp","whatsapp","12AF0A",{pu:1,na:1}],["Email","email","email","888990",{url:"mailto:?subject=${title}&body=${link}"}],["Pinterest","pinterest","pinterest","e60023",{type:"js",src:"https://assets.pinterest.com/js/pinmarkl
2024-04-19 05:32:19 UTC	1369	IN	Data Raw: 38 38 38 39 39 30 22 2c 7b 74 79 70 65 3a 22 6a 73 22 2c 73 72 63 3a 22 6a 61 76 61 73 63 72 69 70 74 3a 61 32 61 2e 63 6f 70 79 4c 69 6e 6b 28 27 24 7b 6c 69 6e 6b 7d 27 29 22 7d 5d 2c 5b 22 44 69 61 72 79 2e 52 75 22 2c 22 64 69 61 72 79 5f 72 75 22 2c 22 64 69 61 72 79 5f 72 75 22 2c 22 39 31 32 44 33 31 22 5d 2c 5b 22 44 69 61 73 70 6f 72 61 22 2c 22 64 69 61 73 70 6f 72 61 22 2c 22 64 69 61 73 70 6f 72 61 22 2c 22 32 45 33 34 33 36 22 5d 2c 5b 22 44 69 67 67 22 2c 22 64 69 67 67 22 2c 22 64 69 67 67 22 2c 22 31 41 31 41 31 41 22 5d 2c 5b 22 44 69 69 67 6f 22 2c 22 64 69 69 67 6f 22 2c 22 64 69 69 67 6f 22 2c 22 34 41 38 42 43 41 22 5d 2c 5b 22 44 6f 75 62 61 6e 22 2c 22 64 6f 75 62 61 6e 22 2c 22 64 6f 75 62 61 6e 22 2c 22 30 37 31 22 2c 7b 70 75 3a Data Ascii: 888990",{type:"js",src:"javascript:a2a.copyLink('${link}')"}],["Diary.Ru","diary_ru","diary_ru","912D31"],["Diaspora","diaspora","diaspora","2E3436"],["Digg","digg","digg","1A1A1A"],["Diigo","diigo","diigo","4A8BCA"],["Douban","douban","douban","071",{pu:
2024-04-19 05:32:19 UTC	1369	IN	Data Raw: 22 6f 75 74 6c 6f 6f 6b 5f 63 6f 6d 22 2c 22 30 30 37 32 43 36 22 2c 7b 74 79 70 65 3a 22 65 6d 61 69 6c 22 7d 5d 2c 5b 22 50 61 70 61 6c 79 22 2c 22 70 61 70 61 6c 79 22 2c 22 70 61 70 61 6c 79 22 2c 22 33 41 43 30 46 36 22 2c 7b 70 75 3a 31 7d 5d 2c 5b 22 50 69 6e 62 6f 61 72 64 22 2c 22 70 69 6e 62 6f 61 72 64 22 2c 22 70 69 6e 62 6f 61 72 64 22 2c 22 31 33 34 31 44 45 22 2c 7b 70 75 3a 31 7d 5d 2c 5b 22 50 6c 75 72 6b 22 2c 22 70 6c 75 72 6b 22 2c 22 70 6c 75 72 6b 22 2c 22 43 46 36 38 32 46 22 5d 2c 5b 22 50 72 69 6e 74 22 2c 22 70 72 69 6e 74 22 2c 22 70 72 69 6e 74 22 2c 22 38 38 38 39 39 30 22 2c 7b 74 79 70 65 3a 22 6a 73 22 2c 73 72 63 3a 22 6a 61 76 61 73 63 72 69 70 74 3a 70 72 69 6e 74 28 29 22 7d 5d 2c 5b 22 50 72 69 6e 74 46 72 69 65 6e 64 Data Ascii: "outlook_com","0072C6",{type:"email"}],["Papaly","papaly","papaly","3AC0F6",{pu:1}],["Pinboard","pinboard","pinboard","1341DE",{pu:1}],["Plurk","plurk","plurk","CF682F"],["Print","print","print","888990",{type:"js",src:"javascript:print()"}],["PrintFriend
2024-04-19 05:32:19 UTC	1369	IN	Data Raw: 73 22 2c 22 77 6f 72 64 70 72 65 73 73 22 2c 22 35 38 35 43 36 30 22 5d 2c 5b 22 57 79 6b 6f 70 22 2c 22 77 79 6b 6f 70 22 2c 22 77 79 6b 6f 70 22 2c 22 33 36 37 44 41 39 22 5d 2c 5b 22 58 22 2c 22 78 22 2c 22 78 22 2c 22 31 41 31 41 31 41 22 2c 7b 70 75 3a 31 2c 6e 61 3a 31 7d 5d 2c 5b 22 58 49 4e 47 22 2c 22 78 69 6e 67 22 2c 22 78 69 6e 67 22 2c 22 31 36 35 42 36 36 22 2c 7b 70 75 3a 31 7d 5d 2c 5b 22 59 61 68 6f 6f 20 4d 61 69 6c 22 2c 22 79 61 68 6f 6f 5f 6d 61 69 6c 22 2c 22 79 61 68 6f 6f 22 2c 22 34 30 30 30 39 30 22 2c 7b 74 79 70 65 3a 22 65 6d 61 69 6c 22 7d 5d 2c 5b 22 59 75 6d 6d 6c 79 22 2c 22 79 75 6d 6d 6c 79 22 2c 22 79 75 6d 6d 6c 79 22 2c 22 45 31 36 31 32 30 22 2c 7b 74 79 70 65 3a 22 6a 73 22 2c 73 72 63 3a 22 68 74 74 70 73 3a 2f 2f Data Ascii: s","wordpress","585C60"],["Wykop","wykop","wykop","367DA9"],["X","x","x","1A1A1A",{pu:1,na:1}],["XING","xing","xing","165B66",{pu:1}],["Yahoo Mail","yahoo_mail","yahoo","400090",{type:"email"}],["Yummly","yummly","yummly","E16120",{type:"js",src:"https://
2024-04-19 05:32:19 UTC	1369	IN	Data Raw: 42 38 35 22 5d 5d 2c 65 6d 61 69 6c 3a 5b 5b 22 46 65 65 64 42 6c 69 74 7a 22 2c 22 66 65 65 64 62 6c 69 74 7a 22 2c 22 66 65 65 64 62 6c 69 74 7a 22 2c 22 46 46 38 42 32 33 22 2c 7b 74 79 70 65 3a 22 65 6d 61 69 6c 22 7d 5d 5d 7d 7d 2c 65 65 3d 28 28 63 65 3d 52 2e 70 61 67 65 2e 6d 6f 73 74 2e 63 6f 6e 63 61 74 28 52 2e 66 65 65 64 2e 6d 6f 73 74 29 29 2e 66 6f 72 45 61 63 68 28 65 3d 3e 69 2e 70 75 73 68 28 65 5b 32 5d 29 29 2c 7b 61 70 70 6c 65 5f 6d 75 73 69 63 3a 7b 6e 61 6d 65 3a 22 41 70 70 6c 65 20 4d 75 73 69 63 22 2c 69 63 6f 6e 3a 22 61 70 70 6c 65 5f 6d 75 73 69 63 22 2c 63 6f 6c 6f 72 3a 22 66 61 32 33 33 62 22 7d 2c 62 65 68 61 6e 63 65 3a 7b 6e 61 6d 65 3a 22 42 65 68 61 6e 63 65 22 2c 69 63 6f 6e 3a 22 62 65 68 61 6e 63 65 22 2c 63 6f 6c Data Ascii: B85"]],email:[["FeedBlitz","feedblitz","feedblitz","FF8B23",{type:"email"}]]}},ee=((ce=R.page.most.concat(R.feed.most)).forEach(e=>i.push(e[2])),{apple_music:{name:"Apple Music",icon:"apple_music",color:"fa233b"},behance:{name:"Behance",icon:"behance",col
2024-04-19 05:32:19 UTC	1369	IN	Data Raw: 70 69 6e 74 65 72 65 73 74 22 2c 63 6f 6c 6f 72 3a 22 42 44 30 38 31 43 22 2c 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 69 6e 74 65 72 65 73 74 2e 63 6f 6d 2f 24 7b 69 64 7d 22 7d 2c 73 6e 61 70 63 68 61 74 3a 7b 6e 61 6d 65 3a 22 53 6e 61 70 63 68 61 74 22 2c 69 63 6f 6e 3a 22 73 6e 61 70 63 68 61 74 22 2c 63 6f 6c 6f 72 3a 22 32 41 32 41 32 41 22 2c 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 6e 61 70 63 68 61 74 2e 63 6f 6d 2f 61 64 64 2f 24 7b 69 64 7d 22 7d 2c 73 6f 75 6e 64 63 6c 6f 75 64 3a 7b 6e 61 6d 65 3a 22 53 6f 75 6e 64 43 6c 6f 75 64 22 2c 69 63 6f 6e 3a 22 73 6f 75 6e 64 63 6c 6f 75 64 22 2c 63 6f 6c 6f 72 3a 22 66 66 35 35 30 30 22 7d 2c 73 70 6f 74 69 66 79 3a 7b 6e 61 6d 65 3a 22 53 70 6f 74 69 66 79 22 2c 69 63 6f Data Ascii: pinterest",color:"BD081C",url:"https://www.pinterest.com/${id}"},snapchat:{name:"Snapchat",icon:"snapchat",color:"2A2A2A",url:"https://www.snapchat.com/add/${id}"},soundcloud:{name:"SoundCloud",icon:"soundcloud",color:"ff5500"},spotify:{name:"Spotify",ico
2024-04-19 05:32:19 UTC	1369	IN	Data Raw: 28 22 6c 6f 61 64 22 2c 74 2c 21 31 29 2c 61 28 29 29 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 4b 2e 72 65 61 64 79 53 74 61 74 65 3f 61 28 29 3a 4b 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 28 4b 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 74 2c 21 31 29 2c 4a 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 74 2c 21 31 29 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 65 28 65 2c 61 3d 7b 7d 29 7b 76 28 29 3b 76 61 72 20 74 2c 6e 2c 6f 2c 69 2c 72 2c 6c 2c 73 3d 5a 2c 63 3d 7b 7d 2c 64 3d 6e 75 6c 6c 2c 70 3d 7b 7d 2c 75 3d 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 66 6f 72 28 74 20 69 6e 20 72 61 28 65 29 2c 61 29 73 5b 74 5d 3d 61 5b 74 5d 3b 66 Data Ascii: ("load",t,!1),a())};"complete"===K.readyState?a():K.addEventListener&&(K.addEventListener("DOMContentLoaded",t,!1),J.addEventListener("load",t,!1))}};function ae(e,a={}){v();var t,n,o,i,r,l,s=Z,c={},d=null,p={},u=location.href;for(t in ra(e),a)s[t]=a[t];f
2024-04-19 05:32:19 UTC	1369	IN	Data Raw: 6b 6e 61 6d 65 2c 6e 2e 6c 69 6e 6b 75 72 6c 3d 6f 2e 6c 69 6e 6b 75 72 6c 3d 6c 7c 7c 6e 2e 6c 69 6e 6b 75 72 6c 2c 72 26 26 28 6e 2e 6c 69 6e 6b 6e 61 6d 65 5f 69 6d 70 6c 69 63 69 74 3d 21 31 29 2c 6c 26 26 28 6e 2e 6c 69 6e 6b 75 72 6c 5f 69 6d 70 6c 69 63 69 74 3d 21 31 29 2c 22 74 65 78 74 43 6f 6e 74 65 6e 74 22 69 6e 20 4b 3f 70 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 6e 2e 6c 69 6e 6b 6e 61 6d 65 3a 70 2e 69 6e 6e 65 72 54 65 78 74 3d 6e 2e 6c 69 6e 6b 6e 61 6d 65 2c 28 69 3d 70 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 29 26 26 28 6e 2e 6c 69 6e 6b 6e 61 6d 65 3d 69 2e 6e 6f 64 65 56 61 6c 75 65 29 2c 64 2e 61 32 61 5f 6b 69 74 3f 71 28 6e 2c 6f 29 3a 57 28 6e 29 29 3a 75 2e 73 68 6f 77 5f 6d 65 6e 75 7c 7c 6a 2d 2d 2c 59 28 29 7d 66 75 6e 63 74 Data Ascii: kname,n.linkurl=o.linkurl=l\|\|n.linkurl,r&&(n.linkname_implicit=!1),l&&(n.linkurl_implicit=!1),"textContent"in K?p.textContent=n.linkname:p.innerText=n.linkname,(i=p.childNodes[0])&&(n.linkname=i.nodeValue),d.a2a_kit?q(n,o):W(n)):u.show_menu\|\|j--,Y()}funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49910	172.67.39.148	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:19 UTC	692	OUT	GET /menu/sm.25.html HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:19 UTC	853	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:19 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=315360000, immutable referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nzelyvczJ9smi%2BooRiOkJnls9rLCiuk4DuCOMZnPGC5KKTHyoTN0j6zhugTPk%2B8J7O8HZaLNuwGO6Zh4nW6L8ceTywTGye7YHVwSCoYXiQG8bik2OwXlQY15NX3uvbL4hFvfK1DhkMzTdWL8vGBFn18c"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: HIT Age: 1116 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 876a836faf12b04a-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 05:32:19 UTC	516	IN	Data Raw: 32 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 41 32 41 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 3c 73 63 72 69 70 74 3e 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2c 74 3d 30 3c 6f 2e 6c 65 6e 67 74 68 3b 76 61 72 20 6e 2c 61 3d 7b 66 65 65 64 3a 5b 5d 2c 70 61 67 65 3a 5b 5d 7d 3b 74 26 26 5b 22 66 65 65 64 22 2c 22 70 61 67 65 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2b 22 5f 73 65 72 76 69 63 65 73 22 2c 6e 3d 6f 2e 69 6e 64 65 78 4f 66 28 74 2b 22 3d 22 29 3b 2d 31 21 3d 6e 26 Data Ascii: 2cc<!doctype html><html><head><title>A2A</title><meta name="robots" content="noindex"><script>!function(e){var o=document.cookie,t=0<o.length;var n,a={feed:[],page:[]};t&&["feed","page"].forEach(function(e){var t=e+"_services",n=o.indexOf(t+"=");-1!=n&
2024-04-19 05:32:19 UTC	207	IN	Data Raw: 6f 70 50 72 6f 74 6f 63 6f 6c 3a 22 22 2c 74 3d 2f 5e 68 74 74 70 5c 2f 31 2f 2e 74 65 73 74 28 6e 29 29 2c 74 29 2c 75 73 65 72 5f 73 65 72 76 69 63 65 73 3a 7b 66 65 65 64 3a 61 2e 66 65 65 64 2c 70 61 67 65 3a 61 2e 70 61 67 65 7d 7d 2c 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 26 26 65 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 6e 2c 22 2a 22 29 7d 28 77 69 6e 64 6f 77 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: opProtocol:"",t=/^http\/1/.test(n)),t),user_services:{feed:a.feed,page:a.page}},e.postMessage&&e.parent.postMessage(n,"*")}(window);</script></head><body style="background-color:transparent"></body></html>
2024-04-19 05:32:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49911	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:19 UTC	957	OUT	GET /embed/s09YWoGtftM?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:19 UTC	1592	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 05:32:19 GMT Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:19 UTC	1592	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 55 4b 55 6b 2d 43 43 66 73 55 4f 5a 73 6d 54 30 74 65 30 67 58 67 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="UKUk-CCfsUOZsmT0te0gXg">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-04-19 05:32:19 UTC	1592	IN	Data Raw: 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c Data Ascii: t-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-famil
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 Data Ascii: woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.c
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 35 30 25 20 36 35 25 20 6e 6f 2d 72 65 70 65 61 74 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 2e 6d 65 73 73 61 67 65 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 6d 61 72 67 69 6e 3a 20 30 20 2d 35 70 78 20 31 35 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 35 70 78 20 31 34 70 78 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 38 38 38 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 39 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 61 20 7b 63 6f 6c 6f 72 3a 20 23 31 36 37 61 63 36 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 Data Ascii: 50% 65% no-repeat;}.player-unavailable .message {text-align: left; margin: 0 -5px 15px; padding: 0 5px 14px; border-bottom: 1px solid #888; font-size: 19px; font-weight: normal;}.player-unavailable a {color: #167ac6; text-decoration: none;}</style><script
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 6c 29 3b 76 61 72 20 69 73 50 72 65 72 65 6e 64 65 72 3d 28 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 3d 3d 22 70 72 65 72 65 6e 64 65 72 22 3b 76 61 72 20 76 4e 61 6d 65 3d 21 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 65 6e 64 65 72 29 7b 76 61 72 20 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 29 3b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 Data Ascii: l);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 6f 70 79 5f 6c 6f 67 69 6e 5f 69 6e 66 6f 5f 74 6f 5f 73 74 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 63 73 69 5f 63 6f 6e 66 69 67 5f 68 61 6e 64 6c 69 6e 67 5f 69 6e 66 72 61 22 3a 74 72 75 65 2c 22 63 73 69 5f 6f 6e 5f 67 65 6c 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 63 73 69 5f 68 61 73 5f 69 6e 66 6f 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 70 61 69 72 5f 73 65 72 76 6c 65 74 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 63 6c 69 65 6e 74 5f 72 65 6c 65 61 73 65 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 73 65 74 5f 74 69 74 6c 65 5f 62 61 72 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 73 70 61 72 6b 6c 65 73 5f 6c 69 67 68 74 5f 63 74 61 5f 62 75 Data Ascii: opy_login_info_to_st_cookie":true,"csi_config_handling_infra":true,"csi_on_gel":true,"deprecate_csi_has_info":true,"deprecate_pair_servlet_enabled":true,"desktop_client_release":true,"desktop_notification_set_title_bar":true,"desktop_sparkles_light_cta_bu
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 62 6c 65 5f 70 6f 70 75 6c 61 74 65 5f 70 73 64 5f 69 6e 5f 61 62 65 5f 66 65 65 64 62 61 63 6b 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 72 65 73 70 65 63 74 5f 6c 61 6e 67 5f 64 69 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 6d 69 64 72 6f 6c 6c 5f 70 6f 73 74 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 74 76 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 6b 69 70 5f 61 64 5f 67 75 69 64 61 6e 63 65 5f 70 72 6f 6d 70 74 22 Data Ascii: ble_populate_psd_in_abe_feedback":true,"enable_respect_lang_dir":true,"enable_sdf_midroll_postroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_tv":true,"enable_skip_ad_guidance_prompt"
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 79 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 76 69 73 5f 6f 6e 5f 74 61 62 5f 63 68 61 6e 67 65 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 77 65 62 5f 65 6e 64 70 6f 69 6e 74 5f 74 6f 5f 6c 61 79 65 72 22 3a 74 72 75 65 2c 22 6d 64 78 5f 65 6e 61 62 6c 65 5f 70 72 69 76 61 63 79 5f 64 69 73 63 6c 6f 73 75 72 65 5f 75 69 22 3a 74 72 75 65 2c 22 6d 64 78 5f 6c 6f 61 64 5f 63 61 73 74 5f 61 70 69 5f 62 6f 6f 74 73 74 72 61 70 5f 73 63 72 69 70 74 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 65 76 65 6e 74 73 5f 74 6f 5f 74 73 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 72 65 6d 61 69 6e 69 6e 67 5f 77 65 62 5f 61 64 5f 62 61 64 67 65 73 5f 74 6f 5f 69 6e 6e 65 72 74 75 62 65 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 64 65 70 72 65 63 61 74 65 5f 73 6b 69 70 5f 76 65 Data Ascii: y":true,"log_vis_on_tab_change":true,"log_web_endpoint_to_layer":true,"mdx_enable_privacy_disclosure_ui":true,"mdx_load_cast_api_bootstrap_script":true,"migrate_events_to_ts":true,"migrate_remaining_web_ad_badges_to_innertube":true,"mweb_deprecate_skip_ve
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 22 75 73 65 5f 74 73 5f 76 69 73 69 62 69 6c 69 74 79 6c 6f 67 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 77 61 72 6d 5f 6c 6f 61 64 5f 6e 61 76 5f 73 74 61 72 74 5f 77 65 62 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 6c 77 61 79 73 5f 6c 6f 61 64 5f 63 68 61 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 70 69 5f 75 72 6c 22 3a 74 72 75 65 2c 22 77 65 62 5f 63 73 69 5f 61 63 74 69 6f 6e 5f 73 61 6d 70 6c 69 6e 67 5f 65 6e 61 62 6c 65 64 22 3a Data Ascii: "use_ts_visibilitylogger":true,"use_watch_fragments2":true,"vss_final_ping_send_and_write":true,"vss_playback_use_send_and_write":true,"warm_load_nav_start_web":true,"web_always_load_chat_support":true,"web_api_url":true,"web_csi_action_sampling_enabled":
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 69 6d 69 7a 61 74 69 6f 6e 22 3a 32 30 2c 22 6e 65 74 77 6f 72 6b 5f 70 6f 6c 6c 69 6e 67 5f 69 6e 74 65 72 76 61 6c 22 3a 33 30 30 30 30 2c 22 70 72 65 66 65 74 63 68 5f 63 6f 6d 6d 65 6e 74 73 5f 6d 73 5f 61 66 74 65 72 5f 76 69 64 65 6f 22 3a 30 2c 22 73 65 6e 64 5f 63 6f 6e 66 69 67 5f 68 61 73 68 5f 74 69 6d 65 72 22 3a 30 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 6c 6f 67 67 65 64 5f 6f 75 74 5f 70 72 6f 6d 70 74 5f 77 61 74 63 68 65 73 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 63 61 70 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 64 65 6c 61 79 5f 6d 69 63 72 6f 73 65 63 6f 6e 64 73 22 3a 33 38 38 38 30 30 30 30 30 Data Ascii: imization":20,"network_polling_interval":30000,"prefetch_comments_ms_after_video":0,"send_config_hash_timer":0,"service_worker_push_logged_out_prompt_watches":-1,"service_worker_push_prompt_cap":-1,"service_worker_push_prompt_delay_microseconds":388800000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49912	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:19 UTC	957	OUT	GET /embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:19 UTC	1592	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 05:32:19 GMT Strict-Transport-Security: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:19 UTC	1592	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 6e 39 64 36 33 55 5f 5a 78 4f 74 4e 6f 45 4a 62 75 54 58 32 35 77 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="n9d63U_ZxOtNoEJbuTX25w">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-04-19 05:32:19 UTC	1592	IN	Data Raw: 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c Data Ascii: t-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-famil
2024-04-19 05:32:19 UTC	1592	IN	Data Raw: 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 Data Ascii: woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.c
2024-04-19 05:32:19 UTC	1592	IN	Data Raw: 35 30 25 20 36 35 25 20 6e 6f 2d 72 65 70 65 61 74 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 2e 6d 65 73 73 61 67 65 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 6d 61 72 67 69 6e 3a 20 30 20 2d 35 70 78 20 31 35 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 35 70 78 20 31 34 70 78 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 38 38 38 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 39 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 61 20 7b 63 6f 6c 6f 72 3a 20 23 31 36 37 61 63 36 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 Data Ascii: 50% 65% no-repeat;}.player-unavailable .message {text-align: left; margin: 0 -5px 15px; padding: 0 5px 14px; border-bottom: 1px solid #888; font-size: 19px; font-weight: normal;}.player-unavailable a {color: #167ac6; text-decoration: none;}</style><script
2024-04-19 05:32:19 UTC	1592	IN	Data Raw: 6c 29 3b 76 61 72 20 69 73 50 72 65 72 65 6e 64 65 72 3d 28 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 3d 3d 22 70 72 65 72 65 6e 64 65 72 22 3b 76 61 72 20 76 4e 61 6d 65 3d 21 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 65 6e 64 65 72 29 7b 76 61 72 20 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 29 3b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 Data Ascii: l);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(
2024-04-19 05:32:19 UTC	1592	IN	Data Raw: 6f 70 79 5f 6c 6f 67 69 6e 5f 69 6e 66 6f 5f 74 6f 5f 73 74 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 63 73 69 5f 63 6f 6e 66 69 67 5f 68 61 6e 64 6c 69 6e 67 5f 69 6e 66 72 61 22 3a 74 72 75 65 2c 22 63 73 69 5f 6f 6e 5f 67 65 6c 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 63 73 69 5f 68 61 73 5f 69 6e 66 6f 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 70 61 69 72 5f 73 65 72 76 6c 65 74 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 63 6c 69 65 6e 74 5f 72 65 6c 65 61 73 65 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 73 65 74 5f 74 69 74 6c 65 5f 62 61 72 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 73 70 61 72 6b 6c 65 73 5f 6c 69 67 68 74 5f 63 74 61 5f 62 75 Data Ascii: opy_login_info_to_st_cookie":true,"csi_config_handling_infra":true,"csi_on_gel":true,"deprecate_csi_has_info":true,"deprecate_pair_servlet_enabled":true,"desktop_client_release":true,"desktop_notification_set_title_bar":true,"desktop_sparkles_light_cta_bu
2024-04-19 05:32:19 UTC	1592	IN	Data Raw: 62 6c 65 5f 70 6f 70 75 6c 61 74 65 5f 70 73 64 5f 69 6e 5f 61 62 65 5f 66 65 65 64 62 61 63 6b 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 72 65 73 70 65 63 74 5f 6c 61 6e 67 5f 64 69 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 6d 69 64 72 6f 6c 6c 5f 70 6f 73 74 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 74 76 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 6b 69 70 5f 61 64 5f 67 75 69 64 61 6e 63 65 5f 70 72 6f 6d 70 74 22 Data Ascii: ble_populate_psd_in_abe_feedback":true,"enable_respect_lang_dir":true,"enable_sdf_midroll_postroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_tv":true,"enable_skip_ad_guidance_prompt"
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 79 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 76 69 73 5f 6f 6e 5f 74 61 62 5f 63 68 61 6e 67 65 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 77 65 62 5f 65 6e 64 70 6f 69 6e 74 5f 74 6f 5f 6c 61 79 65 72 22 3a 74 72 75 65 2c 22 6d 64 78 5f 65 6e 61 62 6c 65 5f 70 72 69 76 61 63 79 5f 64 69 73 63 6c 6f 73 75 72 65 5f 75 69 22 3a 74 72 75 65 2c 22 6d 64 78 5f 6c 6f 61 64 5f 63 61 73 74 5f 61 70 69 5f 62 6f 6f 74 73 74 72 61 70 5f 73 63 72 69 70 74 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 65 76 65 6e 74 73 5f 74 6f 5f 74 73 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 72 65 6d 61 69 6e 69 6e 67 5f 77 65 62 5f 61 64 5f 62 61 64 67 65 73 5f 74 6f 5f 69 6e 6e 65 72 74 75 62 65 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 64 65 70 72 65 63 61 74 65 5f 73 6b 69 70 5f 76 65 Data Ascii: y":true,"log_vis_on_tab_change":true,"log_web_endpoint_to_layer":true,"mdx_enable_privacy_disclosure_ui":true,"mdx_load_cast_api_bootstrap_script":true,"migrate_events_to_ts":true,"migrate_remaining_web_ad_badges_to_innertube":true,"mweb_deprecate_skip_ve
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 22 75 73 65 5f 74 73 5f 76 69 73 69 62 69 6c 69 74 79 6c 6f 67 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 77 61 72 6d 5f 6c 6f 61 64 5f 6e 61 76 5f 73 74 61 72 74 5f 77 65 62 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 6c 77 61 79 73 5f 6c 6f 61 64 5f 63 68 61 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 70 69 5f 75 72 6c 22 3a 74 72 75 65 2c 22 77 65 62 5f 63 73 69 5f 61 63 74 69 6f 6e 5f 73 61 6d 70 6c 69 6e 67 5f 65 6e 61 62 6c 65 64 22 3a Data Ascii: "use_ts_visibilitylogger":true,"use_watch_fragments2":true,"vss_final_ping_send_and_write":true,"vss_playback_use_send_and_write":true,"warm_load_nav_start_web":true,"web_always_load_chat_support":true,"web_api_url":true,"web_csi_action_sampling_enabled":
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 69 6d 69 7a 61 74 69 6f 6e 22 3a 32 30 2c 22 6e 65 74 77 6f 72 6b 5f 70 6f 6c 6c 69 6e 67 5f 69 6e 74 65 72 76 61 6c 22 3a 33 30 30 30 30 2c 22 70 72 65 66 65 74 63 68 5f 63 6f 6d 6d 65 6e 74 73 5f 6d 73 5f 61 66 74 65 72 5f 76 69 64 65 6f 22 3a 30 2c 22 73 65 6e 64 5f 63 6f 6e 66 69 67 5f 68 61 73 68 5f 74 69 6d 65 72 22 3a 30 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 6c 6f 67 67 65 64 5f 6f 75 74 5f 70 72 6f 6d 70 74 5f 77 61 74 63 68 65 73 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 63 61 70 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 64 65 6c 61 79 5f 6d 69 63 72 6f 73 65 63 6f 6e 64 73 22 3a 33 38 38 38 30 30 30 30 30 Data Ascii: imization":20,"network_polling_interval":30000,"prefetch_comments_ms_after_video":0,"send_config_hash_timer":0,"service_worker_push_logged_out_prompt_watches":-1,"service_worker_push_prompt_cap":-1,"service_worker_push_prompt_delay_microseconds":388800000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49913	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:19 UTC	957	OUT	GET /embed/yiQ-C7lGw0o?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:20 UTC	1592	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 05:32:19 GMT Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Resource-Policy: cross-origin Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 50 72 6b 52 62 31 4c 58 79 4c 79 64 54 33 75 49 69 63 51 62 57 41 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="PrkRb1LXyLydT3uIicQbWA">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c Data Ascii: t-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-famil
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 Data Ascii: woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.c
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 35 30 25 20 36 35 25 20 6e 6f 2d 72 65 70 65 61 74 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 2e 6d 65 73 73 61 67 65 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 6d 61 72 67 69 6e 3a 20 30 20 2d 35 70 78 20 31 35 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 35 70 78 20 31 34 70 78 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 38 38 38 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 39 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 61 20 7b 63 6f 6c 6f 72 3a 20 23 31 36 37 61 63 36 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 Data Ascii: 50% 65% no-repeat;}.player-unavailable .message {text-align: left; margin: 0 -5px 15px; padding: 0 5px 14px; border-bottom: 1px solid #888; font-size: 19px; font-weight: normal;}.player-unavailable a {color: #167ac6; text-decoration: none;}</style><script
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 6c 29 3b 76 61 72 20 69 73 50 72 65 72 65 6e 64 65 72 3d 28 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 3d 3d 22 70 72 65 72 65 6e 64 65 72 22 3b 76 61 72 20 76 4e 61 6d 65 3d 21 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 65 6e 64 65 72 29 7b 76 61 72 20 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 29 3b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 Data Ascii: l);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 6f 70 79 5f 6c 6f 67 69 6e 5f 69 6e 66 6f 5f 74 6f 5f 73 74 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 63 73 69 5f 63 6f 6e 66 69 67 5f 68 61 6e 64 6c 69 6e 67 5f 69 6e 66 72 61 22 3a 74 72 75 65 2c 22 63 73 69 5f 6f 6e 5f 67 65 6c 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 63 73 69 5f 68 61 73 5f 69 6e 66 6f 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 70 61 69 72 5f 73 65 72 76 6c 65 74 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 63 6c 69 65 6e 74 5f 72 65 6c 65 61 73 65 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 73 65 74 5f 74 69 74 6c 65 5f 62 61 72 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 73 70 61 72 6b 6c 65 73 5f 6c 69 67 68 74 5f 63 74 61 5f 62 75 Data Ascii: opy_login_info_to_st_cookie":true,"csi_config_handling_infra":true,"csi_on_gel":true,"deprecate_csi_has_info":true,"deprecate_pair_servlet_enabled":true,"desktop_client_release":true,"desktop_notification_set_title_bar":true,"desktop_sparkles_light_cta_bu
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 62 6c 65 5f 70 6f 70 75 6c 61 74 65 5f 70 73 64 5f 69 6e 5f 61 62 65 5f 66 65 65 64 62 61 63 6b 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 72 65 73 70 65 63 74 5f 6c 61 6e 67 5f 64 69 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 6d 69 64 72 6f 6c 6c 5f 70 6f 73 74 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 74 76 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 6b 69 70 5f 61 64 5f 67 75 69 64 61 6e 63 65 5f 70 72 6f 6d 70 74 22 Data Ascii: ble_populate_psd_in_abe_feedback":true,"enable_respect_lang_dir":true,"enable_sdf_midroll_postroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_tv":true,"enable_skip_ad_guidance_prompt"
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 79 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 76 69 73 5f 6f 6e 5f 74 61 62 5f 63 68 61 6e 67 65 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 77 65 62 5f 65 6e 64 70 6f 69 6e 74 5f 74 6f 5f 6c 61 79 65 72 22 3a 74 72 75 65 2c 22 6d 64 78 5f 65 6e 61 62 6c 65 5f 70 72 69 76 61 63 79 5f 64 69 73 63 6c 6f 73 75 72 65 5f 75 69 22 3a 74 72 75 65 2c 22 6d 64 78 5f 6c 6f 61 64 5f 63 61 73 74 5f 61 70 69 5f 62 6f 6f 74 73 74 72 61 70 5f 73 63 72 69 70 74 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 65 76 65 6e 74 73 5f 74 6f 5f 74 73 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 72 65 6d 61 69 6e 69 6e 67 5f 77 65 62 5f 61 64 5f 62 61 64 67 65 73 5f 74 6f 5f 69 6e 6e 65 72 74 75 62 65 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 64 65 70 72 65 63 61 74 65 5f 73 6b 69 70 5f 76 65 Data Ascii: y":true,"log_vis_on_tab_change":true,"log_web_endpoint_to_layer":true,"mdx_enable_privacy_disclosure_ui":true,"mdx_load_cast_api_bootstrap_script":true,"migrate_events_to_ts":true,"migrate_remaining_web_ad_badges_to_innertube":true,"mweb_deprecate_skip_ve
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 22 75 73 65 5f 74 73 5f 76 69 73 69 62 69 6c 69 74 79 6c 6f 67 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 77 61 72 6d 5f 6c 6f 61 64 5f 6e 61 76 5f 73 74 61 72 74 5f 77 65 62 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 6c 77 61 79 73 5f 6c 6f 61 64 5f 63 68 61 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 70 69 5f 75 72 6c 22 3a 74 72 75 65 2c 22 77 65 62 5f 63 73 69 5f 61 63 74 69 6f 6e 5f 73 61 6d 70 6c 69 6e 67 5f 65 6e 61 62 6c 65 64 22 3a Data Ascii: "use_ts_visibilitylogger":true,"use_watch_fragments2":true,"vss_final_ping_send_and_write":true,"vss_playback_use_send_and_write":true,"warm_load_nav_start_web":true,"web_always_load_chat_support":true,"web_api_url":true,"web_csi_action_sampling_enabled":
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 69 6d 69 7a 61 74 69 6f 6e 22 3a 32 30 2c 22 6e 65 74 77 6f 72 6b 5f 70 6f 6c 6c 69 6e 67 5f 69 6e 74 65 72 76 61 6c 22 3a 33 30 30 30 30 2c 22 70 72 65 66 65 74 63 68 5f 63 6f 6d 6d 65 6e 74 73 5f 6d 73 5f 61 66 74 65 72 5f 76 69 64 65 6f 22 3a 30 2c 22 73 65 6e 64 5f 63 6f 6e 66 69 67 5f 68 61 73 68 5f 74 69 6d 65 72 22 3a 30 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 6c 6f 67 67 65 64 5f 6f 75 74 5f 70 72 6f 6d 70 74 5f 77 61 74 63 68 65 73 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 63 61 70 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 64 65 6c 61 79 5f 6d 69 63 72 6f 73 65 63 6f 6e 64 73 22 3a 33 38 38 38 30 30 30 30 30 Data Ascii: imization":20,"network_polling_interval":30000,"prefetch_comments_ms_after_video":0,"send_config_hash_timer":0,"service_worker_push_logged_out_prompt_watches":-1,"service_worker_push_prompt_cap":-1,"service_worker_push_prompt_delay_microseconds":388800000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49915	142.251.15.136	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:19 UTC	766	OUT	GET /s/player/0af6e327/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:19 UTC	689	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 220979 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 17 Apr 2024 21:39:17 GMT Expires: Thu, 17 Apr 2025 21:39:17 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 17 Apr 2024 04:21:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 114782 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:19 UTC	566	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 72 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var r;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 29 3b 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 64 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 76 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 Data Ascii: );function v(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}v("Symbol",function(a){function b(f){if(thi
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 78 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 77 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 0a 76 61 72 20 6a 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 Data Ascii: r ArrayLike");}function x(a){if(!(a instanceof Array)){a=w(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function fa(a,b){return Object.prototype.hasOwnProperty.call(a,b)}var ja="function"==typeof Object.assign?Object.assign:functi
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 2e 4b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 68 3d 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 61 2e 69 3d 7b 6a 63 3a 62 2c 75 63 3a 21 30 7d 3b 61 2e 67 3d 61 2e 6f 7c 7c 61 2e 75 7d 0a 73 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 69 3d 7b 72 65 74 75 72 6e 3a 61 7d 3b 74 68 69 73 2e 67 3d 74 68 69 73 2e 75 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 41 28 61 2c 62 2c 63 29 7b 61 2e 67 3d 63 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 7d 7d 0a 73 61 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 2c 62 2c 63 29 7b 61 2e 6f 3d 62 3b 76 6f 69 64 20 30 21 3d 63 26 26 Data Ascii: .K=function(a){this.h=a};function ua(a,b){a.i={jc:b,uc:!0};a.g=a.o\|\|a.u}sa.prototype.return=function(a){this.i={return:a};this.g=this.u};function A(a,b,c){a.g=c;return{value:b}}sa.prototype.B=function(a){this.g=a};function va(a,b,c){a.o=b;void 0!=c&&
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 61 28 61 2e 67 29 3b 61 2e 67 2e 6c 3f 62 3d 41 61 28 61 2c 61 2e 67 2e 6c 5b 22 74 68 72 6f 77 22 5d 2c 62 2c 61 2e 67 2e 4b 29 3a 28 75 61 28 61 2e 67 2c 62 29 2c 62 3d 42 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 7a 61 28 61 2c 62 29 7d 3b 0a 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 45 61 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 6e 65 78 74 28 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 74 68 72 Data Ascii: throw=function(b){ta(a.g);a.g.l?b=Aa(a,a.g.l["throw"],b,a.g.K):(ua(a.g,b),b=Ba(a));return b};this.return=function(b){return za(a,b)};this[Symbol.iterator]=function(){return this}}function Ea(a){function b(d){return a.next(d)}function c(d){return a.thr
2024-04-19 05:32:19 UTC	1255	IN	Data Raw: 68 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 7d 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6b 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6b 2e 63 61 6c 6c 28 68 2c 6d 29 29 7d 7d 0a 76 61 72 20 68 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 62 62 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 6f 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 62 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 6f 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 Data Ascii: his.i(function(){throw g;})};b.prototype.l=function(){function g(k){return function(m){l\|\|(l=!0,k.call(h,m))}}var h=this,l=!1;return{resolve:g(this.bb),reject:g(this.o)}};b.prototype.bb=function(g){if(g===this)this.o(new TypeError("A Promise cannot res
2024-04-19 05:32:20 UTC	1255	IN	Data Raw: 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 67 29 29 3b 67 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 67 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 69 3b 72 65 74 75 72 6e 20 6c 28 67 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 68 69 73 2e 68 29 7b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 74 68 69 73 2e 68 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 66 2e 68 28 74 68 69 73 2e 68 5b 67 5d 29 3b 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 7d 3b 0a 76 61 72 20 66 3d 6e 65 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 65 62 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 6c 28 29 3b 67 2e 76 62 28 68 2e 72 65 73 6f Data Ascii: stomEvent("unhandledrejection",!1,!0,g));g.promise=this;g.reason=this.i;return l(g)};b.prototype.O=function(){if(null!=this.h){for(var g=0;g<this.h.length;++g)f.h(this.h[g]);this.h=null}};var f=new c;b.prototype.eb=function(g){var h=this.l();g.vb(h.reso
2024-04-19 05:32:20 UTC	1255	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 70 61 7d 29 3b 0a 76 28 22 57 65 61 6b 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 6c 29 7b 74 68 69 73 2e 67 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 77 28 6c 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 6c 29 7b 76 61 72 20 6b 3d 74 79 70 65 6f 66 20 6c 3b 72 65 74 75 72 6e 22 6f Data Ascii: Object.setPrototypeOf",function(a){return a\|\|pa});v("WeakMap",function(a){function b(l){this.g=(h+=Math.random()+1).toString();if(l){l=w(l);for(var k;!(k=l.next()).done;)k=k.value,this.set(k[0],k[1])}}function c(){}function d(l){var k=typeof l;return"o
2024-04-19 05:32:20 UTC	1255	IN	Data Raw: 65 76 69 6f 75 73 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 68 2c 6c 29 7b 76 61 72 20 6b 3d 68 5b 31 5d 3b 72 65 74 75 72 6e 20 65 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6b 29 7b 66 6f 72 28 3b 6b 2e 68 65 61 64 21 3d 68 5b 31 5d 3b 29 6b 3d 6b 2e 70 72 65 76 69 6f 75 73 3b 66 6f 72 28 3b 6b 2e 6e 65 78 74 21 3d 6b 2e 68 65 61 64 3b 29 72 65 74 75 72 6e 20 6b 3d 6b 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6c 28 6b 29 7d 3b 6b 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 68 2c 6c 29 7b 76 61 72 20 6b 3d 6c 26 26 74 79 70 65 6f 66 20 6c 3b 22 6f 62 6a 65 63 74 22 3d 3d 6b 7c 7c 22 Data Ascii: evious=h.next=h.head=h}function c(h,l){var k=h[1];return ea(function(){if(k){for(;k.head!=h[1];)k=k.previous;for(;k.next!=k.head;)return k=k.next,{done:!1,value:l(k)};k=null}return{done:!0,value:void 0}})}function d(h,l){var k=l&&typeof l;"object"==k\|\|"
2024-04-19 05:32:20 UTC	1255	IN	Data Raw: 3a 68 2c 76 61 6c 75 65 3a 6c 7d 2c 6b 2e 6c 69 73 74 2e 70 75 73 68 28 6b 2e 65 6e 74 72 79 29 2c 74 68 69 73 5b 31 5d 2e 70 72 65 76 69 6f 75 73 2e 6e 65 78 74 3d 6b 2e 65 6e 74 72 79 2c 74 68 69 73 5b 31 5d 2e 70 72 65 76 69 6f 75 73 3d 6b 2e 65 6e 74 72 79 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 3d 64 28 74 68 69 73 2c 68 29 3b 72 65 74 75 72 6e 20 68 2e 65 6e 74 72 79 26 26 68 2e 6c 69 73 74 3f 28 68 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 68 2e 69 6e 64 65 78 2c 31 29 2c 68 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 68 2e 69 64 5d 2c 68 2e 65 6e 74 72 79 2e 70 72 65 76 Data Ascii: :h,value:l},k.list.push(k.entry),this[1].previous.next=k.entry,this[1].previous=k.entry,this.size++);return this};e.prototype.delete=function(h){h=d(this,h);return h.entry&&h.list?(h.list.splice(h.index,1),h.list.length\|\|delete this[0][h.id],h.entry.prev

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49917	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:20 UTC	957	OUT	GET /embed/zmUPHj3AvZc?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:20 UTC	1592	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 05:32:20 GMT Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 74 74 79 6a 71 70 66 37 49 65 65 78 54 43 31 5a 59 65 77 76 4d 77 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="ttyjqpf7IeexTC1ZYewvMw">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c Data Ascii: t-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-famil
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 Data Ascii: woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.c
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 35 30 25 20 36 35 25 20 6e 6f 2d 72 65 70 65 61 74 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 2e 6d 65 73 73 61 67 65 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 6d 61 72 67 69 6e 3a 20 30 20 2d 35 70 78 20 31 35 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 35 70 78 20 31 34 70 78 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 38 38 38 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 39 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 61 20 7b 63 6f 6c 6f 72 3a 20 23 31 36 37 61 63 36 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 Data Ascii: 50% 65% no-repeat;}.player-unavailable .message {text-align: left; margin: 0 -5px 15px; padding: 0 5px 14px; border-bottom: 1px solid #888; font-size: 19px; font-weight: normal;}.player-unavailable a {color: #167ac6; text-decoration: none;}</style><script
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 6c 29 3b 76 61 72 20 69 73 50 72 65 72 65 6e 64 65 72 3d 28 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 3d 3d 22 70 72 65 72 65 6e 64 65 72 22 3b 76 61 72 20 76 4e 61 6d 65 3d 21 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 65 6e 64 65 72 29 7b 76 61 72 20 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 29 3b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 Data Ascii: l);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 6f 70 79 5f 6c 6f 67 69 6e 5f 69 6e 66 6f 5f 74 6f 5f 73 74 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 63 73 69 5f 63 6f 6e 66 69 67 5f 68 61 6e 64 6c 69 6e 67 5f 69 6e 66 72 61 22 3a 74 72 75 65 2c 22 63 73 69 5f 6f 6e 5f 67 65 6c 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 63 73 69 5f 68 61 73 5f 69 6e 66 6f 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 70 61 69 72 5f 73 65 72 76 6c 65 74 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 63 6c 69 65 6e 74 5f 72 65 6c 65 61 73 65 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 73 65 74 5f 74 69 74 6c 65 5f 62 61 72 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 73 70 61 72 6b 6c 65 73 5f 6c 69 67 68 74 5f 63 74 61 5f 62 75 Data Ascii: opy_login_info_to_st_cookie":true,"csi_config_handling_infra":true,"csi_on_gel":true,"deprecate_csi_has_info":true,"deprecate_pair_servlet_enabled":true,"desktop_client_release":true,"desktop_notification_set_title_bar":true,"desktop_sparkles_light_cta_bu
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 62 6c 65 5f 70 6f 70 75 6c 61 74 65 5f 70 73 64 5f 69 6e 5f 61 62 65 5f 66 65 65 64 62 61 63 6b 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 72 65 73 70 65 63 74 5f 6c 61 6e 67 5f 64 69 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 6d 69 64 72 6f 6c 6c 5f 70 6f 73 74 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 74 76 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 6b 69 70 5f 61 64 5f 67 75 69 64 61 6e 63 65 5f 70 72 6f 6d 70 74 22 Data Ascii: ble_populate_psd_in_abe_feedback":true,"enable_respect_lang_dir":true,"enable_sdf_midroll_postroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_tv":true,"enable_skip_ad_guidance_prompt"
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 79 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 76 69 73 5f 6f 6e 5f 74 61 62 5f 63 68 61 6e 67 65 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 77 65 62 5f 65 6e 64 70 6f 69 6e 74 5f 74 6f 5f 6c 61 79 65 72 22 3a 74 72 75 65 2c 22 6d 64 78 5f 65 6e 61 62 6c 65 5f 70 72 69 76 61 63 79 5f 64 69 73 63 6c 6f 73 75 72 65 5f 75 69 22 3a 74 72 75 65 2c 22 6d 64 78 5f 6c 6f 61 64 5f 63 61 73 74 5f 61 70 69 5f 62 6f 6f 74 73 74 72 61 70 5f 73 63 72 69 70 74 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 65 76 65 6e 74 73 5f 74 6f 5f 74 73 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 72 65 6d 61 69 6e 69 6e 67 5f 77 65 62 5f 61 64 5f 62 61 64 67 65 73 5f 74 6f 5f 69 6e 6e 65 72 74 75 62 65 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 64 65 70 72 65 63 61 74 65 5f 73 6b 69 70 5f 76 65 Data Ascii: y":true,"log_vis_on_tab_change":true,"log_web_endpoint_to_layer":true,"mdx_enable_privacy_disclosure_ui":true,"mdx_load_cast_api_bootstrap_script":true,"migrate_events_to_ts":true,"migrate_remaining_web_ad_badges_to_innertube":true,"mweb_deprecate_skip_ve
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 22 75 73 65 5f 74 73 5f 76 69 73 69 62 69 6c 69 74 79 6c 6f 67 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 77 61 72 6d 5f 6c 6f 61 64 5f 6e 61 76 5f 73 74 61 72 74 5f 77 65 62 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 6c 77 61 79 73 5f 6c 6f 61 64 5f 63 68 61 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 70 69 5f 75 72 6c 22 3a 74 72 75 65 2c 22 77 65 62 5f 63 73 69 5f 61 63 74 69 6f 6e 5f 73 61 6d 70 6c 69 6e 67 5f 65 6e 61 62 6c 65 64 22 3a Data Ascii: "use_ts_visibilitylogger":true,"use_watch_fragments2":true,"vss_final_ping_send_and_write":true,"vss_playback_use_send_and_write":true,"warm_load_nav_start_web":true,"web_always_load_chat_support":true,"web_api_url":true,"web_csi_action_sampling_enabled":
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 69 6d 69 7a 61 74 69 6f 6e 22 3a 32 30 2c 22 6e 65 74 77 6f 72 6b 5f 70 6f 6c 6c 69 6e 67 5f 69 6e 74 65 72 76 61 6c 22 3a 33 30 30 30 30 2c 22 70 72 65 66 65 74 63 68 5f 63 6f 6d 6d 65 6e 74 73 5f 6d 73 5f 61 66 74 65 72 5f 76 69 64 65 6f 22 3a 30 2c 22 73 65 6e 64 5f 63 6f 6e 66 69 67 5f 68 61 73 68 5f 74 69 6d 65 72 22 3a 30 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 6c 6f 67 67 65 64 5f 6f 75 74 5f 70 72 6f 6d 70 74 5f 77 61 74 63 68 65 73 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 63 61 70 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 64 65 6c 61 79 5f 6d 69 63 72 6f 73 65 63 6f 6e 64 73 22 3a 33 38 38 38 30 30 30 30 30 Data Ascii: imization":20,"network_polling_interval":30000,"prefetch_comments_ms_after_video":0,"send_config_hash_timer":0,"service_worker_push_logged_out_prompt_watches":-1,"service_worker_push_prompt_cap":-1,"service_worker_push_prompt_delay_microseconds":388800000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49866	3.161.136.58	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:20 UTC	560	OUT	GET /Universal-Federated-Analytics-Min.js?agency=IRS HTTP/1.1 Host: dap.digitalgov.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:20 UTC	652	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 28851 Connection: close Date: Thu, 18 Apr 2024 15:16:28 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 18 Apr 2024 15:08:41 GMT ETag: "26433217e805a89cf41adac58221316e" x-amz-server-side-encryption: AES256 x-amz-version-id: 39DeP5oo.f2rQ6hItN1skmgkaQ0kloSX Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 22faf6fcae096ee97264521770b65762.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: hHw1IqjLiO2_pjekeML5iMIKUvlMoFwbo7gcsyNEGijHQrOk1oPtXA== Age: 51353
2024-04-19 05:32:20 UTC	15732	IN	Data Raw: 76 61 72 20 74 4f 62 6a 65 63 74 43 68 65 63 6b 2c 5f 61 6c 6c 6f 77 65 64 51 75 65 72 79 73 74 72 69 6e 67 73 3d 5b 5d 2c 69 73 53 65 61 72 63 68 3d 21 31 2c 6f 43 4f 4e 46 49 47 3d 7b 47 57 54 5f 55 41 49 44 3a 5b 22 55 41 2d 33 33 35 32 33 31 34 35 2d 31 22 5d 2c 47 57 54 5f 47 41 34 49 44 3a 5b 22 47 2d 43 53 4c 4c 34 5a 45 4b 34 4c 22 5d 2c 46 4f 52 43 45 5f 53 53 4c 3a 21 30 2c 41 4e 4f 4e 59 4d 49 5a 45 5f 49 50 3a 21 30 2c 41 47 45 4e 43 59 3a 22 22 2c 53 55 42 5f 41 47 45 4e 43 59 3a 22 22 2c 56 45 52 53 49 4f 4e 3a 22 32 30 32 34 30 34 31 36 20 76 37 2e 30 31 20 2d 20 44 75 61 6c 20 54 72 61 63 6b 69 6e 67 22 2c 53 49 54 45 5f 54 4f 50 49 43 3a 22 22 2c 53 49 54 45 5f 50 4c 41 54 46 4f 52 4d 3a 22 22 2c 53 43 52 49 50 54 5f 53 4f 55 52 43 45 3a Data Ascii: var tObjectCheck,_allowedQuerystrings=[],isSearch=!1,oCONFIG={GWT_UAID:["UA-33523145-1"],GWT_GA4ID:["G-CSLL4ZEK4L"],FORCE_SSL:!0,ANONYMIZE_IP:!0,AGENCY:"",SUB_AGENCY:"",VERSION:"20240416 v7.01 - Dual Tracking",SITE_TOPIC:"",SITE_PLATFORM:"",SCRIPT_SOURCE:
2024-04-19 05:32:20 UTC	13119	IN	Data Raw: 2f 69 67 29 3f 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 67 3a 64 3b 61 3d 5f 55 52 49 48 61 6e 64 6c 65 72 28 5f 73 63 72 75 62 62 65 64 55 52 4c 28 63 29 29 3b 66 6f 72 28 63 3d 30 3b 63 3c 6f 43 4f 4e 46 49 47 2e 47 57 54 5f 47 41 34 49 44 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 30 3d 3d 3d 63 7c 7c 30 3c 63 26 26 6f 43 4f 4e 46 49 47 2e 55 53 45 5f 50 41 52 41 4c 4c 45 4c 5f 43 55 53 54 4f 4d 5f 44 49 4d 45 4e 53 49 4f 4e 53 3f 67 74 61 67 28 22 63 6f 6e 66 69 67 22 2c 6f 43 4f 4e 46 49 47 2e 47 57 54 5f 47 41 34 49 44 5b 63 5d 2c 0d 0a 7b 67 72 6f 75 70 73 3a 6f 43 4f 4e 46 49 47 2e 47 41 34 5f 4e 41 4d 45 2b 63 2c 63 6f Data Ascii: /ig)?document.location.protocol+"//"+document.location.hostname+g:d;a=_URIHandler(_scrubbedURL(c));for(c=0;c<oCONFIG.GWT_GA4ID.length;c++)0===c\|\|0<c&&oCONFIG.USE_PARALLEL_CUSTOM_DIMENSIONS?gtag("config",oCONFIG.GWT_GA4ID[c],{groups:oCONFIG.GA4_NAME+c,co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49919	104.22.71.197	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:20 UTC	603	OUT	GET /menu/svg/icons/facebook.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.irs.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://static.addtoany.com/menu/modules/core.BRQnzO8v.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:20 UTC	937	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:20 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=7776000, stale-while-revalidate=30, public Cf-Bgj: minify ETag: W/"68925fa8e347041c6006837e73c518bc" NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jqYJtPV2bLdzimRU76eRg%2BDl8IpnGJqaxq4YZvH5bPxrEPu1HIY1o64Xct8w7IJryj3ciO4W8J6crYkEquLKBLQWHg09EFcOgKI3C5crhGnwUmYcOzPkQTDNzITbhLD922BtJd%2BiM%2BiZ%2FSYxqxzyMo4y"}],"group":"cf-nel","max_age":604800} Vary: Accept-Encoding referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff CF-Cache-Status: HIT Age: 3735 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 876a837469ba8832-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 05:32:20 UTC	432	IN	Data Raw: 31 61 64 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 63 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 2e 61 64 64 26 26 63 2e 73 76 67 2e 61 64 64 28 7b 66 61 63 65 62 6f 6f 6b 3a 27 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 32 38 20 31 36 63 30 2d 36 2e 36 32 37 2d 35 2e 33 37 33 2d 31 32 2d 31 32 2d 31 32 53 34 20 39 2e 33 37 33 20 34 20 31 36 63 30 20 35 2e 36 32 38 20 33 2e 38 37 35 20 31 30 2e 33 35 20 39 2e 31 30 31 20 31 31 2e 36 34 37 76 2d 37 2e 39 38 68 2d 32 2e 34 37 34 56 31 36 48 31 33 2e 31 76 2d 31 2e 35 38 63 30 2d 34 2e 30 38 35 20 31 2e 38 34 39 2d 35 2e 39 37 Data Ascii: 1ad!function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({facebook:'<path fill="#fff" d="M28 16c0-6.627-5.373-12-12-12S4 9.373 4 16c0 5.628 3.875 10.35 9.101 11.647v-7.98h-2.474V16H13.1v-1.58c0-4.085 1.849-5.97
2024-04-19 05:32:20 UTC	4	IN	Data Raw: 61 29 0d 0a Data Ascii: a)
2024-04-19 05:32:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49921	104.22.71.197	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:20 UTC	602	OUT	GET /menu/svg/icons/twitter.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.irs.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://static.addtoany.com/menu/modules/core.BRQnzO8v.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:20 UTC	917	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:20 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=7776000, stale-while-revalidate=30, public Cf-Bgj: minify ETag: W/"af2b829f9b79fabec7c0148a8b7e444b" NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4VVC7tPWZjtdhiJYYgHJ1FIpCW2yPVPxMP%2BE3xBKqRZsIUdlNNSig36%2BVCZRunXvrqluqTHnewrX6KRWnvnUahHbaErHV7UezphhpRIQJDEdRiKoJSHM7XLgdcMhzzFXytGqAs4W"}],"group":"cf-nel","max_age":604800} Vary: Accept-Encoding referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff CF-Cache-Status: HIT Age: 1064 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 876a83746be1addd-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 05:32:20 UTC	452	IN	Data Raw: 32 38 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 63 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 2e 61 64 64 26 26 63 2e 73 76 67 2e 61 64 64 28 7b 74 77 69 74 74 65 72 3a 27 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 22 20 64 3d 22 4d 32 38 20 38 2e 35 35 37 61 31 30 20 31 30 20 30 20 30 20 31 2d 32 2e 38 32 38 2e 37 37 35 20 34 2e 39 33 20 34 2e 39 33 20 30 20 30 20 30 20 32 2e 31 36 36 2d 32 2e 37 32 35 20 39 2e 37 20 39 2e 37 20 30 20 30 20 31 2d 33 2e 31 33 20 31 2e 31 39 34 20 34 2e 39 32 20 34 2e 39 32 20 30 20 30 20 30 2d 33 2e 35 39 33 2d 31 2e 35 35 20 34 2e 39 32 34 20 34 2e 39 32 Data Ascii: 285!function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({twitter:'<path fill="#FFF" d="M28 8.557a10 10 0 0 1-2.828.775 4.93 4.93 0 0 0 2.166-2.725 9.7 9.7 0 0 1-3.13 1.194 4.92 4.92 0 0 0-3.593-1.55 4.924 4.92
2024-04-19 05:32:20 UTC	200	IN	Data Raw: 2e 30 38 36 61 34 2e 39 33 35 20 34 2e 39 33 35 20 30 20 30 20 30 20 34 2e 36 20 33 2e 34 32 20 39 2e 39 20 39 2e 39 20 30 20 30 20 31 2d 36 2e 31 31 34 20 32 2e 31 30 37 71 2d 2e 35 39 37 20 30 2d 31 2e 31 37 35 2d 2e 30 36 38 61 31 33 2e 39 35 20 31 33 2e 39 35 20 30 20 30 20 30 20 37 2e 35 35 20 32 2e 32 31 33 63 39 2e 30 35 36 20 30 20 31 34 2e 30 31 2d 37 2e 35 30 37 20 31 34 2e 30 31 2d 31 34 2e 30 31 33 71 30 2d 2e 33 32 2d 2e 30 31 35 2d 2e 36 33 37 63 2e 39 36 2d 2e 36 39 35 20 31 2e 37 39 35 2d 31 2e 35 36 20 32 2e 34 35 35 2d 32 2e 35 35 7a 22 2f 3e 27 7d 29 7d 28 61 32 61 29 0d 0a Data Ascii: .086a4.935 4.935 0 0 0 4.6 3.42 9.9 9.9 0 0 1-6.114 2.107q-.597 0-1.175-.068a13.95 13.95 0 0 0 7.55 2.213c9.056 0 14.01-7.507 14.01-14.013q0-.32-.015-.637c.96-.695 1.795-1.56 2.455-2.55z"/>'})}(a2a)
2024-04-19 05:32:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49920	104.22.71.197	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:20 UTC	603	OUT	GET /menu/svg/icons/linkedin.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.irs.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://static.addtoany.com/menu/modules/core.BRQnzO8v.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:20 UTC	943	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:20 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=7776000, stale-while-revalidate=30, public Cf-Bgj: minify ETag: W/"00b1b78053ab07c79bfea2e5a1db9d70" NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p%2Bnk1XWbeWTGpHua6GQ5RVpBRP87ra%2B5bJdQPByBUbrBCJb%2FVtFgDeYUTRsDtKcLkoUsikv%2FFGit7Jsjtapa%2F1hFrJzWinTB8Sgy5nJXUBQB%2BJyHKGypezQpevGQjx2Io4%2BhIuxFnxjGYKvX9mfhgO0l"}],"group":"cf-nel","max_age":604800} Vary: Accept-Encoding referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff CF-Cache-Status: HIT Age: 8706 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 876a83746925673a-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 05:32:20 UTC	426	IN	Data Raw: 31 62 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 63 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 2e 61 64 64 26 26 63 2e 73 76 67 2e 61 64 64 28 7b 6c 69 6e 6b 65 64 69 6e 3a 27 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 22 20 64 3d 22 4d 36 2e 32 32 37 20 31 32 2e 36 31 68 34 2e 31 39 76 31 33 2e 34 38 68 2d 34 2e 31 39 7a 6d 32 2e 30 39 35 2d 36 2e 37 61 32 2e 34 33 20 32 2e 34 33 20 30 20 30 20 31 20 30 20 34 2e 38 36 63 2d 31 2e 33 34 34 20 30 2d 32 2e 34 32 38 2d 31 2e 30 39 2d 32 2e 34 32 38 2d 32 2e 34 33 73 31 2e 30 38 34 2d 32 2e 34 33 20 32 2e 34 32 38 2d 32 2e 34 33 6d 34 2e 37 32 Data Ascii: 1b3!function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({linkedin:'<path fill="#FFF" d="M6.227 12.61h4.19v13.48h-4.19zm2.095-6.7a2.43 2.43 0 0 1 0 4.86c-1.344 0-2.428-1.09-2.428-2.43s1.084-2.43 2.428-2.43m4.72
2024-04-19 05:32:20 UTC	16	IN	Data Raw: 37 7a 22 2f 3e 27 7d 29 7d 28 61 32 61 29 0d 0a Data Ascii: 7z"/>'})}(a2a)
2024-04-19 05:32:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49922	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:20 UTC	957	OUT	GET /embed/qP5c-ZOMct4?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:20 UTC	1592	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 05:32:20 GMT Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4c 35 72 65 55 62 35 71 70 62 76 52 53 6d 6e 6f 73 58 73 6d 4a 67 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="L5reUb5qpbvRSmnosXsmJg">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c Data Ascii: t-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-famil
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 Data Ascii: woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.c
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 35 30 25 20 36 35 25 20 6e 6f 2d 72 65 70 65 61 74 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 2e 6d 65 73 73 61 67 65 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 6d 61 72 67 69 6e 3a 20 30 20 2d 35 70 78 20 31 35 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 35 70 78 20 31 34 70 78 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 38 38 38 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 39 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 61 20 7b 63 6f 6c 6f 72 3a 20 23 31 36 37 61 63 36 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 Data Ascii: 50% 65% no-repeat;}.player-unavailable .message {text-align: left; margin: 0 -5px 15px; padding: 0 5px 14px; border-bottom: 1px solid #888; font-size: 19px; font-weight: normal;}.player-unavailable a {color: #167ac6; text-decoration: none;}</style><script
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 6c 29 3b 76 61 72 20 69 73 50 72 65 72 65 6e 64 65 72 3d 28 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 3d 3d 22 70 72 65 72 65 6e 64 65 72 22 3b 76 61 72 20 76 4e 61 6d 65 3d 21 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 65 6e 64 65 72 29 7b 76 61 72 20 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 29 3b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 Data Ascii: l);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 6f 70 79 5f 6c 6f 67 69 6e 5f 69 6e 66 6f 5f 74 6f 5f 73 74 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 63 73 69 5f 63 6f 6e 66 69 67 5f 68 61 6e 64 6c 69 6e 67 5f 69 6e 66 72 61 22 3a 74 72 75 65 2c 22 63 73 69 5f 6f 6e 5f 67 65 6c 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 63 73 69 5f 68 61 73 5f 69 6e 66 6f 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 70 61 69 72 5f 73 65 72 76 6c 65 74 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 63 6c 69 65 6e 74 5f 72 65 6c 65 61 73 65 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 73 65 74 5f 74 69 74 6c 65 5f 62 61 72 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 73 70 61 72 6b 6c 65 73 5f 6c 69 67 68 74 5f 63 74 61 5f 62 75 Data Ascii: opy_login_info_to_st_cookie":true,"csi_config_handling_infra":true,"csi_on_gel":true,"deprecate_csi_has_info":true,"deprecate_pair_servlet_enabled":true,"desktop_client_release":true,"desktop_notification_set_title_bar":true,"desktop_sparkles_light_cta_bu
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 62 6c 65 5f 70 6f 70 75 6c 61 74 65 5f 70 73 64 5f 69 6e 5f 61 62 65 5f 66 65 65 64 62 61 63 6b 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 72 65 73 70 65 63 74 5f 6c 61 6e 67 5f 64 69 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 6d 69 64 72 6f 6c 6c 5f 70 6f 73 74 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 74 76 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 6b 69 70 5f 61 64 5f 67 75 69 64 61 6e 63 65 5f 70 72 6f 6d 70 74 22 Data Ascii: ble_populate_psd_in_abe_feedback":true,"enable_respect_lang_dir":true,"enable_sdf_midroll_postroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_tv":true,"enable_skip_ad_guidance_prompt"
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 79 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 76 69 73 5f 6f 6e 5f 74 61 62 5f 63 68 61 6e 67 65 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 77 65 62 5f 65 6e 64 70 6f 69 6e 74 5f 74 6f 5f 6c 61 79 65 72 22 3a 74 72 75 65 2c 22 6d 64 78 5f 65 6e 61 62 6c 65 5f 70 72 69 76 61 63 79 5f 64 69 73 63 6c 6f 73 75 72 65 5f 75 69 22 3a 74 72 75 65 2c 22 6d 64 78 5f 6c 6f 61 64 5f 63 61 73 74 5f 61 70 69 5f 62 6f 6f 74 73 74 72 61 70 5f 73 63 72 69 70 74 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 65 76 65 6e 74 73 5f 74 6f 5f 74 73 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 72 65 6d 61 69 6e 69 6e 67 5f 77 65 62 5f 61 64 5f 62 61 64 67 65 73 5f 74 6f 5f 69 6e 6e 65 72 74 75 62 65 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 64 65 70 72 65 63 61 74 65 5f 73 6b 69 70 5f 76 65 Data Ascii: y":true,"log_vis_on_tab_change":true,"log_web_endpoint_to_layer":true,"mdx_enable_privacy_disclosure_ui":true,"mdx_load_cast_api_bootstrap_script":true,"migrate_events_to_ts":true,"migrate_remaining_web_ad_badges_to_innertube":true,"mweb_deprecate_skip_ve
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 22 75 73 65 5f 74 73 5f 76 69 73 69 62 69 6c 69 74 79 6c 6f 67 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 77 61 72 6d 5f 6c 6f 61 64 5f 6e 61 76 5f 73 74 61 72 74 5f 77 65 62 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 6c 77 61 79 73 5f 6c 6f 61 64 5f 63 68 61 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 70 69 5f 75 72 6c 22 3a 74 72 75 65 2c 22 77 65 62 5f 63 73 69 5f 61 63 74 69 6f 6e 5f 73 61 6d 70 6c 69 6e 67 5f 65 6e 61 62 6c 65 64 22 3a Data Ascii: "use_ts_visibilitylogger":true,"use_watch_fragments2":true,"vss_final_ping_send_and_write":true,"vss_playback_use_send_and_write":true,"warm_load_nav_start_web":true,"web_always_load_chat_support":true,"web_api_url":true,"web_csi_action_sampling_enabled":
2024-04-19 05:32:20 UTC	1592	IN	Data Raw: 69 6d 69 7a 61 74 69 6f 6e 22 3a 32 30 2c 22 6e 65 74 77 6f 72 6b 5f 70 6f 6c 6c 69 6e 67 5f 69 6e 74 65 72 76 61 6c 22 3a 33 30 30 30 30 2c 22 70 72 65 66 65 74 63 68 5f 63 6f 6d 6d 65 6e 74 73 5f 6d 73 5f 61 66 74 65 72 5f 76 69 64 65 6f 22 3a 30 2c 22 73 65 6e 64 5f 63 6f 6e 66 69 67 5f 68 61 73 68 5f 74 69 6d 65 72 22 3a 30 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 6c 6f 67 67 65 64 5f 6f 75 74 5f 70 72 6f 6d 70 74 5f 77 61 74 63 68 65 73 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 63 61 70 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 64 65 6c 61 79 5f 6d 69 63 72 6f 73 65 63 6f 6e 64 73 22 3a 33 38 38 38 30 30 30 30 30 Data Ascii: imization":20,"network_polling_interval":30000,"prefetch_comments_ms_after_video":0,"send_config_hash_timer":0,"service_worker_push_logged_out_prompt_watches":-1,"service_worker_push_prompt_cap":-1,"service_worker_push_prompt_delay_microseconds":388800000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49906	64.233.176.119	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:21 UTC	699	OUT	GET /vi_webp/s09YWoGtftM/default.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:21 UTC	622	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2504 Date: Fri, 19 Apr 2024 05:32:21 GMT Expires: Fri, 19 Apr 2024 07:32:21 GMT Cache-Control: public, max-age=7200 ETag: "1678830233" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:21 UTC	633	IN	Data Raw: 52 49 46 46 c0 09 00 00 57 45 42 50 56 50 38 20 b4 09 00 00 50 27 00 9d 01 2a 78 00 5a 00 3e 6d 1e 9b 4d a4 21 24 24 14 a0 80 0d 89 66 00 cb 66 34 5a 5e ab 7e 03 95 0f 90 24 ba ec 7e 41 f2 5f fe 53 d8 c7 98 07 39 af 30 1f b6 fe af de 88 fd 03 bf 6d fa d7 bd 00 3f 68 fd 38 fd 9b 7f 6a 7f 6e 3d a1 af 17 b1 95 d1 0f bb a4 b8 df 16 0b 78 81 df 3f c6 7d 40 9d a7 68 17 b2 bf 63 ef e2 d4 2e f3 cf 42 3b f7 fe a5 fe 7b d8 0f f9 37 f6 5f fa de a3 df f4 7f 91 fc a3 f6 e9 f5 1f b0 67 eb 6f fd 0f 5a 4f 5e 9f b5 be c6 3f a8 9f ff d3 71 ec 5a 41 2d eb e6 3f a7 f1 1f 4b d5 c0 83 7e d7 65 8f 84 47 81 72 75 3a 8e 62 be e6 21 20 11 58 b9 a7 10 5f cc 8b 32 30 a7 8d ea 57 ce 64 61 3f 33 92 f2 7a 7f f4 15 e1 6b a1 84 0b 33 a4 15 39 ca 67 d9 55 51 1d 05 96 8d 5d ca ba c4 d0 dc Data Ascii: RIFFWEBPVP8 P'*xZ>mM!$$ff4Z^~$~A_S90m?h8jn=x?}@hc.B;{7_goZO^?qZA-?K~eGru:b! X_20Wda?3zk39gUQ]
2024-04-19 05:32:21 UTC	1255	IN	Data Raw: 6f db e3 b7 25 fd 30 57 79 aa 68 14 0a 38 0d f9 60 90 d8 0d a9 39 57 a5 22 9b 75 34 59 5f 61 cd dd c9 ac 98 a5 35 54 34 bb 23 9e c4 20 98 c5 1e 59 43 b8 86 3e 46 01 4f 01 0f d3 d0 f1 00 ed 0b 6b 5f 22 90 79 06 a7 b9 ef 65 ed 5d fe 5e ab c7 6c ff 49 0f 08 da 07 b6 26 aa a1 d1 e1 7f 4f cc 69 77 99 51 6c 19 dc 74 91 f7 42 28 f1 12 45 62 f3 58 3d 7a eb e2 3c 3e 97 04 cb b6 c1 7e 85 1d 61 e7 06 e3 b8 ee f6 18 99 94 f9 aa b8 6b 19 56 c9 b5 9f 56 7e 21 19 8c ec b7 35 42 72 38 28 36 34 97 11 c2 c1 9b 38 d4 17 e5 13 ed ff 19 08 44 33 86 35 b7 0a c5 7b 89 65 30 77 b9 9f 8c 5b aa 74 c8 ac 0d 23 e6 70 48 08 38 bb 0e ff e4 d4 62 58 41 72 79 4e 22 47 26 bf 11 8a b1 9b 44 80 69 05 6e 0b 35 f9 af b8 11 54 db 10 0d 4f bb 58 97 2e 4d 6f 0c 90 9a 4c 2d 5b 4f ef f6 43 dd 98 Data Ascii: o%0Wyh8`9W"u4Y_a5T4# YC>FOk_"ye]^lI&OiwQltB(EbX=z<>~akVV~!5Br8(648D35{e0w[t#pH8bXAryN"G&Din5TOX.MoL-[OC
2024-04-19 05:32:21 UTC	616	IN	Data Raw: f9 6d fe 4c 1d 3d f3 31 98 6f e7 2f 38 db 08 65 bc 49 02 fc da 7e 2f 3c da 54 5c e6 49 dd 35 1b cd 4c a6 af e5 71 44 3d 77 1f 6d 29 48 85 73 7f e7 c9 78 42 f8 e4 f3 37 51 f8 a9 6f 3e f4 00 ba 64 7e 01 f5 38 66 e6 6e be b9 cd 40 f4 ac 73 a6 1e 0f 1e 94 48 a5 c5 64 81 3e 8f 50 bc 91 01 1d bd b7 0e 31 10 2e 0e d2 47 c2 cd d4 dd e7 dd 16 bc c7 e3 06 2c 30 76 17 00 32 dd 57 44 71 e5 45 17 01 dc 01 a0 62 04 89 f7 c4 e7 56 a4 8b 0c e0 f3 e8 31 55 08 7f c1 d1 f8 bc 03 28 44 16 98 41 64 82 80 9e 8c 39 dd be d9 17 f2 cf 11 c3 c3 ee fc 6e 91 9d 94 c8 71 25 75 ad bf ea 8a c1 6a 20 5a 0b c0 02 3e 35 8c ae 9a fd 19 c9 6b 9f f9 6f e4 64 01 a2 a3 60 6e bb 16 4d 64 40 df e0 a7 53 f4 32 73 be ff 81 d6 28 22 87 d0 fe 68 fc 33 dd bc 43 b1 9f 6d af 45 a5 85 18 a0 dc 8f 4b 4e Data Ascii: mL=1o/8eI~/<T\I5LqD=wm)HsxB7Qo>d~8fn@sHd>P1.G,0v2WDqEbV1U(DAd9nq%uj Z>5kod`nMd@S2s("h3CmEKN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49932	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:21 UTC	850	OUT	GET /s/player/0af6e327/player_ias.vflset/en_US/remote.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/s09YWoGtftM?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:21 UTC	689	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 120953 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 17 Apr 2024 20:35:03 GMT Expires: Thu, 17 Apr 2025 20:35:03 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 17 Apr 2024 04:21:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 118638 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:21 UTC	566	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 61 38 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 45 70 28 61 2c 22 7a 78 22 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 32 31 34 37 34 38 33 36 34 38 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2b 4d 61 74 68 2e 61 62 73 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 32 31 34 37 34 38 33 36 34 38 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 5e 67 2e 6b 62 28 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 62 38 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 7c 7c 28 63 3d 5b 53 74 72 69 6e 67 28 63 29 5d 29 3b 0a Data Ascii: (function(g){var window=this;'use strict';var a8=function(a){g.Ep(a,"zx",Math.floor(2147483648Math.random()).toString(36)+Math.abs(Math.floor(2147483648Math.random())^g.kb()).toString(36));return a},b8=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);
2024-04-19 05:32:21 UTC	1255	IN	Data Raw: 3b 0a 65 6c 73 65 20 66 6f 72 28 61 3d 4f 41 62 28 61 29 3b 3b 29 7b 76 61 72 20 64 3d 61 2e 6e 65 78 74 28 29 3b 69 66 28 64 2e 64 6f 6e 65 29 62 72 65 61 6b 3b 62 2e 63 61 6c 6c 28 63 2c 64 2e 76 61 6c 75 65 2c 76 6f 69 64 20 30 2c 61 29 7d 7d 2c 51 41 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 3b 0a 50 41 62 28 62 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 74 72 79 7b 76 61 72 20 65 3d 67 2e 4f 76 2e 70 72 6f 74 6f 74 79 70 65 2e 42 2e 63 61 6c 6c 28 74 68 69 73 2c 64 2c 21 30 29 7d 63 61 74 63 68 28 66 29 7b 69 66 28 22 53 74 6f 72 61 67 65 3a 20 49 6e 76 61 6c 69 64 20 76 61 6c 75 65 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 22 3d 3d 66 29 72 65 74 75 72 6e 3b 74 68 72 6f 77 20 66 3b 7d 76 6f 69 64 20 30 3d 3d 3d 65 3f Data Ascii: ;else for(a=OAb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},QAb=function(a,b){var c=[];PAb(b,function(d){try{var e=g.Ov.prototype.B.call(this,d,!0)}catch(f){if("Storage: Invalid value was encountered"==f)return;throw f;}void 0===e?
2024-04-19 05:32:21 UTC	1255	IN	Data Raw: 72 6e 20 57 41 62 28 61 29 7d 2c 58 41 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 6a 6d 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6a 6d 29 72 65 74 75 72 6e 20 61 2e 6a 6d 28 29 3b 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 4d 61 70 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 61 70 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 53 65 74 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 65 74 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 61 2e 76 61 6c 75 65 73 28 29 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 61 2e 73 70 6c 69 74 28 22 22 29 3b 69 66 28 67 2e 61 62 28 61 29 29 7b 66 6f 72 28 76 61 Data Ascii: rn WAb(a)},XAb=function(a){if(a.jm&&"function"==typeof a.jm)return a.jm();if("undefined"!==typeof Map&&a instanceof Map\|\|"undefined"!==typeof Set&&a instanceof Set)return Array.from(a.values());if("string"===typeof a)return a.split("");if(g.ab(a)){for(va
2024-04-19 05:32:21 UTC	1255	IN	Data Raw: 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 63 6c 6f 73 65 64 22 2c 7b 4c 63 3a 33 2c 4b 63 3a 22 63 68 61 6e 6e 65 6c 5f 74 79 70 65 22 7d 29 7d 2c 64 42 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 6a 2e 4b 69 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 63 6c 6f 73 65 64 22 2c 62 29 7d 2c 65 42 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6a 3d 64 38 28 29 3b 0a 74 68 69 73 2e 6a 2e 4f 68 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 6d 65 Data Ascii: ient_streamz/youtube/living_room/mdx/channel/closed",{Lc:3,Kc:"channel_type"})},dBb=function(a,b){a.j.Ki("/client_streamz/youtube/living_room/mdx/channel/closed",b)},eBb=function(){this.j=d8();this.j.Oh("/client_streamz/youtube/living_room/mdx/channel/me
2024-04-19 05:32:21 UTC	1255	IN	Data Raw: 4e 22 3b 61 26 26 28 74 68 69 73 2e 69 64 3d 61 2e 69 64 7c 7c 61 2e 6e 61 6d 65 2c 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 2c 74 68 69 73 2e 63 6c 69 65 6e 74 4e 61 6d 65 3d 61 2e 63 6c 69 65 6e 74 4e 61 6d 65 3f 61 2e 63 6c 69 65 6e 74 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3a 22 55 4e 4b 4e 4f 57 4e 5f 49 4e 54 45 52 46 41 43 45 22 2c 0a 74 68 69 73 2e 61 70 70 3d 61 2e 61 70 70 2c 74 68 69 73 2e 74 79 70 65 3d 61 2e 74 79 70 65 7c 7c 22 52 45 4d 4f 54 45 5f 43 4f 4e 54 52 4f 4c 22 2c 74 68 69 73 2e 75 73 65 72 6e 61 6d 65 3d 61 2e 75 73 65 72 7c 7c 22 22 2c 74 68 69 73 2e 61 76 61 74 61 72 3d 61 2e 75 73 65 72 41 76 61 74 61 72 55 72 69 7c 7c 22 22 2c 74 68 69 73 2e 6f 62 66 75 73 63 61 74 65 64 47 61 69 61 49 64 3d 61 2e 6f 62 Data Ascii: N";a&&(this.id=a.id\|\|a.name,this.name=a.name,this.clientName=a.clientName?a.clientName.toUpperCase():"UNKNOWN_INTERFACE",this.app=a.app,this.type=a.type\|\|"REMOTE_CONTROL",this.username=a.user\|\|"",this.avatar=a.userAvatarUri\|\|"",this.obfuscatedGaiaId=a.ob
2024-04-19 05:32:21 UTC	1255	IN	Data Raw: 42 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 65 78 70 65 72 69 6d 65 6e 74 73 2e 63 6c 65 61 72 28 29 3b 0a 62 2e 73 70 6c 69 74 28 22 2c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 65 78 70 65 72 69 6d 65 6e 74 73 2e 61 64 64 28 63 29 7d 29 7d 2c 65 38 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 7c 7c 7b 7d 3b 0a 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 7c 7c 22 22 3b 74 68 69 73 2e 69 64 3d 61 2e 69 64 7c 7c 61 2e 73 63 72 65 65 6e 49 64 7c 7c 22 22 3b 74 68 69 73 2e 74 6f 6b 65 6e 3d 61 2e 74 6f 6b 65 6e 7c 7c 61 2e 6c 6f 75 6e 67 65 54 6f 6b 65 6e 7c 7c 22 22 3b 74 68 69 73 2e 75 75 69 64 3d 61 2e 75 75 69 64 7c 7c 61 2e 64 69 61 6c 49 64 7c 7c 22 22 3b 74 68 69 73 2e 69 64 54 79 70 65 3d 61 2e 73 Data Ascii: Bb=function(a,b){a.experiments.clear();b.split(",").forEach(function(c){a.experiments.add(c)})},e8=function(a){a=a\|\|{};this.name=a.name\|\|"";this.id=a.id\|\|a.screenId\|\|"";this.token=a.token\|\|a.loungeToken\|\|"";this.uuid=a.uuid\|\|a.dialId\|\|"";this.idType=a.s
2024-04-19 05:32:21 UTC	1255	IN	Data Raw: 6d 6f 74 65 2d 63 6f 6e 6e 65 63 74 65 64 2d 64 65 76 69 63 65 73 22 29 7c 7c 5b 5d 3b 0a 67 2e 57 62 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 2c 79 42 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 30 3d 3d 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 5b 5d 3b 0a 76 61 72 20 62 3d 61 5b 30 5d 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 2c 63 3d 2d 31 3d 3d 62 3f 61 5b 30 5d 3a 61 5b 30 5d 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 62 29 3b 72 65 74 75 72 6e 20 67 2e 51 72 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 65 3f 64 3a 64 2e 73 75 62 73 74 72 69 6e 67 28 63 2e 6c 65 6e 67 74 68 29 7d 29 7d 2c 7a 42 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 71 43 28 22 79 74 2d 72 65 6d 6f 74 65 2d 63 6f 6e 6e 65 63 74 65 64 2d Data Ascii: mote-connected-devices")\|\|[];g.Wb(a);return a},yBb=function(a){if(0==a.length)return[];var b=a[0].indexOf("#"),c=-1==b?a[0]:a[0].substring(0,b);return g.Qr(a,function(d,e){return 0==e?d:d.substring(c.length)})},zBb=function(a){g.qC("yt-remote-connected-
2024-04-19 05:32:21 UTC	1255	IN	Data Raw: 0a 72 65 74 75 72 6e 20 6c 38 3f 21 21 6c 38 2e 67 65 74 28 22 79 74 2d 72 65 6d 6f 74 65 2d 75 73 65 2d 73 74 61 67 69 6e 67 2d 73 65 72 76 65 72 22 29 3a 21 31 7d 2c 6d 38 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 67 2e 64 45 5b 61 5d 3d 21 30 3b 0a 76 61 72 20 63 3d 67 2e 62 45 28 29 3b 63 26 26 63 2e 70 75 62 6c 69 73 68 2e 61 70 70 6c 79 28 63 2c 61 72 67 75 6d 65 6e 74 73 29 3b 67 2e 64 45 5b 61 5d 3d 21 31 7d 2c 49 42 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 64 38 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 6e 38 29 7b 6e 38 3d 6e 65 77 20 67 2e 46 67 28 6e 65 77 20 49 42 62 29 3b 0a 76 61 72 20 61 3d 67 2e 77 42 28 22 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 5f 77 65 62 5f 66 6c 75 73 68 5f 63 6f 75 6e 74 22 2c 2d 31 29 3b 2d 31 21 3d Data Ascii: return l8?!!l8.get("yt-remote-use-staging-server"):!1},m8=function(a,b){g.dE[a]=!0;var c=g.bE();c&&c.publish.apply(c,arguments);g.dE[a]=!1},IBb=function(){},d8=function(){if(!n8){n8=new g.Fg(new IBb);var a=g.wB("client_streamz_web_flush_count",-1);-1!=
2024-04-19 05:32:21 UTC	1255	IN	Data Raw: 6f 6e 47 43 61 73 74 41 70 69 41 76 61 69 6c 61 62 6c 65 3d 63 3b 4d 42 62 28 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 63 61 73 74 2f 73 64 6b 2f 6c 69 62 73 2f 73 65 6e 64 65 72 2f 31 2e 30 2f 63 61 73 74 5f 66 72 61 6d 65 77 6f 72 6b 2e 6a 73 22 2c 4e 42 62 2c 63 29 7d 7d 2c 53 42 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 52 42 62 28 29 3b 0a 76 61 72 20 61 3d 50 42 62 28 29 3b 61 2e 70 75 73 68 28 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 65 75 72 65 6b 61 2f 63 6c 61 6e 6b 2f 63 61 73 74 5f 73 65 6e 64 65 72 2e 6a 73 22 29 3b 6f 38 28 61 29 7d 2c 55 42 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 52 42 62 28 29 3b 0a 76 61 72 20 61 3d 50 42 62 28 29 3b 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 67 2e 71 61 28 54 42 62 2e 6d 61 Data Ascii: onGCastApiAvailable=c;MBb("//www.gstatic.com/cast/sdk/libs/sender/1.0/cast_framework.js",NBb,c)}},SBb=function(){RBb();var a=PBb();a.push("//www.gstatic.com/eureka/clank/cast_sender.js");o8(a)},UBb=function(){RBb();var a=PBb();a.push.apply(a,g.qa(TBb.ma
2024-04-19 05:32:21 UTC	1255	IN	Data Raw: 72 65 74 75 72 6e 20 67 2e 54 61 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 29 7d 2c 62 29 7d 2c 76 38 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 38 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 74 68 69 73 2e 47 3d 61 3b 0a 74 68 69 73 2e 44 3d 62 3b 74 68 69 73 2e 6c 63 3d 63 3b 74 68 69 73 2e 58 62 3d 64 7c 7c 31 3b 74 68 69 73 2e 5a 61 3d 6e 65 77 20 67 2e 4a 70 28 74 68 69 73 29 3b 74 68 69 73 2e 77 62 3d 34 35 45 33 3b 61 3d 67 2e 61 53 3f 31 32 35 3a 76 6f 69 64 20 30 3b 74 68 69 73 2e 65 62 3d 6e 65 77 20 67 2e 43 67 28 61 29 3b 74 68 69 73 2e 4d 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 43 3d 21 31 3b 74 68 69 73 2e 59 3d 74 68 69 73 2e 59 61 3d 74 68 69 73 2e 5a 3d 74 68 69 73 2e 51 61 3d 74 68 69 73 2e 42 Data Ascii: return g.Ta.setTimeout(function(){a()},b)},v8=function(){},w8=function(a,b,c,d){this.G=a;this.D=b;this.lc=c;this.Xb=d\|\|1;this.Za=new g.Jp(this);this.wb=45E3;a=g.aS?125:void 0;this.eb=new g.Cg(a);this.Ma=null;this.C=!1;this.Y=this.Ya=this.Z=this.Qa=this.B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49935	64.233.176.99	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:21 UTC	662	OUT	GET /js/th/suXtyypHr-kmcDv8BLab_zSS-cnpn4GzxWV-_PefaIU.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:21 UTC	799	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 52826 Date: Fri, 19 Apr 2024 05:32:21 GMT Expires: Sat, 19 Apr 2025 05:32:21 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 13:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:21 UTC	456	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2024-04-19 05:32:21 UTC	1255	IN	Data Raw: 4d 4c 3a 42 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 42 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 42 7d 29 2c 5a 3d 32 30 3b 65 6c 73 65 20 69 66 28 38 33 3d 3d 5a 29 5a 3d 4c 26 26 4c 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 3f 39 33 3a 56 3b 65 6c 73 65 20 69 66 28 31 39 3d 3d 5a 29 7a 3d 64 2c 4c 3d 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 5a 3d 38 33 3b 65 6c 73 65 7b 69 66 28 32 30 3d 3d 5a 29 72 65 74 75 72 6e 20 78 3d 39 35 2c 7a 3b 69 66 28 5a 3d 3d 62 29 77 2e 63 6f 6e 73 6f 6c 65 5b 55 5d 28 4f 2e 6d 65 73 73 61 67 65 29 2c 5a 3d 32 30 3b 65 6c 73 65 20 69 66 28 5a 3d 3d 56 29 72 65 74 75 72 6e 20 7a 7d 7d 63 61 74 63 68 28 6c 29 7b 69 66 28 39 35 3d 3d 78 29 74 68 72 6f 77 20 6c 3b 38 31 3d 3d 78 26 26 28 4f 3d 6c 2c 5a 3d 32 33 29 Data Ascii: ML:B,createScript:B,createScriptURL:B}),Z=20;else if(83==Z)Z=L&&L.createPolicy?93:V;else if(19==Z)z=d,L=w.trustedTypes,Z=83;else{if(20==Z)return x=95,z;if(Z==b)w.console[U](O.message),Z=20;else if(Z==V)return z}}catch(l){if(95==x)throw l;81==x&&(O=l,Z=23)
2024-04-19 05:32:21 UTC	1255	IN	Data Raw: 28 4c 2c 77 29 3b 38 33 3d 3d 56 3f 56 3d 32 30 3a 38 31 3d 3d 56 3f 28 77 5b 72 2d 45 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 2c 56 3d 36 31 29 3a 36 31 3d 3d 56 3f 28 72 2b 2b 2c 56 3d 32 30 29 3a 32 30 3d 3d 56 26 26 28 56 3d 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 38 31 3a 39 33 29 7d 7d 2c 7a 3d 33 34 29 3a 33 39 3d 3d 7a 3f 28 62 2e 54 4a 3d 45 2c 62 2e 6c 69 73 74 65 6e 65 72 3d 6e 75 6c 6c 2c 62 2e 70 72 6f 78 79 3d 6e 75 6c 6c 2c 62 2e 73 72 63 3d 6e 75 6c 6c 2c 62 2e 6f 74 3d 6e 75 6c 6c 2c 7a 3d 35 32 29 3a 35 37 3d 3d 7a 26 26 28 7a 3d 5a 3c 3c 32 26 31 33 3f 32 39 3a 34 39 29 7d 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 5a 2c 62 2c 78 2c 46 2c 7a 2c 4f 2c 4c 2c 6d 2c 6c 2c 56 2c 77 2c 72 2c 42 29 7b 66 6f 72 28 72 3d 38 Data Ascii: (L,w);83==V?V=20:81==V?(w[r-E]=arguments[r],V=61):61==V?(r++,V=20):20==V&&(V=r<arguments.length?81:93)}},z=34):39==z?(b.TJ=E,b.listener=null,b.proxy=null,b.src=null,b.ot=null,z=52):57==z&&(z=Z<<2&13?29:49)}},A=function(E,Z,b,x,F,z,O,L,m,l,V,w,r,B){for(r=8
2024-04-19 05:32:21 UTC	1255	IN	Data Raw: 72 3d 7a 25 62 2b 31 2c 42 3d 33 36 31 32 2a 7a 2a 6c 2b 31 2a 7a 2a 7a 2a 72 2b 34 32 2a 6c 2a 6c 2d 34 32 2a 7a 2a 7a 2a 6c 2b 56 2b 28 4c 28 29 7c 30 29 2a 72 2d 33 39 39 30 2a 6c 2d 72 2a 6c 2b 4f 5b 56 2b 32 37 26 37 5d 2a 7a 2a 72 2c 4f 29 5b 42 5d 2c 76 6f 69 64 20 30 29 2c 4f 29 5b 28 52 3d 56 2b 31 33 2c 28 52 7c 37 29 2b 7e 52 2d 20 2d 38 2d 45 2a 28 7e 52 26 37 29 29 2b 28 45 2b 28 7e 46 5e 45 29 2d 28 7e 46 7c 45 29 29 5d 3d 55 2c 4f 29 5b 56 2b 28 36 2b 7e 28 46 7c 45 29 2b 45 2a 28 46 26 2d 33 29 2b 28 7e 46 5e 45 29 29 5d 3d 2d 38 36 2c 55 7d 2c 77 3d 6d 29 2c 32 29 3e 3d 5a 26 26 5a 2d 35 3c 3c 31 3c 5a 29 7b 66 6f 72 28 7a 3d 76 28 62 2c 32 35 29 2c 46 3d 45 3b 78 3e 45 3b 78 2d 2d 29 46 3d 46 3c 3c 38 7c 56 78 28 38 2c 74 72 75 65 2c 62 Data Ascii: r=z%b+1,B=3612zl+1zzr+42ll-42zzl+V+(L()\|0)r-3990l-rl+O[V+27&7]zr,O)[B],void 0),O)[(R=V+13,(R\|7)+~R- -8-E(~R&7))+(E+(~F^E)-(~F\|E))]=U,O)[V+(6+~(F\|E)+E*(F&-3)+(~F^E))]=-86,U},w=m),2)>=Z&&Z-5<<1<Z){for(z=v(b,25),F=E;x>E;x--)F=F<<8\|Vx(8,true,b
2024-04-19 05:32:21 UTC	1255	IN	Data Raw: 73 22 2c 22 20 22 2c 22 73 74 72 69 6e 67 22 2c 30 2c 5a 2c 6c 29 7d 29 3a 6b 34 28 34 31 2c 35 38 2c 22 63 6c 61 73 73 22 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 2e 63 61 6c 6c 28 41 28 36 30 2c 22 73 74 72 69 6e 67 22 2c 5a 29 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 21 4d 28 34 34 2c 30 2c 6c 2c 62 29 7d 29 2e 6a 6f 69 6e 28 22 20 22 29 2c 5a 29 2c 6d 3d 33 34 29 3a 32 39 3d 3d 6d 3f 6d 3d 34 30 3a 31 34 3d 3d 6d 26 26 28 6d 3d 28 45 5e 33 34 29 3e 3e 33 3f 35 32 3a 35 30 29 7d 7d 2c 79 78 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 5a 2c 62 2c 78 2c 46 2c 7a 2c 4f 2c 4c 2c 6d 2c 6c 2c 56 2c 77 29 7b 69 66 28 32 3e 5a 3e 3e 32 26 26 31 3c 3d 28 5a 5e 45 29 3e 3e 34 29 69 66 28 4f 3d 22 61 72 72 61 79 22 3d 3d 3d 4d Data Ascii: s"," ","string",0,Z,l)}):k4(41,58,"class",Array.prototype.filter.call(A(60,"string",Z),function(l){return!M(44,0,l,b)}).join(" "),Z),m=34):29==m?m=40:14==m&&(m=(E^34)>>3?52:50)}},yx=function(E,Z,b,x,F,z,O,L,m,l,V,w){if(2>Z>>2&&1<=(Z^E)>>4)if(O="array"===M
2024-04-19 05:32:21 UTC	1255	IN	Data Raw: 69 66 28 33 33 3d 3d 77 29 77 3d 5a 2d 38 3c 3c 31 3e 3d 5a 26 26 28 5a 2d 32 7c 34 30 29 3c 5a 3f 39 33 3a 36 31 3b 65 6c 73 65 20 69 66 28 39 37 3d 3d 77 29 77 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 4c 29 3f 39 38 3a 36 35 3b 65 6c 73 65 20 69 66 28 31 32 3d 3d 77 29 77 3d 31 3d 3d 28 28 5a 5e 32 31 29 26 33 29 3f 38 32 3a 38 30 3b 65 6c 73 65 20 69 66 28 38 32 3d 3d 77 29 7b 61 3a 7b 73 77 69 74 63 68 28 4f 29 7b 63 61 73 65 20 31 3a 56 3d 4c 3f 22 64 69 73 61 62 6c 65 22 3a 22 65 6e 61 62 6c 65 22 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 78 3a 56 3d 4c 3f 22 68 69 67 68 6c 69 67 68 74 22 3a 22 75 6e 68 69 67 68 6c 69 67 68 74 22 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 62 3a 56 3d 4c 3f 22 61 63 74 69 76 61 74 65 22 3a 22 64 65 61 63 74 69 76 Data Ascii: if(33==w)w=Z-8<<1>=Z&&(Z-2\|40)<Z?93:61;else if(97==w)w=Array.isArray(L)?98:65;else if(12==w)w=1==((Z^21)&3)?82:80;else if(82==w){a:{switch(O){case 1:V=L?"disable":"enable";break a;case x:V=L?"highlight":"unhighlight";break a;case b:V=L?"activate":"deactiv
2024-04-19 05:32:21 UTC	1255	IN	Data Raw: 74 65 6e 65 72 26 26 7a 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 4c 29 2c 68 7a 2d 2d 2c 4f 3d 4b 28 35 2c 7a 29 2c 56 3d 32 36 29 3a 31 36 3d 3d 56 3f 56 3d 7a 26 26 7a 5b 75 56 5d 3f 35 34 3a 37 34 3a 39 37 3d 3d 56 3f 28 6c 2b 2b 2c 56 3d 32 37 29 3a 35 34 3d 3d 56 3f 28 4d 28 39 2c 30 2c 7a 2e 67 2c 5a 29 2c 56 3d 39 38 29 3a 37 3d 3d 56 3f 56 3d 22 6e 75 6d 62 65 72 22 21 3d 3d 74 79 70 65 6f 66 20 5a 26 26 5a 26 26 21 5a 2e 54 4a 3f 38 36 3a 39 38 3a 32 37 3d 3d 56 3f 56 3d 6c 3c 5a 2e 6c 65 6e 67 74 68 3f 32 3a 39 36 3a 34 33 3d 3d 56 3f 28 6d 3d 6e 28 33 2c 6d 29 2c 4c 26 26 4c 5b 75 56 5d 3f 4c 2e 67 2e 61 64 64 28 53 74 72 69 6e 67 28 5a 29 2c 6d 2c 62 2c 70 28 38 36 2c 4f 2c 6e 75 6c 6c 29 3f 21 21 4f 2e 63 61 70 74 75 72 65 3a 21 21 4f Data Ascii: tener&&z.removeListener(L),hz--,O=K(5,z),V=26):16==V?V=z&&z[uV]?54:74:97==V?(l++,V=27):54==V?(M(9,0,z.g,Z),V=98):7==V?V="number"!==typeof Z&&Z&&!Z.TJ?86:98:27==V?V=l<Z.length?2:96:43==V?(m=n(3,m),L&&L[uV]?L.g.add(String(Z),m,b,p(86,O,null)?!!O.capture:!!O
2024-04-19 05:32:21 UTC	1255	IN	Data Raw: 61 6c 73 65 2c 6d 2e 6c 69 76 65 3d 62 2c 6d 2e 6d 75 6c 74 69 6c 69 6e 65 3d 66 61 6c 73 65 2c 6d 2e 6d 75 6c 74 69 73 65 6c 65 63 74 61 62 6c 65 3d 66 61 6c 73 65 2c 6d 2e 6f 72 69 65 6e 74 61 74 69 6f 6e 3d 22 76 65 72 74 69 63 61 6c 22 2c 6d 2e 72 65 61 64 6f 6e 6c 79 3d 66 61 6c 73 65 2c 6d 2e 72 65 6c 65 76 61 6e 74 3d 22 61 64 64 69 74 69 6f 6e 73 20 74 65 78 74 22 2c 6d 2e 72 65 71 75 69 72 65 64 3d 66 61 6c 73 65 2c 6d 2e 73 6f 72 74 3d 22 6e 6f 6e 65 22 2c 6d 2e 62 75 73 79 3d 66 61 6c 73 65 2c 6d 2e 64 69 73 61 62 6c 65 64 3d 66 61 6c 73 65 2c 6d 2e 68 69 64 64 65 6e 3d 66 61 6c 73 65 2c 6d 2e 69 6e 76 61 6c 69 64 3d 22 66 61 6c 73 65 22 2c 6d 29 2c 42 3d 31 35 29 3a 31 35 3d 3d 42 3f 28 4c 3d 47 79 2c 46 20 69 6e 20 4c 3f 7a 2e 73 65 74 41 74 Data Ascii: alse,m.live=b,m.multiline=false,m.multiselectable=false,m.orientation="vertical",m.readonly=false,m.relevant="additions text",m.required=false,m.sort="none",m.busy=false,m.disabled=false,m.hidden=false,m.invalid="false",m),B=15):15==B?(L=Gy,F in L?z.setAt
2024-04-19 05:32:21 UTC	1255	IN	Data Raw: 78 2c 46 29 2c 4f 3d 62 3f 30 3a 31 30 2c 7a 3d 78 2e 47 28 29 2d 78 2e 72 36 2c 78 2e 7a 4a 2b 3d 7a 2c 78 2e 62 41 26 26 78 2e 62 41 28 7a 2c 78 2e 6c 2c 78 2e 73 2c 78 2e 58 2c 78 2e 50 29 2c 78 2e 58 3d 5a 2c 78 2e 6c 3d 5a 2c 78 2e 50 3d 5a 2c 78 2e 73 3d 5a 2c 7a 3c 4f 7c 7c 30 3e 3d 78 2e 50 66 2d 2d 7c 7c 28 7a 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 7a 29 2c 78 2e 68 72 2e 70 75 73 68 28 32 35 34 3e 3d 7a 3f 7a 3a 32 35 34 29 29 7d 66 69 6e 61 6c 6c 79 7b 78 2e 42 66 3d 5a 7d 55 3d 4c 7d 42 3d 39 33 7d 65 6c 73 65 7b 69 66 28 35 39 3d 3d 42 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 61 6e 64 20 61 74 74 61 63 68 45 76 65 6e 74 20 61 72 65 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 22 29 3b 69 66 28 36 33 Data Ascii: x,F),O=b?0:10,z=x.G()-x.r6,x.zJ+=z,x.bA&&x.bA(z,x.l,x.s,x.X,x.P),x.X=Z,x.l=Z,x.P=Z,x.s=Z,z<O\|\|0>=x.Pf--\|\|(z=Math.floor(z),x.hr.push(254>=z?z:254))}finally{x.Bf=Z}U=L}B=93}else{if(59==B)throw Error("addEventListener and attachEvent are unavailable.");if(63
2024-04-19 05:32:21 UTC	1255	IN	Data Raw: 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 2c 34 3d 3d 45 2e 59 47 29 29 7c 7c 6c 3f 45 2e 47 28 29 3a 45 2e 71 77 2c 56 29 2d 45 2e 71 77 2c 77 3e 3e 31 34 29 2c 45 2e 55 26 26 28 45 2e 55 5e 3d 4c 2a 28 77 3c 3c 32 29 29 2c 45 29 2e 46 3d 4c 7c 7c 45 2e 46 2c 45 29 2e 5a 71 2b 3d 4c 2c 4f 29 7c 7c 6c 29 45 2e 71 77 3d 56 2c 45 2e 59 47 3d 30 3b 42 3d 28 21 6c 7c 7c 56 2d 45 2e 72 36 3c 45 2e 75 41 2d 28 46 3f 32 35 35 3a 78 3f 35 3a 32 29 3f 72 3d 66 61 6c 73 65 3a 28 45 2e 51 72 3d 7a 2c 6d 3d 54 28 78 3f 34 35 30 3a 32 31 32 2c 45 29 2c 79 28 45 2c 62 2c 45 2e 6a 29 2c 45 2e 52 2e 70 75 73 68 28 5b 4b 73 2c 6d 2c 78 3f 7a 2b 31 3a 7a 2c 45 2e 6c 2c 45 2e 73 2c 45 2e 58 2c 45 2e 50 5d 29 2c 45 2e 57 3d 6e 73 2c 72 3d 74 72 75 65 29 2c 32 34 29 7d 65 6c Data Ascii: ocument.hidden,4==E.YG))\|\|l?E.G():E.qw,V)-E.qw,w>>14),E.U&&(E.U^=L*(w<<2)),E).F=L\|\|E.F,E).Zq+=L,O)\|\|l)E.qw=V,E.YG=0;B=(!l\|\|V-E.r6<E.uA-(F?255:x?5:2)?r=false:(E.Qr=z,m=T(x?450:212,E),y(E,b,E.j),E.R.push([Ks,m,x?z+1:z,E.l,E.s,E.X,E.P]),E.W=ns,r=true),24)}el

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49930	173.194.219.155	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:21 UTC	661	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:21 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Fri, 19 Apr 2024 05:32:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49931	142.250.105.148	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:21 UTC	639	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:21 UTC	744	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 29 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 05:22:03 GMT Expires: Fri, 19 Apr 2024 05:37:03 GMT Cache-Control: public, max-age=900 Age: 618 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:21 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49937	64.233.176.119	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:21 UTC	792	OUT	GET /vi/8hmgK-BHqGc/default.jpg?sqp=-oaymwEkCHgQWvKriqkDGvABAfgB_gmAAtAFigIMCAAQARhlIFsoUDAP&rs=AOn4CLBKgLX8rib9_UCRiNMtON9Lcz84_Q HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:21 UTC	656	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 2515 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 05:28:53 GMT Expires: Fri, 19 Apr 2024 07:28:53 GMT Cache-Control: public, max-age=7200 ETag: "1704919110" Content-Type: image/jpeg Vary: Origin Age: 208 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:21 UTC	599	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 06 06 11 12 11 13 12 13 13 13 15 10 11 18 15 13 10 0f 11 17 17 11 15 15 16 15 15 15 12 18 18 16 16 16 18 22 1b 15 16 20 18 10 18 28 2d 1d 20 25 27 28 2c 28 15 1d 2d 31 2d 28 30 22 28 28 26 01 09 09 09 0d 0b 0d 15 0e 0e 19 26 17 16 21 27 26 26 29 26 26 26 26 26 26 26 26 2e 26 33 32 26 29 2e 26 26 26 26 32 27 2d 2b 32 32 26 26 32 26 2a 26 26 32 26 26 26 26 26 32 2e 26 33 26 26 26 26 ff c0 00 11 08 00 5a 00 78 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 06 05 07 02 03 04 08 01 ff c4 00 4a 10 00 02 01 02 03 03 05 0a 08 0a 0b 00 00 00 00 00 01 02 11 00 03 04 12 21 05 06 31 22 41 51 61 91 13 14 64 71 81 a1 a4 b1 c1 e3 07 08 17 32 33 Data Ascii: JFIF" (- %'(,(-1-(0"((&&!'&&)&&&&&&&&.&32&).&&&&2'-+22&&2&*&&2&&&&&2.&3&&&&Zx"J!1"AQadq23
2024-04-19 05:32:21 UTC	1255	IN	Data Raw: 69 83 59 1b da 1a c3 39 dc ac d3 16 d2 a1 c3 66 63 45 eb 79 c0 81 a8 20 c1 20 8d 39 ab b8 52 9e e8 62 e1 6e 21 e1 f4 8a 7a 75 2a 7d 94 cf 86 b9 98 03 c3 52 3b 0c 7b 2b 64 25 69 76 40 df cc 6a 37 6e ed d4 c3 5b cc 44 b9 f9 89 ed 3d 55 25 97 4a ab 37 bb 69 8b 97 df 5e 4d b2 51 47 4c 12 0f 9e ba 6e 90 25 66 e4 df 1c 49 7c c6 e4 4f 05 00 05 03 b3 87 59 a7 0d 95 bd 6a e0 07 9d 78 31 81 a7 4e 9e 3a a9 12 e4 99 d7 28 d5 8f 57 47 f3 d3 4e ab b4 ac b6 11 84 c1 75 6c ba 11 ca 41 3e 48 d3 5e ba 93 d4 da d1 55 a7 6a cb 46 d9 04 02 0c 83 ce 39 eb a4 db e1 4b bb 9f 78 b6 1a d9 3d 0a 7b 54 1f 5d 33 b0 d0 56 98 e7 24 5e 19 ba cd 81 00 f4 cd 40 7c 20 6f 4a 6c fc 19 ba 14 1b d7 08 b7 87 43 c0 b9 04 c9 8f aa 00 24 f8 a3 9e 99 6c 7c d1 e3 35 4e 7c 60 2d bc 60 9b f1 60 df 07 Data Ascii: iY9fcEy 9Rbn!zu*}R;{+d%iv@j7n[D=U%J7i^MQGLn%fI\|OYjx1N:(WGNulA>H^UjF9Kx={T]3V$^@\| oJlC$l\|5N\|`-``
2024-04-19 05:32:21 UTC	661	IN	Data Raw: ee 96 d4 4e e8 19 8c 34 96 03 5e 27 9b 87 49 a6 cd ed b9 dd 95 54 2e 60 02 93 10 c3 e7 19 1c 75 d0 79 e9 cf 86 c9 b5 65 3d b1 6c 25 db a7 30 cc aa 01 2b cc 49 d0 7b 69 e3 04 c9 6c 42 20 00 73 0a 31 b8 6b 6a e3 22 aa 8c ab 30 32 eb d7 a7 35 62 05 4e 09 50 94 69 13 d8 5d ea bc 8a 15 60 01 c2 44 f1 33 eb 35 d2 77 ca f9 04 1c b0 74 e1 d3 4b fd ec c1 43 1e 07 f9 1e 4a c0 0a a0 cb 0f 75 f6 cd db e5 83 46 44 51 c0 6b 24 e9 e6 06 8a d1 b9 ec 96 ec 33 37 17 6e 6e 80 20 79 e6 8a e5 a6 22 89 db 1b 39 7b de e3 01 05 51 1f 89 3a b3 66 f3 20 8f 2d 28 61 d6 48 a6 e6 de cc 03 5a ba 8d 7b e9 43 88 c9 70 c0 cb 91 7e a7 40 07 cb 48 56 f6 82 7d a8 f2 1f dd 4a 3c 0a 89 06 94 ba c3 81 10 67 c6 01 9f 14 1a b4 f6 05 93 6e d1 ce 06 77 86 00 c8 ca 20 c4 eb c7 5a ae 76 86 d6 c1 bd Data Ascii: N4^'IT.`uye=l%0+I{ilB s1kj"025bNPi]`D35wtKCJuFDQk$37nn y"9{Q:f -(aHZ{Cp~@HV}J<gnw Zv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49939	173.194.219.155	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:21 UTC	661	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:22 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Fri, 19 Apr 2024 05:32:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49942	64.233.176.132	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:21 UTC	750	OUT	GET /ytc/AIdro_l7EQrwAPBISw10QVF36IsB-cpyKQ4weQOea7p4iPxQj3U=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:22 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 3670 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 03:21:05 GMT Expires: Sat, 20 Apr 2024 03:21:05 GMT Cache-Control: public, max-age=86400, no-transform Age: 7877 ETag: "v142" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:22 UTC	721	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 ff db 00 84 00 03 02 02 0d 02 02 03 03 03 03 04 03 0c 04 05 08 05 05 04 0f 0a 0e 07 07 06 0b 0c 0a 0c 10 0b 0a 0b 0f 0b 0d 0e 10 0d 11 0b 10 0f 0f 0d 16 0d 11 0e 0e 0e 14 15 0f 11 0e 18 0e 1b 18 10 0d 10 14 01 03 04 04 06 05 06 0a 06 06 0a 0f 0d 0b 0e 11 10 0f 0f 0f 0f 10 0f 10 10 11 0e 0d 0e 0f 12 0f 10 10 12 10 10 0f 10 11 11 0f 0f 0f 0d 13 10 0f 12 12 0d 13 10 0e 12 10 10 10 10 10 10 0f 0f 10 0f ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 00 03 00 00 00 00 00 00 00 00 00 00 00 08 05 07 04 06 09 01 02 03 ff c4 00 35 10 00 02 Data Ascii: JFIFExifII1GoogleDD5
2024-04-19 05:32:22 UTC	1255	IN	Data Raw: 9e 78 85 77 8c 1e ed 2c 9e da d8 1c 8e 02 2b 0f d2 9f 96 11 17 17 57 cd a9 a0 49 51 20 c6 00 09 00 cf 20 04 e9 f1 3d 6b 66 1b 6d 92 08 00 00 37 aa 4e af af b9 ac ee d6 ac 8f 6a 76 ca e6 63 23 ac ed c5 0f da 6d 37 36 6b ac 2b ed c3 52 3a b0 92 23 8e 00 0b b3 35 a0 3d c7 96 67 ea 3e 95 69 fd 21 21 a4 9b 87 00 42 7f d3 b1 9c 93 a8 ee 4f 0c 1c 00 04 d5 43 7b 2b 29 6d 24 99 89 38 1e 1e 5e 35 2d e9 93 6e 72 7b 65 bb 3a d3 59 6f 0e 2a e6 06 4d 67 45 f0 d0 ee 31 b5 4a dc 98 7b b6 1d 56 26 29 14 d2 01 ef 37 b7 1a 8e 81 10 a4 71 74 08 cd d6 2b f7 ed dd 65 0d db a8 10 93 3a 21 42 40 f1 03 6c f8 c9 33 3b f7 6e db a9 52 96 ee e7 88 3b 7d 3a 7e 6a df c5 69 7c c6 13 50 ed de 83 c5 6a 8a da b9 46 25 aa 6e 16 3e e7 5c ed 4a 33 fb 7d a0 b1 cc 8f 15 a3 1d f2 b2 aa 12 ee 8a Data Ascii: xw,+WIQ =kfm7Njvc#m76k+R:#5=g>i!!BOC{+)m$8^5-nr{e:Yo*MgE1J{V&)7qt+e:!B@l3;nR;}:~ji\|PjF%n>\J3}
2024-04-19 05:32:22 UTC	1255	IN	Data Raw: 73 81 d5 b8 39 23 8e 6c 2d c8 ee d6 24 76 46 2a 7e 51 c0 20 95 91 79 46 00 83 c3 1e 08 3c 1f 21 79 a4 bc 85 36 bd 88 83 56 18 79 4c ac 2d 34 fb eb 2f 51 98 ff 00 5e 19 0d 9f d3 d9 8c 9c da 11 f1 fa 9a 2b 39 cd 39 61 c0 c7 5f 84 42 cc c2 39 7e 22 94 bc 8a b5 d1 64 f6 a6 22 67 e2 2f 9f 9c a3 76 6f f6 70 75 68 1a 81 49 01 49 dc 19 e5 b8 81 24 c4 8c 0c d6 b0 5c 35 73 a6 0e 67 63 ef d7 9d 6e 3b 99 b7 d7 b5 4d 4f 54 0b ba 71 63 b4 ad 0d 4f 0c 36 f4 9e 52 6b f0 25 3a d6 29 70 b4 cf 22 4e d1 7d a7 a4 32 30 2b c7 21 97 82 58 f6 ac cb ac a3 f4 e6 de 54 b4 ce b0 12 64 85 6f c3 31 2a 1e 5f 49 95 2a d6 97 04 24 e0 12 46 78 73 e3 5b 46 98 d0 37 31 7b cf b3 d6 34 8d 7c 7e ac c1 60 f4 6c b8 0c 96 a3 16 a0 95 6f 7d a9 7b 5a b0 7f 14 17 f7 24 86 b4 85 82 1e 7f 10 fe eb c5 Data Ascii: s9#l-$vF~Q yF<!y6VyL-4/Q^+99a_B9~"d"g/vopuhII$\5sgcn;MOTqcO6Rk%:)p"N}20+!XTdo1_I*$Fxs[F71{4\|~`lo}{Z$
2024-04-19 05:32:22 UTC	439	IN	Data Raw: 59 6c 01 d4 fe 85 91 d1 49 27 81 f2 c3 81 c9 e0 f0 14 f8 4a 80 94 44 f0 99 8f ac 49 ab 0c 14 87 01 59 81 fe 29 85 f5 57 ea 1e 8f a8 cb 3a 4a ee 37 11 aa b4 eb e0 28 47 89 08 eb 5e 78 a6 80 48 09 6e 56 65 60 e8 3b 10 38 2a c7 85 25 7e 58 26 b0 b2 7a d0 28 12 92 0e 71 aa 67 cb 6f 79 da 9c 5e 5c 30 f8 1f 11 c7 43 fc 57 a6 e0 ef ce 3b 56 7a 65 d1 7b 4d 8e c3 eb 0a 27 4a 5b 9b 21 53 2a cb 59 d2 cc b2 99 da 41 22 2c fc a2 b3 4c c4 75 66 65 00 7c 37 ef d3 56 8f a2 e5 77 0a 52 0e a1 04 0d 5b 08 88 f8 77 c0 f1 ae 9d b9 61 4c 77 21 5b 74 3c 2b 13 45 fa 8c ad 94 f4 f5 73 68 37 5f 01 99 d4 f0 53 b2 b6 b4 d6 56 09 23 4b d8 62 41 0d 1a 99 b8 05 07 27 85 3d be 97 68 f8 0a b1 75 f5 db 27 05 c0 b9 b6 50 4a bf 70 33 07 ae 27 f1 90 0e f3 5e 5b df 20 b7 a1 fe 1b 1f 7e fa cd Data Ascii: YlI'JDIY)W:J7(G^xHnVe`;8%~X&z(qgoy^\0CW;Vze{M'J[!SYA",Lufe\|7VwR[waLw![t<+Esh7_SV#KbA'=hu'PJp3'^[ ~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49944	64.233.176.119	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:21 UTC	792	OUT	GET /vi/yiQ-C7lGw0o/default.jpg?sqp=-oaymwEkCHgQWvKriqkDGvABAfgB_gmAAtAFigIMCAAQARhlIFQoUDAP&rs=AOn4CLB0FmWsdr7EhIr7OHcDeM_-hZKOgA HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:22 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 2827 Date: Fri, 19 Apr 2024 05:32:22 GMT Expires: Fri, 19 Apr 2024 07:32:22 GMT Cache-Control: public, max-age=7200 ETag: "1674158540" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:22 UTC	609	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 06 06 12 11 11 13 12 12 12 10 15 12 16 12 16 12 12 15 15 16 18 1a 18 18 13 13 13 1a 1d 16 1b 16 15 18 1b 22 1b 15 16 20 17 18 17 1e 37 1d 20 25 25 28 2e 28 16 1d 2d 31 2d 26 30 22 27 28 26 01 09 09 09 0d 0c 0d 19 0e 0e 17 26 1f 1d 15 27 26 27 27 26 26 26 32 26 26 28 26 32 32 32 32 26 26 26 26 26 26 26 26 26 26 26 26 32 26 32 26 26 32 32 26 26 26 26 32 32 26 32 26 26 32 26 26 26 26 ff c0 00 11 08 00 5a 00 78 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 00 03 01 00 00 00 00 00 00 00 00 00 00 00 07 04 05 06 02 03 08 01 ff c4 00 4a 10 00 02 01 02 03 04 05 07 06 0a 08 07 00 00 00 00 01 02 03 00 11 04 12 21 05 06 31 41 22 51 61 81 91 07 13 32 42 52 71 a1 08 23 82 c1 d1 e3 14 Data Ascii: JFIF" 7 %%(.(-1-&0"'(&&'&''&&&2&&(&2222&&&&&&&&&&&&2&2&&22&&&&22&2&&2&&&&Zx"J!1A"Qa2BRq#
2024-04-19 05:32:22 UTC	1255	IN	Data Raw: c7 aa 81 cd a1 00 78 99 6b 1b c6 ea cd e9 2a ba 15 14 53 53 0d e4 7a 39 01 31 ed 14 70 38 94 88 35 bd f6 98 d1 47 c9 1f 61 f1 cb d1 e8 3c 36 de b9 54 75 b3 30 03 bc 8f 86 b4 ac f2 9f b6 1e 4c 4c 58 38 f3 59 59 1d d4 7a cc c6 e2 e3 98 55 00 f7 9e ca d5 6c 99 d8 c9 09 7b e6 2c 97 bf 59 b5 fe 35 97 9d 02 ed cc 60 77 09 2c 98 74 6c 2b 30 16 d2 25 cd a9 07 50 11 f9 70 06 b2 dd 2b 37 14 9c a8 ce ee 4e d5 93 01 31 38 8c c8 1d bc dd 98 71 2c 74 ed 02 f6 d4 e8 2f 7d 6d 4f bd 9f 8b 59 14 3a 6a 0a 92 0f d1 34 98 df 0c 32 97 90 49 28 28 70 d7 b0 1c 5b cd 5c 91 f4 b5 d7 b2 b6 1e 4b b6 d0 93 08 09 37 2a 35 17 d7 30 bf f3 05 4d 72 12 6d 8c cb 89 45 1c b1 db 23 33 17 2d d2 63 7b f5 f3 bf 8f d7 55 f8 7c 2b 06 b3 15 ca 0e 80 13 f0 e0 47 bb 85 4c da 58 a5 44 39 0d d5 18 a8 Data Ascii: xkSSz91p85Ga<6Tu0LLX8YYzUl{,Y5`w,tl+0%Pp+7N18q,t/}mOY:j42I((p[\K750MrmE#3-c{U\|+GLXD9
2024-04-19 05:32:22 UTC	963	IN	Data Raw: 10 1e 74 40 6d 76 b1 fa 40 d7 62 6e 24 46 c4 cc fd c0 7d 95 03 61 6d 99 0e 2a 15 32 1c a5 c0 23 b2 c6 b4 83 1c 05 55 2b b2 38 d3 ee 74 e1 37 2e 04 20 e7 90 9b df 8f 3b 11 fc 89 f1 ad 16 ee ec 08 a2 9d 1e 3f 38 5d 56 42 a0 b1 22 e6 17 5e 1e e3 54 2d b6 95 78 9a d0 6e e6 30 49 2a db 9a c9 c3 f5 4d cf 95 61 2a 92 6c dd f1 48 d4 62 c3 88 d8 02 d9 da ca 4d bd 15 27 52 3b 8d 75 bb 24 77 56 20 73 03 fd f6 8a 90 d3 c8 01 e0 c9 62 4d ef 70 35 b9 b9 35 94 c7 62 cc 92 33 1e 67 c0 72 ab 32 f5 0a 11 fa f9 26 8e 2b 7f 62 cf 17 b5 4a 86 75 09 65 4b eb ae a6 48 c0 d3 bc f8 55 57 e5 6c bd 51 7e c8 a8 98 d9 32 c1 31 fc c5 f8 cd 1d 65 ff 00 0e 1d 75 14 e4 f2 3d 9a 2a 84 b4 54 99 b1 3b dd 37 f5 7f b2 2b 4d ba 7b 65 a7 59 33 9e 90 60 74 1a 01 61 6f 8d e9 56 b8 9b d6 b3 77 b6 Data Ascii: t@mv@bn$F}am2#U+8t7. ;?8]VB"^T-xn0IMalHbM'R;u$wV sbMp55b3gr2&+bJueKHUWlQ~21eu=T;7+M{eY3`taoVw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49947	64.233.176.119	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:22 UTC	699	OUT	GET /vi_webp/zmUPHj3AvZc/default.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:22 UTC	613	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2326 Date: Fri, 19 Apr 2024 05:32:22 GMT Expires: Fri, 19 Apr 2024 07:32:22 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:22 UTC	642	IN	Data Raw: 52 49 46 46 0e 09 00 00 57 45 42 50 56 50 38 20 02 09 00 00 b0 2a 00 9d 01 2a 78 00 5a 00 3e 39 1a 8a 44 22 21 a1 12 0a ad e4 20 03 84 b2 80 4a d7 aa 13 e1 b9 7a af ab ca db 73 d5 76 dc ff 31 1f b1 de ad 5e 84 7a 1c bd 59 bf 62 bd 80 3f 59 bd 36 bf 66 7e 0c 3f b6 7f d0 fd b0 f8 00 fd d1 d5 81 f0 d7 60 9f d8 ff 15 7c d5 fc 47 e5 5f bf 7e 55 71 ae 88 d7 c9 be f4 fe 07 f2 6b f3 1b e2 5e f7 f8 01 7e 25 fc 97 fc 5f e4 6f 9e 4e cf 1b 11 e8 1d ec 97 d5 7f d5 71 8b f5 cb d1 77 f4 7f f2 7e 96 7f 93 ff 01 e4 67 e2 be c0 bf ca 3f aa 7f a5 fb 72 f8 e5 ff 9b fc bf a0 0f a2 7f f1 7f 7d f8 0a fe 6d fd 5f fe 37 61 bf 45 2f da f6 14 3e da 7d 01 a8 96 97 1e 60 5e 99 41 91 7c 7d 91 ad e0 74 c9 d9 2c 65 00 29 14 cd de 00 60 f2 05 0d 7e c6 0e d5 02 f2 31 10 5c 57 bb 31 a7 2e Data Ascii: RIFFWEBPVP8 **xZ>9D"! Jzsv1^zYb?Y6f~?`\|G_~Uqk^~%_oNqw~g?r}m_7aE/>}`^A\|}t,e)`~1\W1.
2024-04-19 05:32:22 UTC	1255	IN	Data Raw: 52 f3 a8 48 0e b3 36 77 a1 92 6d 1e 34 65 a6 e4 fd e3 d3 12 10 18 3c cd 20 da f5 85 61 ce 8b d3 d1 ce 50 44 da 7f f7 4f 21 78 ff bf cf fd 2f fd b7 e7 f0 6b 2f 63 16 83 e0 fb f8 2d 22 aa c8 60 20 13 05 c9 7a 1f 1f df e7 07 27 2f 35 b9 7d 3f ba d2 af 86 5f 17 8d 96 6f a9 76 0a 67 3e 3f 80 d9 65 f3 72 64 2e 5e bb e9 be 6a 8b f4 4d e2 d2 88 6e 8a 0f b3 a0 bc 0f af 26 8b be f1 b9 a3 b7 57 6d ce 87 80 99 fd 49 80 0e 57 a1 38 fe 5d 4b 5f 6b 05 2f b0 ee f6 b6 8b c0 19 8c 0a 37 63 7d b1 c3 f1 63 bc 10 36 f3 12 ed 14 03 b8 c9 a1 1c c5 3f cd 9a b3 15 56 96 e0 de 7f d2 05 84 2c cd 5f ae 9f 07 0d 8b 9c be eb df 03 85 cc 62 89 57 29 d0 2c 86 0a fa 5b 2f b0 64 e3 bb e9 e6 9c 02 00 61 a1 cb b4 b4 be 70 f8 79 be 1d 4e 8b e8 23 d8 be 8f 77 26 10 66 0a c5 1c b7 44 5c 7c 7a Data Ascii: RH6wm4e< aPDO!x/k/c-"` z'/5}?_ovg>?erd.^jMn&WmIW8]K_k/7c}c6?V,_bW),[/dapyN#w&fD\\|z
2024-04-19 05:32:22 UTC	429	IN	Data Raw: fe f4 81 69 05 8f 46 63 c9 75 fc 18 af 89 84 a6 bb 1d df f2 ab 61 cd 4c 21 20 f4 a0 e0 ce f2 bd f1 a8 52 84 71 3e 84 34 88 27 33 e1 dd ab 99 66 72 66 ae 97 e5 02 4d 74 5d 2e a0 ea b2 7e c2 f3 89 89 e5 04 08 eb c7 df b7 a7 6f 08 45 a5 2d cd 1d 91 33 78 5a 4f 05 23 63 4f 62 cc ad c3 33 35 5f 8c 4e 4e fb 05 8a cc c0 85 7c 30 5d 50 3c 40 0b ac dc c9 30 18 2a 45 0e 7f 34 56 5a b3 b3 02 d9 f0 f4 a3 37 a9 d3 1c ef 88 de d4 6d 8a 28 fc c2 58 c6 c9 f8 59 a1 90 69 22 fe d0 a3 07 84 f6 c6 48 22 7f 9f f2 5f c5 71 0d 56 20 18 c7 a7 da c0 d6 cc 4e 67 57 d4 c0 9f ff 80 06 d3 fb 88 d0 84 40 c0 4e 87 87 c7 53 5f 8e 9c 7a a0 63 03 fb 36 61 94 9b c7 b0 71 8a b0 db 83 13 43 3f b5 64 af 94 ca ab 9b 3f ce c7 8d 01 80 b9 ca d0 f5 70 90 54 06 a0 d2 f7 c1 28 bd b5 41 53 57 ee 40 Data Ascii: iFcuaL! Rq>4'3frfMt].~oE-3xZO#cOb35_NN\|0]P<@0*E4VZ7m(XYi"H"_qV NgW@NS_zc6aqC?d?pT(ASW@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49946	64.233.176.99	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:22 UTC	662	OUT	GET /js/th/rNOiIBWn_DQS_hHEFtHtv97eBjsLLf3CcRgHQ0Jgy0I.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:22 UTC	799	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 52717 Date: Fri, 19 Apr 2024 05:32:22 GMT Expires: Sat, 19 Apr 2025 05:32:22 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 04 Apr 2024 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:22 UTC	456	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2024-04-19 05:32:22 UTC	1255	IN	Data Raw: 29 75 3d 77 26 26 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 3f 44 3a 34 34 3b 65 6c 73 65 20 69 66 28 75 3d 3d 44 29 61 3d 44 2c 6d 3d 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 51 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 65 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 65 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 65 7d 29 2c 75 3d 49 3b 65 6c 73 65 20 69 66 28 34 31 3d 3d 75 29 75 3d 52 2e 63 6f 6e 73 6f 6c 65 3f 57 3a 49 3b 65 6c 73 65 20 69 66 28 33 39 3d 3d 75 29 77 3d 52 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6d 3d 46 2c 75 3d 72 3b 65 6c 73 65 20 69 66 28 34 34 3d 3d 75 29 72 65 74 75 72 6e 20 6d 7d 7d 63 61 74 63 68 28 53 29 7b 69 66 28 38 36 3d 3d 61 29 74 68 72 6f 77 20 53 3b 61 3d 3d 44 26 26 28 4a 3d 53 2c 75 3d 35 38 29 7d 7d 2c 65 3d Data Ascii: )u=w&&w.createPolicy?D:44;else if(u==D)a=D,m=w.createPolicy(Q,{createHTML:e,createScript:e,createScriptURL:e}),u=I;else if(41==u)u=R.console?W:I;else if(39==u)w=R.trustedTypes,m=F,u=r;else if(44==u)return m}}catch(S){if(86==a)throw S;a==D&&(J=S,u=58)}},e=
2024-04-19 05:32:22 UTC	1255	IN	Data Raw: 70 61 26 26 77 2e 63 61 70 74 75 72 65 3d 3d 49 26 26 28 53 3d 77 2e 4e 47 7c 7c 77 2e 73 72 63 2c 4a 3d 77 2e 6c 69 73 74 65 6e 65 72 2c 77 2e 51 43 26 26 6e 28 6e 75 6c 6c 2c 32 32 2c 77 2c 44 2e 69 29 2c 75 3d 66 61 6c 73 65 21 3d 3d 4a 2e 63 61 6c 6c 28 53 2c 61 29 26 26 75 29 3b 46 3d 75 26 26 21 61 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 7d 65 6c 73 65 20 46 3d 74 72 75 65 3b 6d 3d 34 34 7d 65 6c 73 65 20 69 66 28 34 39 3d 3d 6d 29 75 2b 2b 2c 6d 3d 32 39 3b 65 6c 73 65 20 69 66 28 31 31 3d 3d 6d 29 75 3d 30 2c 6d 3d 35 35 3b 65 6c 73 65 20 69 66 28 33 39 3d 3d 6d 29 6d 3d 36 38 3b 65 6c 73 65 20 69 66 28 34 34 3d 3d 6d 29 6d 3d 33 3d 3d 28 57 3e 3e 32 26 31 31 29 3f 33 35 3a 35 38 3b 65 6c 73 65 7b 69 66 28 35 38 3d 3d 6d 29 72 65 74 75 Data Ascii: pa&&w.capture==I&&(S=w.NG\|\|w.src,J=w.listener,w.QC&&n(null,22,w,D.i),u=false!==J.call(S,a)&&u);F=u&&!a.defaultPrevented}else F=true;m=44}else if(49==m)u++,m=29;else if(11==m)u=0,m=55;else if(39==m)m=68;else if(44==m)m=3==(W>>2&11)?35:58;else{if(58==m)retu
2024-04-19 05:32:22 UTC	1255	IN	Data Raw: 2c 78 33 3d 66 75 6e 63 74 69 6f 6e 28 57 2c 72 2c 61 2c 49 2c 44 2c 52 2c 77 2c 53 2c 75 2c 62 2c 4a 2c 65 29 7b 66 6f 72 28 4a 3d 31 3b 37 39 21 3d 4a 3b 29 69 66 28 34 32 3d 3d 4a 29 4a 3d 53 35 3f 31 37 3a 38 33 3b 65 6c 73 65 20 69 66 28 36 38 3d 3d 4a 29 65 3d 30 3d 3d 3d 74 68 69 73 2e 6e 3f 30 3a 4d 61 74 68 2e 73 71 72 74 28 74 68 69 73 2e 6e 61 2f 74 68 69 73 2e 6e 29 2c 4a 3d 31 39 3b 65 6c 73 65 20 69 66 28 38 33 3d 3d 4a 29 62 3d 7b 7d 2c 53 35 3d 28 62 2e 61 74 6f 6d 69 63 3d 66 61 6c 73 65 2c 62 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 49 2c 62 2e 64 72 6f 70 65 66 66 65 63 74 3d 49 2c 62 2e 68 61 73 70 6f 70 75 70 3d 66 61 6c 73 65 2c 62 2e 6c 69 76 65 3d 22 6f 66 66 22 2c 62 2e 6d 75 6c 74 69 6c 69 6e 65 3d 66 61 6c 73 65 2c 62 2e 6d 75 Data Ascii: ,x3=function(W,r,a,I,D,R,w,S,u,b,J,e){for(J=1;79!=J;)if(42==J)J=S5?17:83;else if(68==J)e=0===this.n?0:Math.sqrt(this.na/this.n),J=19;else if(83==J)b={},S5=(b.atomic=false,b.autocomplete=I,b.dropeffect=I,b.haspopup=false,b.live="off",b.multiline=false,b.mu
2024-04-19 05:32:22 UTC	1255	IN	Data Raw: 2e 5a 2c 44 2e 4c 2c 44 2e 6c 2c 44 2e 49 29 2c 44 2e 49 3d 57 2c 44 2e 5a 3d 57 2c 44 2e 4c 3d 57 2c 44 2e 6c 3d 57 2c 53 3c 77 7c 7c 30 3e 3d 44 2e 5a 48 2d 2d 7c 7c 28 53 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 53 29 2c 44 2e 6f 4a 2e 70 75 73 68 28 32 35 34 3e 3d 53 3f 53 3a 32 35 34 29 29 7d 66 69 6e 61 6c 6c 79 7b 44 2e 56 43 3d 57 7d 4a 3d 52 7d 62 3d 37 7d 65 6c 73 65 20 38 34 3d 3d 62 3f 62 3d 44 20 69 6e 20 49 2e 48 26 26 58 28 49 2e 48 5b 44 5d 2c 30 2c 32 34 2c 61 29 3f 37 35 3a 38 32 3a 34 32 3d 3d 62 3f 62 3d 34 39 3a 37 39 3d 3d 62 3f 28 64 65 6c 65 74 65 20 49 2e 48 5b 44 5d 2c 49 2e 55 38 2d 2d 2c 62 3d 38 32 29 3a 34 39 3d 3d 62 3f 62 3d 28 72 26 34 32 29 3d 3d 72 3f 39 36 3a 39 32 3a 37 35 3d 3d 62 3f 28 6d 53 28 31 38 2c 61 2c 57 29 2c 62 Data Ascii: .Z,D.L,D.l,D.I),D.I=W,D.Z=W,D.L=W,D.l=W,S<w\|\|0>=D.ZH--\|\|(S=Math.floor(S),D.oJ.push(254>=S?S:254))}finally{D.VC=W}J=R}b=7}else 84==b?b=D in I.H&&X(I.H[D],0,24,a)?75:82:42==b?b=49:79==b?(delete I.H[D],I.U8--,b=82):49==b?b=(r&42)==r?96:92:75==b?(mS(18,a,W),b
2024-04-19 05:32:22 UTC	1255	IN	Data Raw: 2e 47 3d 6e 75 6c 6c 2c 75 3d 35 30 3b 65 6c 73 65 20 69 66 28 34 31 3d 3d 75 29 75 3d 44 3f 33 38 3a 33 32 3b 65 6c 73 65 20 69 66 28 35 30 3d 3d 75 29 75 3d 72 3f 32 38 3a 36 35 3b 65 6c 73 65 20 69 66 28 33 38 3d 3d 75 29 74 68 69 73 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 3d 44 2c 75 3d 35 34 3b 65 6c 73 65 20 69 66 28 35 34 3d 3d 75 29 75 3d 49 3f 31 32 3a 39 3b 65 6c 73 65 20 69 66 28 39 3d 3d 75 29 74 68 69 73 2e 6f 66 66 73 65 74 58 3d 72 2e 6f 66 66 73 65 74 58 2c 74 68 69 73 2e 6f 66 66 73 65 74 59 3d 72 2e 6f 66 66 73 65 74 59 2c 74 68 69 73 2e 63 6c 69 65 6e 74 58 3d 76 6f 69 64 20 30 21 3d 3d 72 2e 63 6c 69 65 6e 74 58 3f 72 2e 63 6c 69 65 6e 74 58 3a 72 2e 70 61 67 65 58 2c 74 68 69 73 2e 63 6c 69 65 6e 74 59 3d 76 6f 69 64 20 30 21 3d 3d Data Ascii: .G=null,u=50;else if(41==u)u=D?38:32;else if(50==u)u=r?28:65;else if(38==u)this.relatedTarget=D,u=54;else if(54==u)u=I?12:9;else if(9==u)this.offsetX=r.offsetX,this.offsetY=r.offsetY,this.clientX=void 0!==r.clientX?r.clientX:r.pageX,this.clientY=void 0!==
2024-04-19 05:32:22 UTC	1255	IN	Data Raw: 58 3a 49 2e 70 61 67 65 58 2c 74 68 69 73 2e 63 6c 69 65 6e 74 59 3d 76 6f 69 64 20 30 21 3d 3d 49 2e 63 6c 69 65 6e 74 59 3f 49 2e 63 6c 69 65 6e 74 59 3a 49 2e 70 61 67 65 59 2c 74 68 69 73 2e 73 63 72 65 65 6e 58 3d 49 2e 73 63 72 65 65 6e 58 7c 7c 30 2c 74 68 69 73 2e 73 63 72 65 65 6e 59 3d 49 2e 73 63 72 65 65 6e 59 7c 7c 30 2c 75 3d 39 34 29 3a 33 32 3d 3d 75 3f 75 3d 22 6d 6f 75 73 65 6f 76 65 72 22 3d 3d 52 3f 32 33 3a 33 35 3a 36 33 3d 3d 75 3f 75 3d 33 3d 3d 57 2d 31 3e 3e 33 3f 38 38 3a 31 37 3a 38 38 3d 3d 75 26 26 28 53 3d 72 2c 75 3d 31 37 29 7d 7d 2c 77 36 3d 66 75 6e 63 74 69 6f 6e 28 57 2c 72 2c 61 2c 49 2c 44 2c 52 2c 77 2c 53 2c 75 2c 62 29 7b 66 6f 72 28 75 3d 32 33 3b 33 38 21 3d 75 3b 29 69 66 28 32 3d 3d 75 29 75 3d 37 3c 3d 72 2d Data Ascii: X:I.pageX,this.clientY=void 0!==I.clientY?I.clientY:I.pageY,this.screenX=I.screenX\|\|0,this.screenY=I.screenY\|\|0,u=94):32==u?u="mouseover"==R?23:35:63==u?u=3==W-1>>3?88:17:88==u&&(S=r,u=17)}},w6=function(W,r,a,I,D,R,w,S,u,b){for(u=23;38!=u;)if(2==u)u=7<=r-
2024-04-19 05:32:22 UTC	1255	IN	Data Raw: 6c 73 65 20 69 66 28 35 38 3d 3d 6d 29 6d 3d 44 3f 37 34 3a 39 34 3b 65 6c 73 65 20 69 66 28 33 3d 3d 6d 29 43 6d 2e 63 61 6c 6c 28 74 68 69 73 2c 61 29 2c 6d 3d 32 39 3b 65 6c 73 65 20 69 66 28 31 37 3d 3d 6d 29 6d 3d 35 38 3b 65 6c 73 65 20 69 66 28 39 36 3d 3d 6d 29 74 68 69 73 2e 44 3d 75 2c 6d 3d 38 33 3b 65 6c 73 65 20 69 66 28 32 39 3d 3d 6d 29 6d 3d 28 75 3d 52 29 3f 39 36 3a 37 33 3b 65 6c 73 65 20 69 66 28 35 31 3d 3d 6d 29 44 3d 28 62 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 44 2e 70 72 6f 74 6f 74 79 70 65 29 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 6d 3d 31 37 3b 65 6c 73 65 20 69 66 28 39 34 3d 3d 6d 29 75 3d 77 3f 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 77 2e 76 67 3f 77 2e 76 67 28 Data Ascii: lse if(58==m)m=D?74:94;else if(3==m)Cm.call(this,a),m=29;else if(17==m)m=58;else if(96==m)this.D=u,m=83;else if(29==m)m=(u=R)?96:73;else if(51==m)D=(b=Object.getPrototypeOf(D.prototype))&&b.constructor,m=17;else if(94==m)u=w?"function"===typeof w.vg?w.vg(
2024-04-19 05:32:22 UTC	1255	IN	Data Raw: 64 34 2d 28 52 3f 32 35 35 3a 61 3f 35 3a 32 29 3f 6d 3d 66 61 6c 73 65 3a 28 49 2e 48 58 3d 44 2c 75 3d 68 28 49 2c 61 3f 33 37 3a 32 39 32 29 2c 41 28 32 39 32 2c 49 2c 49 2e 56 29 2c 49 2e 76 2e 70 75 73 68 28 5b 58 38 2c 75 2c 61 3f 44 2b 31 3a 44 2c 49 2e 5a 2c 49 2e 4c 2c 49 2e 6c 2c 49 2e 49 5d 29 2c 49 2e 41 3d 6c 52 2c 6d 3d 74 72 75 65 29 2c 46 3d 35 37 7d 65 6c 73 65 20 69 66 28 31 3d 3d 46 29 46 3d 35 39 3b 65 6c 73 65 7b 69 66 28 33 39 3d 3d 46 29 72 65 74 75 72 6e 20 6d 3b 39 32 3d 3d 46 3f 28 6d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 42 74 29 26 26 72 5b 42 74 5d 7c 7c 28 72 5b 42 74 5d 3d 2b 2b 64 36 29 2c 46 3d 34 34 29 3a 39 37 3d 3d 46 26 26 28 46 3d 33 39 Data Ascii: d4-(R?255:a?5:2)?m=false:(I.HX=D,u=h(I,a?37:292),A(292,I,I.V),I.v.push([X8,u,a?D+1:D,I.Z,I.L,I.l,I.I]),I.A=lR,m=true),F=57}else if(1==F)F=59;else{if(39==F)return m;92==F?(m=Object.prototype.hasOwnProperty.call(r,Bt)&&r[Bt]\|\|(r[Bt]=++d6),F=44):97==F&&(F=39
2024-04-19 05:32:22 UTC	1255	IN	Data Raw: 52 29 2c 6d 3d 33 29 3a 33 3d 3d 6d 26 26 28 6d 3d 4a 3f 37 37 3a 38 29 7d 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 57 2c 72 2c 61 2c 49 2c 44 2c 52 29 7b 66 6f 72 28 44 3d 38 39 3b 32 34 21 3d 44 3b 29 69 66 28 39 32 3d 3d 44 29 44 3d 32 3d 3d 28 57 3c 3c 31 26 31 35 29 3f 38 38 3a 31 32 3b 65 6c 73 65 20 69 66 28 31 30 3d 3d 44 29 61 2e 4b 3d 72 2c 61 2e 46 28 29 2c 44 3d 39 38 3b 65 6c 73 65 20 69 66 28 35 3d 3d 44 29 54 78 2e 63 61 6c 6c 28 74 68 69 73 29 2c 72 7c 7c 69 52 7c 7c 28 69 52 3d 6e 65 77 20 76 74 29 2c 74 68 69 73 2e 57 3d 74 68 69 73 2e 67 34 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6a 4d 3d 74 68 69 73 2e 45 38 3d 66 61 6c 73 65 2c 74 68 69 73 2e 69 62 3d 74 68 69 73 2e 4f 76 3d 74 68 69 73 2e 58 38 3d 6e 75 6c 6c 2c 74 68 69 73 2e 4f 38 3d 76 6f Data Ascii: R),m=3):3==m&&(m=J?77:8)}},g=function(W,r,a,I,D,R){for(D=89;24!=D;)if(92==D)D=2==(W<<1&15)?88:12;else if(10==D)a.K=r,a.F(),D=98;else if(5==D)Tx.call(this),r\|\|iR\|\|(iR=new vt),this.W=this.g4=null,this.jM=this.E8=false,this.ib=this.Ov=this.X8=null,this.O8=vo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49948	173.194.219.155	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:22 UTC	670	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:22 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Fri, 19 Apr 2024 05:32:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:22 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 72 41 68 66 45 49 41 68 62 7a 75 36 56 68 78 62 34 4e 6e 64 35 45 6e 5a 55 77 70 51 52 66 37 5f 43 63 71 56 6f 5a 59 46 64 55 73 55 50 77 5f 62 47 31 6c 68 4f 75 4b 48 61 39 69 44 59 70 73 42 5a 50 5a 35 55 59 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKrAhfEIAhbzu6Vhxb4Nnd5EnZUwpQRf7_CcqVoZYFdUsUPw_bG1lhOuKHa9iDYpsBZPZ5UY","type":4}
2024-04-19 05:32:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49951	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:22 UTC	878	OUT	GET /generate_204?D0IFaA HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/s09YWoGtftM?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:22 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 05:32:22 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49953	142.250.105.102	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:22 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:22 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Fri, 19 Apr 2024 05:32:22 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49952	173.194.219.155	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:22 UTC	661	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:22 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Fri, 19 Apr 2024 05:32:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49950	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:22 UTC	878	OUT	GET /generate_204?XwLgIQ HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:22 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 05:32:22 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49954	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:22 UTC	878	OUT	GET /generate_204?ZY1s1g HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/yiQ-C7lGw0o?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:22 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 05:32:22 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49955	173.194.219.155	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:22 UTC	670	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:22 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Fri, 19 Apr 2024 05:32:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:22 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 6f 75 69 71 6a 39 48 52 58 76 68 43 47 30 7a 38 47 5f 5a 4c 46 70 69 5a 38 5a 42 56 58 69 69 59 4d 59 68 37 6b 79 54 44 72 5f 50 36 48 59 75 54 34 30 51 6b 68 68 68 73 77 4b 34 75 50 71 75 2d 67 44 73 44 45 64 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKouiqj9HRXvhCG0z8G_ZLFpiZ8ZBVXiiYMYh7kyTDr_P6HYuT40QkhhhswK4uPqu-gDsDEd","type":4}
2024-04-19 05:32:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49957	142.250.105.102	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:22 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:22 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Fri, 19 Apr 2024 05:32:22 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49958	142.250.105.102	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:22 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:22 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Fri, 19 Apr 2024 05:32:22 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49961	64.233.176.119	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:22 UTC	699	OUT	GET /vi_webp/qP5c-ZOMct4/default.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:23 UTC	622	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2824 Date: Fri, 19 Apr 2024 05:32:23 GMT Expires: Fri, 19 Apr 2024 07:32:23 GMT Cache-Control: public, max-age=7200 ETag: "1675362000" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:23 UTC	633	IN	Data Raw: 52 49 46 46 00 0b 00 00 57 45 42 50 56 50 38 20 f4 0a 00 00 90 30 00 9d 01 2a 78 00 5a 00 3e 41 1c 8b 44 22 a1 a1 15 59 86 1c 28 04 04 b4 00 69 70 32 25 3b dc 7f 25 7f 26 7e 65 6c cf d8 ff 00 73 0b 98 3e c7 ff 39 f7 1d f0 03 fb d7 b1 5f d0 9e c0 1f ac 3d 29 bf 6d 7d 40 7e b9 7e cb fb cc ff 8d fd 49 f7 55 e8 01 fe 03 fa af a5 57 b1 6f a0 4f ec af a6 a7 ed ef c2 c7 ee 4f a4 8e 0c 2f 16 31 9b d0 1f bd e5 4b 71 7f 62 3f 79 e6 cf 7f bf 1f f5 02 79 3f 28 f7 f1 3f bd f4 83 eb 37 fb 0f 45 7f 1b ef 14 8f 2d f6 05 fe 63 fc ff fd 4f e6 37 fb 4f 93 9f fa 3f d2 7a 1b fa a7 ff 0f b8 57 ea ff fd 1f 5d 2f 62 ff ba 1e c7 7f ae 67 c4 7c a7 e6 eb 20 bd 2f 9a 8f c8 e8 2f ce 9b 73 2b a5 5e af fd 46 dc 13 ae 64 f9 0d b2 e9 4a b8 2f 65 7b 28 e3 cf 12 f0 72 91 bc a5 bb f4 09 6f Data Ascii: RIFFWEBPVP8 0*xZ>AD"Y(ip2%;%&~els>9_=)m}@~~IUWoOO/1Kqb?yy?(?7E-cO7O?zW]/bg\| //s+^FdJ/e{(ro
2024-04-19 05:32:23 UTC	1255	IN	Data Raw: e9 15 bf 98 ab f0 9f b2 53 95 d7 c0 db 46 aa a5 cf 66 1d fd 4f d8 9f 6f 7b 77 ad 4c 7f cd b2 95 58 71 db df db 4f 0d 02 a5 54 3c 7d 47 0f ba 1b 4d 11 28 7d 28 36 3b 4e 17 d6 fd ba be 24 2a 6d e7 d0 96 13 f3 52 42 e0 b5 69 29 59 9e 3c 06 06 16 d7 d8 f6 76 56 79 37 5e 46 c7 44 f1 11 67 00 4c 2b 44 85 af f0 d1 79 4b f7 94 5f 5c fc 91 73 62 e0 e7 96 87 e0 7f f2 65 36 ef 59 ac 9a 3b 67 58 19 be 2b 8c 68 89 26 c5 84 bc ea 84 f4 0d a6 f0 4d 75 39 b7 4f ff ab cc f3 2a 8f e3 c5 97 04 e6 66 22 19 9b 86 a3 e1 cf 1a 22 7b 8b b0 be 78 58 09 0d ad 06 a7 b0 ec c5 80 78 cf a2 ee 0d c6 93 d3 f3 ef 6a 11 36 ef 3c 83 49 6b 6f 61 f8 47 3a ff ea 6e f0 f5 e0 d0 61 83 32 66 0c 23 6f 83 c0 da 65 9a c0 b0 fe 6e cf bf 8b 7a c8 92 4a fd f4 59 5c 1f 23 56 78 9b b8 ce b0 19 cd d4 35 Data Ascii: SFfOo{wLXqOT<}GM(}(6;N$mRBi)Y<vVy7^FDgL+DyK_\sbe6Y;gX+h&Mu9Of""{xXxj6<IkoaG:na2f#oenzJY\#Vx5
2024-04-19 05:32:23 UTC	936	IN	Data Raw: 0e 30 2a e5 2a c6 da 62 91 11 3f b2 41 77 ad 65 a3 7d 55 22 4c 95 a8 b0 29 4f 59 52 a5 a9 53 51 59 b5 8c 27 ba 41 82 fa b1 df db b3 dc 95 1c 7f c6 35 7e 54 66 d3 4b d0 d7 c4 62 39 94 9b 7a b5 38 32 ce 3e be 9e 48 4e 01 da d3 c5 8d d5 0e 88 33 6a a9 b2 9f 4d a8 0e 50 25 bd ef 85 f3 c0 e6 31 b7 ff 5e 77 db 22 80 4d 81 f9 62 c5 45 60 4e 9e e6 7f c6 e9 55 b6 4f f0 68 03 4f 0c 84 cd f6 97 a3 f6 36 b1 97 ee 26 1f 2c 0e 91 5f 89 19 cb 39 49 4d ad fe 46 f4 69 38 c6 e7 85 f8 07 44 d2 18 a3 38 23 3b 96 61 ba ec cd 31 2b 4f e8 09 df 86 d6 97 6f 87 0b 96 9a 9d cd b3 27 c1 11 13 d5 13 48 b7 e1 6d a2 eb 5f 4b 08 43 4e 6e 4e 3a 5f 74 4a 84 c0 45 4d 3d 07 aa c7 f0 40 16 96 4b 5f 0f 01 90 70 52 10 e1 4c f9 85 dd ba 78 a0 96 55 79 8b af ff 2b 70 d8 f4 62 a9 cf e4 53 84 ae Data Ascii: 0**b?Awe}U"L)OYRSQY'A5~TfKb9z82>HN3jMP%1^w"MbE`NUOhO6&,_9IMFi8D8#;a1+Oo'Hm_KCNnN:_tJEM=@K_pRLxUy+pbS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49963	142.250.105.102	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:23 UTC	784	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 586 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:23 UTC	586	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 33 35 30 34 37 34 31 31 32 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 5c 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 62 67 2f 66 69 6c 5c 22 2c 6e 75 6c 6c 2c 5b 5c 22 72 6b 5c 22 2c 5c 22 6b 65 5c 22 5d 2c 5b 5b 5b 5b 5c 22 64 7a 53 39 30 65 5c 22 5d 2c 5b 5c 22 61 47 49 66 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 31 31 32 2e 36 30 30 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,null,[1,0,0,0,0]]],1828,[["1713504741121",null,null,null,null,null,null,"[[[\"/client_streamz/bg/fil\",null,[\"rk\",\"ke\"],[[[[\"dzS90e\"],[\"aGIf\"]],[null,112.600
2024-04-19 05:32:23 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=HbGUT3LdF1y7qAS3-gS-CzPmPZNqlNMjFEQB5GvXE1LXQ_gerZu-_vS7MeSOtKGJQLDUBQNAD4gniBgQM7mRQfC2hRc9tO5dAFJe8TcJrUkM7wiONFWdE9rf7JvpRzFWZKNL5z3KhSlmmoVbBh_9gn-TBH9ttJR-KwZXp4L6Wlo; expires=Sat, 19-Oct-2024 05:32:23 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 19 Apr 2024 05:32:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 19 Apr 2024 05:32:23 GMT Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:23 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-19 05:32:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49964	173.194.219.155	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:23 UTC	661	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:23 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Fri, 19 Apr 2024 05:32:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49967	142.250.105.102	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:23 UTC	784	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 584 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:23 UTC	584	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 33 35 30 34 37 34 31 35 37 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 5c 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 62 67 2f 66 69 6c 5c 22 2c 6e 75 6c 6c 2c 5b 5c 22 72 6b 5c 22 2c 5c 22 6b 65 5c 22 5d 2c 5b 5b 5b 5b 5c 22 64 7a 53 39 30 65 5c 22 5d 2c 5b 5c 22 5f 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 34 39 2e 32 39 39 39 39 39 39 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,null,[1,0,0,0,0]]],1828,[["1713504741578",null,null,null,null,null,null,"[[[\"/client_streamz/bg/fil\",null,[\"rk\",\"ke\"],[[[[\"dzS90e\"],[\"_\"]],[null,49.2999999
2024-04-19 05:32:23 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=oLqew3l6wV-19U_iQfM7H0VIen_51cLSYex3VXiruC_flIvvvW9eENxrMHlXEOjLihXiBHredAFij6CcifArBbdGcoZOevByEvgKjD4OQOS5106qd9HrBOdhtIDwr3vV4HJ4nOFuTb3uwT0vtSkW0FeCgk_RWKV-bpAVq6R5fv8; expires=Sat, 19-Oct-2024 05:32:23 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 19 Apr 2024 05:32:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 19 Apr 2024 05:32:23 GMT Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:23 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-19 05:32:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49968	142.250.105.102	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:23 UTC	784	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 542 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:23 UTC	542	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 33 35 30 34 37 34 31 35 38 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1713504741584",null,null,null
2024-04-19 05:32:23 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=JkyQnUrYhhi1J_KvhBtN6WrUgrFAFmobRgsTukfk4EX0PiXmK72IGpKl8qENHDHK0aibAthpYjZ9AlUFssR4LHOGLAK5oiC7zLU5UlmgOFKPuarYF7qRplWBl4newUdoorhVr1fQgFTY0fuh0jmdttwwgbL-gkZ6LVDwoQAMs3M; expires=Sat, 19-Oct-2024 05:32:23 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 19 Apr 2024 05:32:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 19 Apr 2024 05:32:23 GMT Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:23 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-19 05:32:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49970	173.194.219.155	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:23 UTC	670	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:23 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Fri, 19 Apr 2024 05:32:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:23 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 72 48 31 5f 5a 55 6e 58 2d 70 75 37 76 41 32 73 6e 78 44 64 59 46 76 70 30 44 30 51 36 56 37 48 72 4a 38 51 31 48 58 50 33 68 33 77 6a 36 76 48 65 77 77 62 59 4f 38 32 69 44 54 6a 30 58 70 73 76 42 73 65 56 2d 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKrH1_ZUnX-pu7vA2snxDdYFvp0D0Q6V7HrJ8Q1HXP3h3wj6vHewwbYO82iDTj0XpsvBseV-","type":4}
2024-04-19 05:32:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49971	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:23 UTC	1465	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 9417 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713504739523&flash=0&frm=2&u_tz=120&u_his=6&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C260%2C147&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713504742142 Content-Type: application/json X-Goog-Event-Time: 1713504742142 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240416.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtRZTVFTTRxTnJrayjjg4ixBjIKCgJVUxIEGgAgaQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/s09YWoGtftM?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:23 UTC	9417	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 31 36 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4f 4f 44 69 4c 45 47 45 49 4f 5f 73 41 55 51 7a 4e 2d 75 42 52 43 57 33 4c 41 46 45 50 79 46 73 41 55 51 37 38 32 77 42 52 44 48 5f 62 63 69 45 4b 48 44 73 41 55 51 79 66 65 76 42 52 43 49 34 36 38 46 45 4c 66 76 72 77 55 51 73 39 4f 77 42 52 43 61 38 4b 38 46 45 49 4b 69 5f 78 49 51 33 6f 6a 5f 45 68 44 5a 33 62 41 46 45 4c 66 71 5f 68 49 51 31 74 61 77 42 52 44 30 71 37 41 46 45 50 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240416.01.00","configInfo":{"appInstallData":"COODiLEGEIO_sAUQzN-uBRCW3LAFEPyFsAUQ782wBRDH_bciEKHDsAUQyfevBRCI468FELfvrwUQs9OwBRCa8K8FEIKi_xIQ3oj_EhDZ3bAFELfq_hIQ1tawBRD0q7AFEP
2024-04-19 05:32:23 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 19 Apr 2024 05:32:23 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:23 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-19 05:32:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49973	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:23 UTC	1465	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 9466 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713504739463&flash=0&frm=2&u_tz=120&u_his=6&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C260%2C147&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713504742271 Content-Type: application/json X-Goog-Event-Time: 1713504742271 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240416.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtRZTVFTTRxTnJrayjjg4ixBjIKCgJVUxIEGgAgaQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:23 UTC	9466	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 31 36 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4f 4f 44 69 4c 45 47 45 4d 62 39 74 79 49 51 6c 70 57 77 42 52 43 49 68 37 41 46 45 4a 58 50 73 41 55 51 38 36 47 77 42 52 44 64 36 50 34 53 45 4b 4b 42 73 41 55 51 37 72 4f 77 42 52 43 38 32 4c 41 46 45 49 4f 5f 73 41 55 51 2d 74 71 77 42 52 44 72 6b 36 34 46 45 4c 50 54 73 41 55 51 78 38 36 77 42 52 44 76 7a 62 41 46 45 4d 7a 66 72 67 55 51 6d 76 43 76 42 52 44 56 69 4c 41 46 45 4c Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240416.01.00","configInfo":{"appInstallData":"COODiLEGEMb9tyIQlpWwBRCIh7AFEJXPsAUQ86GwBRDd6P4SEKKBsAUQ7rOwBRC82LAFEIO_sAUQ-tqwBRDrk64FELPTsAUQx86wBRDvzbAFEMzfrgUQmvCvBRDViLAFEL
2024-04-19 05:32:23 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 19 Apr 2024 05:32:23 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:23 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-19 05:32:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49975	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:23 UTC	878	OUT	GET /generate_204?_OqtvQ HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/zmUPHj3AvZc?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:23 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 05:32:23 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49976	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:23 UTC	878	OUT	GET /generate_204?RU8WWA HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/qP5c-ZOMct4?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:23 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 05:32:23 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49977	173.194.219.155	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:23 UTC	661	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:23 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Fri, 19 Apr 2024 05:32:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49979	173.194.219.155	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:23 UTC	670	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:24 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Fri, 19 Apr 2024 05:32:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:24 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 70 76 2d 33 52 75 64 56 63 39 4c 72 6e 33 39 49 33 64 45 37 68 4d 62 61 73 30 68 76 71 63 63 50 46 31 44 50 79 51 55 68 43 35 2d 54 57 46 77 58 39 44 61 6d 35 59 6f 71 54 66 71 58 65 65 6a 4c 71 50 51 54 54 5f 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKpv-3RudVc9Lrn39I3dE7hMbas0hvqccPF1DPyQUhC5-TWFwX9Dam5YoqTfqXeejLqPQTT_","type":4}
2024-04-19 05:32:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49982	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:24 UTC	1466	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 10003 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713504739909&flash=0&frm=2&u_tz=120&u_his=6&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C260%2C147&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713504743046 Content-Type: application/json X-Goog-Event-Time: 1713504743046 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240416.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtRZTVFTTRxTnJrayjkg4ixBjIKCgJVUxIEGgAgaQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/zmUPHj3AvZc?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:24 UTC	10003	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 31 36 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4f 53 44 69 4c 45 47 45 4f 5f 4e 73 41 55 51 36 73 4f 76 42 52 43 57 6c 62 41 46 45 4c 65 72 73 41 55 51 67 71 4c 5f 45 68 43 44 76 37 41 46 45 4c 66 76 72 77 55 51 33 6f 6a 5f 45 68 44 72 6b 36 34 46 45 4c 2d 66 5f 78 49 51 35 37 71 76 42 52 43 33 36 76 34 53 45 4b 48 44 73 41 55 51 7a 36 69 77 42 52 43 39 74 71 34 46 45 50 61 72 73 41 55 51 38 36 47 77 42 52 44 48 5f 62 63 69 45 50 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240416.01.00","configInfo":{"appInstallData":"COSDiLEGEO_NsAUQ6sOvBRCWlbAFELersAUQgqL_EhCDv7AFELfvrwUQ3oj_EhDrk64FEL-f_xIQ57qvBRC36v4SEKHDsAUQz6iwBRC9tq4FEParsAUQ86GwBRDH_bciEP
2024-04-19 05:32:24 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 19 Apr 2024 05:32:24 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:24 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-19 05:32:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49983	173.194.219.155	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:24 UTC	670	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:24 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Fri, 19 Apr 2024 05:32:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:24 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 6f 41 67 4b 70 51 52 31 67 78 4d 65 51 39 72 50 47 54 33 32 69 64 65 68 42 4a 72 66 39 32 54 38 50 74 6e 63 36 72 66 63 31 70 58 6a 4f 35 67 5a 56 49 6c 78 51 33 52 36 43 4c 43 6c 73 4d 37 54 6c 36 76 6d 68 50 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKoAgKpQR1gxMeQ9rPGT32idehBJrf92T8Ptnc6rfc1pXjO5gZVIlxQ3R6CLClsM7Tl6vmhP","type":4}
2024-04-19 05:32:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49987	173.194.219.119	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:24 UTC	464	OUT	GET /vi_webp/s09YWoGtftM/default.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:24 UTC	633	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2504 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 04:39:36 GMT Expires: Fri, 19 Apr 2024 06:39:36 GMT Cache-Control: public, max-age=7200 Age: 3168 ETag: "1678830233" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:24 UTC	622	IN	Data Raw: 52 49 46 46 c0 09 00 00 57 45 42 50 56 50 38 20 b4 09 00 00 50 27 00 9d 01 2a 78 00 5a 00 3e 6d 1e 9b 4d a4 21 24 24 14 a0 80 0d 89 66 00 cb 66 34 5a 5e ab 7e 03 95 0f 90 24 ba ec 7e 41 f2 5f fe 53 d8 c7 98 07 39 af 30 1f b6 fe af de 88 fd 03 bf 6d fa d7 bd 00 3f 68 fd 38 fd 9b 7f 6a 7f 6e 3d a1 af 17 b1 95 d1 0f bb a4 b8 df 16 0b 78 81 df 3f c6 7d 40 9d a7 68 17 b2 bf 63 ef e2 d4 2e f3 cf 42 3b f7 fe a5 fe 7b d8 0f f9 37 f6 5f fa de a3 df f4 7f 91 fc a3 f6 e9 f5 1f b0 67 eb 6f fd 0f 5a 4f 5e 9f b5 be c6 3f a8 9f ff d3 71 ec 5a 41 2d eb e6 3f a7 f1 1f 4b d5 c0 83 7e d7 65 8f 84 47 81 72 75 3a 8e 62 be e6 21 20 11 58 b9 a7 10 5f cc 8b 32 30 a7 8d ea 57 ce 64 61 3f 33 92 f2 7a 7f f4 15 e1 6b a1 84 0b 33 a4 15 39 ca 67 d9 55 51 1d 05 96 8d 5d ca ba c4 d0 dc Data Ascii: RIFFWEBPVP8 P'*xZ>mM!$$ff4Z^~$~A_S90m?h8jn=x?}@hc.B;{7_goZO^?qZA-?K~eGru:b! X_20Wda?3zk39gUQ]
2024-04-19 05:32:24 UTC	1255	IN	Data Raw: aa 94 e5 97 92 71 55 c1 f3 2f d9 6f db e3 b7 25 fd 30 57 79 aa 68 14 0a 38 0d f9 60 90 d8 0d a9 39 57 a5 22 9b 75 34 59 5f 61 cd dd c9 ac 98 a5 35 54 34 bb 23 9e c4 20 98 c5 1e 59 43 b8 86 3e 46 01 4f 01 0f d3 d0 f1 00 ed 0b 6b 5f 22 90 79 06 a7 b9 ef 65 ed 5d fe 5e ab c7 6c ff 49 0f 08 da 07 b6 26 aa a1 d1 e1 7f 4f cc 69 77 99 51 6c 19 dc 74 91 f7 42 28 f1 12 45 62 f3 58 3d 7a eb e2 3c 3e 97 04 cb b6 c1 7e 85 1d 61 e7 06 e3 b8 ee f6 18 99 94 f9 aa b8 6b 19 56 c9 b5 9f 56 7e 21 19 8c ec b7 35 42 72 38 28 36 34 97 11 c2 c1 9b 38 d4 17 e5 13 ed ff 19 08 44 33 86 35 b7 0a c5 7b 89 65 30 77 b9 9f 8c 5b aa 74 c8 ac 0d 23 e6 70 48 08 38 bb 0e ff e4 d4 62 58 41 72 79 4e 22 47 26 bf 11 8a b1 9b 44 80 69 05 6e 0b 35 f9 af b8 11 54 db 10 0d 4f bb 58 97 2e 4d 6f 0c Data Ascii: qU/o%0Wyh8`9W"u4Y_a5T4# YC>FOk_"ye]^lI&OiwQltB(EbX=z<>~akVV~!5Br8(648D35{e0w[t#pH8bXAryN"G&Din5TOX.Mo
2024-04-19 05:32:24 UTC	627	IN	Data Raw: 47 32 2a e9 89 e3 ff b4 4a db 57 f9 6d fe 4c 1d 3d f3 31 98 6f e7 2f 38 db 08 65 bc 49 02 fc da 7e 2f 3c da 54 5c e6 49 dd 35 1b cd 4c a6 af e5 71 44 3d 77 1f 6d 29 48 85 73 7f e7 c9 78 42 f8 e4 f3 37 51 f8 a9 6f 3e f4 00 ba 64 7e 01 f5 38 66 e6 6e be b9 cd 40 f4 ac 73 a6 1e 0f 1e 94 48 a5 c5 64 81 3e 8f 50 bc 91 01 1d bd b7 0e 31 10 2e 0e d2 47 c2 cd d4 dd e7 dd 16 bc c7 e3 06 2c 30 76 17 00 32 dd 57 44 71 e5 45 17 01 dc 01 a0 62 04 89 f7 c4 e7 56 a4 8b 0c e0 f3 e8 31 55 08 7f c1 d1 f8 bc 03 28 44 16 98 41 64 82 80 9e 8c 39 dd be d9 17 f2 cf 11 c3 c3 ee fc 6e 91 9d 94 c8 71 25 75 ad bf ea 8a c1 6a 20 5a 0b c0 02 3e 35 8c ae 9a fd 19 c9 6b 9f f9 6f e4 64 01 a2 a3 60 6e bb 16 4d 64 40 df e0 a7 53 f4 32 73 be ff 81 d6 28 22 87 d0 fe 68 fc 33 dd bc 43 b1 9f Data Ascii: G2*JWmL=1o/8eI~/<T\I5LqD=wm)HsxB7Qo>d~8fn@sHd>P1.G,0v2WDqEbV1U(DAd9nq%uj Z>5kod`nMd@S2s("h3C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49988	173.194.219.119	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:24 UTC	557	OUT	GET /vi/8hmgK-BHqGc/default.jpg?sqp=-oaymwEkCHgQWvKriqkDGvABAfgB_gmAAtAFigIMCAAQARhlIFsoUDAP&rs=AOn4CLBKgLX8rib9_UCRiNMtON9Lcz84_Q HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:24 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 2515 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 04:39:35 GMT Expires: Fri, 19 Apr 2024 06:39:35 GMT Cache-Control: public, max-age=7200 Age: 3169 ETag: "1704919110" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:24 UTC	598	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 06 06 11 12 11 13 12 13 13 13 15 10 11 18 15 13 10 0f 11 17 17 11 15 15 16 15 15 15 12 18 18 16 16 16 18 22 1b 15 16 20 18 10 18 28 2d 1d 20 25 27 28 2c 28 15 1d 2d 31 2d 28 30 22 28 28 26 01 09 09 09 0d 0b 0d 15 0e 0e 19 26 17 16 21 27 26 26 29 26 26 26 26 26 26 26 26 2e 26 33 32 26 29 2e 26 26 26 26 32 27 2d 2b 32 32 26 26 32 26 2a 26 26 32 26 26 26 26 26 32 2e 26 33 26 26 26 26 ff c0 00 11 08 00 5a 00 78 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 06 05 07 02 03 04 08 01 ff c4 00 4a 10 00 02 01 02 03 03 05 0a 08 0a 0b 00 00 00 00 00 01 02 11 00 03 04 12 21 05 06 31 22 41 51 61 91 13 14 64 71 81 a1 a4 b1 c1 e3 07 08 17 32 33 Data Ascii: JFIF" (- %'(,(-1-(0"((&&!'&&)&&&&&&&&.&32&).&&&&2'-+22&&2&*&&2&&&&&2.&3&&&&Zx"J!1"AQadq23
2024-04-19 05:32:24 UTC	1255	IN	Data Raw: fd 69 83 59 1b da 1a c3 39 dc ac d3 16 d2 a1 c3 66 63 45 eb 79 c0 81 a8 20 c1 20 8d 39 ab b8 52 9e e8 62 e1 6e 21 e1 f4 8a 7a 75 2a 7d 94 cf 86 b9 98 03 c3 52 3b 0c 7b 2b 64 25 69 76 40 df cc 6a 37 6e ed d4 c3 5b cc 44 b9 f9 89 ed 3d 55 25 97 4a ab 37 bb 69 8b 97 df 5e 4d b2 51 47 4c 12 0f 9e ba 6e 90 25 66 e4 df 1c 49 7c c6 e4 4f 05 00 05 03 b3 87 59 a7 0d 95 bd 6a e0 07 9d 78 31 81 a7 4e 9e 3a a9 12 e4 99 d7 28 d5 8f 57 47 f3 d3 4e ab b4 ac b6 11 84 c1 75 6c ba 11 ca 41 3e 48 d3 5e ba 93 d4 da d1 55 a7 6a cb 46 d9 04 02 0c 83 ce 39 eb a4 db e1 4b bb 9f 78 b6 1a d9 3d 0a 7b 54 1f 5d 33 b0 d0 56 98 e7 24 5e 19 ba cd 81 00 f4 cd 40 7c 20 6f 4a 6c fc 19 ba 14 1b d7 08 b7 87 43 c0 b9 04 c9 8f aa 00 24 f8 a3 9e 99 6c 7c d1 e3 35 4e 7c 60 2d bc 60 9b f1 60 df Data Ascii: iY9fcEy 9Rbn!zu*}R;{+d%iv@j7n[D=U%J7i^MQGLn%fI\|OYjx1N:(WGNulA>H^UjF9Kx={T]3V$^@\| oJlC$l\|5N\|`-``
2024-04-19 05:32:24 UTC	662	IN	Data Raw: 2c ee 96 d4 4e e8 19 8c 34 96 03 5e 27 9b 87 49 a6 cd ed b9 dd 95 54 2e 60 02 93 10 c3 e7 19 1c 75 d0 79 e9 cf 86 c9 b5 65 3d b1 6c 25 db a7 30 cc aa 01 2b cc 49 d0 7b 69 e3 04 c9 6c 42 20 00 73 0a 31 b8 6b 6a e3 22 aa 8c ab 30 32 eb d7 a7 35 62 05 4e 09 50 94 69 13 d8 5d ea bc 8a 15 60 01 c2 44 f1 33 eb 35 d2 77 ca f9 04 1c b0 74 e1 d3 4b fd ec c1 43 1e 07 f9 1e 4a c0 0a a0 cb 0f 75 f6 cd db e5 83 46 44 51 c0 6b 24 e9 e6 06 8a d1 b9 ec 96 ec 33 37 17 6e 6e 80 20 79 e6 8a e5 a6 22 89 db 1b 39 7b de e3 01 05 51 1f 89 3a b3 66 f3 20 8f 2d 28 61 d6 48 a6 e6 de cc 03 5a ba 8d 7b e9 43 88 c9 70 c0 cb 91 7e a7 40 07 cb 48 56 f6 82 7d a8 f2 1f dd 4a 3c 0a 89 06 94 ba c3 81 10 67 c6 01 9f 14 1a b4 f6 05 93 6e d1 ce 06 77 86 00 c8 ca 20 c4 eb c7 5a ae 76 86 d6 c1 Data Ascii: ,N4^'IT.`uye=l%0+I{ilB s1kj"025bNPi]`D35wtKCJuFDQk$37nn y"9{Q:f -(aHZ{Cp~@HV}J<gnw Zv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49989	173.194.219.119	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:24 UTC	557	OUT	GET /vi/yiQ-C7lGw0o/default.jpg?sqp=-oaymwEkCHgQWvKriqkDGvABAfgB_gmAAtAFigIMCAAQARhlIFQoUDAP&rs=AOn4CLB0FmWsdr7EhIr7OHcDeM_-hZKOgA HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:24 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 2827 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 04:39:36 GMT Expires: Fri, 19 Apr 2024 06:39:36 GMT Cache-Control: public, max-age=7200 Age: 3168 ETag: "1674158540" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:24 UTC	598	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 06 06 12 11 11 13 12 12 12 10 15 12 16 12 16 12 12 15 15 16 18 1a 18 18 13 13 13 1a 1d 16 1b 16 15 18 1b 22 1b 15 16 20 17 18 17 1e 37 1d 20 25 25 28 2e 28 16 1d 2d 31 2d 26 30 22 27 28 26 01 09 09 09 0d 0c 0d 19 0e 0e 17 26 1f 1d 15 27 26 27 27 26 26 26 32 26 26 28 26 32 32 32 32 26 26 26 26 26 26 26 26 26 26 26 26 32 26 32 26 26 32 32 26 26 26 26 32 32 26 32 26 26 32 26 26 26 26 ff c0 00 11 08 00 5a 00 78 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 00 03 01 00 00 00 00 00 00 00 00 00 00 00 07 04 05 06 02 03 08 01 ff c4 00 4a 10 00 02 01 02 03 04 05 07 06 0a 08 07 00 00 00 00 01 02 03 00 11 04 12 21 05 06 31 41 22 51 61 81 91 07 13 32 42 52 71 a1 08 23 82 c1 d1 e3 14 Data Ascii: JFIF" 7 %%(.(-1-&0"'(&&'&''&&&2&&(&2222&&&&&&&&&&&&2&2&&22&&&&22&2&&2&&&&Zx"J!1A"Qa2BRq#
2024-04-19 05:32:24 UTC	1255	IN	Data Raw: e1 6f eb 7b 6a 04 de 46 55 06 67 c7 aa 81 cd a1 00 78 99 6b 1b c6 ea cd e9 2a ba 15 14 53 53 0d e4 7a 39 01 31 ed 14 70 38 94 88 35 bd f6 98 d1 47 c9 1f 61 f1 cb d1 e8 3c 36 de b9 54 75 b3 30 03 bc 8f 86 b4 ac f2 9f b6 1e 4c 4c 58 38 f3 59 59 1d d4 7a cc c6 e2 e3 98 55 00 f7 9e ca d5 6c 99 d8 c9 09 7b e6 2c 97 bf 59 b5 fe 35 97 9d 02 ed cc 60 77 09 2c 98 74 6c 2b 30 16 d2 25 cd a9 07 50 11 f9 70 06 b2 dd 2b 37 14 9c a8 ce ee 4e d5 93 01 31 38 8c c8 1d bc dd 98 71 2c 74 ed 02 f6 d4 e8 2f 7d 6d 4f bd 9f 8b 59 14 3a 6a 0a 92 0f d1 34 98 df 0c 32 97 90 49 28 28 70 d7 b0 1c 5b cd 5c 91 f4 b5 d7 b2 b6 1e 4b b6 d0 93 08 09 37 2a 35 17 d7 30 bf f3 05 4d 72 12 6d 8c cb 89 45 1c b1 db 23 33 17 2d d2 63 7b f5 f3 bf 8f d7 55 f8 7c 2b 06 b3 15 ca 0e 80 13 f0 e0 47 bb Data Ascii: o{jFUgxkSSz91p85Ga<6Tu0LLX8YYzUl{,Y5`w,tl+0%Pp+7N18q,t/}mOY:j42I((p[\K750MrmE#3-c{U\|+G
2024-04-19 05:32:24 UTC	974	IN	Data Raw: 5d 15 a8 45 d0 64 9c 76 11 3b 13 10 1e 74 40 6d 76 b1 fa 40 d7 62 6e 24 46 c4 cc fd c0 7d 95 03 61 6d 99 0e 2a 15 32 1c a5 c0 23 b2 c6 b4 83 1c 05 55 2b b2 38 d3 ee 74 e1 37 2e 04 20 e7 90 9b df 8f 3b 11 fc 89 f1 ad 16 ee ec 08 a2 9d 1e 3f 38 5d 56 42 a0 b1 22 e6 17 5e 1e e3 54 2d b6 95 78 9a d0 6e e6 30 49 2a db 9a c9 c3 f5 4d cf 95 61 2a 92 6c dd f1 48 d4 62 c3 88 d8 02 d9 da ca 4d bd 15 27 52 3b 8d 75 bb 24 77 56 20 73 03 fd f6 8a 90 d3 c8 01 e0 c9 62 4d ef 70 35 b9 b9 35 94 c7 62 cc 92 33 1e 67 c0 72 ab 32 f5 0a 11 fa f9 26 8e 2b 7f 62 cf 17 b5 4a 86 75 09 65 4b eb ae a6 48 c0 d3 bc f8 55 57 e5 6c bd 51 7e c8 a8 98 d9 32 c1 31 fc c5 f8 cd 1d 65 ff 00 0e 1d 75 14 e4 f2 3d 9a 2a 84 b4 54 99 b1 3b dd 37 f5 7f b2 2b 4d ba 7b 65 a7 59 33 9e 90 60 74 1a 01 Data Ascii: ]Edv;t@mv@bn$F}am2#U+8t7. ;?8]VB"^T-xn0IMalHbM'R;u$wV sbMp55b3gr2&+bJueKHUWlQ~21eu=T;7+M{eY3`t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49990	173.194.219.119	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:24 UTC	464	OUT	GET /vi_webp/zmUPHj3AvZc/default.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:24 UTC	624	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2326 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 04:39:37 GMT Expires: Fri, 19 Apr 2024 06:39:37 GMT Cache-Control: public, max-age=7200 Age: 3167 ETag: "0" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:24 UTC	631	IN	Data Raw: 52 49 46 46 0e 09 00 00 57 45 42 50 56 50 38 20 02 09 00 00 b0 2a 00 9d 01 2a 78 00 5a 00 3e 39 1a 8a 44 22 21 a1 12 0a ad e4 20 03 84 b2 80 4a d7 aa 13 e1 b9 7a af ab ca db 73 d5 76 dc ff 31 1f b1 de ad 5e 84 7a 1c bd 59 bf 62 bd 80 3f 59 bd 36 bf 66 7e 0c 3f b6 7f d0 fd b0 f8 00 fd d1 d5 81 f0 d7 60 9f d8 ff 15 7c d5 fc 47 e5 5f bf 7e 55 71 ae 88 d7 c9 be f4 fe 07 f2 6b f3 1b e2 5e f7 f8 01 7e 25 fc 97 fc 5f e4 6f 9e 4e cf 1b 11 e8 1d ec 97 d5 7f d5 71 8b f5 cb d1 77 f4 7f f2 7e 96 7f 93 ff 01 e4 67 e2 be c0 bf ca 3f aa 7f a5 fb 72 f8 e5 ff 9b fc bf a0 0f a2 7f f1 7f 7d f8 0a fe 6d fd 5f fe 37 61 bf 45 2f da f6 14 3e da 7d 01 a8 96 97 1e 60 5e 99 41 91 7c 7d 91 ad e0 74 c9 d9 2c 65 00 29 14 cd de 00 60 f2 05 0d 7e c6 0e d5 02 f2 31 10 5c 57 bb 31 a7 2e Data Ascii: RIFFWEBPVP8 **xZ>9D"! Jzsv1^zYb?Y6f~?`\|G_~Uqk^~%_oNqw~g?r}m_7aE/>}`^A\|}t,e)`~1\W1.
2024-04-19 05:32:24 UTC	1255	IN	Data Raw: f3 fa a1 d7 10 66 85 e0 24 d6 78 52 f3 a8 48 0e b3 36 77 a1 92 6d 1e 34 65 a6 e4 fd e3 d3 12 10 18 3c cd 20 da f5 85 61 ce 8b d3 d1 ce 50 44 da 7f f7 4f 21 78 ff bf cf fd 2f fd b7 e7 f0 6b 2f 63 16 83 e0 fb f8 2d 22 aa c8 60 20 13 05 c9 7a 1f 1f df e7 07 27 2f 35 b9 7d 3f ba d2 af 86 5f 17 8d 96 6f a9 76 0a 67 3e 3f 80 d9 65 f3 72 64 2e 5e bb e9 be 6a 8b f4 4d e2 d2 88 6e 8a 0f b3 a0 bc 0f af 26 8b be f1 b9 a3 b7 57 6d ce 87 80 99 fd 49 80 0e 57 a1 38 fe 5d 4b 5f 6b 05 2f b0 ee f6 b6 8b c0 19 8c 0a 37 63 7d b1 c3 f1 63 bc 10 36 f3 12 ed 14 03 b8 c9 a1 1c c5 3f cd 9a b3 15 56 96 e0 de 7f d2 05 84 2c cd 5f ae 9f 07 0d 8b 9c be eb df 03 85 cc 62 89 57 29 d0 2c 86 0a fa 5b 2f b0 64 e3 bb e9 e6 9c 02 00 61 a1 cb b4 b4 be 70 f8 79 be 1d 4e 8b e8 23 d8 be 8f 77 Data Ascii: f$xRH6wm4e< aPDO!x/k/c-"` z'/5}?_ovg>?erd.^jMn&WmIW8]K_k/7c}c6?V,_bW),[/dapyN#w
2024-04-19 05:32:24 UTC	440	IN	Data Raw: 52 7a 69 73 67 82 7c f2 d2 4f f3 fe f4 81 69 05 8f 46 63 c9 75 fc 18 af 89 84 a6 bb 1d df f2 ab 61 cd 4c 21 20 f4 a0 e0 ce f2 bd f1 a8 52 84 71 3e 84 34 88 27 33 e1 dd ab 99 66 72 66 ae 97 e5 02 4d 74 5d 2e a0 ea b2 7e c2 f3 89 89 e5 04 08 eb c7 df b7 a7 6f 08 45 a5 2d cd 1d 91 33 78 5a 4f 05 23 63 4f 62 cc ad c3 33 35 5f 8c 4e 4e fb 05 8a cc c0 85 7c 30 5d 50 3c 40 0b ac dc c9 30 18 2a 45 0e 7f 34 56 5a b3 b3 02 d9 f0 f4 a3 37 a9 d3 1c ef 88 de d4 6d 8a 28 fc c2 58 c6 c9 f8 59 a1 90 69 22 fe d0 a3 07 84 f6 c6 48 22 7f 9f f2 5f c5 71 0d 56 20 18 c7 a7 da c0 d6 cc 4e 67 57 d4 c0 9f ff 80 06 d3 fb 88 d0 84 40 c0 4e 87 87 c7 53 5f 8e 9c 7a a0 63 03 fb 36 61 94 9b c7 b0 71 8a b0 db 83 13 43 3f b5 64 af 94 ca ab 9b 3f ce c7 8d 01 80 b9 ca d0 f5 70 90 54 06 a0 Data Ascii: Rzisg\|OiFcuaL! Rq>4'3frfMt].~oE-3xZO#cOb35_NN\|0]P<@0*E4VZ7m(XYi"H"_qV NgW@NS_zc6aqC?d?pT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49991	173.194.219.119	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:24 UTC	464	OUT	GET /vi_webp/qP5c-ZOMct4/default.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:24 UTC	633	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2824 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 04:39:35 GMT Expires: Fri, 19 Apr 2024 06:39:35 GMT Cache-Control: public, max-age=7200 Age: 3169 ETag: "1675362000" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:24 UTC	622	IN	Data Raw: 52 49 46 46 00 0b 00 00 57 45 42 50 56 50 38 20 f4 0a 00 00 90 30 00 9d 01 2a 78 00 5a 00 3e 41 1c 8b 44 22 a1 a1 15 59 86 1c 28 04 04 b4 00 69 70 32 25 3b dc 7f 25 7f 26 7e 65 6c cf d8 ff 00 73 0b 98 3e c7 ff 39 f7 1d f0 03 fb d7 b1 5f d0 9e c0 1f ac 3d 29 bf 6d 7d 40 7e b9 7e cb fb cc ff 8d fd 49 f7 55 e8 01 fe 03 fa af a5 57 b1 6f a0 4f ec af a6 a7 ed ef c2 c7 ee 4f a4 8e 0c 2f 16 31 9b d0 1f bd e5 4b 71 7f 62 3f 79 e6 cf 7f bf 1f f5 02 79 3f 28 f7 f1 3f bd f4 83 eb 37 fb 0f 45 7f 1b ef 14 8f 2d f6 05 fe 63 fc ff fd 4f e6 37 fb 4f 93 9f fa 3f d2 7a 1b fa a7 ff 0f b8 57 ea ff fd 1f 5d 2f 62 ff ba 1e c7 7f ae 67 c4 7c a7 e6 eb 20 bd 2f 9a 8f c8 e8 2f ce 9b 73 2b a5 5e af fd 46 dc 13 ae 64 f9 0d b2 e9 4a b8 2f 65 7b 28 e3 cf 12 f0 72 91 bc a5 bb f4 09 6f Data Ascii: RIFFWEBPVP8 0*xZ>AD"Y(ip2%;%&~els>9_=)m}@~~IUWoOO/1Kqb?yy?(?7E-cO7O?zW]/bg\| //s+^FdJ/e{(ro
2024-04-19 05:32:24 UTC	1255	IN	Data Raw: 3a 9b 89 e2 91 4a 61 78 cd 9e a5 e9 15 bf 98 ab f0 9f b2 53 95 d7 c0 db 46 aa a5 cf 66 1d fd 4f d8 9f 6f 7b 77 ad 4c 7f cd b2 95 58 71 db df db 4f 0d 02 a5 54 3c 7d 47 0f ba 1b 4d 11 28 7d 28 36 3b 4e 17 d6 fd ba be 24 2a 6d e7 d0 96 13 f3 52 42 e0 b5 69 29 59 9e 3c 06 06 16 d7 d8 f6 76 56 79 37 5e 46 c7 44 f1 11 67 00 4c 2b 44 85 af f0 d1 79 4b f7 94 5f 5c fc 91 73 62 e0 e7 96 87 e0 7f f2 65 36 ef 59 ac 9a 3b 67 58 19 be 2b 8c 68 89 26 c5 84 bc ea 84 f4 0d a6 f0 4d 75 39 b7 4f ff ab cc f3 2a 8f e3 c5 97 04 e6 66 22 19 9b 86 a3 e1 cf 1a 22 7b 8b b0 be 78 58 09 0d ad 06 a7 b0 ec c5 80 78 cf a2 ee 0d c6 93 d3 f3 ef 6a 11 36 ef 3c 83 49 6b 6f 61 f8 47 3a ff ea 6e f0 f5 e0 d0 61 83 32 66 0c 23 6f 83 c0 da 65 9a c0 b0 fe 6e cf bf 8b 7a c8 92 4a fd f4 59 5c 1f Data Ascii: :JaxSFfOo{wLXqOT<}GM(}(6;N$mRBi)Y<vVy7^FDgL+DyK_\sbe6Y;gX+h&Mu9Of""{xXxj6<IkoaG:na2f#oenzJY\
2024-04-19 05:32:24 UTC	947	IN	Data Raw: db 10 98 bc 6f 24 80 d5 1e 54 40 0e 30 2a e5 2a c6 da 62 91 11 3f b2 41 77 ad 65 a3 7d 55 22 4c 95 a8 b0 29 4f 59 52 a5 a9 53 51 59 b5 8c 27 ba 41 82 fa b1 df db b3 dc 95 1c 7f c6 35 7e 54 66 d3 4b d0 d7 c4 62 39 94 9b 7a b5 38 32 ce 3e be 9e 48 4e 01 da d3 c5 8d d5 0e 88 33 6a a9 b2 9f 4d a8 0e 50 25 bd ef 85 f3 c0 e6 31 b7 ff 5e 77 db 22 80 4d 81 f9 62 c5 45 60 4e 9e e6 7f c6 e9 55 b6 4f f0 68 03 4f 0c 84 cd f6 97 a3 f6 36 b1 97 ee 26 1f 2c 0e 91 5f 89 19 cb 39 49 4d ad fe 46 f4 69 38 c6 e7 85 f8 07 44 d2 18 a3 38 23 3b 96 61 ba ec cd 31 2b 4f e8 09 df 86 d6 97 6f 87 0b 96 9a 9d cd b3 27 c1 11 13 d5 13 48 b7 e1 6d a2 eb 5f 4b 08 43 4e 6e 4e 3a 5f 74 4a 84 c0 45 4d 3d 07 aa c7 f0 40 16 96 4b 5f 0f 01 90 70 52 10 e1 4c f9 85 dd ba 78 a0 96 55 79 8b af ff Data Ascii: o$T@0**b?Awe}U"L)OYRSQY'A5~TfKb9z82>HN3jMP%1^w"MbE`NUOhO6&,_9IMFi8D8#;a1+Oo'Hm_KCNnN:_tJEM=@K_pRLxUy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49995	142.251.15.155	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:24 UTC	466	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:24 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Fri, 19 Apr 2024 05:32:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:24 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 71 54 7a 68 35 5f 54 67 72 45 72 4a 78 55 34 55 59 51 4b 36 4f 64 37 69 74 42 45 49 57 4b 32 53 69 4d 32 51 37 6d 54 74 62 37 30 4b 34 74 53 72 57 34 43 41 50 65 34 77 64 33 46 59 46 72 77 4c 52 67 7a 47 67 55 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKqTzh5_TgrErJxU4UYQK6Od7itBEIWK2SiM2Q7mTtb70K4tSrW4CAPe4wd3FYFrwLRgzGgU","type":4}
2024-04-19 05:32:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49996	142.250.9.132	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:24 UTC	515	OUT	GET /ytc/AIdro_l7EQrwAPBISw10QVF36IsB-cpyKQ4weQOea7p4iPxQj3U=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:24 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 3670 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 03:20:02 GMT Expires: Sat, 20 Apr 2024 03:20:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 7942 ETag: "v142" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:24 UTC	721	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 ff db 00 84 00 03 02 02 0d 02 02 03 03 03 03 04 03 0c 04 05 08 05 05 04 0f 0a 0e 07 07 06 0b 0c 0a 0c 10 0b 0a 0b 0f 0b 0d 0e 10 0d 11 0b 10 0f 0f 0d 16 0d 11 0e 0e 0e 14 15 0f 11 0e 18 0e 1b 18 10 0d 10 14 01 03 04 04 06 05 06 0a 06 06 0a 0f 0d 0b 0e 11 10 0f 0f 0f 0f 10 0f 10 10 11 0e 0d 0e 0f 12 0f 10 10 12 10 10 0f 10 11 11 0f 0f 0f 0d 13 10 0f 12 12 0d 13 10 0e 12 10 10 10 10 10 10 0f 0f 10 0f ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 00 03 00 00 00 00 00 00 00 00 00 00 00 08 05 07 04 06 09 01 02 03 ff c4 00 35 10 00 02 Data Ascii: JFIFExifII1GoogleDD5
2024-04-19 05:32:24 UTC	1255	IN	Data Raw: 9e 78 85 77 8c 1e ed 2c 9e da d8 1c 8e 02 2b 0f d2 9f 96 11 17 17 57 cd a9 a0 49 51 20 c6 00 09 00 cf 20 04 e9 f1 3d 6b 66 1b 6d 92 08 00 00 37 aa 4e af af b9 ac ee d6 ac 8f 6a 76 ca e6 63 23 ac ed c5 0f da 6d 37 36 6b ac 2b ed c3 52 3a b0 92 23 8e 00 0b b3 35 a0 3d c7 96 67 ea 3e 95 69 fd 21 21 a4 9b 87 00 42 7f d3 b1 9c 93 a8 ee 4f 0c 1c 00 04 d5 43 7b 2b 29 6d 24 99 89 38 1e 1e 5e 35 2d e9 93 6e 72 7b 65 bb 3a d3 59 6f 0e 2a e6 06 4d 67 45 f0 d0 ee 31 b5 4a dc 98 7b b6 1d 56 26 29 14 d2 01 ef 37 b7 1a 8e 81 10 a4 71 74 08 cd d6 2b f7 ed dd 65 0d db a8 10 93 3a 21 42 40 f1 03 6c f8 c9 33 3b f7 6e db a9 52 96 ee e7 88 3b 7d 3a 7e 6a df c5 69 7c c6 13 50 ed de 83 c5 6a 8a da b9 46 25 aa 6e 16 3e e7 5c ed 4a 33 fb 7d a0 b1 cc 8f 15 a3 1d f2 b2 aa 12 ee 8a Data Ascii: xw,+WIQ =kfm7Njvc#m76k+R:#5=g>i!!BOC{+)m$8^5-nr{e:Yo*MgE1J{V&)7qt+e:!B@l3;nR;}:~ji\|PjF%n>\J3}
2024-04-19 05:32:24 UTC	1255	IN	Data Raw: 73 81 d5 b8 39 23 8e 6c 2d c8 ee d6 24 76 46 2a 7e 51 c0 20 95 91 79 46 00 83 c3 1e 08 3c 1f 21 79 a4 bc 85 36 bd 88 83 56 18 79 4c ac 2d 34 fb eb 2f 51 98 ff 00 5e 19 0d 9f d3 d9 8c 9c da 11 f1 fa 9a 2b 39 cd 39 61 c0 c7 5f 84 42 cc c2 39 7e 22 94 bc 8a b5 d1 64 f6 a6 22 67 e2 2f 9f 9c a3 76 6f f6 70 75 68 1a 81 49 01 49 dc 19 e5 b8 81 24 c4 8c 0c d6 b0 5c 35 73 a6 0e 67 63 ef d7 9d 6e 3b 99 b7 d7 b5 4d 4f 54 0b ba 71 63 b4 ad 0d 4f 0c 36 f4 9e 52 6b f0 25 3a d6 29 70 b4 cf 22 4e d1 7d a7 a4 32 30 2b c7 21 97 82 58 f6 ac cb ac a3 f4 e6 de 54 b4 ce b0 12 64 85 6f c3 31 2a 1e 5f 49 95 2a d6 97 04 24 e0 12 46 78 73 e3 5b 46 98 d0 37 31 7b cf b3 d6 34 8d 7c 7e ac c1 60 f4 6c b8 0c 96 a3 16 a0 95 6f 7d a9 7b 5a b0 7f 14 17 f7 24 86 b4 85 82 1e 7f 10 fe eb c5 Data Ascii: s9#l-$vF~Q yF<!y6VyL-4/Q^+99a_B9~"d"g/vopuhII$\5sgcn;MOTqcO6Rk%:)p"N}20+!XTdo1_I*$Fxs[F71{4\|~`lo}{Z$
2024-04-19 05:32:24 UTC	439	IN	Data Raw: 59 6c 01 d4 fe 85 91 d1 49 27 81 f2 c3 81 c9 e0 f0 14 f8 4a 80 94 44 f0 99 8f ac 49 ab 0c 14 87 01 59 81 fe 29 85 f5 57 ea 1e 8f a8 cb 3a 4a ee 37 11 aa b4 eb e0 28 47 89 08 eb 5e 78 a6 80 48 09 6e 56 65 60 e8 3b 10 38 2a c7 85 25 7e 58 26 b0 b2 7a d0 28 12 92 0e 71 aa 67 cb 6f 79 da 9c 5e 5c 30 f8 1f 11 c7 43 fc 57 a6 e0 ef ce 3b 56 7a 65 d1 7b 4d 8e c3 eb 0a 27 4a 5b 9b 21 53 2a cb 59 d2 cc b2 99 da 41 22 2c fc a2 b3 4c c4 75 66 65 00 7c 37 ef d3 56 8f a2 e5 77 0a 52 0e a1 04 0d 5b 08 88 f8 77 c0 f1 ae 9d b9 61 4c 77 21 5b 74 3c 2b 13 45 fa 8c ad 94 f4 f5 73 68 37 5f 01 99 d4 f0 53 b2 b6 b4 d6 56 09 23 4b d8 62 41 0d 1a 99 b8 05 07 27 85 3d be 97 68 f8 0a b1 75 f5 db 27 05 c0 b9 b6 50 4a bf 70 33 07 ae 27 f1 90 0e f3 5e 5b df 20 b7 a1 fe 1b 1f 7e fa cd Data Ascii: YlI'JDIY)W:J7(G^xHnVe`;8%~X&z(qgoy^\0CW;Vze{M'J[!SYA",Lufe\|7VwR[waLw![t<+Esh7_SV#KbA'=hu'PJp3'^[ ~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49998	172.253.124.136	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:24 UTC	614	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:24 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Fri, 19 Apr 2024 05:32:24 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:24 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-19 05:32:24 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49997	142.250.9.138	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:24 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=JkyQnUrYhhi1J_KvhBtN6WrUgrFAFmobRgsTukfk4EX0PiXmK72IGpKl8qENHDHK0aibAthpYjZ9AlUFssR4LHOGLAK5oiC7zLU5UlmgOFKPuarYF7qRplWBl4newUdoorhVr1fQgFTY0fuh0jmdttwwgbL-gkZ6LVDwoQAMs3M
2024-04-19 05:32:24 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 05:32:24 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:24 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-19 05:32:24 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	50000	162.247.243.39	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:24 UTC	563	OUT	GET /nr-rum-1.256.1.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.irs.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:24 UTC	802	IN	HTTP/1.1 200 OK Connection: close Content-Length: 51492 x-amz-id-2: jXKYp/+CXthe5oTaWG25cpCFNwFDMy8wZ3aSRpUyF399A9ZeH6LEB8XEAQQtyMT2LJ9Db5cMIpo= x-amz-request-id: F4097D1QJADKE006 Last-Modified: Mon, 15 Apr 2024 13:59:46 GMT ETag: "b7083b11d7aa08d40fb6d54a56c87e8c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: Zf7ox0fiI_gUR.5vY2mAEgRgbbyiBn9a Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Fri, 19 Apr 2024 05:32:24 GMT Via: 1.1 varnish X-Served-By: cache-pdk-kfty2130028-PDK X-Cache: HIT X-Cache-Hits: 57 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-04-19 05:32:24 UTC	1378	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6e 72 2d 72 75 6d 2d 31 2e 32 35 36 2e 31 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 35 36 2e 31 2e 50 52 4f 44 22 5d 3d 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 35 36 2e 31 2e 50 52 4f 44 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 35 5d 2c 7b 32 35 37 33 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 64 28 65 2c 7b 6f 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 34 32 34 37 29 2c 69 3d 6e 28 31 31 31 37 29 2c 73 3d 6e 28 38 36 37 33 29 2c 61 3d 6e 28 Data Ascii: /! For license information please see nr-rum-1.256.1.min.js.LICENSE.txt /"use strict";(self["webpackChunk:NRBA-1.256.1.PROD"]=self["webpackChunk:NRBA-1.256.1.PROD"]\|\|[]).push([[75],{2573:(t,e,n)=>{n.d(e,{o:()=>c});var r=n(4247),i=n(1117),s=n(8673),a=n(
2024-04-19 05:32:24 UTC	1378	IN	Data Raw: 76 65 73 74 28 29 29 3b 69 3d 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 69 29 3f 69 3a 5b 69 5d 2c 73 2e 70 75 73 68 28 2e 2e 2e 69 29 7d 6c 65 74 20 61 3d 74 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 58 28 74 29 3b 73 2e 6c 65 6e 67 74 68 3f 61 3d 74 68 69 73 2e 6f 70 74 73 2e 72 61 77 3f 74 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 5f 73 65 6e 64 28 74 29 3a 74 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 28 74 29 3a 73 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 73 2e 66 6f 72 45 61 63 68 28 28 72 3d 3e 7b 61 28 7b 65 6e 64 70 6f 69 6e 74 3a 74 68 69 73 2e 65 6e 64 70 6f 69 6e 74 2c 70 61 79 6c 6f 61 64 3a 72 2c 6f 70 Data Ascii: vest());i="[object Array]"===Object.prototype.toString.call(i)?i:[i],s.push(...i)}let a=t=>this.harvest.sendX(t);s.length?a=this.opts.raw?t=>this.harvest._send(t):t=>this.harvest.send(t):s.push(void 0),s.forEach((r=>{a({endpoint:this.endpoint,payload:r,op
2024-04-19 05:32:24 UTC	1378	IN	Data Raw: 6b 65 79 73 28 6e 29 2e 69 6e 63 6c 75 64 65 73 28 74 29 3f 22 22 3a 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 22 26 22 2b 74 2b 22 3d 22 2b 75 28 65 29 3a 22 22 7d 76 61 72 20 64 3d 6e 28 34 32 34 37 29 3b 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 72 65 74 75 72 6e 22 22 2b 6c 6f 63 61 74 69 6f 6e 7d 76 61 72 20 70 3d 6e 28 32 33 34 29 2c 6d 3d 6e 28 34 32 32 32 29 2c 67 3d 6e 28 33 32 33 39 29 2c 76 3d 6e 28 36 31 34 31 29 3b 66 75 6e 63 74 69 6f 6e 20 79 28 74 2c 65 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 22 73 74 72 69 6e 67 22 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 Data Ascii: keys(n).includes(t)?"":e&&"string"==typeof e?"&"+t+"="+u(e):""}var d=n(4247);function f(){return""+location}var p=n(234),m=n(4222),g=n(3239),v=n(6141);function y(t,e){let n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:"string",r=arguments.length
2024-04-19 05:32:24 UTC	1378	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 6f 62 66 75 73 63 61 74 6f 72 2e 6f 62 66 75 73 63 61 74 65 53 74 72 69 6e 67 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 22 73 74 72 69 6e 67 22 2c 5b 22 65 22 5d 29 2c 74 68 69 73 2e 5f 73 65 6e 64 28 7b 2e 2e 2e 65 2c 70 61 79 6c 6f 61 64 3a 6e 7d 29 7d 5f 73 65 6e 64 28 74 29 7b 6c 65 74 7b 65 6e 64 70 6f 69 6e 74 3a 65 2c 70 61 79 6c 6f 61 64 3a 6e 3d 7b 7d 2c 6f 70 74 73 3a 72 3d 7b 7d 2c 73 75 62 6d 69 74 4d 65 74 68 6f 64 3a 73 2c 63 62 46 69 6e 69 73 68 65 64 3a 61 2c 63 75 73 74 6f 6d 55 72 6c 3a 6f 2c 72 61 77 3a 63 2c 69 6e 63 6c 75 64 65 42 61 73 65 50 61 72 61 6d 73 3a 75 3d 21 30 7d 3d 74 3b 63 6f 6e 73 74 20 68 3d 28 30 2c 70 2e 43 35 29 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 Data Ascii: on(){return t.obfuscator.obfuscateString(...arguments)}),"string",["e"]),this._send({...e,payload:n})}_send(t){let{endpoint:e,payload:n={},opts:r={},submitMethod:s,cbFinished:a,customUrl:o,raw:c,includeBaseParams:u=!0}=t;const h=(0,p.C5)(this.sharedContex
2024-04-19 05:32:24 UTC	1378	IN	Data Raw: 68 65 61 64 65 72 73 3a 44 7d 29 3b 69 66 28 21 72 2e 75 6e 6c 6f 61 64 26 26 61 26 26 73 3d 3d 3d 64 2e 42 65 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 3b 78 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 65 6e 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 7b 73 65 6e 74 3a 30 21 3d 3d 74 68 69 73 2e 73 74 61 74 75 73 2c 73 74 61 74 75 73 3a 74 68 69 73 2e 73 74 61 74 75 73 2c 78 68 72 3a 74 68 69 73 2c 66 75 6c 6c 55 72 6c 3a 43 7d 3b 34 32 39 3d 3d 3d 74 68 69 73 2e 73 74 61 74 75 73 3f 28 65 2e 72 65 74 72 79 3d 21 30 2c 65 2e 64 65 6c 61 79 3d 74 2e 74 6f 6f 4d 61 6e 79 52 65 71 75 65 73 74 73 44 65 6c 61 79 29 3a 34 30 38 21 3d 3d 74 68 69 73 2e 73 74 61 74 75 73 26 26 35 30 30 21 3d 3d 74 68 69 73 2e 73 Data Ascii: headers:D});if(!r.unload&&a&&s===d.Be){const t=this;x.addEventListener("loadend",(function(){const e={sent:0!==this.status,status:this.status,xhr:this,fullUrl:C};429===this.status?(e.retry=!0,e.delay=t.tooManyRequestsDelay):408!==this.status&&500!==this.s
2024-04-19 05:32:24 UTC	1378	IN	Data Raw: 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 72 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 72 2e 6c 65 6e 67 74 68 3e 30 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 7c 7c 7b 7d 29 2e 6c 65 6e 67 74 68 3e 30 29 26 26 28 74 5b 6e 5d 3d 72 29 2c 74 7d 29 2c 7b 7d 29 3b 72 65 74 75 72 6e 7b 62 6f 64 79 3a 65 28 74 2e 62 6f 64 79 29 2c 71 73 3a 65 28 74 2e 71 73 29 7d 7d 6f 6e 28 74 2c 65 29 7b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 74 5d 29 7c 7c 28 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 74 5d 3d 5b 5d 29 2c 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 74 5d 2e 70 75 73 68 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 74 29 7b 72 Data Ascii: ("number"==typeof r\|\|"string"==typeof r&&r.length>0\|\|"object"==typeof r&&Object.keys(r\|\|{}).length>0)&&(t[n]=r),t}),{});return{body:e(t.body),qs:e(t.qs)}}on(t,e){Array.isArray(this._events[t])\|\|(this._events[t]=[]),this._events[t].push(e)}}function M(t){r
2024-04-19 05:32:24 UTC	1378	IN	Data Raw: 30 3b 73 3c 72 3b 73 2b 2b 29 69 5b 73 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 3b 74 2e 61 70 70 6c 79 28 65 2c 69 29 7d 7d 7d 6e 2e 64 28 65 2c 7b 44 3a 28 29 3d 3e 72 2c 5a 3a 28 29 3d 3e 69 7d 29 7d 2c 36 31 34 31 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 64 28 65 2c 7b 24 63 3a 28 29 3d 3e 75 2c 4e 67 3a 28 29 3d 3e 6c 2c 52 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 32 33 34 29 2c 69 3d 6e 28 31 31 31 37 29 2c 73 3d 6e 28 32 32 37 31 29 2c 61 3d 6e 28 35 30 29 2c 6f 3d 7b 72 65 67 65 78 3a 2f 5e 66 69 6c 65 3a 5c 2f 5c 2f 28 2e 2a 29 2f 2c 72 65 70 6c 61 63 65 6d 65 6e 74 3a 61 74 6f 62 28 22 5a 6d 6c 73 5a 54 6f 76 4c 30 39 43 52 6c 56 54 51 30 46 55 52 55 51 3d 22 29 7d 3b 63 6c 61 73 73 20 63 20 65 78 74 65 6e 64 73 20 69 2e 77 7b 73 68 Data Ascii: 0;s<r;s++)i[s]=arguments[s];t.apply(e,i)}}}n.d(e,{D:()=>r,Z:()=>i})},6141:(t,e,n)=>{n.d(e,{$c:()=>u,Ng:()=>l,RR:()=>c});var r=n(234),i=n(1117),s=n(2271),a=n(50),o={regex:/^file:\/\/(.*)/,replacement:atob("ZmlsZTovL09CRlVTQ0FURUQ=")};class c extends i.w{sh
2024-04-19 05:32:24 UTC	1378	IN	Data Raw: 73 3a 73 3d 5b 7b 6b 65 79 3a 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 2c 76 61 6c 75 65 3a 22 74 65 78 74 2f 70 6c 61 69 6e 22 7d 5d 7d 3d 74 3b 63 6f 6e 73 74 20 61 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 61 2e 6f 70 65 6e 28 69 2c 65 2c 21 72 29 3b 74 72 79 7b 22 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 22 69 6e 20 61 26 26 28 61 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 30 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 73 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 61 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 74 2e 6b 65 79 2c 74 2e 76 61 6c 75 65 29 7d 29 29 2c 61 2e 73 65 6e 64 28 6e 29 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 6c 65 74 7b 75 72 6c 3a 65 2c 62 6f 64 79 3a 6e 7d 3d 74 Data Ascii: s:s=[{key:"content-type",value:"text/plain"}]}=t;const a=new XMLHttpRequest;a.open(i,e,!r);try{"withCredentials"in a&&(a.withCredentials=!0)}catch(t){}return s.forEach((t=>{a.setRequestHeader(t.key,t.value)})),a.send(n),a}function a(t){let{url:e,body:n}=t
2024-04-19 05:32:24 UTC	1378	IN	Data Raw: 65 77 20 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 28 28 65 3d 3e 7b 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 28 28 29 3d 3e 7b 74 28 65 2e 67 65 74 45 6e 74 72 69 65 73 28 29 29 7d 29 29 7d 29 29 2c 65 2e 6f 62 73 65 72 76 65 28 7b 74 79 70 65 3a 22 70 61 69 6e 74 22 2c 62 75 66 66 65 72 65 64 3a 21 30 7d 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 7d 2c 34 38 30 36 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 64 28 65 2c 7b 50 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 72 3d 6e 28 33 38 35 29 2c 69 3d 6e 28 38 31 35 38 29 2c 73 3d 6e 28 32 30 39 34 29 2c 61 3d 6e 28 35 35 32 38 29 3b 63 6f 6e 73 74 20 6f 3d 6e 65 77 20 73 2e 55 28 69 2e 53 2e 54 49 4d 45 5f 54 4f 5f 46 49 52 53 54 5f 42 59 54 45 29 3b 69 66 28 72 2e 69 6c Data Ascii: ew PerformanceObserver((e=>{Promise.resolve().then((()=>{t(e.getEntries())}))})),e.observe({type:"paint",buffered:!0}))}catch(t){}}},4806:(t,e,n)=>{n.d(e,{P:()=>o});var r=n(385),i=n(8158),s=n(2094),a=n(5528);const o=new s.U(i.S.TIME_TO_FIRST_BYTE);if(r.il
2024-04-19 05:32:24 UTC	1378	IN	Data Raw: 6e 28 33 30 38 31 29 2c 6f 3d 6e 28 33 38 35 29 3b 63 6f 6e 73 74 20 63 3d 22 52 65 61 63 74 22 2c 75 3d 22 4e 65 78 74 4a 53 22 2c 6c 3d 22 56 75 65 22 2c 68 3d 22 4e 75 78 74 4a 53 22 2c 64 3d 22 41 6e 67 75 6c 61 72 22 2c 66 3d 22 41 6e 67 75 6c 61 72 55 6e 69 76 65 72 73 61 6c 22 2c 70 3d 22 53 76 65 6c 74 65 22 2c 6d 3d 22 53 76 65 6c 74 65 4b 69 74 22 2c 67 3d 22 50 72 65 61 63 74 22 2c 76 3d 22 50 72 65 61 63 74 53 53 52 22 2c 79 3d 22 41 6e 67 75 6c 61 72 4a 53 22 2c 62 3d 22 42 61 63 6b 62 6f 6e 65 22 2c 54 3d 22 45 6d 62 65 72 22 2c 77 3d 22 4d 65 74 65 6f 72 22 2c 53 3d 22 5a 65 70 74 6f 22 2c 45 3d 22 4a 71 75 65 72 79 22 2c 4f 3d 22 4d 6f 6f 54 6f 6f 6c 73 22 2c 41 3d 22 51 77 69 6b 22 2c 4d 3d 22 45 6c 65 63 74 72 6f 6e 22 3b 66 75 6e 63 74 Data Ascii: n(3081),o=n(385);const c="React",u="NextJS",l="Vue",h="NuxtJS",d="Angular",f="AngularUniversal",p="Svelte",m="SvelteKit",g="Preact",v="PreactSSR",y="AngularJS",b="Backbone",T="Ember",w="Meteor",S="Zepto",E="Jquery",O="MooTools",A="Qwik",M="Electron";funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	50003	142.251.15.155	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:25 UTC	466	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:25 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Fri, 19 Apr 2024 05:32:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:25 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 71 5f 35 6d 42 72 70 6c 65 78 50 71 53 71 56 32 62 50 65 43 78 55 6c 4a 51 58 71 69 77 36 6b 6e 79 55 59 39 64 44 6a 7a 79 4d 4b 51 59 6d 30 36 76 34 79 62 32 34 6c 6e 53 5a 66 6f 49 73 6f 47 72 30 72 65 4d 70 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKq_5mBrplexPqSqV2bPeCxUlJQXqiw6knyUY9dDjzyMKQYm06v4yb24lnSZfoIsoGr0reMp","type":4}
2024-04-19 05:32:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	50005	172.253.124.136	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:25 UTC	614	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:25 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Fri, 19 Apr 2024 05:32:25 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:25 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-19 05:32:25 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	50004	142.250.9.138	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:25 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=JkyQnUrYhhi1J_KvhBtN6WrUgrFAFmobRgsTukfk4EX0PiXmK72IGpKl8qENHDHK0aibAthpYjZ9AlUFssR4LHOGLAK5oiC7zLU5UlmgOFKPuarYF7qRplWBl4newUdoorhVr1fQgFTY0fuh0jmdttwwgbL-gkZ6LVDwoQAMs3M
2024-04-19 05:32:25 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 05:32:25 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:25 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-19 05:32:25 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	50006	162.247.243.29	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:25 UTC	1170	OUT	POST /1/b67fc6a152?a=70700070&v=1.256.1&to=blMHY0AHDUcDUEZQWFcZJFRGDwxaTXdATEdYWjlTUxICWANKV0trfVcRVl4HGlEQf1NDTntDDFtWAxFHTw1eWE1AZQZFWxYXYANU&rst=10063&ck=0&s=ca762eb62dd64914&ref=https://www.irs.gov/filing/e-file-options&hr=0&qt=2&ap=503&be=1421&fe=7923&dc=2608&at=QhQEFQgdHkk%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1713504734081,%22n%22:0,%22f%22:929,%22dn%22:930,%22dne%22:930,%22c%22:930,%22s%22:930,%22ce%22:1156,%22rq%22:1156,%22rp%22:1422,%22rpe%22:1750,%22di%22:3983,%22ds%22:3983,%22de%22:4029,%22dc%22:9342,%22l%22:9342,%22le%22:9344%7D,%22navigation%22:%7B%7D%7D&fp=2814&fcp=2814 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.irs.gov Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:25 UTC	434	IN	HTTP/1.1 200 Connection: close Content-Length: 148 date: Fri, 19 Apr 2024 05:32:25 GMT content-type: text/plain cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.irs.gov access-control-expose-headers: Date timing-allow-origin: https://www.irs.gov x-served-by: cache-pdk-kpdk1780116-PDK
2024-04-19 05:32:25 UTC	148	IN	Data Raw: 7b 22 73 74 6e 22 3a 30 2c 22 65 72 72 22 3a 31 2c 22 69 6e 73 22 3a 31 2c 22 73 70 61 22 3a 31 2c 22 73 72 22 3a 30 2c 22 73 72 73 22 3a 30 2c 22 73 74 22 3a 30 2c 22 73 74 73 22 3a 30 2c 22 61 70 70 22 3a 7b 22 61 67 65 6e 74 73 22 3a 5b 7b 22 65 6e 74 69 74 79 47 75 69 64 22 3a 22 4d 54 59 32 4d 54 63 78 4d 48 78 43 55 6b 39 58 55 30 56 53 66 45 46 51 55 45 78 4a 51 30 46 55 53 55 39 4f 66 44 63 77 4e 7a 41 79 4d 44 41 78 22 7d 5d 7d 7d Data Ascii: {"stn":0,"err":1,"ins":1,"spa":1,"sr":0,"srs":0,"st":0,"sts":0,"app":{"agents":[{"entityGuid":"MTY2MTcxMHxCUk9XU0VSfEFQUExJQ0FUSU9OfDcwNzAyMDAx"}]}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	50009	142.251.15.155	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:25 UTC	466	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:25 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Fri, 19 Apr 2024 05:32:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:25 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 71 53 52 76 70 6c 4d 35 34 33 47 4d 35 72 52 35 31 61 30 30 42 66 70 5f 4d 35 68 58 66 38 50 54 63 46 61 5f 42 72 55 54 79 71 59 6d 6f 4b 44 42 41 74 58 51 69 6a 50 79 5a 4c 31 49 6e 4d 4d 73 43 34 32 41 66 79 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKqSRvplM543GM5rR51a00Bfp_M5hXf8PTcFa_BrUTyqYmoKDBAtXQijPyZL1InMMsC42Afy","type":4}
2024-04-19 05:32:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	50011	142.250.9.138	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:25 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=JkyQnUrYhhi1J_KvhBtN6WrUgrFAFmobRgsTukfk4EX0PiXmK72IGpKl8qENHDHK0aibAthpYjZ9AlUFssR4LHOGLAK5oiC7zLU5UlmgOFKPuarYF7qRplWBl4newUdoorhVr1fQgFTY0fuh0jmdttwwgbL-gkZ6LVDwoQAMs3M
2024-04-19 05:32:25 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 05:32:25 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:25 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-19 05:32:25 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	50012	172.253.124.136	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:25 UTC	614	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:26 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Fri, 19 Apr 2024 05:32:25 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:26 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-19 05:32:26 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	50013	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:25 UTC	1465	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 1773 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713504739463&flash=0&frm=2&u_tz=120&u_his=6&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C260%2C147&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713504744634 Content-Type: application/json X-Goog-Event-Time: 1713504744634 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240416.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtRZTVFTTRxTnJrayjjg4ixBjIKCgJVUxIEGgAgaQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:25 UTC	1773	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 31 36 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4f 4f 44 69 4c 45 47 45 4d 62 39 74 79 49 51 6c 70 57 77 42 52 43 49 68 37 41 46 45 4a 58 50 73 41 55 51 38 36 47 77 42 52 44 64 36 50 34 53 45 4b 4b 42 73 41 55 51 37 72 4f 77 42 52 43 38 32 4c 41 46 45 49 4f 5f 73 41 55 51 2d 74 71 77 42 52 44 72 6b 36 34 46 45 4c 50 54 73 41 55 51 78 38 36 77 42 52 44 76 7a 62 41 46 45 4d 7a 66 72 67 55 51 6d 76 43 76 42 52 44 56 69 4c 41 46 45 4c Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240416.01.00","configInfo":{"appInstallData":"COODiLEGEMb9tyIQlpWwBRCIh7AFEJXPsAUQ86GwBRDd6P4SEKKBsAUQ7rOwBRC82LAFEIO_sAUQ-tqwBRDrk64FELPTsAUQx86wBRDvzbAFEMzfrgUQmvCvBRDViLAFEL
2024-04-19 05:32:26 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 19 Apr 2024 05:32:26 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:26 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-19 05:32:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	50014	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:25 UTC	1465	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 1773 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713504739523&flash=0&frm=2&u_tz=120&u_his=6&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C260%2C147&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713504744675 Content-Type: application/json X-Goog-Event-Time: 1713504744675 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240416.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtRZTVFTTRxTnJrayjjg4ixBjIKCgJVUxIEGgAgaQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/s09YWoGtftM?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:25 UTC	1773	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 31 36 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4f 4f 44 69 4c 45 47 45 49 4f 5f 73 41 55 51 7a 4e 2d 75 42 52 43 57 33 4c 41 46 45 50 79 46 73 41 55 51 37 38 32 77 42 52 44 48 5f 62 63 69 45 4b 48 44 73 41 55 51 79 66 65 76 42 52 43 49 34 36 38 46 45 4c 66 76 72 77 55 51 73 39 4f 77 42 52 43 61 38 4b 38 46 45 49 4b 69 5f 78 49 51 33 6f 6a 5f 45 68 44 5a 33 62 41 46 45 4c 66 71 5f 68 49 51 31 74 61 77 42 52 44 30 71 37 41 46 45 50 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240416.01.00","configInfo":{"appInstallData":"COODiLEGEIO_sAUQzN-uBRCW3LAFEPyFsAUQ782wBRDH_bciEKHDsAUQyfevBRCI468FELfvrwUQs9OwBRCa8K8FEIKi_xIQ3oj_EhDZ3bAFELfq_hIQ1tawBRD0q7AFEP
2024-04-19 05:32:26 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 19 Apr 2024 05:32:26 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:26 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-19 05:32:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	50015	142.251.15.155	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:26 UTC	466	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:26 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Fri, 19 Apr 2024 05:32:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:26 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 70 56 4e 6f 71 55 49 74 77 6e 47 30 74 5f 36 30 42 6e 68 6e 34 62 4f 58 69 63 6e 4b 53 47 45 67 68 45 73 70 34 7a 46 74 65 31 75 73 64 48 76 6c 64 32 78 45 5f 5f 4a 37 44 35 48 62 6e 71 34 54 37 48 79 50 74 65 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKpVNoqUItwnG0t_60Bnhn4bOXicnKSGEghEsp4zFte1usdHvld2xE__J7D5Hbnq4T7HyPte","type":4}
2024-04-19 05:32:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	50019	162.247.243.29	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:26 UTC	928	OUT	GET /1/b67fc6a152?a=70700070&v=1.256.1&to=blMHY0AHDUcDUEZQWFcZJFRGDwxaTXdATEdYWjlTUxICWANKV0trfVcRVl4HGlEQf1NDTntDDFtWAxFHTw1eWE1AZQZFWxYXYANU&rst=10063&ck=0&s=ca762eb62dd64914&ref=https://www.irs.gov/filing/e-file-options&hr=0&qt=2&ap=503&be=1421&fe=7923&dc=2608&at=QhQEFQgdHkk%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1713504734081,%22n%22:0,%22f%22:929,%22dn%22:930,%22dne%22:930,%22c%22:930,%22s%22:930,%22ce%22:1156,%22rq%22:1156,%22rp%22:1422,%22rpe%22:1750,%22di%22:3983,%22ds%22:3983,%22de%22:4029,%22dc%22:9342,%22l%22:9342,%22le%22:9344%7D,%22navigation%22:%7B%7D%7D&fp=2814&fcp=2814 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:26 UTC	396	IN	HTTP/1.1 200 Connection: close Content-Length: 79 date: Fri, 19 Apr 2024 05:32:26 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: Date timing-allow-origin: * x-served-by: cache-pdk-kfty2130078-PDK
2024-04-19 05:32:26 UTC	79	IN	Data Raw: 5b 37 31 2c 20 37 33 2c 20 37 30 2c 20 35 36 2c 20 35 37 2c 20 39 37 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 34 34 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 32 5d Data Ascii: [71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	50020	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:26 UTC	1466	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 10599 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713504739808&flash=0&frm=2&u_tz=120&u_his=6&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C260%2C147&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713504745049 Content-Type: application/json X-Goog-Event-Time: 1713504745048 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240416.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtRZTVFTTRxTnJrayjjg4ixBjIKCgJVUxIEGgAgaQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/yiQ-C7lGw0o?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:26 UTC	10599	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 31 36 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4f 4f 44 69 4c 45 47 45 4c 32 5a 73 41 55 51 79 66 65 76 42 52 43 71 32 4c 41 46 45 4a 62 63 73 41 55 51 76 4e 69 77 42 52 43 69 6b 72 41 46 45 4c 32 32 72 67 55 51 78 5f 32 33 49 68 43 33 36 76 34 53 45 49 6a 6a 72 77 55 51 6f 6f 47 77 42 52 43 2d 2d 61 38 46 45 4b 69 61 73 41 55 51 30 2d 47 76 42 52 44 71 77 36 38 46 45 4e 36 49 5f 78 49 51 37 72 4f 77 42 52 43 5f 6e 5f 38 53 45 4a Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240416.01.00","configInfo":{"appInstallData":"COODiLEGEL2ZsAUQyfevBRCq2LAFEJbcsAUQvNiwBRCikrAFEL22rgUQx_23IhC36v4SEIjjrwUQooGwBRC--a8FEKiasAUQ0-GvBRDqw68FEN6I_xIQ7rOwBRC_n_8SEJ
2024-04-19 05:32:26 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 19 Apr 2024 05:32:26 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:26 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-19 05:32:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	50021	172.253.124.136	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:26 UTC	614	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:26 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Fri, 19 Apr 2024 05:32:26 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:26 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-19 05:32:26 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	50024	142.251.15.155	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:26 UTC	466	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:26 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Fri, 19 Apr 2024 05:32:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:26 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 71 59 31 63 32 61 59 6f 31 57 50 75 41 62 44 74 76 6e 37 4d 75 4e 75 6d 4a 7a 30 43 69 65 6e 59 39 4e 71 5a 31 69 4d 5f 4e 35 4c 78 69 4b 5a 58 6b 73 39 61 72 67 46 4a 79 2d 6d 57 7a 6a 42 49 44 6f 55 38 6b 68 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKqY1c2aYo1WPuAbDtvn7MuNumJz0CienY9NqZ1iM_N5LxiKZXks9argFJy-mWzjBIDoU8kh","type":4}
2024-04-19 05:32:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	50025	172.253.124.136	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:26 UTC	614	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:27 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Fri, 19 Apr 2024 05:32:27 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:27 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-19 05:32:27 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49852	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:27 UTC	731	OUT	GET /sslgeotrust.htm HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:32:27 UTC	324	IN	HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Thu, 21 Sep 2023 01:24:50 GMT Accept-Ranges: bytes ETag: "e039896a2aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:32:27 GMT Connection: close Content-Length: 1548
2024-04-19 05:32:27 UTC	1548	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 09 3c 68 65 61 64 3e 0d 0a 09 09 3c 74 69 74 6c 65 3e 31 30 34 30 4e 6f 77 20 55 73 65 72 20 47 75 69 64 65 3c 2f 74 69 74 6c 65 3e 0d 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 3e 0d 0a 09 20 20 20 20 20 20 76 61 72 20 74 61 62 56 61 6c 75 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 55 52 4c 3b 0d 0a 09 20 20 20 20 20 20 76 61 72 20 75 72 6c 20 3d 20 22 22 3b 0d 0a 09 20 20 20 20 20 20 69 66 20 28 74 61 62 56 61 6c 75 65 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 23 22 29 20 3e 3d 20 30 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 20 3d 20 74 61 62 56 61 6c 75 65 2e 73 75 62 73 74 72 69 6e 67 28 74 61 62 56 61 6c 75 65 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 23 22 Data Ascii: <html><head><title>1040Now User Guide</title><script type="text/javascript" > var tabValue = document.URL; var url = ""; if (tabValue.lastIndexOf("#") >= 0) url = tabValue.substring(tabValue.lastIndexOf("#"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	50026	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:27 UTC	1466	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 10364 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713504740126&flash=0&frm=2&u_tz=120&u_his=6&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C260%2C147&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713504746040 Content-Type: application/json X-Goog-Event-Time: 1713504746040 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240416.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtRZTVFTTRxTnJrayjkg4ixBjIKCgJVUxIEGgAgaQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/qP5c-ZOMct4?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:27 UTC	10364	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 31 36 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4f 53 44 69 4c 45 47 45 4c 65 72 73 41 55 51 71 39 69 77 42 52 43 33 37 36 38 46 45 4f 65 36 72 77 55 51 37 38 32 77 42 52 43 69 6b 72 41 46 45 4c 32 32 72 67 55 51 76 5a 6d 77 42 52 44 38 68 62 41 46 45 4d 66 4f 73 41 55 51 6c 70 57 77 42 52 44 5a 79 61 38 46 45 4d 66 39 74 79 49 51 32 64 32 77 42 52 43 49 68 37 41 46 45 4c 37 35 72 77 55 51 7a 36 69 77 42 52 43 33 36 76 34 53 45 4e Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240416.01.00","configInfo":{"appInstallData":"COSDiLEGELersAUQq9iwBRC3768FEOe6rwUQ782wBRCikrAFEL22rgUQvZmwBRD8hbAFEMfOsAUQlpWwBRDZya8FEMf9tyIQ2d2wBRCIh7AFEL75rwUQz6iwBRC36v4SEN
2024-04-19 05:32:27 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 19 Apr 2024 05:32:27 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:27 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-19 05:32:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49853	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:27 UTC	696	OUT	GET /images/1040header2004-01.gif HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.1040now.net/sslgeotrust.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:32:27 UTC	324	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Thu, 21 Sep 2023 01:25:07 GMT Accept-Ranges: bytes ETag: "b0816c742aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:32:27 GMT Connection: close Content-Length: 4256
2024-04-19 05:32:27 UTC	4256	IN	Data Raw: 47 49 46 38 37 61 3d 02 29 00 f7 00 00 00 00 00 80 00 00 00 80 00 80 80 00 00 00 80 80 00 80 00 80 80 c0 c0 c0 c0 dc c0 a6 ca f0 00 00 00 00 00 2a 00 00 55 00 00 7f 00 00 aa 00 00 d4 00 2a 00 00 2a 2a 00 2a 55 00 2a 7f 00 2a aa 00 2a d4 00 55 00 00 55 2a 00 55 55 00 55 7f 00 55 aa 00 55 d4 00 7f 00 00 7f 2a 00 7f 55 00 7f 7f 00 7f aa 00 7f d4 00 aa 00 00 aa 2a 00 aa 55 00 aa 7f 00 aa aa 00 aa d4 00 d4 00 00 d4 2a 00 d4 55 00 d4 7f 00 d4 aa 00 d4 d4 2a 00 00 2a 00 2a 2a 00 55 2a 00 7f 2a 00 aa 2a 00 d4 2a 2a 00 2a 2a 2a 2a 2a 55 2a 2a 7f 2a 2a aa 2a 2a d4 2a 55 00 2a 55 2a 2a 55 55 2a 55 7f 2a 55 aa 2a 55 d4 2a 7f 00 2a 7f 2a 2a 7f 55 2a 7f 7f 2a 7f aa 2a 7f d4 2a aa 00 2a aa 2a 2a aa 55 2a aa 7f 2a aa aa 2a aa d4 2a d4 00 2a d4 2a 2a d4 55 2a d4 7f 2a d4 Data Ascii: GIF87a=)U*UUUUUUUUUUU*U******U****UU*UUUUU**U***U***U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	50028	162.247.243.29	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:27 UTC	829	OUT	POST /events/1/b67fc6a152?a=70700070&v=1.256.1&to=blMHY0AHDUcDUEZQWFcZJFRGDwxaTXdATEdYWjlTUxICWANKV0trfVcRVl4HGlEQf1NDTntDDFtWAxFHTw1eWE1AZQZFWxYXYANU&rst=12011&ck=0&s=ca762eb62dd64914&ref=https://www.irs.gov/filing/e-file-options&hr=0 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 916 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.irs.gov Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:27 UTC	916	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 66 70 2c 32 36 36 2c 34 3b 35 2c 27 6e 65 74 2d 65 74 79 70 65 2c 27 34 67 3b 36 2c 27 6e 65 74 2d 72 74 74 2c 33 30 30 2e 3b 36 2c 27 6e 65 74 2d 64 6c 69 6e 6b 2c 31 30 2e 3b 36 2c 27 63 6c 73 2c 30 2e 30 30 31 35 38 36 36 36 36 39 34 38 34 31 35 39 34 3b 65 2c 27 66 63 70 2c 32 36 36 2c 37 3b 36 2c 27 74 69 6d 65 54 6f 46 69 72 73 74 42 79 74 65 2c 31 34 32 31 2e 37 39 39 39 39 39 39 39 39 39 38 38 34 3b 36 2c 27 66 69 72 73 74 42 79 74 65 54 6f 46 43 50 2c 31 33 39 32 2e 35 3b 35 2c 27 6c 6f 61 64 53 74 61 74 65 2c 27 6c 6f 61 64 69 6e 67 3b 35 2c 31 2c 32 3b 36 2c 33 2c 33 30 30 2e 3b 36 2c 34 2c 31 30 2e 3b 36 2c 35 2c 30 2e 30 30 31 35 38 36 36 36 36 39 34 38 34 31 35 39 34 3b 65 2c 27 6c 6f 61 64 2c 37 37 6b 2c 34 3b 35 Data Ascii: bel.6;e,'fp,266,4;5,'net-etype,'4g;6,'net-rtt,300.;6,'net-dlink,10.;6,'cls,0.00158666694841594;e,'fcp,266,7;6,'timeToFirstByte,1421.7999999999884;6,'firstByteToFCP,1392.5;5,'loadState,'loading;5,1,2;6,3,300.;6,4,10.;6,5,0.00158666694841594;e,'load,77k,4;5
2024-04-19 05:32:27 UTC	353	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Fri, 19 Apr 2024 05:32:27 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.irs.gov x-served-by: cache-pdk-kpdk1780081-PDK
2024-04-19 05:32:27 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	50027	162.247.243.29	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:27 UTC	831	OUT	POST /jserrors/1/b67fc6a152?a=70700070&v=1.256.1&to=blMHY0AHDUcDUEZQWFcZJFRGDwxaTXdATEdYWjlTUxICWANKV0trfVcRVl4HGlEQf1NDTntDDFtWAxFHTw1eWE1AZQZFWxYXYANU&rst=12020&ck=0&s=ca762eb62dd64914&ref=https://www.irs.gov/filing/e-file-options&hr=0 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 712 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.irs.gov Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:27 UTC	712	OUT	Data Raw: 7b 22 73 6d 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 4c 6f 61 64 65 72 54 79 70 65 2f 6c 69 74 65 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 44 69 73 74 4d 65 74 68 6f 64 2f 43 44 4e 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 52 75 6e 74 69 6d 65 2f 42 72 6f 77 73 65 72 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 46 72 61 6d 65 77 6f 72 6b 2f 4a 71 75 65 72 79 2f Data Ascii: {"sm":[{"params":{"name":"Generic/LoaderType/lite/Detected"},"stats":{"c":1}},{"params":{"name":"Generic/DistMethod/CDN/Detected"},"stats":{"c":1}},{"params":{"name":"Generic/Runtime/Browser/Detected"},"stats":{"c":1}},{"params":{"name":"Framework/Jquery/
2024-04-19 05:32:27 UTC	353	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Fri, 19 Apr 2024 05:32:27 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.irs.gov x-served-by: cache-pdk-kfty2130041-PDK
2024-04-19 05:32:27 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	50031	172.253.124.136	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:27 UTC	614	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:27 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Fri, 19 Apr 2024 05:32:27 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:27 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-19 05:32:27 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	50032	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:27 UTC	796	OUT	GET /mobile/sslgeotrust.html HTTP/1.1 Host: www.1040now.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.1040now.net/sslgeotrust.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:32:27 UTC	323	IN	HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Tue, 31 Oct 2023 19:27:41 GMT Accept-Ranges: bytes ETag: "63fccf5030cda1:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:32:27 GMT Connection: close Content-Length: 2734
2024-04-19 05:32:27 UTC	2734	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 31 30 34 30 4e 4f 57 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 43 53 53 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 33 2e 32 2e 30 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 Data Ascii: <html> <head> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>1040NOW</title> ... CSS --> <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.mi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	50033	107.144.122.203	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:28 UTC	445	OUT	GET /images/1040header2004-01.gif HTTP/1.1 Host: www.1040now.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=v3ukock3c0mrsqqpppszdyix; paper1065gd=81.181.57.52
2024-04-19 05:32:28 UTC	324	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Thu, 21 Sep 2023 01:25:07 GMT Accept-Ranges: bytes ETag: "b0816c742aecd91:0" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Date: Fri, 19 Apr 2024 05:32:27 GMT Connection: close Content-Length: 4256
2024-04-19 05:32:28 UTC	4256	IN	Data Raw: 47 49 46 38 37 61 3d 02 29 00 f7 00 00 00 00 00 80 00 00 00 80 00 80 80 00 00 00 80 80 00 80 00 80 80 c0 c0 c0 c0 dc c0 a6 ca f0 00 00 00 00 00 2a 00 00 55 00 00 7f 00 00 aa 00 00 d4 00 2a 00 00 2a 2a 00 2a 55 00 2a 7f 00 2a aa 00 2a d4 00 55 00 00 55 2a 00 55 55 00 55 7f 00 55 aa 00 55 d4 00 7f 00 00 7f 2a 00 7f 55 00 7f 7f 00 7f aa 00 7f d4 00 aa 00 00 aa 2a 00 aa 55 00 aa 7f 00 aa aa 00 aa d4 00 d4 00 00 d4 2a 00 d4 55 00 d4 7f 00 d4 aa 00 d4 d4 2a 00 00 2a 00 2a 2a 00 55 2a 00 7f 2a 00 aa 2a 00 d4 2a 2a 00 2a 2a 2a 2a 2a 55 2a 2a 7f 2a 2a aa 2a 2a d4 2a 55 00 2a 55 2a 2a 55 55 2a 55 7f 2a 55 aa 2a 55 d4 2a 7f 00 2a 7f 2a 2a 7f 55 2a 7f 7f 2a 7f aa 2a 7f d4 2a aa 00 2a aa 2a 2a aa 55 2a aa 7f 2a aa aa 2a aa d4 2a d4 00 2a d4 2a 2a d4 55 2a d4 7f 2a d4 Data Ascii: GIF87a=)U*UUUUUUUUUUU*U******U****UU*UUUUU**U***U***U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	50034	172.253.124.136	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:28 UTC	614	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:28 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Fri, 19 Apr 2024 05:32:28 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:28 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-19 05:32:28 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	50039	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:30 UTC	1465	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 1322 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713504739909&flash=0&frm=2&u_tz=120&u_his=6&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C260%2C147&vis=2&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713504749043 Content-Type: application/json X-Goog-Event-Time: 1713504749043 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240416.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtRZTVFTTRxTnJrayjkg4ixBjIKCgJVUxIEGgAgaQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/zmUPHj3AvZc?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:30 UTC	1322	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 31 36 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4f 53 44 69 4c 45 47 45 4f 5f 4e 73 41 55 51 36 73 4f 76 42 52 43 57 6c 62 41 46 45 4c 65 72 73 41 55 51 67 71 4c 5f 45 68 43 44 76 37 41 46 45 4c 66 76 72 77 55 51 33 6f 6a 5f 45 68 44 72 6b 36 34 46 45 4c 2d 66 5f 78 49 51 35 37 71 76 42 52 43 33 36 76 34 53 45 4b 48 44 73 41 55 51 7a 36 69 77 42 52 43 39 74 71 34 46 45 50 61 72 73 41 55 51 38 36 47 77 42 52 44 48 5f 62 63 69 45 50 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240416.01.00","configInfo":{"appInstallData":"COSDiLEGEO_NsAUQ6sOvBRCWlbAFELersAUQgqL_EhCDv7AFELfvrwUQ3oj_EhDrk64FEL-f_xIQ57qvBRC36v4SEKHDsAUQz6iwBRC9tq4FEParsAUQ86GwBRDH_bciEP
2024-04-19 05:32:30 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 19 Apr 2024 05:32:30 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:30 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-19 05:32:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	50041	162.247.243.29	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:30 UTC	829	OUT	POST /events/1/b67fc6a152?a=70700070&v=1.256.1&to=blMHY0AHDUcDUEZQWFcZJFRGDwxaTXdATEdYWjlTUxICWANKV0trfVcRVl4HGlEQf1NDTntDDFtWAxFHTw1eWE1AZQZFWxYXYANU&rst=15227&ck=0&s=ca762eb62dd64914&ref=https://www.irs.gov/filing/e-file-options&hr=0 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 311 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.irs.gov Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.irs.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:30 UTC	311	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 63 6c 73 2c 31 2c 38 3b 35 2c 27 6d 65 74 72 69 63 49 64 2c 27 76 33 2d 31 37 31 33 35 30 34 37 34 34 31 34 30 2d 38 36 30 36 35 37 36 32 32 37 37 33 33 3b 35 2c 27 6c 61 72 67 65 73 74 53 68 69 66 74 54 61 72 67 65 74 2c 27 23 62 6c 6f 63 6b 2d 70 75 70 2d 69 72 73 2d 69 6e 66 6f 72 6d 61 74 69 6f 6e 6d 65 6e 75 2d 32 3e 75 6c 2e 6d 65 6e 75 2e 6d 65 6e 75 2d 2d 70 75 70 2d 69 6e 66 6f 2d 6d 65 6e 75 2e 6e 61 76 3b 36 2c 27 6c 61 72 67 65 73 74 53 68 69 66 74 54 69 6d 65 2c 34 30 36 32 2e 37 39 39 39 39 39 39 39 39 39 38 38 34 3b 36 2c 27 6c 61 72 67 65 73 74 53 68 69 66 74 56 61 6c 75 65 2c 30 2e 30 30 31 35 38 36 36 36 36 39 34 38 34 31 35 39 34 3b 35 2c 27 6c 6f 61 64 53 74 61 74 65 2c 27 64 6f 6d 2d 63 6f 6e 74 65 6e 74 2d Data Ascii: bel.6;e,'cls,1,8;5,'metricId,'v3-1713504744140-8606576227733;5,'largestShiftTarget,'#block-pup-irs-informationmenu-2>ul.menu.menu--pup-info-menu.nav;6,'largestShiftTime,4062.7999999999884;6,'largestShiftValue,0.00158666694841594;5,'loadState,'dom-content-
2024-04-19 05:32:30 UTC	353	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Fri, 19 Apr 2024 05:32:30 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.irs.gov x-served-by: cache-pdk-kfty2130047-PDK
2024-04-19 05:32:30 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	50042	172.253.124.136	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:30 UTC	614	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:31 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Fri, 19 Apr 2024 05:32:31 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:31 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-19 05:32:31 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	50043	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:31 UTC	658	OUT	GET /privacy/12081 HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 05:32:32 UTC	840	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5; path=/;HttpOnly;Secure P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rzdjxO3YaKxfQgplB%2BLHfZU%2Bi%2F2JtkniGd1pm2ULqPaW0cBgkX78LVPT5ccAupwnr6yhn%2FpMztIgGZgh%2FC2F0oX18kncWr9Xfisv6Zup42PPPJ3i5%2F2bWU05R2yoCLM5pxTfEBBB9vE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83ba6ea10d1a-ATL
2024-04-19 05:32:32 UTC	529	IN	Data Raw: 31 39 31 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 74 69 74 6c 65 3e 50 72 69 76 61 63 79 20 56 65 72 69 66 69 65 64 20 2d 20 54 72 75 73 74 20 47 75 61 72 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 22 20 2f 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 Data Ascii: 1918<!DOCTYPE HTML><html><title>Privacy Verified - Trust Guard</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <meta name="description" content="" /> <meta name="keywords" content="" /> <link r
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 2f 70 61 67 65 2f 73 6d 61 72 74 79 2f 74 6f 6f 6c 73 2e 6a 73 3f 76 3d 31 2d 34 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 70 61 67 65 2f 6a 73 2f 63 65 72 74 69 66 69 63 61 74 65 73 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 0d 0a 0d 0a 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 20 20 76 61 72 20 5f 67 61 71 20 3d 20 5f 67 61 71 20 7c 7c 20 5b 5d 3b 0d 0a 20 20 5f 67 61 71 2e 70 75 73 68 28 5b 27 5f 73 65 74 41 63 63 6f 75 6e 74 27 2c 20 27 55 41 2d 31 30 37 30 36 33 33 2d 31 38 27 5d 29 3b 0d Data Ascii: /page/smarty/tools.js?v=1-4"></script> <script type="text/javascript" src="/page/js/certificates.js"></script> <script type="text/javascript"> var _gaq = _gaq \|\| []; _gaq.push(['_setAccount', 'UA-1070633-18']);
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 6e 65 74 2f 31 30 34 30 6e 6f 77 2f 31 30 34 30 4e 6f 77 25 32 30 50 72 69 76 61 63 79 25 32 30 53 74 61 74 65 6d 65 6e 74 25 32 30 31 2e 68 74 6d 22 20 74 61 72 67 65 74 3d 22 5f 70 72 69 76 61 63 79 22 20 72 65 6c 3d 22 6e 6f 66 6f 6c 6c 6f 77 22 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 20 74 6f 70 3a 31 32 35 70 78 3b 20 6c 65 66 74 3a 33 32 70 78 3b 20 77 69 64 74 68 3a 20 36 37 70 78 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 22 3e 26 6e 62 73 70 3b 26 6e 62 73 70 3b 26 6e 62 73 70 3b 26 6e 62 73 70 3b 26 6e 62 73 70 3b 0d 0a 26 6e 62 73 70 3b 26 6e 62 73 70 3b 26 6e 62 73 70 3b 26 6e 62 73 70 3b 26 6e 62 73 70 3b 26 6e 62 73 70 3b 26 6e 62 73 70 3b 26 6e 62 73 70 3b 26 6e 62 73 70 3b Data Ascii: net/1040now/1040Now%20Privacy%20Statement%201.htm" target="_privacy" rel="nofollow" style="position:relative; top:125px; left:32px; width: 67px; text-decoration: none;">
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 61 74 69 6f 6e 20 50 72 61 63 74 69 63 65 73 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 3e 43 4f 50 50 41 20 28 43 68 69 6c 64 72 65 6e 27 73 20 4f 6e 6c 69 6e 65 20 50 72 69 76 61 63 79 20 50 72 6f 74 65 63 74 69 6f 6e 20 41 63 74 29 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 3e 43 61 6c 69 66 6f 72 6e 69 61 20 4f 6e 6c 69 6e 65 20 50 72 69 76 61 63 79 20 50 72 6f 74 65 63 74 69 6f 6e 20 41 63 74 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 3e 54 68 65 20 43 41 4e 2d 53 50 41 4d 20 41 63 74 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 3e 50 72 69 76 61 63 79 20 41 6c 6c 69 61 6e 63 65 20 47 75 69 64 6c 69 6e 65 73 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 3e 47 6f 6f 67 6c 65 20 41 64 73 65 6e 73 65 3c Data Ascii: ation Practices</li> <li>COPPA (Children's Online Privacy Protection Act)</li> <li>California Online Privacy Protection Act</li> <li>The CAN-SPAM Act</li> <li>Privacy Alliance Guidlines</li> <li>Google Adsense<
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 72 63 3d 22 2f 70 61 67 65 2f 74 65 6d 70 6c 61 74 65 73 2f 63 65 72 74 69 66 69 63 61 74 65 73 2f 69 6d 61 67 65 73 2f 74 68 75 6d 62 73 2d 75 70 2e 70 6e 67 22 20 61 6c 74 3d 22 59 65 73 22 3e 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 20 30 20 33 30 70 78 3b 22 3e 6f 72 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 6e 6f 2d 76 6f 74 65 22 3e 4e 6f 20 3c 69 6d 67 20 73 72 63 3d 22 2f 70 61 67 65 2f 74 65 6d 70 6c 61 74 65 73 2f 63 65 72 74 69 66 69 63 61 74 65 73 2f 69 6d 61 67 65 73 2f 74 68 75 6d 62 73 2d 64 6e 2e 70 6e 67 22 20 61 6c 74 3d 22 4e 6f 22 3e 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 Data Ascii: rc="/page/templates/certificates/images/thumbs-up.png" alt="Yes"></span> <span style="margin: 0 30px;">or</span> <span id="no-vote">No <img src="/page/templates/certificates/images/thumbs-dn.png" alt="No"></span> </div>
2024-04-19 05:32:32 UTC	427	IN	Data Raw: 74 72 75 73 74 2d 67 75 61 72 64 2e 63 6f 6d 2f 54 72 75 73 74 65 2d 50 72 69 76 61 63 79 2d 53 65 61 6c 73 2d 73 2f 34 33 2e 68 74 6d 22 20 74 61 72 67 65 74 3d 22 5f 74 67 22 3e 43 6f 6d 70 61 72 65 20 54 72 75 73 74 20 47 75 61 72 64 20 74 6f 20 54 72 75 73 74 65 2e 3c 2f 61 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 35 70 78 22 3e 0d 0a 20 20 20 20 20 44 69 73 63 6c 61 69 6d 65 72 3a 20 54 72 75 73 74 20 47 75 61 72 64 20 63 61 72 65 66 75 6c 6c 79 20 76 65 72 69 66 69 65 73 20 61 6c 6c 20 74 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 64 69 73 70 6c 61 79 65 64 20 6f 6e 20 74 68 69 73 20 63 65 72 74 69 66 69 63 61 74 65 2e 20 0d 0a 20 20 20 20 Data Ascii: trust-guard.com/Truste-Privacy-Seals-s/43.htm" target="_tg">Compare Trust Guard to Truste.</a></div> <div style="font-size:10.5px"> Disclaimer: Trust Guard carefully verifies all the information displayed on this certificate.
2024-04-19 05:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	50044	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:32 UTC	625	OUT	GET /page/css/split-cert.css HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secure.trust-guard.com/privacy/12081 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
2024-04-19 05:32:32 UTC	707	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:32 GMT Content-Type: text/css Content-Length: 1482 Connection: close Last-Modified: Tue, 28 May 2013 13:41:01 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rYfPRp9VD2MMFtpqSv2xszUR8cLxvRn%2B8jrmKzUdErbE2ejHWhxkyBMRRrcruS%2F%2F5q8HRWP5s5eOP3dZNGX%2F873XJkBDqh2iXGDFxbEYYxFn28s4L2P1SkkuYjJ01OWuUCAcb%2FvYfZI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83bf2e9e453e-ATL
2024-04-19 05:32:32 UTC	662	IN	Data Raw: 62 6f 64 79 2c 20 74 64 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0d 0a 7d 0d 0a 0d 0a 61 20 7b 0d 0a 7d 0d 0a 0d 0a 61 3a 68 6f 76 65 72 20 7b 0d 0a 7d 0d 0a 0d 0a 2e 67 72 65 65 6e 2d 62 67 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 30 65 39 65 36 3b 0d 0a 7d 0d 0a 0d 0a 2e 77 68 69 74 65 2d 62 6f 78 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 2f 70 61 67 65 2f 74 65 6d 70 6c 61 74 65 73 2f 63 65 72 74 69 66 69 63 61 74 65 73 2f 69 6d 61 67 65 73 2f 77 68 69 74 65 2d 62 6f 78 5f 6d 69 64 2e 70 6e 67 29 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 Data Ascii: body, td { font-family: sans-serif; font-size: 12px;}a {}a:hover {}.green-bg { background-color: #e0e9e6;}.white-box { background-image: url(/page/templates/certificates/images/white-box_mid.png); background-re
2024-04-19 05:32:32 UTC	820	IN	Data Raw: 68 74 3a 20 31 30 70 78 3b 20 20 20 0d 0a 7d 0d 0a 0d 0a 75 6c 2e 63 68 65 63 6b 20 7b 0d 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 70 61 67 65 2f 69 6d 61 67 65 73 2f 63 68 65 63 6b 2e 70 6e 67 29 3b 0d 0a 7d 0d 0a 0d 0a 75 6c 2e 63 68 65 63 6b 20 6c 69 20 7b 0d 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0d 0a 7d 0d 0a 0d 0a 23 64 69 73 63 6c 61 69 6d 65 72 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 2e 64 69 73 63 6c 61 69 6d 65 72 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 79 65 73 2d 76 6f 74 65 20 7b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 Data Ascii: ht: 10px; }ul.check { list-style-image:url(/page/images/check.png);}ul.check li { vertical-align: middle;}#disclaimer { display: none;}.disclaimer { display: none;}#yes-vote { line-height: 20px;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	50046	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:32 UTC	615	OUT	GET /page/smarty/jquery.js?v=1-4 HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.trust-guard.com/privacy/12081 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
2024-04-19 05:32:32 UTC	714	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:32 GMT Content-Type: application/x-javascript Content-Length: 94840 Connection: close Last-Modified: Wed, 21 Nov 2012 18:09:45 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=onte20rOy3A4K2QLiGZ0D8pDtTqpfl92rFp36SNtYxDKYNWDdSUQk0Z9cMYC3uZXq1UYDCSDALyC4XG5I6iUFxcJ1BoVD7BZfhjVCKIFZ1pbEEbLK4aZ7VyrxH0dLja9QBt8xCwbePQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83bf2cb48bb9-ATL
2024-04-19 05:32:32 UTC	655	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 37 2e 32 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 79 28 61 29 7b 72 65 74 75 72 6e 20 66 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 61 3a 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 3f 61 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 61 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 75 28 61 29 7b 69 66 28 21 63 6a 5b 61 5d 29 7b 76 61 72 20 62 3d 63 2e 62 6f 64 79 2c 64 3d 66 28 22 3c 22 2b 61 2b 22 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 62 29 2c 65 3d 64 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b 64 2e 72 65 6d 6f 76 65 28 29 3b 69 66 28 65 3d Data Ascii: /! jQuery v1.7.2 jquery.com \| jquery.org/license /(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e=
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 63 70 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 63 70 2e 73 6c 69 63 65 28 30 2c 62 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 5b 74 68 69 73 5d 3d 61 7d 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 63 73 28 29 7b 63 71 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 63 72 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 63 73 2c 30 29 3b 72 65 74 75 72 6e 20 63 71 3d 66 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 63 69 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 22 29 7d 63 61 74 63 68 28 62 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 68 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 Data Ascii: cp.concat.apply([],cp.slice(0,b)),function(){c[this]=a});return c}function cs(){cq=b}function cr(){setTimeout(cs,0);return cq=f.now()}function ci(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ch(){try{return new a.XMLHttpReques
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 61 2b 22 5b 22 2b 65 2b 22 5d 22 2c 62 5b 65 5d 2c 63 2c 64 29 3b 65 6c 73 65 20 64 28 61 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 62 24 28 61 2c 63 29 7b 76 61 72 20 64 2c 65 2c 67 3d 66 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 66 6c 61 74 4f 70 74 69 6f 6e 73 7c 7c 7b 7d 3b 66 6f 72 28 64 20 69 6e 20 63 29 63 5b 64 5d 21 3d 3d 62 26 26 28 28 67 5b 64 5d 3f 61 3a 65 7c 7c 28 65 3d 7b 7d 29 29 5b 64 5d 3d 63 5b 64 5d 29 3b 65 26 26 66 2e 65 78 74 65 6e 64 28 21 30 2c 61 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 62 5a 28 61 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 66 3d 66 7c 7c 63 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 2c 67 3d 67 7c 7c 7b 7d 2c 67 5b 66 5d 3d 21 30 3b 76 61 72 20 68 3d 61 5b 66 5d 2c 69 3d 30 2c 6a 3d 68 3f 68 2e 6c 65 6e 67 74 68 3a 30 2c 6b 3d Data Ascii: a+"["+e+"]",b[e],c,d);else d(a,b)}function b$(a,c){var d,e,g=f.ajaxSettings.flatOptions\|\|{};for(d in c)c[d]!==b&&((g[d]?a:e\|\|(e={}))[d]=c[d]);e&&f.extend(!0,a,e)}function bZ(a,c,d,e,f,g){f=f\|\|c.dataTypes[0],g=g\|\|{},g[f]=!0;var h=a[f],i=0,j=h?h.length:0,k=
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 65 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 62 3d 3d 3d 22 69 6e 70 75 74 22 3f 62 6d 28 61 29 3a 62 21 3d 3d 22 73 63 72 69 70 74 22 26 26 74 79 70 65 6f 66 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 66 2e 67 72 65 70 28 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 69 6e 70 75 74 22 29 2c 62 6d 29 7d 66 75 6e 63 74 69 6f 6e 20 62 6d 28 61 29 7b 69 66 28 61 2e 74 79 70 65 3d 3d 3d 22 63 68 65 63 6b 62 6f 78 22 7c 7c 61 2e 74 79 70 65 3d 3d 3d 22 72 61 64 69 6f 22 29 61 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3d 61 2e 63 68 65 63 6b 65 64 7d 66 75 6e 63 74 69 6f 6e 20 62 6c 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 2e 67 Data Ascii: e\|\|"").toLowerCase();b==="input"?bm(a):b!=="script"&&typeof a.getElementsByTagName!="undefined"&&f.grep(a.getElementsByTagName("input"),bm)}function bm(a){if(a.type==="checkbox"\|\|a.type==="radio")a.defaultChecked=a.checked}function bl(a){return typeof a.g
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 3d 61 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 3b 69 66 28 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 77 68 69 6c 65 28 62 2e 6c 65 6e 67 74 68 29 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 62 2e 70 6f 70 28 29 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 54 28 61 2c 62 2c 63 29 7b 62 3d 62 7c 7c 30 3b 69 66 28 66 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 29 29 72 65 74 75 72 6e 20 66 2e 67 72 65 70 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 76 61 72 20 65 3d 21 21 62 2e 63 61 6c 6c 28 61 2c 64 2c 61 29 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 63 7d 29 3b 69 66 28 62 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 66 2e 67 72 65 70 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 72 65 74 75 Data Ascii: =a.createDocumentFragment();if(c.createElement)while(b.length)c.createElement(b.pop());return c}function T(a,b,c){b=b\|\|0;if(f.isFunction(b))return f.grep(a,function(a,d){var e=!!b.call(a,d,a);return e===c});if(b.nodeType)return f.grep(a,function(a,d){retu
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 28 22 6c 65 66 74 22 29 7d 63 61 74 63 68 28 61 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 4a 2c 31 29 3b 72 65 74 75 72 6e 7d 65 2e 72 65 61 64 79 28 29 7d 7d 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 2e 66 6e 2e 69 6e 69 74 28 61 2c 62 2c 68 29 7d 2c 66 3d 61 2e 6a 51 75 65 72 79 2c 67 3d 61 2e 24 2c 68 2c 69 3d 2f 5e 28 3f 3a 5b 5e 23 3c 5d 2a 28 3c 5b 5c 77 5c 57 5d 2b 3e 29 5b 5e 3e 5d 2a 24 7c 23 28 5b 5c 77 5c 2d 5d 2a 29 24 29 2f 2c 6a 3d 2f 5c 53 2f 2c 6b 3d 2f 5e 5c 73 2b 2f 2c 6c 3d 2f 5c 73 2b 24 2f 2c 6d 3d 2f 5e 3c 28 5c 77 2b 29 5c 73 2a 5c 2f 3f 3e 28 3f 3a 3c 5c 2f 5c 31 3e 29 3f 24 2f 2c 6e 3d 2f 5e 5b 5c 5d 2c 3a 7b 7d 5c 73 5d 2a 24 2f 2c 6f 3d Data Ascii: ement.doScroll("left")}catch(a){setTimeout(J,1);return}e.ready()}}var e=function(a,b){return new e.fn.init(a,b,h)},f=a.jQuery,g=a.$,h,i=/^(?:[^#<](<[\w\W]+>)[^>]$\|#([\w\-])$)/,j=/\S/,k=/^\s+/,l=/\s+$/,m=/^<(\w+)\s\/?>(?:<\/\1>)?$/,n=/^[\],:{}\s]*$/,o=
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 74 29 3a 6a 2e 66 72 61 67 6d 65 6e 74 29 2e 63 68 69 6c 64 4e 6f 64 65 73 29 3b 72 65 74 75 72 6e 20 65 2e 6d 65 72 67 65 28 74 68 69 73 2c 61 29 7d 68 3d 63 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 67 5b 32 5d 29 3b 69 66 28 68 26 26 68 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7b 69 66 28 68 2e 69 64 21 3d 3d 67 5b 32 5d 29 72 65 74 75 72 6e 20 66 2e 66 69 6e 64 28 61 29 3b 74 68 69 73 2e 6c 65 6e 67 74 68 3d 31 2c 74 68 69 73 5b 30 5d 3d 68 7d 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 63 2c 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3d 61 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 72 65 74 75 72 6e 21 64 7c 7c 64 2e 6a 71 75 65 72 79 3f 28 64 7c 7c 66 29 2e 66 69 6e 64 28 61 29 3a 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 64 29 2e 66 69 6e 64 28 61 29 Data Ascii: t):j.fragment).childNodes);return e.merge(this,a)}h=c.getElementById(g[2]);if(h&&h.parentNode){if(h.id!==g[2])return f.find(a);this.length=1,this[0]=h}this.context=c,this.selector=a;return this}return!d\|\|d.jquery?(d\|\|f).find(a):this.constructor(d).find(a)
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 6f 74 79 70 65 3d 65 2e 66 6e 2c 65 2e 65 78 74 65 6e 64 3d 65 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 63 2c 64 2c 66 2c 67 2c 68 2c 69 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 6a 3d 31 2c 6b 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 74 79 70 65 6f 66 20 69 3d 3d 22 62 6f 6f 6c 65 61 6e 22 26 26 28 6c 3d 69 2c 69 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 7c 7c 7b 7d 2c 6a 3d 32 29 2c 74 79 70 65 6f 66 20 69 21 3d 22 6f 62 6a 65 63 74 22 26 26 21 65 2e 69 73 46 75 6e 63 74 69 6f 6e 28 69 29 26 26 28 69 3d 7b 7d 29 2c 6b 3d 3d 3d 6a 26 26 28 69 3d 74 68 69 73 2c 2d 2d 6a 29 3b 66 6f 72 28 3b 6a 3c 6b 3b 6a 2b 2b 29 69 66 28 28 61 3d 61 72 67 75 6d 65 6e 74 73 5b 6a 5d 29 21 3d Data Ascii: otype=e.fn,e.extend=e.fn.extend=function(){var a,c,d,f,g,h,i=arguments[0]\|\|{},j=1,k=arguments.length,l=!1;typeof i=="boolean"&&(l=i,i=arguments[1]\|\|{},j=2),typeof i!="object"&&!e.isFunction(i)&&(i={}),k===j&&(i=this,--j);for(;j<k;j++)if((a=arguments[j])!=
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 61 3d 3d 61 2e 77 69 6e 64 6f 77 7d 2c 69 73 4e 75 6d 65 72 69 63 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 69 73 4e 61 4e 28 70 61 72 73 65 46 6c 6f 61 74 28 61 29 29 26 26 69 73 46 69 6e 69 74 65 28 61 29 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 6e 75 6c 6c 3f 53 74 72 69 6e 67 28 61 29 3a 49 5b 43 2e 63 61 6c 6c 28 61 29 5d 7c 7c 22 6f 62 6a 65 63 74 22 7d 2c 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 7c 7c 65 2e 74 79 70 65 28 61 29 21 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 61 2e 6e 6f 64 65 54 79 70 65 7c 7c 65 2e 69 73 57 69 6e 64 6f 77 28 61 29 29 72 65 74 75 72 6e Data Ascii: ction(a){return a!=null&&a==a.window},isNumeric:function(a){return!isNaN(parseFloat(a))&&isFinite(a)},type:function(a){return a==null?String(a):I[C.call(a)]\|\|"object"},isPlainObject:function(a){if(!a\|\|e.type(a)!=="object"\|\|a.nodeType\|\|e.isWindow(a))return
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 61 72 20 66 2c 67 3d 30 2c 68 3d 61 2e 6c 65 6e 67 74 68 2c 69 3d 68 3d 3d 3d 62 7c 7c 65 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 3b 69 66 28 64 29 7b 69 66 28 69 29 7b 66 6f 72 28 66 20 69 6e 20 61 29 69 66 28 63 2e 61 70 70 6c 79 28 61 5b 66 5d 2c 64 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 3b 67 3c 68 3b 29 69 66 28 63 2e 61 70 70 6c 79 28 61 5b 67 2b 2b 5d 2c 64 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 69 66 28 69 29 7b 66 6f 72 28 66 20 69 6e 20 61 29 69 66 28 63 2e 63 61 6c 6c 28 61 5b 66 5d 2c 66 2c 61 5b 66 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 3b 67 3c 68 3b 29 69 66 28 63 2e 63 61 6c 6c 28 61 5b 67 5d 2c 67 2c 61 5b 67 2b 2b 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 Data Ascii: ar f,g=0,h=a.length,i=h===b\|\|e.isFunction(a);if(d){if(i){for(f in a)if(c.apply(a[f],d)===!1)break}else for(;g<h;)if(c.apply(a[g++],d)===!1)break}else if(i){for(f in a)if(c.call(a[f],f,a[f])===!1)break}else for(;g<h;)if(c.call(a[g],g,a[g++])===!1)break;ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	50047	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:32 UTC	613	OUT	GET /page/smarty/ajax.js?v=1-4 HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.trust-guard.com/privacy/12081 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
2024-04-19 05:32:32 UTC	719	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:32 GMT Content-Type: application/x-javascript Content-Length: 4008 Connection: close Last-Modified: Mon, 16 Dec 2013 16:36:34 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ER4sMwbtuHhAiR5WwaLPVvHBTudgQC0ZJHeWR5MKEjIPFHbdJTTIljm9UKDvaUnxzel1Io0F9XOwyeJ3t16zTzDju4qXn0eY5vKEdwD7%2Bo1t6GIr%2BGJlaMPwTZDJEe3BivFkG38I%2FKo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83bf3a3f138b-ATL
2024-04-19 05:32:32 UTC	650	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 43 61 6c 6c 41 6a 61 78 28 62 75 74 74 6f 6e 2c 20 65 6c 65 6d 73 2c 20 76 61 6c 75 65 73 2c 20 73 68 6f 77 29 0a 7b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 76 61 6c 75 65 73 29 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 0a 20 20 20 20 20 20 20 20 76 61 6c 75 65 73 20 3d 20 7b 7d 3b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 65 6c 65 6d 73 29 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 0a 20 20 20 20 20 20 20 20 65 6c 65 6d 73 20 3d 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 73 68 6f 77 29 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 24 69 73 73 69 6d 70 6c 65 28 73 68 6f 77 29 29 0a 20 20 20 20 20 20 20 Data Ascii: function CallAjax(button, elems, values, show){ if (typeof(values) == 'undefined') values = {}; if (typeof(elems) == 'undefined') elems = []; if (typeof(show) != 'undefined') { if ($issimple(show))
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 6c 65 6d 20 21 3d 20 6e 75 6c 6c 29 0a 20 20 20 20 20 20 20 20 7b 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 6c 65 6d 2e 74 79 70 65 20 3d 3d 20 27 63 68 65 63 6b 62 6f 78 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 73 5b 6b 65 79 5d 20 3d 20 28 65 6c 65 6d 2e 63 68 65 63 6b 65 64 29 20 3f 20 27 31 27 20 3a 20 27 30 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 73 5b 6b 65 79 5d 20 3d 20 28 65 6c 65 6d 2e 63 6c 61 73 73 4e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 27 77 61 74 65 72 6d 61 72 6b 27 29 20 3e 3d 20 30 29 20 3f 20 27 27 20 3a 20 65 6c 65 6d 2e 76 Data Ascii: if (elem != null) { if (elem.type == 'checkbox') values[key] = (elem.checked) ? '1' : '0'; else values[key] = (elem.className.indexOf('watermark') >= 0) ? '' : elem.v
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 76 61 72 20 62 6f 78 20 3d 20 24 67 65 74 28 69 64 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 62 6f 78 20 3d 3d 20 6e 75 6c 6c 20 26 26 20 69 64 2e 69 6e 64 65 78 4f 66 28 27 5f 27 29 20 3e 3d 20 30 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 20 3d 20 24 67 65 74 28 69 64 2e 72 65 70 6c 61 63 65 28 27 5f 27 2c 20 27 2e 27 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 62 6f 78 20 21 3d 20 6e 75 6c 6c 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 76 61 6c 75 65 20 3d 20 72 65 74 75 72 6e 64 61 74 61 5b 69 64 5d 3b 0a Data Ascii: var box = $get(id); if (box == null && id.indexOf('_') >= 0) box = $get(id.replace('_', '.')); if (box != null) { var value = returndata[id];
2024-04-19 05:32:32 UTC	620	IN	Data Raw: 6c 6f 63 61 6c 68 6f 73 74 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 65 72 74 28 72 65 74 75 72 6e 64 61 74 61 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 20 20 0a 20 20 20 20 20 20 20 20 7d 20 20 0a 20 20 20 20 7d 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 61 6a 61 78 5f 61 73 73 69 67 6e 62 6f 78 28 62 6f 78 2c 20 76 61 6c 75 65 73 29 0a 7b 0a 20 20 20 20 66 6f 72 20 28 6b 65 79 20 69 6e 20 76 61 6c 75 65 73 29 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 76 61 6c 75 65 20 3d 20 76 61 6c 75 65 73 5b 6b 65 79 5d 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 6b 65 79 20 3d 3d 20 27 76 Data Ascii: localhost') { alert(returndata.responseText); } } }); return false;}function ajax_assignbox(box, values){ for (key in values) { var value = values[key]; if (key == 'v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	50045	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:32 UTC	614	OUT	GET /page/smarty/tools.js?v=1-4 HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.trust-guard.com/privacy/12081 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
2024-04-19 05:32:32 UTC	719	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:32 GMT Content-Type: application/x-javascript Content-Length: 8151 Connection: close Last-Modified: Wed, 20 Mar 2013 19:46:12 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sFU7TJgA%2FvNlgWYWTrdqcCffQ8eLiaorLYM%2BRHTKg9lU8mSsqtvFzCkZI%2FS5jIWbJ7OH1xhBUQjP9zCrdmYEj6xoSZeTaSR7kJk24H0ecBHBKH2rpPpHXxQU1X6TWWNhwWWhwh2JIhg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83bf3b0917fb-ATL
2024-04-19 05:32:32 UTC	650	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 24 67 65 74 28 65 6c 65 6d 29 0d 0a 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 6c 65 6d 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 24 73 65 74 28 65 6c 65 6d 2c 20 76 61 6c 75 65 29 0d 0a 7b 0d 0a 20 20 20 20 69 66 20 28 24 69 73 73 69 6d 70 6c 65 28 65 6c 65 6d 29 29 0d 0a 20 20 20 20 20 20 20 20 65 6c 65 6d 20 3d 20 24 67 65 74 28 65 6c 65 6d 29 3b 0d 0a 20 20 20 20 69 66 20 28 65 6c 65 6d 20 3d 3d 20 6e 75 6c 6c 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 0d 0a 20 20 20 20 73 77 69 74 63 68 20 28 65 6c 65 6d 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 Data Ascii: function $get(elem){ return document.getElementById(elem);}function $set(elem, value){ if ($issimple(elem)) elem = $get(elem); if (elem == null) return false; switch (elem.tagName.toLowerCase()) {
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 63 68 65 63 6b 62 6f 78 27 3a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 65 6d 2e 63 68 65 63 6b 65 64 20 3d 20 28 76 61 6c 75 65 20 3d 3d 20 27 6f 6e 27 20 7c 7c 20 76 61 6c 75 65 20 3d 3d 20 31 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 72 61 64 69 6f 27 3a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 70 74 69 6f 6e 73 20 3d 20 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 65 6c 65 6d 2e 6e 61 6d 65 29 3b 0d 0a 20 20 20 20 20 Data Ascii: break; case 'checkbox': elem.checked = (value == 'on' \|\| value == 1); break; case 'radio': var options = getElementsByName(elem.name);
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 20 3d 3d 20 74 68 69 73 2e 68 6f 73 74 6e 61 6d 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 24 74 61 72 67 65 74 20 3d 20 24 28 74 68 69 73 2e 68 61 73 68 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 74 61 72 67 65 74 20 3d 20 24 74 61 72 67 65 74 2e 6c 65 6e 67 74 68 20 26 26 20 24 74 61 72 67 65 74 0d 0a 20 20 20 20 20 20 20 20 7c 7c 20 24 28 27 5b 6e 61 6d 65 3d 27 20 2b 20 74 68 69 73 2e 68 61 73 68 2e 73 6c 69 63 65 28 31 29 20 2b 27 5d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 24 74 61 72 67 65 74 2e 6c 65 6e 67 74 68 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 74 61 72 67 65 74 4f 66 66 73 65 74 20 3d 20 24 74 61 72 67 65 74 2e 6f 66 66 73 65 Data Ascii: && location.hostname == this.hostname) { var $target = $(this.hash); $target = $target.length && $target \|\| $('[name=' + this.hash.slice(1) +']'); if ($target.length) { var targetOffset = $target.offse
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 44 6f 77 6e 2e 63 6f 75 6e 74 72 79 6c 69 73 74 20 3d 20 5b 27 41 75 73 74 72 61 6c 69 61 27 2c 20 27 43 61 6e 61 64 61 27 2c 20 27 55 6e 69 74 65 64 20 53 74 61 74 65 73 27 2c 20 27 55 6e 69 74 65 64 20 4b 69 6e 67 64 6f 6d 27 5d 3b 0d 0a 43 61 73 63 61 64 69 6e 67 44 72 6f 70 44 6f 77 6e 2e 62 69 6c 6c 69 6e 67 63 6f 75 6e 74 72 79 6c 69 73 74 20 3d 20 7b 27 41 55 53 27 3a 27 41 75 73 74 72 61 6c 69 61 27 2c 20 27 43 41 4e 27 3a 27 43 61 6e 61 64 61 27 2c 20 27 55 53 41 27 3a 27 55 6e 69 74 65 64 20 53 74 61 74 65 73 27 2c 20 27 47 42 52 27 3a 27 55 6e 69 74 65 64 20 4b 69 6e 67 64 6f 6d 27 20 7d 3b 20 0d 0a 43 61 73 63 61 64 69 6e 67 44 72 6f 70 44 6f 77 6e 2e 73 74 61 74 65 6c 69 73 74 20 3d 20 7b 0d 0a 20 20 20 20 27 55 6e 69 74 65 64 20 53 74 61 74 Data Ascii: Down.countrylist = ['Australia', 'Canada', 'United States', 'United Kingdom'];CascadingDropDown.billingcountrylist = {'AUS':'Australia', 'CAN':'Canada', 'USA':'United States', 'GBR':'United Kingdom' }; CascadingDropDown.statelist = { 'United Stat
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 6c 69 73 74 20 3d 20 73 6c 61 76 65 6c 69 73 74 3b 0d 0a 20 20 20 20 0d 0a 20 20 20 20 74 68 69 73 2e 6d 61 73 74 65 72 6e 61 6d 65 20 3d 20 74 68 69 73 2e 6d 61 73 74 65 72 2e 6e 61 6d 65 3b 0d 0a 20 20 20 20 74 68 69 73 2e 73 6c 61 76 65 6e 61 6d 65 20 3d 20 74 68 69 73 2e 73 6c 61 76 65 2e 6e 61 6d 65 3b 0d 0a 20 20 20 20 0d 0a 20 20 20 20 74 68 69 73 2e 73 6c 61 76 65 62 6f 78 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6e 70 75 74 27 29 3b 0d 0a 20 20 20 20 74 68 69 73 2e 48 69 64 65 45 6c 65 6d 65 6e 74 28 74 68 69 73 2e 73 6c 61 76 65 62 6f 78 2c 20 74 72 75 65 2c 20 74 68 69 73 2e 73 6c 61 76 65 6e 61 6d 65 29 3b 0d 0a 20 20 20 20 0d 0a 20 20 20 20 74 68 69 73 2e 73 6c 61 76 65 2e 70 61 72 65 6e 74 4e 6f 64 Data Ascii: list = slavelist; this.mastername = this.master.name; this.slavename = this.slave.name; this.slavebox = document.createElement('input'); this.HideElement(this.slavebox, true, this.slavename); this.slave.parentNod
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 53 68 6f 77 48 69 64 65 28 74 68 69 73 2e 73 6c 61 76 65 62 6f 78 2c 20 74 68 69 73 2e 73 6c 61 76 65 2c 20 74 68 69 73 2e 73 6c 61 76 65 6e 61 6d 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 20 20 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 48 69 64 65 45 6c 65 6d 65 6e 74 28 74 68 69 73 2e 6f 74 68 65 72 62 6f 78 2c 20 66 61 6c 73 65 2c 20 74 68 69 73 2e 6d 61 73 74 65 72 6e 61 6d 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 53 68 6f 77 48 69 64 65 28 74 68 69 73 2e 73 6c 61 76 65 62 6f 78 2c 20 74 68 69 73 2e 73 6c 61 76 65 2c 20 74 68 69 73 2e 73 6c 61 76 65 6e 61 6d 65 29 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a Data Ascii: { this.ShowHide(this.slavebox, this.slave, this.slavename); } } else { this.HideElement(this.otherbox, false, this.mastername); this.ShowHide(this.slavebox, this.slave, this.slavename); }}
2024-04-19 05:32:32 UTC	656	IN	Data Raw: 67 74 68 3b 20 69 2b 2b 29 20 0d 0a 20 20 20 20 20 20 20 20 7b 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 48 69 64 65 45 6c 65 6d 65 6e 74 28 65 6c 65 6d 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 69 5d 2c 20 68 69 64 65 2c 20 62 61 73 65 6e 61 6d 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 20 20 20 20 20 20 20 20 20 0d 0a 7d 0d 0a 0d 0a 0d 0a 0d 0a 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 46 69 6c 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 2c 20 63 6c 65 61 72 29 20 0d 0a 7b 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 69 66 20 28 63 6c 65 61 72 20 21 3d 3d 20 66 61 6c 73 65 29 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 Data Ascii: gth; i++) { this.HideElement(elem.childNodes[i], hide, basename); } } }Element.prototype.Fill = function(options, clear) { if (clear !== false) this.options.length

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	50049	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:32 UTC	611	OUT	GET /page/js/certificates.js HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.trust-guard.com/privacy/12081 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
2024-04-19 05:32:32 UTC	719	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:32 GMT Content-Type: application/x-javascript Content-Length: 1406 Connection: close Last-Modified: Fri, 14 Jun 2013 22:20:39 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dKyQrdg5opz1kqM3EPBKDy5xvqy41B3z6aCnFi9GjoCNcLCtcIupWYNLpFy9AGx2gTsR81E%2F0VF1KXmknDpaiw2QyHwc5B0UfVgso0HitFJ%2F9fCu4z6EFJYypqY%2FzHATg7y1FNnZz78%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83bf4fe3b0cf-ATL
2024-04-19 05:32:32 UTC	650	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 24 28 27 23 79 65 73 2d 76 6f 74 65 27 29 2e 63 6c 69 63 6b 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 24 28 27 23 74 68 61 6e 6b 79 6f 75 27 29 2e 73 6c 69 64 65 44 6f 77 6e 28 35 30 30 29 3b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 67 76 6f 74 65 64 20 21 3d 20 27 79 65 73 27 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 67 61 71 2e 70 75 73 68 28 5b 27 5f 74 72 61 63 6b 45 76 65 6e 74 27 2c 20 27 43 65 72 74 69 66 69 63 61 74 65 27 2c 20 27 76 6f 74 65 27 2c 20 74 67 63 65 72 74 64 6f 6d 61 69 6e 20 2b 20 27 3a 20 79 65 73 27 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 67 76 6f Data Ascii: $(document).ready(function () { $('#yes-vote').click( function() { $('#thankyou').slideDown(500); if (tgvoted != 'yes') { _gaq.push(['_trackEvent', 'Certificate', 'vote', tgcertdomain + ': yes']); tgvo
2024-04-19 05:32:32 UTC	756	IN	Data Raw: 20 20 20 20 20 69 66 20 28 74 67 76 6f 74 65 64 20 21 3d 20 24 28 27 23 66 65 65 64 62 61 63 6b 27 29 2e 76 61 6c 28 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 67 61 71 2e 70 75 73 68 28 5b 27 5f 74 72 61 63 6b 45 76 65 6e 74 27 2c 20 27 43 65 72 74 69 66 69 63 61 74 65 27 2c 20 27 66 65 65 64 62 61 63 6b 27 2c 20 74 67 63 65 72 74 64 6f 6d 61 69 6e 20 2b 20 27 3a 20 27 20 2b 20 24 28 27 23 66 65 65 64 62 61 63 6b 27 29 2e 76 61 6c 28 29 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 67 76 6f 74 65 64 20 3d 20 24 28 27 23 66 65 65 64 62 61 63 6b 27 29 2e 76 61 6c 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 20 20 20 20 0a 20 20 20 20 7d 29 3b 0a 20 20 20 20 0a 20 20 20 20 24 28 Data Ascii: if (tgvoted != $('#feedback').val()) { _gaq.push(['_trackEvent', 'Certificate', 'feedback', tgcertdomain + ': ' + $('#feedback').val()]); tgvoted = $('#feedback').val(); } return false; }); $(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	50048	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:32 UTC	702	OUT	GET /page/templates/certificates/images/trustguard-logo.jpg HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.trust-guard.com/privacy/12081 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
2024-04-19 05:32:32 UTC	718	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:32 GMT Content-Type: image/jpeg Content-Length: 5925 Connection: close Cf-Bgj: h2pri Last-Modified: Tue, 23 Apr 2013 21:24:10 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ucfi2Z7T64xW2Jm4ABz2PkUQblLPI0xGIsSOCIv1J0w6qgzEg2GwTeQtyupxJngk0w5AscopeNaQ5UiXUsmxCLNaZpRXBAkE88LVKYVD%2BN%2BhyUmps3sJxmwdMu500TTDWdL3C1K02VI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83bf4fb26782-ATL
2024-04-19 05:32:32 UTC	651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 2a 01 0e 03 01 11 00 02 11 01 03 11 01 ff c4 00 b0 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 08 03 09 02 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDuckyFAdobed*
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 00 68 03 40 1a 00 d0 06 80 34 01 a0 0d 00 68 03 40 1a 00 d0 06 80 cb 99 af c9 fe e2 c3 1f bf 93 27 a0 ac de c6 28 9c 96 a7 7e 56 de 94 77 21 44 32 4f 73 b7 e5 e7 c4 08 07 9e dc 97 64 fa ae 80 63 c5 7e 61 f6 e6 6f 4c d6 43 89 7c 7d b2 b8 a4 7c 8c 19 9d 12 e7 9b 44 4d 12 81 a2 2f e5 bf 42 45 45 d0 1a e2 0b ef 49 85 1a 4c 86 16 33 ef 34 0e 3b 18 97 92 b6 66 28 aa 0a bb 26 ea 2a bb 79 68 0c 7b 8a fc d7 ec 6c f0 ec bf 91 ba 2e 76 40 c5 53 de de 63 d0 ae b9 a3 66 5c b8 a1 7f ed de 0a 48 2a ba 01 45 d7 cd 5c df 09 b4 a5 8d d9 9d 27 65 8a 54 dc c9 48 c1 61 22 d3 d5 54 14 21 47 09 b6 ca 0b 42 64 08 48 5c 3d 41 df f1 d0 1a da d6 77 e5 95 73 6c bd 3f 57 d9 c7 76 47 a5 bf 1e 5e 90 29 f1 df 65 db 7d bc f6 d0 15 3f c6 fe f8 ff 00 88 2c 3a cb 2c fe 5f fe 5d fc ba cc ea Data Ascii: h@4h@'(~Vw!D2Osdc~aoLC\|}\|DM/BEEIL34;f(&yh{l.v@Scf\HE\'eTHa"T!GBdH\=Awsl?WvG^)e}?,:,_]
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: c2 91 8e e4 98 d4 d4 76 a2 92 45 4c 16 1a 9e ae a8 72 08 f3 22 ac 76 d0 dd 10 4f 48 8d b3 12 4d b8 72 55 db 40 7a 43 93 36 6e e3 97 0d 34 2a 6e 9c 19 22 00 29 ba a9 13 24 88 88 9f a7 40 60 ef 83 3d d9 d5 7d 67 d6 37 d4 b9 de 4f 16 8e d2 4d f3 d3 18 8b 25 1d 53 36 0a 1c 56 d0 d3 80 12 6d c8 09 3f a3 40 24 f9 d3 dc dd 61 d9 f8 3e 2f 55 80 e4 91 af 6c 62 5b 94 89 31 e2 a3 bc c1 a2 8c 60 84 bc c0 7c c9 51 3c 34 07 a0 d5 cd 90 57 44 69 c1 e2 62 c3 62 62 be 68 a8 08 8a 8b a0 3c f1 8d 86 74 cf 5e 59 5b d4 e0 3f 27 ac f0 88 2e 4c 75 66 52 33 1e 4a 1b 6f b4 4a da 83 aa d9 b1 c8 9b 44 e1 b9 06 fe 1a 03 9e 1f d9 79 56 3b f2 2b af 31 6c 37 ba ed 3b 4b 16 bc 7d 96 6e bd df ad ed c1 1f 71 c6 dc 69 5a 79 c7 7c 45 b4 47 50 d3 6d b4 07 a3 9a 03 11 7c d4 ff 00 7d fd 01 fe Data Ascii: vELr"vOHMrU@zC6n4*n")$@`=}g7OM%S6Vm?@$a>/Ulb[1`\|Q<4WDibbbh<t^Y[?'.LufR3JoJDyV;+1l7;K}nqiZy\|EGPm\|}
2024-04-19 05:32:32 UTC	1369	IN	Data Raw: 52 8b 41 6d 3c b9 4a ab b0 e2 8a a3 06 59 fd cd b9 fe 2c fc 7f 1d 6a 6e 76 d1 bf 0d 2c e6 fb 8e c2 de f2 cb b7 3e c1 65 00 45 79 f2 a6 b8 69 2a b2 36 1b 47 5f ad 92 40 8a 6d 6d ba 3d 1d cd f8 3e c1 27 88 ba d1 2a 6d e7 b6 bc d3 d9 b8 3a 33 e5 b7 bd 8a 7b 79 69 92 23 99 53 d4 72 eb e4 cc 72 c5 2b 70 88 87 e8 dc 65 00 3c c4 cf eb 0a b0 7c e5 cc 73 f6 45 1b dc 03 cc 97 5b 16 3d bf d4 95 5e 47 4f db 3f e6 fd 5b 8a 77 15 20 be 25 f3 f1 fb ae ac 22 c8 7b b3 32 3a b5 a3 7e 5c 16 a9 70 cc 61 cf 17 29 b1 c6 4b d4 6c 1d ff 00 c4 c9 3f df 48 5f 3d fc 3f 14 d7 a7 49 25 44 7d 3e 31 51 54 59 17 c9 80 3a 04 db 82 86 d9 a2 89 81 26 e2 a2 be 0a 8a 8b e6 8b ac 92 20 8e f4 7f 4a c8 70 9e 7f ae 31 77 5e 35 dc dc 3a 4a f2 22 5f c5 55 58 dd 74 02 da 5e a7 ea cc 6e 7b 56 b8 ee Data Ascii: RAm<JY,jnv,>eEyi6G_@mm=>'m:3{yi#Srr+pe<\|sE[=^GO?[w %"{2:~\pa)Kl?H_=?I%D}>1QTY:& Jp1w^5:J"_UXt^n{V
2024-04-19 05:32:32 UTC	1167	IN	Data Raw: 28 bc bc 4b 9e c8 9a 94 a4 fc 54 e6 36 37 37 66 95 ed 38 38 c1 35 9f f5 74 d3 87 0e da 88 32 1c fa ea 96 55 3c 38 03 0e 6b 52 e0 31 2d 27 38 71 d8 62 6b ae 97 15 6e 39 c9 9c c2 06 e8 9c d1 47 d7 5f bc 7c 3e ab 89 5c 6a 9c bb ca 77 1b fb 96 dc 54 68 eb 14 eb 82 52 e8 55 9a fd 59 a2 ca d6 c1 dd 0d 00 8e d6 a6 b2 f6 b6 55 3d cc 46 67 d5 4d 6c 99 97 0e 48 0b ac ba d9 79 89 09 22 a2 a6 80 ce 59 07 c6 8c 86 94 46 bb ad 27 d4 5b 61 3e a2 ba ce 11 9d b2 f5 85 7d 73 ab e3 ce be 4b 48 52 1a 14 5f f1 3b f0 5f 25 f0 d4 65 15 2c d1 09 42 32 54 92 a9 30 c0 be 3f 42 aa b6 85 99 f6 45 9f f3 96 6f 04 10 2a fd 46 42 35 35 48 a7 fc ca d8 00 88 db 48 9f 43 54 e5 fa b5 22 65 d3 a0 0d 01 45 5b 64 79 2c 48 79 a5 4b 36 12 bd c4 c7 ac e7 d5 4b f5 4f 94 48 f5 ae 49 49 00 d9 6f b8 Data Ascii: (KT677f885t2U<8kR1-'8qbkn9G_\|>\jwThRUYU=FgMlHy"YF'[a>}sKHR_;_%e,B2T0?BEo*FB55HHCT"eE[dy,HyK6KOHIIo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	50050	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:33 UTC	688	OUT	GET /certificates/newimages/privacy-12081.png HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.trust-guard.com/privacy/12081 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
2024-04-19 05:32:33 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:33 GMT Content-Type: image/png Content-Length: 186610 Connection: close Last-Modified: Fri, 19 Apr 2024 05:16:21 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UUqlj65lam3i7sJONX9991%2BYsUf9CksD2sIMLZDR5yviaK18q7WzAMDNvLBhob7%2BAuwIJryd7J6NO8q1fhQwp%2F2reaGcem9p10uDLV%2FojgHqZf69kU0i841PjShbLfYHLAT8y8Kca2A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83c37dc4678a-ATL
2024-04-19 05:32:33 UTC	668	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b9 00 00 01 1a 08 02 00 00 00 03 be be 3f 00 00 20 00 49 44 41 54 78 9c ec bd 79 90 65 57 79 27 f8 dd b3 dc ed ad f9 72 cf da ab a4 2a 2d 20 89 45 02 09 2c cb 60 04 42 32 2d d1 32 76 db 60 da d0 23 bb 07 37 d1 4d 87 1d 84 c7 a6 3d 34 31 ed 30 63 9b 68 db 83 b0 09 bb d9 09 09 84 b0 7b b0 06 0b da 46 58 02 61 2d 40 69 2b d5 a2 aa cc ac cc ca 7c f9 d6 bb 9e 75 fe 38 ef 9e 77 5f 96 4a 4d 74 3b 1a 23 f2 8b 8a ac bb 9e 77 97 73 7e e7 5b 7e df 77 1d ad 35 ec c8 8e ec c8 8e bc a0 58 a0 50 4a d9 65 a7 10 b3 fc 43 bb b8 ff 25 42 7e d8 17 b0 23 3b b2 23 ff a4 c5 20 a3 52 4a 29 25 a5 94 52 9a 65 00 40 08 e1 42 10 42 16 37 5f 94 b2 83 95 3b b2 23 3b 72 41 d1 5a 6b ad a5 94 79 9e 0f 87 c3 e1 70 68 e0 b2 d3 e9 24 Data Ascii: PNGIHDR? IDATxyeWy'r*- E,`B2-2v`#7M=410ch{FXa-@i+\|u8w_JMt;#ws~[~w5XPJeC%B~#;# RJ)%Re@BB7_;#;rAZkyph$
2024-04-19 05:32:33 UTC	1369	IN	Data Raw: 0d 5c ee 60 e5 8e ec c8 8f a3 1c 3f 7e fc fd ef 7f ff 36 bb db 00 e5 f5 d7 5f 6f 80 b2 be d0 9c aa 4f 85 d4 c7 18 13 4c 30 c2 68 12 f5 3a 9d ce f7 bf ff 7d c3 1f aa 54 2a 87 0e 1d a2 94 9e 38 71 e2 99 67 9e 99 9e 9e 3e 74 e8 d0 ae 5d bb 5e 34 a1 1e f4 c3 be 80 1d d9 91 1d f9 5f 2d 83 c1 e0 c3 1f fe 30 21 c4 f7 7d df f7 83 92 5c 72 c9 25 87 0f 1f 76 1c 67 69 d7 e2 42 63 b6 46 43 17 53 17 53 32 09 94 52 c9 4e d6 8f 68 be 70 78 37 c2 08 00 e2 38 7e f6 d9 67 95 52 17 5d 74 d1 ec ec 6c 1c c7 ab ab ab 9d 4e 47 4a f9 e2 50 c8 76 f8 95 3b b2 23 3f 76 f2 a9 4f 7d 2a 4d d3 20 08 ca 1a 25 21 24 0c c3 ab af be 1a 00 66 67 67 6a 61 15 23 62 f5 c1 4c e4 5d 36 ec e5 c3 41 1e f7 59 d4 c9 06 42 89 80 f8 5c 09 67 4a cf 6d 79 8e 86 34 4d cf 9c 39 73 e0 c0 81 ab af be fa fe Data Ascii: \`?~6_oOL0h:}T8qg>t]^4_-0!}\r%vgiBcFCSS2RNhpx78~gR]tlNGJPv;#?vO}M %!$fggja#bL]6AYB\gJmy4M9s
2024-04-19 05:32:33 UTC	1369	IN	Data Raw: 33 a6 39 c1 64 36 98 6a 05 f5 2a 0d 7f 90 5f 0c 88 b7 77 69 cf b3 cf 3e 0b 00 9d 4e 07 00 e6 e6 e6 9e 7a ea a9 3c cf 09 21 3f a2 66 f8 0e 56 ee c8 8e bc c8 25 cb 32 ce 79 39 b0 63 40 d3 71 9c 3c cf 01 80 52 ea 62 6a d2 72 b4 d6 42 09 a6 f2 44 e5 d2 51 15 2f 5c f4 67 aa 5e 48 f0 38 b6 a3 b4 e6 8a 33 c9 85 96 42 49 a1 a4 d6 5a 81 d6 5a 63 07 61 8c 08 60 bf 51 31 07 e7 79 1e c7 71 b5 5a 75 5d 37 cb b2 30 0c e3 38 6e 36 9b 3f f2 7a a5 52 ea 99 67 9e 79 e2 89 27 da ed f6 fa fa ba a9 4c b7 23 3b b2 23 3f ba f2 96 b7 bc 45 6b 6d 9c 95 f6 cb 62 c6 00 57 4a 21 84 bc 42 cb d3 a0 99 e2 99 60 1c 64 c5 0b 5b 61 23 70 7d 84 10 72 90 06 2d 95 62 92 33 25 52 91 6d 65 fd 7e 3e 8c 78 3a 64 49 22 32 a1 84 50 82 2b 89 1d e4 13 2f 24 5e 40 bc 86 4f 65 c6 01 a0 df ef 57 ab d5 Data Ascii: 39d6j*_wi>Nz<!?fV%2y9c@q<RbjrBDQ/\g^H83BIZZca`Q1yqZu]708n6?zRgy'L#;#?EkmbWJ!B`d[a#p}r-b3%Rme~>x:dI"2P+/$^@OeW
2024-04-19 05:32:33 UTC	1369	IN	Data Raw: f9 e0 6c d2 5d 0a 5b d3 c5 08 14 5a ae a5 9d 2a f1 5b 13 5b ba 4d b7 62 2f 20 15 ec 5c da 5d 0a 5b a4 04 b8 4a ab 19 bf 6e 56 a5 56 1b 69 7f d6 6f d8 a7 d1 cd 23 8c b0 1d 78 89 c8 13 c1 ec e5 49 ad 06 2c 99 2d 4e 07 80 0e 8b ea 34 dc ca 87 e6 94 21 4f b4 86 90 ba c5 93 49 01 9c 31 70 f3 c4 8e 37 00 48 24 ab bb 63 ef 7b 2e 78 10 8e f7 32 c5 1b 34 30 3f 4a 1c 9c 4b 56 a7 15 00 e0 52 54 89 cf 94 a8 b8 7e 22 b2 90 78 5c 09 00 a0 88 a4 92 4d b9 15 a6 24 05 9c 0a 46 10 01 00 ae a4 8b c8 40 27 1e a2 e6 75 78 98 6a d0 d8 41 4a 6b c3 4c 26 0e 06 00 a1 14 72 1c 26 45 95 f8 00 20 b4 ca 25 b7 3d 58 69 cd 94 30 ab 4a 6b a1 79 d9 23 26 b4 ac e1 b0 78 83 b9 5f cc a6 1a 80 6b 19 14 4f 40 68 a9 b4 b6 6d e6 8a 53 67 dc 1f 72 25 66 8b 23 99 14 18 c6 3e b2 5c f2 4a 01 64 a9 Data Ascii: l][Z*[[Mb/ \][JnVVio#xI,-N4!OI1p7H$c{.x240?JKVRT~"x\M$F@'uxjAJkL&r&E %=Xi0Jky#&x_kO@hmSgr%f#>\Jd
2024-04-19 05:32:33 UTC	1369	IN	Data Raw: 34 7e 71 a9 e0 35 62 4d 18 01 00 56 3f 4a 25 9b f2 6a a6 57 c5 22 73 31 66 92 1b e5 25 97 1c 39 48 28 e1 22 12 f1 14 81 c3 94 c0 08 21 07 49 2d 35 00 93 9c 20 cc 95 44 05 23 8f 22 2c b5 a6 88 98 68 80 02 e5 16 30 0a e0 30 29 cc cb 95 5a a6 92 91 c2 21 2e b5 96 a0 88 43 01 40 8f a2 b1 8a 8c 14 1c 25 94 b4 af 55 83 ca 04 ab 16 30 c7 24 27 c8 aa 9c 9a 4b 49 5d 62 6f b3 ec 70 17 5a d4 8a 37 5e fe 69 73 9b b4 e4 05 62 72 0c b8 a9 c8 5d 34 06 c7 17 80 d1 54 32 1f 95 55 4e 36 5d 1c 39 e4 a9 5b d2 5b e3 42 8b 31 92 88 7c b1 e8 03 99 64 1a b4 9d 6b 23 9e 86 c4 b3 fd a7 cf 92 b2 7d dd 65 51 95 8c 4b 51 f4 58 54 2b 29 a4 3d 16 85 c4 65 3c 42 08 51 4a 2f 84 95 0e 72 1c 70 3c ec 5a 28 cc 25 ef 65 43 e5 e8 d9 ca 54 2b 68 b8 84 e2 d2 b3 8a 78 7a aa bf 7a 36 de 5c 8b db Data Ascii: 4~q5bMV?J%jW"s1f%9H("!I-5 D#",h00)Z!.C@%U0$'KI]bopZ7^isbr]4T2UN6]9[[B1\|dk#}eQKQXT+)=e<BQJ/rp<Z(%eCT+hxzz6\
2024-04-19 05:32:33 UTC	1369	IN	Data Raw: ac d4 00 52 c9 b2 0f dd 5e 09 00 64 25 b7 29 00 24 82 2d 16 8e 5d a6 44 d9 e9 c6 94 b0 2e 60 3b ba 8c bc 30 8c 06 65 b7 e6 24 8c 6a ad 6d 37 88 78 56 06 c7 4c 32 6b 76 30 25 b8 92 d6 3b 39 e4 29 2e 02 47 00 d0 67 b1 8d 68 01 c0 90 27 55 1a 94 54 ce a1 59 35 f4 6f 5b 93 dc fc 35 40 a9 b5 36 7c 20 ab 51 26 22 63 20 aa 6e 50 f3 aa 6e a1 69 0a 2d d7 a2 ad d5 78 23 97 bc e5 37 5f 32 7d 51 dd ad 38 0e c2 30 6a 0b 26 65 4f 6d 7e 57 65 f6 9a f9 cb a5 96 4f 1c 7b 2a d9 18 00 80 c1 65 cf f3 06 83 81 d6 9a 31 86 c0 99 0f a6 d6 d3 6e 3b 1b cc 14 e0 38 eb 37 d6 92 6e 50 c0 5f 40 3c 0f d3 4e 3e 34 78 8a 1d 54 a5 7e 9f 25 06 2b cd 6a 2c 46 0f 10 3b 28 c0 ee 80 c5 06 6a 29 22 c4 41 56 97 34 56 39 57 62 14 5f c1 74 c0 12 7b cd 01 76 63 91 5b e8 34 6f d3 2c 68 80 c3 87 0f Data Ascii: R^d%)$-]D.`;0e$jm7xVL2kv0%;9).Ggh'UTY5o[5@6\| Q&"c nPni-x#7_2}Q80j&eOm~WeO{*e1n;87nP_@<N>4xT~%+j,F;(j)"AV4V9Wb_t{vc[4o,h
2024-04-19 05:32:33 UTC	1369	IN	Data Raw: ec 2d 1b 42 9e c1 ca 00 bb ed b4 6f 77 51 84 8d 63 ca 48 bd 5e 1f 0c 06 24 cb 32 df f7 01 80 38 b8 e5 d5 5a 5e 2d 97 7c c0 13 03 49 3e 76 43 e2 d6 69 18 94 b8 4e ff 88 32 72 5c 8a 6c c0 e2 54 e4 55 1a d4 68 b8 e7 02 56 f9 46 d6 3f 97 f6 00 60 fe 3c 94 14 4a 9e 4d 3a ed 7c 30 1f 34 77 85 d3 e5 5d ab c9 56 37 1f 2e 06 53 33 a5 53 ba 79 b4 9a 6e 2d 04 53 33 5e bd 7c 64 9f c5 fb ab f3 65 58 3c 13 6f ce f9 0d 8b 7a b9 e4 cb 71 7b d6 af 4f d2 21 fb 4b e1 b4 55 46 ba 2c ca 25 df 57 9d b3 2d af 25 9d 3a 0d ed 4d 0d 79 ca 14 9f 0b c6 b4 a1 0e 8b 5a 6e d5 f6 f5 3e 8b 7d e4 da 61 99 f0 1c 05 26 38 0e 1a 80 2b 61 5c 39 00 20 b5 c4 0e ca 24 5b 08 a6 d6 44 d7 c5 44 69 15 cb 7c d6 ab 9f 8e 37 2a c4 57 5a 99 fe 51 80 9a ce 05 57 1a 8c fb 4c 69 dd 63 71 75 62 40 e6 07 ab Data Ascii: -BowQcH^$28Z^-\|I>vCiN2r\lTUhVF?`<JM:\|04w]V7.S3Syn-S3^\|deX<ozq{O!KUF,%W-%:MyZn>}a&8+a\9 $[DDi\|7*WZQWLicqub@
2024-04-19 05:32:33 UTC	1369	IN	Data Raw: 17 6d cc 07 cd 32 01 f3 f4 f3 10 30 37 03 e2 59 1c 14 5a 9e 4d b6 66 fc 7a 49 a7 c8 fa 2c 29 47 cf cf a5 bd 0a 0d c6 8c 65 91 c7 3c b3 21 a0 cd cd cd 77 fd ea ff f6 9f 3e fe 11 4b 61 d9 cc 06 04 63 8b 5f 43 9e 0a 2d ad 4b 8b 29 6e 1c 97 00 00 1a a4 96 b1 c8 47 94 34 0d 4a ab 44 e6 4d b7 9a e5 0c 8c e3 52 e4 0d b7 02 23 9f b2 36 e4 44 33 dd 19 2f a1 f5 c0 4a ad b8 12 16 c1 a5 56 5a 6b 0b 37 5c 49 d0 13 a1 73 13 4c 84 02 e0 c6 d3 9e e2 04 63 63 c9 32 29 02 ec 4a 2d 4d b7 ce 64 5e 21 7e ae 18 76 68 c4 53 0f 53 a9 94 e3 80 03 8e 71 1a 2a ad 10 20 a9 d5 88 1d 0d 9a 38 c8 cc ce 1a b4 d6 60 b5 5a a3 8d 42 41 f1 35 76 7d 59 e5 64 52 8e 09 43 82 95 3d 86 09 cf 2d d1 2f 57 13 1e 49 a9 15 29 f1 2e 85 56 36 f0 cd b5 a0 13 d1 a1 7c 57 65 b4 2b 93 7c 12 46 a5 8d 38 65 Data Ascii: m207YZMfzI,)Ge<!w>Kac_C-K)nG4JDMR#6D3/JVZk7\IsLcc2)J-Md^!~vhSSq* 8`ZBA5v}YdRC=-/WI).V6\|We+\|F8e
2024-04-19 05:32:33 UTC	1369	IN	Data Raw: 80 51 f9 42 c6 94 6c 61 d7 ac 96 69 cf 52 ab 44 b0 b9 60 9c 20 e4 38 60 15 ae 54 32 ea 20 5b 2c 56 69 4d 00 db 78 b7 2c a3 aa 36 0a e9 98 02 29 b5 a6 78 04 70 26 c8 53 ca f9 51 e5 e8 ab 41 55 c7 01 a4 4d cb da 45 58 6a e9 61 aa b4 06 c7 b1 0e 4a 13 ef 4d 05 2b c5 97 b3 a0 cc 76 54 13 58 53 9e 3f b6 59 61 ba 94 9a 26 4b f3 01 93 62 12 e6 d8 4c d1 79 12 91 93 49 1d b3 4c c9 2c 13 12 62 91 6f e3 75 86 41 b1 8b 67 db da 1f 4f f6 5a e5 92 db 3e 10 8b cc 2f a1 58 24 72 47 c3 ae 5d bb e0 3c 49 d3 34 cf 73 df f7 a1 a4 9e e7 92 09 90 55 2f f4 89 87 1c a4 b4 1a e4 51 3b ef 13 84 f7 d4 e6 9b 7e 95 8e 7c ca 3a 11 e9 7a b2 b5 91 74 36 93 5e 26 73 ae a4 d0 52 28 81 c0 99 09 9a 4b d5 b9 43 8d 5d 75 b7 0a 85 03 d9 54 ca 58 5b 5b 03 80 66 b3 a9 94 22 08 cf f8 f5 8d b4 d7 Data Ascii: QBlaiRD` 8`T2 [,ViMx,6)xp&SQAUMEXjaJM+vTXS?Ya&KbLyIL,bouAgOZ>/X$rG]<I4sU/Q;~\|:zt6^&sR(KC]uTX[[f"
2024-04-19 05:32:33 UTC	1369	IN	Data Raw: 80 27 15 ec 1b 22 91 03 90 c8 7c d6 6f 28 d0 0e 38 b1 18 a1 86 d6 1a 21 27 57 bc 4a 03 73 77 4c f2 b2 7a a8 40 d1 09 06 f1 04 8c 96 a5 0c a9 5a 83 53 d2 2d ca 58 66 32 9a ec ae b2 0e 1b 4f f2 2e b3 82 a4 02 e7 c1 68 b9 02 48 2a 58 d9 c8 35 15 4c cc 72 ae b8 2e f8 d2 f0 7c 30 3a 3b 2e 08 90 b8 88 b8 61 45 6b bd 6f df 3e 3b ac ac b4 db ed c5 c5 45 cb 1d 60 8a 63 8c bd 82 33 94 88 ac cf 22 4a c8 7c d8 aa ba 21 72 1c ae f8 b9 a4 bb 12 9d cb 05 ab bb 95 86 5b 6d 78 b5 0a f5 cb c5 d2 7b 79 d4 cb 06 67 e3 cd 33 d1 fa f7 db cf 66 e9 5c 03 7c 00 30 64 9b 76 bb dd 68 34 ea f5 ba 2a 00 ba e5 d5 56 e2 f6 94 37 22 81 d4 68 b0 99 0d 66 60 a4 40 98 22 17 b5 22 32 e3 62 3a e4 a9 59 0d 88 67 ed 77 00 f0 90 6b f8 bf 00 e0 22 a2 61 5c 96 c5 c5 74 50 8a e1 04 c4 b5 8e 48 ea Data Ascii: '"\|o(8!'WJswLz@ZS-Xf2O.hHX5Lr.\|0:;.aEko>;E`c3"J\|!r[mx{yg3f\\|0dvh4V7"hf`@""2b:Ygwk"a\tPH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	50051	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:33 UTC	710	OUT	GET /page/templates/certificates/images/white-box_mid.png HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.trust-guard.com/page/css/split-cert.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
2024-04-19 05:32:33 UTC	709	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:33 GMT Content-Type: image/png Content-Length: 125 Connection: close Last-Modified: Tue, 23 Apr 2013 21:24:10 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jj0bj4%2Fgg9Vg%2F3gzQ9I3co5TTBGbNLYHYGOuPjtEjxtiOtwOHKhMI4fenlxR%2FVYubuJYUS0m8qrbzzetA%2F2HHUDM9OZ3tD%2FRDFMMm2rgdfRX3pXuZU16f2IaErf%2BYKpiK9kzIzdVbvA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83c398af454b-ATL
2024-04-19 05:32:33 UTC	125	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b9 00 00 00 01 08 02 00 00 00 cc d8 47 d3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 1f 49 44 41 54 78 da 62 ac ad ad 6d 6a 6a 62 18 05 a3 60 14 8c 82 51 80 03 d4 d5 d5 01 04 18 00 78 1d 04 79 4c 85 95 15 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRGtEXtSoftwareAdobe ImageReadyqe<IDATxbmjjb`QxyLIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	50053	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:33 UTC	694	OUT	GET /page/templates/certificates/images/ssl-img.jpg HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.trust-guard.com/privacy/12081 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
2024-04-19 05:32:33 UTC	722	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:33 GMT Content-Type: image/jpeg Content-Length: 1548 Connection: close Cf-Bgj: h2pri Last-Modified: Tue, 23 Apr 2013 21:24:10 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l5Ryehgo7q%2FRE4s0dDb9KU%2BSTlmiU8hUbRh7OPigkkRljNBLMZMHrp7q39UhtaPTYb%2BdMkdBYpf0AmTAEuvT4LRsuLBmsTJAwuv5KKZ%2BakEPmaqOxlXa3NbNxfv3QVhv8mh36vsbhBc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83c45c4244e5-ATL
2024-04-19 05:32:33 UTC	647	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 14 00 60 03 01 11 00 02 11 01 03 11 01 ff c4 00 6d 00 00 02 01 04 03 00 00 00 00 00 00 00 00 00 00 00 04 06 05 00 03 07 08 01 02 09 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDuckyFAdobed`m
2024-04-19 05:32:33 UTC	901	IN	Data Raw: 01 0c e0 e7 04 86 26 11 01 01 18 ae 50 ee 01 00 00 18 75 18 e8 39 e1 cd 5f 78 cf cb 89 78 e5 9e 49 c6 43 8b 65 f1 e6 7a d1 bb b3 01 cc dc e4 05 07 a0 80 00 07 e1 30 0c a0 00 20 21 1e a1 a0 72 1f 28 ed ee 73 5f b2 62 83 15 8f c4 a0 e5 d1 0c 67 3f dc 51 16 ce 41 b9 0c 66 eb a4 80 01 56 11 03 26 a2 4a aa 98 07 ac e4 11 08 80 4e b9 8f 0b f2 3b 2c 66 2c 71 d9 3c 9b 77 2e 0a ba a5 c6 2e 05 16 27 6e e4 1b 11 65 97 c7 bb 09 88 0a 9a 60 33 75 15 28 00 4e 30 02 cc 00 3a 59 be 0a 0f 99 64 59 e1 72 b9 1c a2 ad f1 e4 6e 81 dc 0a d5 83 21 7a cd 13 2a 47 4f 01 25 16 29 1a 2c 53 ac ac 4f 21 80 27 18 88 00 1f e3 dc df 8f 73 66 ce 71 7e 2e 9a d4 d2 01 07 80 e5 e5 e1 96 42 26 6a 12 9a e5 c2 c9 10 a0 9c a5 49 5a 46 29 60 25 20 00 e8 21 f1 01 c7 f1 b8 77 3c a1 ff 00 1c 51 1e Data Ascii: &Pu9_xxICez0 !r(s_bg?QAfV&JN;,f,q<w..'ne`3u(N0:YdYrn!z*GO%),SO!'sfq~.B&jIZF)`% !w<Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	50054	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:33 UTC	446	OUT	GET /page/templates/certificates/images/trustguard-logo.jpg HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
2024-04-19 05:32:33 UTC	720	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:33 GMT Content-Type: image/jpeg Content-Length: 5925 Connection: close Cf-Bgj: h2pri Last-Modified: Tue, 23 Apr 2013 21:24:10 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9BkIk8kkccNxpIerpzqOGz090szegM4Tp26jkgk8NW3m5FFDJUNdTOxv1Ag0eWkR7jdXENfFzKTXaACt%2B%2Fry4h3y7eGk8VC3Uf7TNwFeloiIVDbM1g9PATn0yVkcznU8M8GdH%2FLxIgQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83c45dae06f4-ATL
2024-04-19 05:32:33 UTC	649	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 2a 01 0e 03 01 11 00 02 11 01 03 11 01 ff c4 00 b0 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 08 03 09 02 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDuckyFAdobed*
2024-04-19 05:32:33 UTC	1369	IN	Data Raw: 2e 0d 00 68 03 40 1a 00 d0 06 80 34 01 a0 0d 00 68 03 40 1a 00 d0 06 80 cb 99 af c9 fe e2 c3 1f bf 93 27 a0 ac de c6 28 9c 96 a7 7e 56 de 94 77 21 44 32 4f 73 b7 e5 e7 c4 08 07 9e dc 97 64 fa ae 80 63 c5 7e 61 f6 e6 6f 4c d6 43 89 7c 7d b2 b8 a4 7c 8c 19 9d 12 e7 9b 44 4d 12 81 a2 2f e5 bf 42 45 45 d0 1a e2 0b ef 49 85 1a 4c 86 16 33 ef 34 0e 3b 18 97 92 b6 66 28 aa 0a bb 26 ea 2a bb 79 68 0c 7b 8a fc d7 ec 6c f0 ec bf 91 ba 2e 76 40 c5 53 de de 63 d0 ae b9 a3 66 5c b8 a1 7f ed de 0a 48 2a ba 01 45 d7 cd 5c df 09 b4 a5 8d d9 9d 27 65 8a 54 dc c9 48 c1 61 22 d3 d5 54 14 21 47 09 b6 ca 0b 42 64 08 48 5c 3d 41 df f1 d0 1a da d6 77 e5 95 73 6c bd 3f 57 d9 c7 76 47 a5 bf 1e 5e 90 29 f1 df 65 db 7d bc f6 d0 15 3f c6 fe f8 ff 00 88 2c 3a cb 2c fe 5f fe 5d fc ba Data Ascii: .h@4h@'(~Vw!D2Osdc~aoLC\|}\|DM/BEEIL34;f(&yh{l.v@Scf\HE\'eTHa"T!GBdH\=Awsl?WvG^)e}?,:,_]
2024-04-19 05:32:33 UTC	1369	IN	Data Raw: ca 5e c2 91 8e e4 98 d4 d4 76 a2 92 45 4c 16 1a 9e ae a8 72 08 f3 22 ac 76 d0 dd 10 4f 48 8d b3 12 4d b8 72 55 db 40 7a 43 93 36 6e e3 97 0d 34 2a 6e 9c 19 22 00 29 ba a9 13 24 88 88 9f a7 40 60 ef 83 3d d9 d5 7d 67 d6 37 d4 b9 de 4f 16 8e d2 4d f3 d3 18 8b 25 1d 53 36 0a 1c 56 d0 d3 80 12 6d c8 09 3f a3 40 24 f9 d3 dc dd 61 d9 f8 3e 2f 55 80 e4 91 af 6c 62 5b 94 89 31 e2 a3 bc c1 a2 8c 60 84 bc c0 7c c9 51 3c 34 07 a0 d5 cd 90 57 44 69 c1 e2 62 c3 62 62 be 68 a8 08 8a 8b a0 3c f1 8d 86 74 cf 5e 59 5b d4 e0 3f 27 ac f0 88 2e 4c 75 66 52 33 1e 4a 1b 6f b4 4a da 83 aa d9 b1 c8 9b 44 e1 b9 06 fe 1a 03 9e 1f d9 79 56 3b f2 2b af 31 6c 37 ba ed 3b 4b 16 bc 7d 96 6e bd df ad ed c1 1f 71 c6 dc 69 5a 79 c7 7c 45 b4 47 50 d3 6d b4 07 a3 9a 03 11 7c d4 ff 00 7d fd Data Ascii: ^vELr"vOHMrU@zC6n4*n")$@`=}g7OM%S6Vm?@$a>/Ulb[1`\|Q<4WDibbbh<t^Y[?'.LufR3JoJDyV;+1l7;K}nqiZy\|EGPm\|}
2024-04-19 05:32:33 UTC	1369	IN	Data Raw: 2b 31 52 8b 41 6d 3c b9 4a ab b0 e2 8a a3 06 59 fd cd b9 fe 2c fc 7f 1d 6a 6e 76 d1 bf 0d 2c e6 fb 8e c2 de f2 cb b7 3e c1 65 00 45 79 f2 a6 b8 69 2a b2 36 1b 47 5f ad 92 40 8a 6d 6d ba 3d 1d cd f8 3e c1 27 88 ba d1 2a 6d e7 b6 bc d3 d9 b8 3a 33 e5 b7 bd 8a 7b 79 69 92 23 99 53 d4 72 eb e4 cc 72 c5 2b 70 88 87 e8 dc 65 00 3c c4 cf eb 0a b0 7c e5 cc 73 f6 45 1b dc 03 cc 97 5b 16 3d bf d4 95 5e 47 4f db 3f e6 fd 5b 8a 77 15 20 be 25 f3 f1 fb ae ac 22 c8 7b b3 32 3a b5 a3 7e 5c 16 a9 70 cc 61 cf 17 29 b1 c6 4b d4 6c 1d ff 00 c4 c9 3f df 48 5f 3d fc 3f 14 d7 a7 49 25 44 7d 3e 31 51 54 59 17 c9 80 3a 04 db 82 86 d9 a2 89 81 26 e2 a2 be 0a 8a 8b e6 8b ac 92 20 8e f4 7f 4a c8 70 9e 7f ae 31 77 5e 35 dc dc 3a 4a f2 22 5f c5 55 58 dd 74 02 da 5e a7 ea cc 6e 7b 56 Data Ascii: +1RAm<JY,jnv,>eEyi6G_@mm=>'m:3{yi#Srr+pe<\|sE[=^GO?[w %"{2:~\pa)Kl?H_=?I%D}>1QTY:& Jp1w^5:J"_UXt^n{V
2024-04-19 05:32:33 UTC	1169	IN	Data Raw: da 40 28 bc bc 4b 9e c8 9a 94 a4 fc 54 e6 36 37 37 66 95 ed 38 38 c1 35 9f f5 74 d3 87 0e da 88 32 1c fa ea 96 55 3c 38 03 0e 6b 52 e0 31 2d 27 38 71 d8 62 6b ae 97 15 6e 39 c9 9c c2 06 e8 9c d1 47 d7 5f bc 7c 3e ab 89 5c 6a 9c bb ca 77 1b fb 96 dc 54 68 eb 14 eb 82 52 e8 55 9a fd 59 a2 ca d6 c1 dd 0d 00 8e d6 a6 b2 f6 b6 55 3d cc 46 67 d5 4d 6c 99 97 0e 48 0b ac ba d9 79 89 09 22 a2 a6 80 ce 59 07 c6 8c 86 94 46 bb ad 27 d4 5b 61 3e a2 ba ce 11 9d b2 f5 85 7d 73 ab e3 ce be 4b 48 52 1a 14 5f f1 3b f0 5f 25 f0 d4 65 15 2c d1 09 42 32 54 92 a9 30 c0 be 3f 42 aa b6 85 99 f6 45 9f f3 96 6f 04 10 2a fd 46 42 35 35 48 a7 fc ca d8 00 88 db 48 9f 43 54 e5 fa b5 22 65 d3 a0 0d 01 45 5b 64 79 2c 48 79 a5 4b 36 12 bd c4 c7 ac e7 d5 4b f5 4f 94 48 f5 ae 49 49 00 d9 Data Ascii: @(KT677f885t2U<8kR1-'8qbkn9G_\|>\jwThRUYU=FgMlHy"YF'[a>}sKHR_;_%e,B2T0?BEo*FB55HHCT"eE[dy,HyK6KOHII

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	50052	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:33 UTC	710	OUT	GET /page/templates/certificates/images/white-box_bot.png HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.trust-guard.com/page/css/split-cert.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
2024-04-19 05:32:33 UTC	711	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:33 GMT Content-Type: image/png Content-Length: 407 Connection: close Last-Modified: Tue, 23 Apr 2013 21:24:10 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8t6jPUo%2FtS91nmMWpAhX63DXTxg31TRJL%2BazMd2fNo3Nc%2FQvpMeuIZTOSTuenBuco0Ap61xf8Fun1Xphq8%2BP2%2BxJ9L24WiR%2F9d8TpfdahIiFrSixybySWfeT4O4RwCxYX%2FMV59k4c3g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83c45b854590-ATL
2024-04-19 05:32:33 UTC	407	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b9 00 00 00 0a 08 06 00 00 00 29 7d 20 47 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 01 39 49 44 41 54 78 da ec da 41 4a c3 40 18 86 e1 a9 98 85 44 70 25 48 72 81 1e a0 e4 18 6e 15 8f 20 78 83 ce 26 f5 14 42 a1 2b a1 2b 41 28 5d 78 80 c0 24 34 d0 55 c9 3a 09 82 cb 5a 4b cc c6 7f 34 42 10 0f d0 84 f7 81 0f 32 c9 64 f3 6f 3e 26 64 a0 b5 fe 90 9c 38 8e a3 00 00 e8 83 ba ae d5 64 32 d9 1f c9 75 b1 dd 6e 99 08 00 a0 37 9a 5e 2b 6c c9 99 3c cf 99 08 00 a0 37 9a 5e 33 b6 e4 16 59 96 31 11 00 40 6f 34 bd b6 b0 25 f7 b4 5e af 0b 4e 73 00 80 be 9c e2 6c af d9 7e b3 25 b7 97 8c e3 38 66 32 00 80 ce 6b fa 6c 1c 86 e1 f7 8f 27 d6 2c 4d d3 Data Ascii: PNGIHDR)} GtEXtSoftwareAdobe ImageReadyqe<9IDATxAJ@Dp%Hrn x&B++A(]x$4U:ZK4B2do>&d8d2un7^+l<7^3Y1@o4%^Nsl~%8f2kl',M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	50055	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:33 UTC	696	OUT	GET /page/templates/certificates/images/thumbs-up.png HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.trust-guard.com/privacy/12081 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
2024-04-19 05:32:33 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:33 GMT Content-Type: image/png Content-Length: 288 Connection: close Last-Modified: Tue, 23 Apr 2013 21:24:10 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g6Nch1bgrxgw%2F0RM62PsOnTYO2XlUsx2HhZAW%2FL85hmdp93jzktW6GzH6OOdniChuZuUOrERbSB5JcuVRK4WYzzlrNKeICVe3qSPP7p6GSjpdK02yVhbk8vQ8KRrGJyIEQVnxVsYkDc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83c4aeb31d80-ATL
2024-04-19 05:32:33 UTC	288	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 12 00 00 00 15 08 06 00 00 00 4b cb be ef 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 c2 49 44 41 54 78 da 62 fc ff ff 3f 03 3e e0 ea ea 2a 0d a4 b6 00 b1 f9 ee dd bb 7f e1 52 c7 c4 40 18 84 00 b1 01 10 f3 e0 53 c4 88 cf 45 40 d7 48 00 a9 ab 40 fc 14 e8 1a 3d 7c 06 31 e1 31 84 0d 48 ad 03 62 21 20 9e 48 c8 d9 f8 bc d6 05 c4 96 50 f6 26 b2 0c 02 ba c6 15 48 e5 23 09 19 13 32 88 d1 c5 c5 05 16 48 8f 80 e1 20 0f 34 c3 0c c8 de 05 c4 fc 04 f4 9e 05 aa 37 81 71 58 90 24 e4 a0 f4 49 06 e2 c0 6b 52 a3 1f 17 f8 4b 2d 83 a8 e6 a2 c5 d4 30 08 94 55 9e 12 32 e8 0e 11 06 75 00 63 ec 26 2e 83 60 36 80 a2 b4 1b 88 3f e2 30 04 64 c0 2c 92 Data Ascii: PNGIHDRKtEXtSoftwareAdobe ImageReadyqe<IDATxb?>*R@SE@H@=\|11Hb! HP&H#2H 47qX$IkRK-0U2uc&.`6?0d,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	50056	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:33 UTC	696	OUT	GET /page/templates/certificates/images/thumbs-dn.png HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.trust-guard.com/privacy/12081 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
2024-04-19 05:32:33 UTC	707	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:33 GMT Content-Type: image/png Content-Length: 291 Connection: close Last-Modified: Tue, 23 Apr 2013 21:24:10 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c8ma9Zt2fv8VN1Go4n%2F1lh61I9EjnA45KEV3M7Qegc8yn6Kpf9NDWaELhp1sdu%2Bfl0xS0of%2FkcnS5FTbWYMs9C1s4E8rLgCj%2FJuppWf9hfD%2FfNRNqgF9Tr334dgRfBFhzgsxpSj58Lg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83c4aaca53b1-ATL
2024-04-19 05:32:33 UTC	291	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 12 00 00 00 15 08 06 00 00 00 4b cb be ef 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 c5 49 44 41 54 78 da 62 fc ff ff 3f 03 35 00 13 03 95 c0 a8 41 74 34 88 05 5d c0 c3 c3 c3 1e 48 6d 01 62 1e 2c ea 5f 03 f1 2c 20 ee de b1 63 c7 47 57 57 d7 27 40 b6 34 2e 17 35 e2 30 04 04 44 81 b8 1a 88 cf 43 f9 d2 58 bd 06 74 4d 14 90 b2 27 c2 27 8a 84 c2 48 82 5a 81 9d 4c 2d 83 98 a9 65 10 27 91 fa be e3 34 08 18 d0 6c 40 8a 9f 08 43 8e 00 b1 12 94 fd 14 26 c8 48 a8 18 01 5a 00 8a ee 16 a4 74 a4 0d 4c 43 af c9 49 d9 97 a1 f4 5f 20 8e c0 66 08 b1 06 25 40 e9 7a a0 21 fb c8 ca 6b 40 6f 09 01 29 3f 68 b8 74 50 92 69 8d a1 49 22 17 e8 9a bf Data Ascii: PNGIHDRKtEXtSoftwareAdobe ImageReadyqe<IDATxb?5At4]Hmb,_, cGWW'@4.50DCXtM''HZL-e'4l@C&HZtLCI_ f%@z!k@o)?htPiI"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	50060	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:33 UTC	438	OUT	GET /page/templates/certificates/images/ssl-img.jpg HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
2024-04-19 05:32:33 UTC	720	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:33 GMT Content-Type: image/jpeg Content-Length: 1548 Connection: close Cf-Bgj: h2pri Last-Modified: Tue, 23 Apr 2013 21:24:10 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 0 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0AvmXKp5S4qdfo0DawzqO7apzx2H9zDqZE4025gWlCRG6OdjeS8JCAg%2FbBbc0AEOKL6j3eZ71q9dzq%2FhPtPCSAXAkWglqv3AfGCnQbbySq5BuqkQ9yAtp7e3LrnyLcmkdDI6kq%2F6tsI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83c7be7d8bba-ATL
2024-04-19 05:32:33 UTC	649	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 14 00 60 03 01 11 00 02 11 01 03 11 01 ff c4 00 6d 00 00 02 01 04 03 00 00 00 00 00 00 00 00 00 00 00 04 06 05 00 03 07 08 01 02 09 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDuckyFAdobed`m
2024-04-19 05:32:33 UTC	899	IN	Data Raw: e0 e7 04 86 26 11 01 01 18 ae 50 ee 01 00 00 18 75 18 e8 39 e1 cd 5f 78 cf cb 89 78 e5 9e 49 c6 43 8b 65 f1 e6 7a d1 bb b3 01 cc dc e4 05 07 a0 80 00 07 e1 30 0c a0 00 20 21 1e a1 a0 72 1f 28 ed ee 73 5f b2 62 83 15 8f c4 a0 e5 d1 0c 67 3f dc 51 16 ce 41 b9 0c 66 eb a4 80 01 56 11 03 26 a2 4a aa 98 07 ac e4 11 08 80 4e b9 8f 0b f2 3b 2c 66 2c 71 d9 3c 9b 77 2e 0a ba a5 c6 2e 05 16 27 6e e4 1b 11 65 97 c7 bb 09 88 0a 9a 60 33 75 15 28 00 4e 30 02 cc 00 3a 59 be 0a 0f 99 64 59 e1 72 b9 1c a2 ad f1 e4 6e 81 dc 0a d5 83 21 7a cd 13 2a 47 4f 01 25 16 29 1a 2c 53 ac ac 4f 21 80 27 18 88 00 1f e3 dc df 8f 73 66 ce 71 7e 2e 9a d4 d2 01 07 80 e5 e5 e1 96 42 26 6a 12 9a e5 c2 c9 10 a0 9c a5 49 5a 46 29 60 25 20 00 e8 21 f1 01 c7 f1 b8 77 3c a1 ff 00 1c 51 1e 16 82 Data Ascii: &Pu9_xxICez0 !r(s_bg?QAfV&JN;,f,q<w..'ne`3u(N0:YdYrn!z*GO%),SO!'sfq~.B&jIZF)`% !w<Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	50059	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:33 UTC	696	OUT	GET /page/templates/certificates/images/tg-shield.png HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.trust-guard.com/privacy/12081 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
2024-04-19 05:32:34 UTC	704	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:34 GMT Content-Type: image/png Content-Length: 5612 Connection: close Last-Modified: Tue, 23 Apr 2013 21:24:10 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4DbIUJp0dbDXTrXDHiDx7d4X3DKJargbMKFvfxKu4txSzsQnIerO%2FA5HZ3ku9GSQlzuXIoYm5I%2Bb4o%2F438YZHCdoHSVZWCGDUl8wUn0Pyo6UuXuuX42XnGo6GENKcDBrSy5DAKjMcfE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83c7a8b66730-ATL
2024-04-19 05:32:34 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 23 00 00 00 25 08 06 00 00 00 c8 80 50 44 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR#%PDpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-04-19 05:32:34 UTC	1369	IN	Data Raw: ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c 30 2e c6 c3 42 b1 38 2c 09 93 63 cb b1 22 ac 0c ab c6 1a b0 56 ac 03 bb 89 f5 63 cf b1 77 04 12 81 45 c0 09 36 04 77 42 20 61 1e 41 48 58 4c 58 4e d8 48 a8 20 1c 24 Data Ascii: ?DA,`6B$BBdr`)B(`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0.B8,c"VcwE6wB aAHXLXNH $
2024-04-19 05:32:34 UTC	1369	IN	Data Raw: cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b 3e 15 89 8a ae 14 db 17 97 15 7f d8 28 dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed f5 f6 45 db 2f 97 cd 28 db bb 83 b6 43 b9 a3 bf 3c b8 bc 65 a7 c9 ce cd 3b 3f 54 a4 54 f4 54 fa 54 36 ee d2 dd b5 61 d7 f8 6e d1 ee 1b 7b bc f6 34 ec d5 db 5b bc f7 Data Ascii: en/kY-BTZ(geWf9+7KW-Xj9<qy+V<mOW~&zMk^kU}]OX/Ya>(xodff-[nVE/(C<e;?TTTT6an{4[
2024-04-19 05:32:34 UTC	1369	IN	Data Raw: a5 14 a6 99 20 9e 48 10 78 3e 85 42 81 6c 36 47 77 d7 19 8a 7d 45 1c d7 01 20 1e 8b 53 df 50 4f 26 93 21 99 b6 88 c5 62 38 ae 43 a9 58 c4 75 1c 8c b8 81 a1 c7 58 fb c4 53 24 02 c5 fa 55 eb 79 7d cb 1b 2c 5a bc c8 ce e7 f3 bf 30 80 f1 c0 c4 ab af be 9a 4c 26 c3 c6 57 36 32 74 e8 a5 8c 6b 6e a6 b3 f3 34 ae eb 80 08 7d 7d 7d 84 91 0f 22 e8 ba 4e ba 2e 49 5d e3 78 44 22 a2 28 24 0c 42 02 3f c0 f5 3c 5c d7 e6 dc b9 1e 1c c7 25 94 a0 fa 9b 20 c4 cf fb 34 64 1a 18 fd c9 31 6c 5c bf 81 8e 33 1d 5c 7f fd f5 a4 d3 e9 64 3e 9f bf 51 07 8e 01 9f ec cd f6 4e f8 d2 6d 5f 42 d3 14 2f bd f2 12 2d 93 a7 90 6e 48 53 2a 16 f1 02 0f cf f7 f0 7c 17 c7 75 a9 54 2a f4 15 8b e4 0b 79 72 b9 2c b9 5c ae 3a f2 39 0a c5 3c a5 72 89 8a 5d c1 f3 1d 5c cf c1 76 1d 6c b7 02 9a e2 44 fb Data Ascii: Hx>Bl6Gw}E SPO&!b8CXuXS$Uy},Z0L&W62tkn4}}}"N.I]xD"($B?<\% 4d1l\3\d>QNm_B/-nHS\|uTyr,\:9<r]\vlD
2024-04-19 05:32:34 UTC	840	IN	Data Raw: a6 48 26 92 24 e3 49 4c 95 c0 e8 72 e1 90 cd dd 37 cf a5 a5 f9 0a 56 3f b1 1a db b6 f3 c0 a6 f3 89 ee 02 7f b7 1d c7 b9 ad 50 28 24 96 7c 77 09 b9 9e 2c db df 7e 9d c4 88 0c a9 a6 46 92 89 24 56 2c 49 ca 48 62 19 49 4c 23 41 52 37 49 ea 26 a6 1e 27 ae 27 88 e9 06 86 6e a0 6b 3a 4a d3 d0 22 81 ac 4b e1 b5 23 5c a9 26 f0 e8 8f 56 f1 da d6 ad 3c f8 e0 83 f8 be bf 01 78 ec 62 30 00 27 81 49 6d 87 db 26 0d 1f 3e 9c 05 df fa 1e 3b 77 ec a0 ad ed 7d 06 8f 1a 49 5d a6 1e d3 30 49 6a 55 80 a4 32 b1 94 89 a9 c5 49 68 71 e2 2a 86 a1 19 18 4a 47 a1 a1 85 10 2b 09 dd 6f 1d 21 75 30 e0 e9 1f 3e 4d 53 66 08 df 99 ff 6d da db db 7b 6b 6f 9a a7 3f 0a 26 04 8e 44 51 f4 c5 5d bb 77 35 cc 98 3e 83 6f dc 31 87 d7 37 bf ca b1 0f 8f 30 ea f2 cb a9 af 6b 20 a1 25 b0 34 93 94 56 Data Ascii: H&$ILr7V?P($\|w,~F$V,IHbIL#AR7I&''nk:J"K#\&V<xb0'Im&>;w}I]0IjU2Ihq*JG+o!u0>MSfm{ko?&DQ]w5>o170k %4V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	50061	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:33 UTC	444	OUT	GET /page/templates/certificates/images/white-box_mid.png HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
2024-04-19 05:32:33 UTC	709	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:33 GMT Content-Type: image/png Content-Length: 125 Connection: close Last-Modified: Tue, 23 Apr 2013 21:24:10 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 0 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9rGySOTPgCsjQfTilngOVkzRRDfIwrbKBfWpc81K0xoc%2FNgVc7%2Fh%2FrWVa52ajdS5JGJGDnwPDJUheAvHJqzf83aNePIrJon0kjK9UZ8vCd7%2FT9isNwGo8horXt88c%2Bv2u%2F0jPRRu8mE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83c7ec1c8bbc-ATL
2024-04-19 05:32:33 UTC	125	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b9 00 00 00 01 08 02 00 00 00 cc d8 47 d3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 1f 49 44 41 54 78 da 62 ac ad ad 6d 6a 6a 62 18 05 a3 60 14 8c 82 51 80 03 d4 d5 d5 01 04 18 00 78 1d 04 79 4c 85 95 15 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRGtEXtSoftwareAdobe ImageReadyqe<IDATxbmjjb`QxyLIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	50062	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:33 UTC	444	OUT	GET /page/templates/certificates/images/white-box_bot.png HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5
2024-04-19 05:32:34 UTC	715	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:34 GMT Content-Type: image/png Content-Length: 407 Connection: close Last-Modified: Tue, 23 Apr 2013 21:24:10 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oCQtVzUd%2FCQCxlw30MoAA3n2s%2BnnlqidMZIK1j%2FcA7FIYuk4jLZp3xEXjoC5zSr%2FE0%2BGjF851UwWEDO%2BpZeqMnafm8dsYoBgDBlRxROS2%2F2seMEXIsIIu%2F0hEO4yC%2FDC8yKBcSysbYE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83c90bdb4532-ATL
2024-04-19 05:32:34 UTC	407	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b9 00 00 00 0a 08 06 00 00 00 29 7d 20 47 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 01 39 49 44 41 54 78 da ec da 41 4a c3 40 18 86 e1 a9 98 85 44 70 25 48 72 81 1e a0 e4 18 6e 15 8f 20 78 83 ce 26 f5 14 42 a1 2b a1 2b 41 28 5d 78 80 c0 24 34 d0 55 c9 3a 09 82 cb 5a 4b cc c6 7f 34 42 10 0f d0 84 f7 81 0f 32 c9 64 f3 6f 3e 26 64 a0 b5 fe 90 9c 38 8e a3 00 00 e8 83 ba ae d5 64 32 d9 1f c9 75 b1 dd 6e 99 08 00 a0 37 9a 5e 2b 6c c9 99 3c cf 99 08 00 a0 37 9a 5e 33 b6 e4 16 59 96 31 11 00 40 6f 34 bd b6 b0 25 f7 b4 5e af 0b 4e 73 00 80 be 9c e2 6c af d9 7e b3 25 b7 97 8c e3 38 66 32 00 80 ce 6b fa 6c 1c 86 e1 f7 8f 27 d6 2c 4d d3 Data Ascii: PNGIHDR)} GtEXtSoftwareAdobe ImageReadyqe<9IDATxAJ@Dp%Hrn x&B++A(]x$4U:ZK4B2do>&d8d2un7^+l<7^3Y1@o4%^Nsl~%8f2kl',M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	50064	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:34 UTC	637	OUT	GET /certificates/newimages/privacy-12081.png HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5; __utma=132071693.2137845622.1713504753.1713504753.1713504753.1; __utmc=132071693; __utmz=132071693.1713504753.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=132071693.1.10.1713504753
2024-04-19 05:32:34 UTC	710	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:34 GMT Content-Type: image/png Content-Length: 186610 Connection: close Last-Modified: Fri, 19 Apr 2024 05:16:21 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eZ9qYY2BkQY8yLZf3BS2csHCOnTxJH3BxY%2BLmOJ3EnrZYKiBzO3C%2FFe48e6qx1MEDeLZ7W1%2Fy85t76qtYV5%2BHOtcIbYDvfiK2dFZBTllQWGfjGKtbxo4LwK4XVzPa5%2BRhFaKlsKiXRg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83c9ce9653aa-ATL
2024-04-19 05:32:34 UTC	659	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b9 00 00 01 1a 08 02 00 00 00 03 be be 3f 00 00 20 00 49 44 41 54 78 9c ec bd 79 90 65 57 79 27 f8 dd b3 dc ed ad f9 72 cf da ab a4 2a 2d 20 89 45 02 09 2c cb 60 04 42 32 2d d1 32 76 db 60 da d0 23 bb 07 37 d1 4d 87 1d 84 c7 a6 3d 34 31 ed 30 63 9b 68 db 83 b0 09 bb d9 09 09 84 b0 7b b0 06 0b da 46 58 02 61 2d 40 69 2b d5 a2 aa cc ac cc ca 7c f9 d6 bb 9e 75 fe 38 ef 9e 77 5f 96 4a 4d 74 3b 1a 23 f2 8b 8a ac bb 9e 77 97 73 7e e7 5b 7e df 77 1d ad 35 ec c8 8e ec c8 8e bc a0 58 a0 50 4a d9 65 a7 10 b3 fc 43 bb b8 ff 25 42 7e d8 17 b0 23 3b b2 23 ff a4 c5 20 a3 52 4a 29 25 a5 94 52 9a 65 00 40 08 e1 42 10 42 16 37 5f 94 b2 83 95 3b b2 23 3b 72 41 d1 5a 6b ad a5 94 79 9e 0f 87 c3 e1 70 68 e0 b2 d3 e9 24 Data Ascii: PNGIHDR? IDATxyeWy'r*- E,`B2-2v`#7M=410ch{FXa-@i+\|u8w_JMt;#ws~[~w5XPJeC%B~#;# RJ)%Re@BB7_;#;rAZkyph$
2024-04-19 05:32:34 UTC	1369	IN	Data Raw: 2f be 78 df be 7d 94 d2 17 0d 5c ee 60 e5 8e ec c8 8f a3 1c 3f 7e fc fd ef 7f ff 36 bb db 00 e5 f5 d7 5f 6f 80 b2 be d0 9c aa 4f 85 d4 c7 18 13 4c 30 c2 68 12 f5 3a 9d ce f7 bf ff 7d c3 1f aa 54 2a 87 0e 1d a2 94 9e 38 71 e2 99 67 9e 99 9e 9e 3e 74 e8 d0 ae 5d bb 5e 34 a1 1e f4 c3 be 80 1d d9 91 1d f9 5f 2d 83 c1 e0 c3 1f fe 30 21 c4 f7 7d df f7 83 92 5c 72 c9 25 87 0f 1f 76 1c 67 69 d7 e2 42 63 b6 46 43 17 53 17 53 32 09 94 52 c9 4e d6 8f 68 be 70 78 37 c2 08 00 e2 38 7e f6 d9 67 95 52 17 5d 74 d1 ec ec 6c 1c c7 ab ab ab 9d 4e 47 4a f9 e2 50 c8 76 f8 95 3b b2 23 3f 76 f2 a9 4f 7d 2a 4d d3 20 08 ca 1a 25 21 24 0c c3 ab af be 1a 00 66 67 67 6a 61 15 23 62 f5 c1 4c e4 5d 36 ec e5 c3 41 1e f7 59 d4 c9 06 42 89 80 f8 5c 09 67 4a cf 6d 79 8e 86 34 4d cf 9c 39 Data Ascii: /x}\`?~6_oOL0h:}T8qg>t]^4_-0!}\r%vgiBcFCSS2RNhpx78~gR]tlNGJPv;#?vO}M %!$fggja#bL]6AYB\gJmy4M9
2024-04-19 05:32:34 UTC	1369	IN	Data Raw: f1 2c 8f 32 13 79 a2 79 22 33 a6 39 c1 64 36 98 6a 05 f5 2a 0d 7f 90 5f 0c 88 b7 77 69 cf b3 cf 3e 0b 00 9d 4e 07 00 e6 e6 e6 9e 7a ea a9 3c cf 09 21 3f a2 66 f8 0e 56 ee c8 8e bc c8 25 cb 32 ce 79 39 b0 63 40 d3 71 9c 3c cf 01 80 52 ea 62 6a d2 72 b4 d6 42 09 a6 f2 44 e5 d2 51 15 2f 5c f4 67 aa 5e 48 f0 38 b6 a3 b4 e6 8a 33 c9 85 96 42 49 a1 a4 d6 5a 81 d6 5a 63 07 61 8c 08 60 bf 51 31 07 e7 79 1e c7 71 b5 5a 75 5d 37 cb b2 30 0c e3 38 6e 36 9b 3f f2 7a a5 52 ea 99 67 9e 79 e2 89 27 da ed f6 fa fa ba a9 4c b7 23 3b b2 23 3f ba f2 96 b7 bc 45 6b 6d 9c 95 f6 cb 62 c6 00 57 4a 21 84 bc 42 cb d3 a0 99 e2 99 60 1c 64 c5 0b 5b 61 23 70 7d 84 10 72 90 06 2d 95 62 92 33 25 52 91 6d 65 fd 7e 3e 8c 78 3a 64 49 22 32 a1 84 50 82 2b 89 1d e4 13 2f 24 5e 40 bc 86 4f Data Ascii: ,2yy"39d6j*_wi>Nz<!?fV%2y9c@q<RbjrBDQ/\g^H83BIZZca`Q1yqZu]708n6?zRgy'L#;#?EkmbWJ!B`d[a#p}r-b3%Rme~>x:dI"2P+/$^@O
2024-04-19 05:32:34 UTC	1369	IN	Data Raw: b6 7c ec ee ad cc da 8d 5b f9 e0 6c d2 5d 0a 5b d3 c5 08 14 5a ae a5 9d 2a f1 5b 13 5b ba 4d b7 62 2f 20 15 ec 5c da 5d 0a 5b a4 04 b8 4a ab 19 bf 6e 56 a5 56 1b 69 7f d6 6f d8 a7 d1 cd 23 8c b0 1d 78 89 c8 13 c1 ec e5 49 ad 06 2c 99 2d 4e 07 80 0e 8b ea 34 dc ca 87 e6 94 21 4f b4 86 90 ba c5 93 49 01 9c 31 70 f3 c4 8e 37 00 48 24 ab bb 63 ef 7b 2e 78 10 8e f7 32 c5 1b 34 30 3f 4a 1c 9c 4b 56 a7 15 00 e0 52 54 89 cf 94 a8 b8 7e 22 b2 90 78 5c 09 00 a0 88 a4 92 4d b9 15 a6 24 05 9c 0a 46 10 01 00 ae a4 8b c8 40 27 1e a2 e6 75 78 98 6a d0 d8 41 4a 6b c3 4c 26 0e 06 00 a1 14 72 1c 26 45 95 f8 00 20 b4 ca 25 b7 3d 58 69 cd 94 30 ab 4a 6b a1 79 d9 23 26 b4 ac e1 b0 78 83 b9 5f cc a6 1a 80 6b 19 14 4f 40 68 a9 b4 b6 6d e6 8a 53 67 dc 1f 72 25 66 8b 23 99 14 18 Data Ascii: \|[l][Z*[[Mb/ \][JnVVio#xI,-N4!OI1p7H$c{.x240?JKVRT~"x\M$F@'uxjAJkL&r&E %=Xi0Jky#&x_kO@hmSgr%f#
2024-04-19 05:32:34 UTC	1369	IN	Data Raw: f2 d4 45 c4 7a 18 52 c1 7c 34 7e 71 a9 e0 35 62 4d 18 01 00 56 3f 4a 25 9b f2 6a a6 57 c5 22 73 31 66 92 1b e5 25 97 1c 39 48 28 e1 22 12 f1 14 81 c3 94 c0 08 21 07 49 2d 35 00 93 9c 20 cc 95 44 05 23 8f 22 2c b5 a6 88 98 68 80 02 e5 16 30 0a e0 30 29 cc cb 95 5a a6 92 91 c2 21 2e b5 96 a0 88 43 01 40 8f a2 b1 8a 8c 14 1c 25 94 b4 af 55 83 ca 04 ab 16 30 c7 24 27 c8 aa 9c 9a 4b 49 5d 62 6f b3 ec 70 17 5a d4 8a 37 5e fe 69 73 9b b4 e4 05 62 72 0c b8 a9 c8 5d 34 06 c7 17 80 d1 54 32 1f 95 55 4e 36 5d 1c 39 e4 a9 5b d2 5b e3 42 8b 31 92 88 7c b1 e8 03 99 64 1a b4 9d 6b 23 9e 86 c4 b3 fd a7 cf 92 b2 7d dd 65 51 95 8c 4b 51 f4 58 54 2b 29 a4 3d 16 85 c4 65 3c 42 08 51 4a 2f 84 95 0e 72 1c 70 3c ec 5a 28 cc 25 ef 65 43 e5 e8 d9 ca 54 2b 68 b8 84 e2 d2 b3 8a 78 Data Ascii: EzR\|4~q5bMV?J%jW"s1f%9H("!I-5 D#",h00)Z!.C@%U0$'KI]bopZ7^isbr]4T2UN6]9[[B1\|dk#}eQKQXT+)=e<BQJ/rp<Z(%eCT+hx
2024-04-19 05:32:34 UTC	1369	IN	Data Raw: 33 c5 a6 dc 5a d1 61 72 eb ac d4 00 52 c9 b2 0f dd 5e 09 00 64 25 b7 29 00 24 82 2d 16 8e 5d a6 44 d9 e9 c6 94 b0 2e 60 3b ba 8c bc 30 8c 06 65 b7 e6 24 8c 6a ad 6d 37 88 78 56 06 c7 4c 32 6b 76 30 25 b8 92 d6 3b 39 e4 29 2e 02 47 00 d0 67 b1 8d 68 01 c0 90 27 55 1a 94 54 ce a1 59 35 f4 6f 5b 93 dc fc 35 40 a9 b5 36 7c 20 ab 51 26 22 63 20 aa 6e 50 f3 aa 6e a1 69 0a 2d d7 a2 ad d5 78 23 97 bc e5 37 5f 32 7d 51 dd ad 38 0e c2 30 6a 0b 26 65 4f 6d 7e 57 65 f6 9a f9 cb a5 96 4f 1c 7b 2a d9 18 00 80 c1 65 cf f3 06 83 81 d6 9a 31 86 c0 99 0f a6 d6 d3 6e 3b 1b cc 14 e0 38 eb 37 d6 92 6e 50 c0 5f 40 3c 0f d3 4e 3e 34 78 8a 1d 54 a5 7e 9f 25 06 2b cd 6a 2c 46 0f 10 3b 28 c0 ee 80 c5 06 6a 29 22 c4 41 56 97 34 56 39 57 62 14 5f c1 74 c0 12 7b cd 01 76 63 91 5b e8 Data Ascii: 3ZarR^d%)$-]D.`;0e$jm7xVL2kv0%;9).Ggh'UTY5o[5@6\| Q&"c nPni-x#7_2}Q80j&eOm~WeO{*e1n;87nP_@<N>4xT~%+j,F;(j)"AV4V9Wb_t{vc[
2024-04-19 05:32:34 UTC	1369	IN	Data Raw: bf 93 0d c7 66 38 71 53 c1 ec 2d 1b 42 9e c1 ca 00 bb ed b4 6f 77 51 84 8d 63 ca 48 bd 5e 1f 0c 06 24 cb 32 df f7 01 80 38 b8 e5 d5 5a 5e 2d 97 7c c0 13 03 49 3e 76 43 e2 d6 69 18 94 b8 4e ff 88 32 72 5c 8a 6c c0 e2 54 e4 55 1a d4 68 b8 e7 02 56 f9 46 d6 3f 97 f6 00 60 fe 3c 94 14 4a 9e 4d 3a ed 7c 30 1f 34 77 85 d3 e5 5d ab c9 56 37 1f 2e 06 53 33 a5 53 ba 79 b4 9a 6e 2d 04 53 33 5e bd 7c 64 9f c5 fb ab f3 65 58 3c 13 6f ce f9 0d 8b 7a b9 e4 cb 71 7b d6 af 4f d2 21 fb 4b e1 b4 55 46 ba 2c ca 25 df 57 9d b3 2d af 25 9d 3a 0d ed 4d 0d 79 ca 14 9f 0b c6 b4 a1 0e 8b 5a 6e d5 f6 f5 3e 8b 7d e4 da 61 99 f0 1c 05 26 38 0e 1a 80 2b 61 5c 39 00 20 b5 c4 0e ca 24 5b 08 a6 d6 44 d7 c5 44 69 15 cb 7c d6 ab 9f 8e 37 2a c4 57 5a 99 fe 51 80 9a ce 05 57 1a 8c fb 4c 69 Data Ascii: f8qS-BowQcH^$28Z^-\|I>vCiN2r\lTUhVF?`<JM:\|04w]V7.S3Syn-S3^\|deX<ozq{O!KUF,%W-%:MyZn>}a&8+a\9 $[DDi\|7*WZQWLi
2024-04-19 05:32:34 UTC	1369	IN	Data Raw: 2e f9 45 b5 45 af a4 43 3d 17 6d cc 07 cd 32 01 f3 f4 f3 10 30 37 03 e2 59 1c 14 5a 9e 4d b6 66 fc 7a 49 a7 c8 fa 2c 29 47 cf cf a5 bd 0a 0d c6 8c 65 91 c7 3c b3 21 a0 cd cd cd 77 fd ea ff f6 9f 3e fe 11 4b 61 d9 cc 06 04 63 8b 5f 43 9e 0a 2d ad 4b 8b 29 6e 1c 97 00 00 1a a4 96 b1 c8 47 94 34 0d 4a ab 44 e6 4d b7 9a e5 0c 8c e3 52 e4 0d b7 02 23 9f b2 36 e4 44 33 dd 19 2f a1 f5 c0 4a ad b8 12 16 c1 a5 56 5a 6b 0b 37 5c 49 d0 13 a1 73 13 4c 84 02 e0 c6 d3 9e e2 04 63 63 c9 32 29 02 ec 4a 2d 4d b7 ce 64 5e 21 7e ae 18 76 68 c4 53 0f 53 a9 94 e3 80 03 8e 71 1a 2a ad 10 20 a9 d5 88 1d 0d 9a 38 c8 cc ce 1a b4 d6 60 b5 5a a3 8d 42 41 f1 35 76 7d 59 e5 64 52 8e 09 43 82 95 3d 86 09 cf 2d d1 2f 57 13 1e 49 a9 15 29 f1 2e 85 56 36 f0 cd b5 a0 13 d1 a1 7c 57 65 b4 Data Ascii: .EEC=m207YZMfzI,)Ge<!w>Kac_C-K)nG4JDMR#6D3/JVZk7\IsLcc2)J-Md^!~vhSSq* 8`ZBA5v}YdRC=-/WI).V6\|We
2024-04-19 05:32:34 UTC	1369	IN	Data Raw: 6f 38 37 a9 c8 1d 70 2a 38 80 51 f9 42 c6 94 6c 61 d7 ac 96 69 cf 52 ab 44 b0 b9 60 9c 20 e4 38 60 15 ae 54 32 ea 20 5b 2c 56 69 4d 00 db 78 b7 2c a3 aa 36 0a e9 98 02 29 b5 a6 78 04 70 26 c8 53 ca f9 51 e5 e8 ab 41 55 c7 01 a4 4d cb da 45 58 6a e9 61 aa b4 06 c7 b1 0e 4a 13 ef 4d 05 2b c5 97 b3 a0 cc 76 54 13 58 53 9e 3f b6 59 61 ba 94 9a 26 4b f3 01 93 62 12 e6 d8 4c d1 79 12 91 93 49 1d b3 4c c9 2c 13 12 62 91 6f e3 75 86 41 b1 8b 67 db da 1f 4f f6 5a e5 92 db 3e 10 8b cc 2f a1 58 24 72 47 c3 ae 5d bb e0 3c 49 d3 34 cf 73 df f7 a1 a4 9e e7 92 09 90 55 2f f4 89 87 1c a4 b4 1a e4 51 3b ef 13 84 f7 d4 e6 9b 7e 95 8e 7c ca 3a 11 e9 7a b2 b5 91 74 36 93 5e 26 73 ae a4 d0 52 28 81 c0 99 09 9a 4b d5 b9 43 8d 5d 75 b7 0a 85 03 d9 54 ca 58 5b 5b 03 80 66 b3 a9 Data Ascii: o87p*8QBlaiRD` 8`T2 [,ViMx,6)xp&SQAUMEXjaJM+vTXS?Ya&KbLyIL,bouAgOZ>/X$rG]<I4sU/Q;~\|:zt6^&sR(KC]uTX[[f
2024-04-19 05:32:34 UTC	1369	IN	Data Raw: 26 15 7c 36 08 00 00 39 ce 80 27 15 ec 1b 22 91 03 90 c8 7c d6 6f 28 d0 0e 38 b1 18 a1 86 d6 1a 21 27 57 bc 4a 03 73 77 4c f2 b2 7a a8 40 d1 09 06 f1 04 8c 96 a5 0c a9 5a 83 53 d2 2d ca 58 66 32 9a ec ae b2 0e 1b 4f f2 2e b3 82 a4 02 e7 c1 68 b9 02 48 2a 58 d9 c8 35 15 4c cc 72 ae b8 2e f8 d2 f0 7c 30 3a 3b 2e 08 90 b8 88 b8 61 45 6b bd 6f df 3e 3b ac ac b4 db ed c5 c5 45 cb 1d 60 8a 63 8c bd 82 33 94 88 ac cf 22 4a c8 7c d8 aa ba 21 72 1c ae f8 b9 a4 bb 12 9d cb 05 ab bb 95 86 5b 6d 78 b5 0a f5 cb c5 d2 7b 79 d4 cb 06 67 e3 cd 33 d1 fa f7 db cf 66 e9 5c 03 7c 00 30 64 9b 76 bb dd 68 34 ea f5 ba 2a 00 ba e5 d5 56 e2 f6 94 37 22 81 d4 68 b0 99 0d 66 60 a4 40 98 22 17 b5 22 32 e3 62 3a e4 a9 59 0d 88 67 ed 77 00 f0 90 6b f8 bf 00 e0 22 a2 61 5c 96 c5 c5 74 Data Ascii: &\|69'"\|o(8!'WJswLz@ZS-Xf2O.hHX5Lr.\|0:;.aEko>;E`c3"J\|!r[mx{yg3f\\|0dvh4V7"hf`@""2b:Ygwk"a\t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	50065	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:34 UTC	645	OUT	GET /page/templates/certificates/images/thumbs-up.png HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5; __utma=132071693.2137845622.1713504753.1713504753.1713504753.1; __utmc=132071693; __utmz=132071693.1713504753.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=132071693.1.10.1713504753
2024-04-19 05:32:34 UTC	705	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:34 GMT Content-Type: image/png Content-Length: 288 Connection: close Last-Modified: Tue, 23 Apr 2013 21:24:10 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rv%2FB%2BtWKROGLwJsYvIJRMKDwONnHMyoUjLggDgEek8QXbV9zO2mCaoWIkpmUqw1evULEGFwaCAVRnh2tY5Sr%2F6RZIHCHrbYB%2FmG77JRn40jlObrTGiEn3wue4OcF9dzy2E6Ofo4EaQo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83cabd886775-ATL
2024-04-19 05:32:34 UTC	288	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 12 00 00 00 15 08 06 00 00 00 4b cb be ef 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 c2 49 44 41 54 78 da 62 fc ff ff 3f 03 3e e0 ea ea 2a 0d a4 b6 00 b1 f9 ee dd bb 7f e1 52 c7 c4 40 18 84 00 b1 01 10 f3 e0 53 c4 88 cf 45 40 d7 48 00 a9 ab 40 fc 14 e8 1a 3d 7c 06 31 e1 31 84 0d 48 ad 03 62 21 20 9e 48 c8 d9 f8 bc d6 05 c4 96 50 f6 26 b2 0c 02 ba c6 15 48 e5 23 09 19 13 32 88 d1 c5 c5 05 16 48 8f 80 e1 20 0f 34 c3 0c c8 de 05 c4 fc 04 f4 9e 05 aa 37 81 71 58 90 24 e4 a0 f4 49 06 e2 c0 6b 52 a3 1f 17 f8 4b 2d 83 a8 e6 a2 c5 d4 30 08 94 55 9e 12 32 e8 0e 11 06 75 00 63 ec 26 2e 83 60 36 80 a2 b4 1b 88 3f e2 30 04 64 c0 2c 92 Data Ascii: PNGIHDRKtEXtSoftwareAdobe ImageReadyqe<IDATxb?>*R@SE@H@=\|11Hb! HP&H#2H 47qX$IkRK-0U2uc&.`6?0d,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	50066	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:34 UTC	645	OUT	GET /page/templates/certificates/images/thumbs-dn.png HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5; __utma=132071693.2137845622.1713504753.1713504753.1713504753.1; __utmc=132071693; __utmz=132071693.1713504753.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=132071693.1.10.1713504753
2024-04-19 05:32:34 UTC	709	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:34 GMT Content-Type: image/png Content-Length: 291 Connection: close Last-Modified: Tue, 23 Apr 2013 21:24:10 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KHrqoT3GXpnrErhVKPFi3FD0Qfyja7Y%2B6rivDtMpB%2Bu7hHCwL2dxh4KovpJalrIcQ4D9Rjv%2Fm30AQ34PtIu1sQhS0FgeFK%2ByeEhOfAdUXa3wO4fFC8OlKSS%2FcwWvBiQaUI6Xy8Ks%2BK4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83cab8574571-ATL
2024-04-19 05:32:34 UTC	291	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 12 00 00 00 15 08 06 00 00 00 4b cb be ef 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 c5 49 44 41 54 78 da 62 fc ff ff 3f 03 35 00 13 03 95 c0 a8 41 74 34 88 05 5d c0 c3 c3 c3 1e 48 6d 01 62 1e 2c ea 5f 03 f1 2c 20 ee de b1 63 c7 47 57 57 d7 27 40 b6 34 2e 17 35 e2 30 04 04 44 81 b8 1a 88 cf 43 f9 d2 58 bd 06 74 4d 14 90 b2 27 c2 27 8a 84 c2 48 82 5a 81 9d 4c 2d 83 98 a9 65 10 27 91 fa be e3 34 08 18 d0 6c 40 8a 9f 08 43 8e 00 b1 12 94 fd 14 26 c8 48 a8 18 01 5a 00 8a ee 16 a4 74 a4 0d 4c 43 af c9 49 d9 97 a1 f4 5f 20 8e c0 66 08 b1 06 25 40 e9 7a a0 21 fb c8 ca 6b 40 6f 09 01 29 3f 68 b8 74 50 92 69 8d a1 49 22 17 e8 9a bf Data Ascii: PNGIHDRKtEXtSoftwareAdobe ImageReadyqe<IDATxb?5At4]Hmb,_, cGWW'@4.50DCXtM''HZL-e'4l@C&HZtLCI_ f%@z!k@o)?htPiI"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	50067	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:34 UTC	645	OUT	GET /page/templates/certificates/images/tg-shield.png HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5; __utma=132071693.2137845622.1713504753.1713504753.1713504753.1; __utmc=132071693; __utmz=132071693.1713504753.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=132071693.1.10.1713504753
2024-04-19 05:32:34 UTC	704	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:34 GMT Content-Type: image/png Content-Length: 5612 Connection: close Last-Modified: Tue, 23 Apr 2013 21:24:10 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 0 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ExQm9ReCiIMoeBX94BOlII8v5H%2FiGVGg0agh8ef16Z7Fmkwte0aZEoQeltzMh4w5bumDUQZnkUrK1oTok2AAVqjyuCr8IXmvShnx2R%2FtQAKtH6t0I%2BrogbzBpk7ZJdacvbWjZJdqxa0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83cc0f3f4523-ATL
2024-04-19 05:32:34 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 23 00 00 00 25 08 06 00 00 00 c8 80 50 44 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR#%PDpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-04-19 05:32:34 UTC	1369	IN	Data Raw: ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c 30 2e c6 c3 42 b1 38 2c 09 93 63 cb b1 22 ac 0c ab c6 1a b0 56 ac 03 bb 89 f5 63 cf b1 77 04 12 81 45 c0 09 36 04 77 42 20 61 1e 41 48 58 4c 58 4e d8 48 a8 20 1c 24 Data Ascii: ?DA,`6B$BBdr`)B(`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0.B8,c"VcwE6wB aAHXLXNH $
2024-04-19 05:32:34 UTC	1369	IN	Data Raw: cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b 3e 15 89 8a ae 14 db 17 97 15 7f d8 28 dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed f5 f6 45 db 2f 97 cd 28 db bb 83 b6 43 b9 a3 bf 3c b8 bc 65 a7 c9 ce cd 3b 3f 54 a4 54 f4 54 fa 54 36 ee d2 dd b5 61 d7 f8 6e d1 ee 1b 7b bc f6 34 ec d5 db 5b bc f7 Data Ascii: en/kY-BTZ(geWf9+7KW-Xj9<qy+V<mOW~&zMk^kU}]OX/Ya>(xodff-[nVE/(C<e;?TTTT6an{4[
2024-04-19 05:32:34 UTC	1369	IN	Data Raw: a5 14 a6 99 20 9e 48 10 78 3e 85 42 81 6c 36 47 77 d7 19 8a 7d 45 1c d7 01 20 1e 8b 53 df 50 4f 26 93 21 99 b6 88 c5 62 38 ae 43 a9 58 c4 75 1c 8c b8 81 a1 c7 58 fb c4 53 24 02 c5 fa 55 eb 79 7d cb 1b 2c 5a bc c8 ce e7 f3 bf 30 80 f1 c0 c4 ab af be 9a 4c 26 c3 c6 57 36 32 74 e8 a5 8c 6b 6e a6 b3 f3 34 ae eb 80 08 7d 7d 7d 84 91 0f 22 e8 ba 4e ba 2e 49 5d e3 78 44 22 a2 28 24 0c 42 02 3f c0 f5 3c 5c d7 e6 dc b9 1e 1c c7 25 94 a0 fa 9b 20 c4 cf fb 34 64 1a 18 fd c9 31 6c 5c bf 81 8e 33 1d 5c 7f fd f5 a4 d3 e9 64 3e 9f bf 51 07 8e 01 9f ec cd f6 4e f8 d2 6d 5f 42 d3 14 2f bd f2 12 2d 93 a7 90 6e 48 53 2a 16 f1 02 0f cf f7 f0 7c 17 c7 75 a9 54 2a f4 15 8b e4 0b 79 72 b9 2c b9 5c ae 3a f2 39 0a c5 3c a5 72 89 8a 5d c1 f3 1d 5c cf c1 76 1d 6c b7 02 9a e2 44 fb Data Ascii: Hx>Bl6Gw}E SPO&!b8CXuXS$Uy},Z0L&W62tkn4}}}"N.I]xD"($B?<\% 4d1l\3\d>QNm_B/-nHS\|uTyr,\:9<r]\vlD
2024-04-19 05:32:34 UTC	840	IN	Data Raw: a6 48 26 92 24 e3 49 4c 95 c0 e8 72 e1 90 cd dd 37 cf a5 a5 f9 0a 56 3f b1 1a db b6 f3 c0 a6 f3 89 ee 02 7f b7 1d c7 b9 ad 50 28 24 96 7c 77 09 b9 9e 2c db df 7e 9d c4 88 0c a9 a6 46 92 89 24 56 2c 49 ca 48 62 19 49 4c 23 41 52 37 49 ea 26 a6 1e 27 ae 27 88 e9 06 86 6e a0 6b 3a 4a d3 d0 22 81 ac 4b e1 b5 23 5c a9 26 f0 e8 8f 56 f1 da d6 ad 3c f8 e0 83 f8 be bf 01 78 ec 62 30 00 27 81 49 6d 87 db 26 0d 1f 3e 9c 05 df fa 1e 3b 77 ec a0 ad ed 7d 06 8f 1a 49 5d a6 1e d3 30 49 6a 55 80 a4 32 b1 94 89 a9 c5 49 68 71 e2 2a 86 a1 19 18 4a 47 a1 a1 85 10 2b 09 dd 6f 1d 21 75 30 e0 e9 1f 3e 4d 53 66 08 df 99 ff 6d da db db 7b 6b 6f 9a a7 3f 0a 26 04 8e 44 51 f4 c5 5d bb 77 35 cc 98 3e 83 6f dc 31 87 d7 37 bf ca b1 0f 8f 30 ea f2 cb a9 af 6b 20 a1 25 b0 34 93 94 56 Data Ascii: H&$ILr7V?P($\|w,~F$V,IHbIL#AR7I&''nk:J"K#\&V<xb0'Im&>;w}I]0IjU2Ihq*JG+o!u0>MSfm{ko?&DQ]w5>o170k %4V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	50068	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:34 UTC	864	OUT	GET /favicon.ico HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.trust-guard.com/privacy/12081 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5; __utma=132071693.2137845622.1713504753.1713504753.1713504753.1; __utmc=132071693; __utmz=132071693.1713504753.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=132071693.1.10.1713504753
2024-04-19 05:32:34 UTC	726	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:34 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 1848 Connection: close Last-Modified: Tue, 30 Aug 2016 02:12:13 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4689 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VIwxkCjGOORuuxCw4HprOqTcW6lopwAdCGNgHMykJBsIJzNBeCtcHmvvhcFi%2BJ8%2Fo6jXOeILHXYowXiJTXGJhFU%2FjQPgf49LtU5OTlxRCbejlKbjTZuMm%2B8lsB%2BWSqcqRt9MYjTPEjk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83cc3959b0c9-ATL
2024-04-19 05:32:34 UTC	643	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 12 08 06 00 00 00 bd f9 35 54 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 5e 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR5TtEXtSoftwareAdobe ImageReadyqe<^iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-04-19 05:32:34 UTC	1205	IN	Data Raw: 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 30 35 45 34 46 46 33 46 46 31 43 31 31 45 34 42 34 43 42 44 36 39 37 42 39 32 31 36 45 36 44 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 57 69 6e 64 6f 77 73 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 30 37 30 42 38 36 41 34 34 33 41 45 45 30 31 31 41 39 44 36 46 33 32 35 33 44 36 38 30 31 36 35 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 75 75 69 64 3a 38 30 41 32 36 35 41 39 43 43 35 33 44 46 31 31 39 42 36 36 38 31 31 32 46 34 39 32 32 34 46 31 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c Data Ascii: anceID="xmp.iid:305E4FF3FF1C11E4B4CBD697B9216E6D" xmp:CreatorTool="Adobe Photoshop CS4 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:070B86A443AEE011A9D6F3253D680165" stRef:documentID="uuid:80A265A9CC53DF119B668112F49224F1"/> </rdf:Description> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	50070	104.25.241.91	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:34 UTC	608	OUT	GET /favicon.ico HTTP/1.1 Host: secure.trust-guard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3m37i2dpcqahja38mrsj7m9gl5; __utma=132071693.2137845622.1713504753.1713504753.1713504753.1; __utmc=132071693; __utmz=132071693.1713504753.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=132071693.1.10.1713504753
2024-04-19 05:32:35 UTC	728	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 05:32:35 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 1848 Connection: close Last-Modified: Tue, 30 Aug 2016 02:12:13 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4690 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v0EameOO8apBe3%2BYU6PwqK4X1zj7V%2F2vwsVcH1OLzPS4bReKNAGeihmbp%2FXIEcnuaDp%2FRToHZLV5YTvfqro%2BLqIxarvyWagj0M11n4kJkrK%2FMOXYfT0T3YbqxUsP8dgsxpPVVG83dt0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876a83cf49536755-ATL
2024-04-19 05:32:35 UTC	641	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 12 08 06 00 00 00 bd f9 35 54 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 5e 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR5TtEXtSoftwareAdobe ImageReadyqe<^iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-04-19 05:32:35 UTC	1207	IN	Data Raw: 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 30 35 45 34 46 46 33 46 46 31 43 31 31 45 34 42 34 43 42 44 36 39 37 42 39 32 31 36 45 36 44 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 57 69 6e 64 6f 77 73 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 30 37 30 42 38 36 41 34 34 33 41 45 45 30 31 31 41 39 44 36 46 33 32 35 33 44 36 38 30 31 36 35 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 75 75 69 64 3a 38 30 41 32 36 35 41 39 43 43 35 33 44 46 31 31 39 42 36 36 38 31 31 32 46 34 39 32 32 34 46 31 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e Data Ascii: stanceID="xmp.iid:305E4FF3FF1C11E4B4CBD697B9216E6D" xmp:CreatorTool="Adobe Photoshop CS4 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:070B86A443AEE011A9D6F3253D680165" stRef:documentID="uuid:80A265A9CC53DF119B668112F49224F1"/> </rdf:Description>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50071	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:35 UTC	1465	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 1322 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713504739523&flash=0&frm=2&u_tz=120&u_his=6&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C260%2C147&vis=2&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713504754075 Content-Type: application/json X-Goog-Event-Time: 1713504754075 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240416.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtRZTVFTTRxTnJrayjjg4ixBjIKCgJVUxIEGgAgaQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/s09YWoGtftM?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:35 UTC	1322	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 31 36 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4f 4f 44 69 4c 45 47 45 49 4f 5f 73 41 55 51 7a 4e 2d 75 42 52 43 57 33 4c 41 46 45 50 79 46 73 41 55 51 37 38 32 77 42 52 44 48 5f 62 63 69 45 4b 48 44 73 41 55 51 79 66 65 76 42 52 43 49 34 36 38 46 45 4c 66 76 72 77 55 51 73 39 4f 77 42 52 43 61 38 4b 38 46 45 49 4b 69 5f 78 49 51 33 6f 6a 5f 45 68 44 5a 33 62 41 46 45 4c 66 71 5f 68 49 51 31 74 61 77 42 52 44 30 71 37 41 46 45 50 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240416.01.00","configInfo":{"appInstallData":"COODiLEGEIO_sAUQzN-uBRCW3LAFEPyFsAUQ782wBRDH_bciEKHDsAUQyfevBRCI468FELfvrwUQs9OwBRCa8K8FEIKi_xIQ3oj_EhDZ3bAFELfq_hIQ1tawBRD0q7AFEP
2024-04-19 05:32:35 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 19 Apr 2024 05:32:35 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:35 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-19 05:32:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50072	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:35 UTC	1465	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 1322 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713504739463&flash=0&frm=2&u_tz=120&u_his=6&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C260%2C147&vis=2&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713504754097 Content-Type: application/json X-Goog-Event-Time: 1713504754097 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240416.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtRZTVFTTRxTnJrayjjg4ixBjIKCgJVUxIEGgAgaQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/8hmgK-BHqGc?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:35 UTC	1322	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 31 36 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4f 4f 44 69 4c 45 47 45 4d 62 39 74 79 49 51 6c 70 57 77 42 52 43 49 68 37 41 46 45 4a 58 50 73 41 55 51 38 36 47 77 42 52 44 64 36 50 34 53 45 4b 4b 42 73 41 55 51 37 72 4f 77 42 52 43 38 32 4c 41 46 45 49 4f 5f 73 41 55 51 2d 74 71 77 42 52 44 72 6b 36 34 46 45 4c 50 54 73 41 55 51 78 38 36 77 42 52 44 76 7a 62 41 46 45 4d 7a 66 72 67 55 51 6d 76 43 76 42 52 44 56 69 4c 41 46 45 4c Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240416.01.00","configInfo":{"appInstallData":"COODiLEGEMb9tyIQlpWwBRCIh7AFEJXPsAUQ86GwBRDd6P4SEKKBsAUQ7rOwBRC82LAFEIO_sAUQ-tqwBRDrk64FELPTsAUQx86wBRDvzbAFEMzfrgUQmvCvBRDViLAFEL
2024-04-19 05:32:35 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 19 Apr 2024 05:32:35 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:35 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-19 05:32:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50073	172.253.124.136	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:35 UTC	614	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:36 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Fri, 19 Apr 2024 05:32:35 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:36 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-19 05:32:36 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	50074	172.253.124.136	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:36 UTC	614	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:36 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Fri, 19 Apr 2024 05:32:36 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:36 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-19 05:32:36 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50076	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:41 UTC	1465	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 1581 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713504739808&flash=0&frm=2&u_tz=120&u_his=6&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C260%2C147&vis=2&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713504760039 Content-Type: application/json X-Goog-Event-Time: 1713504760039 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240416.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtRZTVFTTRxTnJrayjjg4ixBjIKCgJVUxIEGgAgaQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/yiQ-C7lGw0o?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:41 UTC	1581	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 31 36 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4f 4f 44 69 4c 45 47 45 4c 32 5a 73 41 55 51 79 66 65 76 42 52 43 71 32 4c 41 46 45 4a 62 63 73 41 55 51 76 4e 69 77 42 52 43 69 6b 72 41 46 45 4c 32 32 72 67 55 51 78 5f 32 33 49 68 43 33 36 76 34 53 45 49 6a 6a 72 77 55 51 6f 6f 47 77 42 52 43 2d 2d 61 38 46 45 4b 69 61 73 41 55 51 30 2d 47 76 42 52 44 71 77 36 38 46 45 4e 36 49 5f 78 49 51 37 72 4f 77 42 52 43 5f 6e 5f 38 53 45 4a Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240416.01.00","configInfo":{"appInstallData":"COODiLEGEL2ZsAUQyfevBRCq2LAFEJbcsAUQvNiwBRCikrAFEL22rgUQx_23IhC36v4SEIjjrwUQooGwBRC--a8FEKiasAUQ0-GvBRDqw68FEN6I_xIQ7rOwBRC_n_8SEJ
2024-04-19 05:32:41 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 19 Apr 2024 05:32:41 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:41 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-19 05:32:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50075	173.194.219.93	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:41 UTC	1465	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 1323 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713504740126&flash=0&frm=2&u_tz=120&u_his=6&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C260%2C147&vis=2&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713504760042 Content-Type: application/json X-Goog-Event-Time: 1713504760042 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240416.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtRZTVFTTRxTnJrayjkg4ixBjIKCgJVUxIEGgAgaQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/qP5c-ZOMct4?autoplay=0&start=0&rel=0&enablejsapi=1&origin=https://www.irs.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:41 UTC	1323	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 31 36 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4f 53 44 69 4c 45 47 45 4c 65 72 73 41 55 51 71 39 69 77 42 52 43 33 37 36 38 46 45 4f 65 36 72 77 55 51 37 38 32 77 42 52 43 69 6b 72 41 46 45 4c 32 32 72 67 55 51 76 5a 6d 77 42 52 44 38 68 62 41 46 45 4d 66 4f 73 41 55 51 6c 70 57 77 42 52 44 5a 79 61 38 46 45 4d 66 39 74 79 49 51 32 64 32 77 42 52 43 49 68 37 41 46 45 4c 37 35 72 77 55 51 7a 36 69 77 42 52 43 33 36 76 34 53 45 4e Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240416.01.00","configInfo":{"appInstallData":"COSDiLEGELersAUQq9iwBRC3768FEOe6rwUQ782wBRCikrAFEL22rgUQvZmwBRD8hbAFEMfOsAUQlpWwBRDZya8FEMf9tyIQ2d2wBRCIh7AFEL75rwUQz6iwBRC36v4SEN
2024-04-19 05:32:41 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 19 Apr 2024 05:32:41 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 05:32:41 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-19 05:32:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50077	172.253.124.136	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:41 UTC	614	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:42 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Fri, 19 Apr 2024 05:32:41 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:42 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-19 05:32:42 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50078	172.253.124.136	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 05:32:42 UTC	614	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=O-fUBinE6wY; VISITOR_INFO1_LIVE=Qe5EM4qNrkk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgaQ%3D%3D
2024-04-19 05:32:42 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Fri, 19 Apr 2024 05:32:42 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 05:32:42 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-19 05:32:42 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Target ID:	0
Start time:	07:31:21
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	07:31:23
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1880 --field-trial-handle=1884,i,916011695703265351,17086815413262995248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	07:31:27
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.1040now.net"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	07:32:21
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7540 --field-trial-handle=1884,i,916011695703265351,17086815413262995248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	07:32:21
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7468 --field-trial-handle=1884,i,916011695703265351,17086815413262995248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.1040now.net

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Windows Analysis Report
http://www.1040now.net