Edit tour

Windows Analysis Report
http://icartservice.com

Overview

General Information

Sample URL:	http://icartservice.com
Analysis ID:	1430195
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found iframes

HTML page contains hidden URLs or javascript code

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5340 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3228 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2272,i,11281871909517473848,17655367729308081419,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3060 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://icartservice.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP Parser: Base64 decoded: {"uuid":"5ba563aa-2f00-4d05-ac08-134a3b0db2ad","page_time":1713858124,"page_url":"http://ww1.icartservice.com/","page_method":"GET","page_request":{},"page_headers":{},"host":"ww1.icartservice.com","ip":"89.187.171.132"}

Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=9042052004&pcsa=false&channel=pid-bodis-gcontrol203%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol307%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol430&client=dp-bodis30_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww1.icartservice.com%2F%3Fcaf%3D1&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2298147197369106&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436&client_gdprApplies=0&format=r3&nocache=4851713858125717&num=0&output=afd_ads&domain_name=ww1.icartservice.com&v=3&bsl=8&pac=0&u_his=1&u_tz=120&dt=1713858125720&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=625314022&rurl=http%3A%2F%2Fww1.icartservice.com%2F	HTTP Parser: No favicon
Source: http://ww1.icartservice.com/legal	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads/i/iframe.html	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=9042052004&pcsa=false&channel=pid-bodis-gcontrol203%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol307%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol430&client=dp-bodis30_3ph&r=m&sct=ID%3Da409b8deb4eed28a%3AT%3D1713858126%3ART%3D1713858126%3AS%3DALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg&sc_status=6&hl=en&rpbu=http%3A%2F%2Fww1.icartservice.com%2F%3Fcaf%3D1%26query%3DResidential%2BPainting%26afdToken%3DChMIqtHrhuvXhQMVkZCJBB0lbwBREm0BlLqpj85G31fQC_eX0OZ1K3-a4OuiTf69i9hvcgwdKJvXpLoWWcXmE6_agIF8lgRjy0Qo5LP2xgfTZKRUkyEguFq3OH33d6-gTDHTZMRKzpBUEZlrZBAi2ClP0NSGhfLtEPzwEQBlkZro-tgR%26pcsa%3Dfalse%26nb%3D0&max_radlink_len=50&type=0&uiopt=false&swp=as-drid-2298147197369106&q=Residential%20Painting&afdt=ChMIqtHrhuvXhQMVkZCJBB0lbwBREm0BlLqpj85G31fQC_eX0OZ1K3-a4OuiTf69i9hvcgwdKJvXpLoWWcXmE6_agIF8lgRjy0Qo5LP2xgfTZKRUkyEguFq3OH33d6-gTDHTZMRKzpBUEZlrZBAi2ClP0NSGhfLtEPzwEQBlkZro-tgR&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436&client_gdprApplies=0&f...	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=9042052004&pcsa=false&channel=pid-bodis-gcontrol203%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol307%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol430&client=dp-bodis30_3ph&r=m&sct=ID%3Da409b8deb4eed28a%3AT%3D1713858126%3ART%3D1713858126%3AS%3DALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg&sc_status=6&hl=en&rpbu=http%3A%2F%2Fww1.icartservice.com%2F%3Fcaf%3D1%26query%3DResidential%2BPainting%26afdToken%3DChMIqtHrhuvXhQMVkZCJBB0lbwBREm0BlLqpj85G31fQC_eX0OZ1K3-a4OuiTf69i9hvcgwdKJvXpLoWWcXmE6_agIF8lgRjy0Qo5LP2xgfTZKRUkyEguFq3OH33d6-gTDHTZMRKzpBUEZlrZBAi2ClP0NSGhfLtEPzwEQBlkZro-tgR%26pcsa%3Dfalse%26nb%3D0&max_radlink_len=50&type=0&uiopt=false&swp=as-drid-2298147197369106&q=Residential%20Painting&afdt=ChMIqtHrhuvXhQMVkZCJBB0lbwBREm0BlLqpj85G31fQC_eX0OZ1K3-a4OuiTf69i9hvcgwdKJvXpLoWWcXmE6_agIF8lgRjy0Qo5LP2xgfTZKRUkyEguFq3OH33d6-gTDHTZMRKzpBUEZlrZBAi2ClP0NSGhfLtEPzwEQBlkZro-tgR&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436&client_gdprApplies=0&f...	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=9042052004&pcsa=false&channel=pid-bodis-gcontrol203%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol307%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol430&client=dp-bodis30_3ph&r=m&sct=ID%3Da409b8deb4eed28a%3AT%3D1713858126%3ART%3D1713858126%3AS%3DALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg&sc_status=6&hl=en&rpbu=http%3A%2F%2Fww1.icartservice.com%2F%3Fcaf%3D1%26query%3DPublic%2BOnline%2BHigh%2BSchool%26afdToken%3DChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw%26pcsa%3Dfalse%26nb%3D0&max_radlink_len=50&type=0&uiopt=false&swp=as-drid-2298147197369106&q=Public%20Online%20High%20School&afdt=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436&client...	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=9042052004&pcsa=false&channel=pid-bodis-gcontrol203%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol307%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol430&client=dp-bodis30_3ph&r=m&sct=ID%3Da409b8deb4eed28a%3AT%3D1713858126%3ART%3D1713858126%3AS%3DALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg&sc_status=6&hl=en&rpbu=http%3A%2F%2Fww1.icartservice.com%2F%3Fcaf%3D1%26query%3DPublic%2BOnline%2BHigh%2BSchool%26afdToken%3DChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw%26pcsa%3Dfalse%26nb%3D0&max_radlink_len=50&type=0&uiopt=false&swp=as-drid-2298147197369106&q=Public%20Online%20High%20School&afdt=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436&client...	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=9042052004&pcsa=false&channel=pid-bodis-gcontrol203%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol307%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol430&client=dp-bodis30_3ph&r=m&sct=ID%3Da409b8deb4eed28a%3AT%3D1713858126%3ART%3D1713858126%3AS%3DALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg&sc_status=6&hl=en&rpbu=http%3A%2F%2Fww1.icartservice.com%2F%3Fcaf%3D1%26query%3DPublic%2BOnline%2BHigh%2BSchool%26afdToken%3DChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw%26pcsa%3Dfalse%26nb%3D0&max_radlink_len=50&type=0&uiopt=false&swp=as-drid-2298147197369106&q=Public%20Online%20High%20School&afdt=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436&client...	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=9042052004&pcsa=false&channel=pid-bodis-gcontrol203%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol307%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol430&client=dp-bodis30_3ph&r=m&sct=ID%3Da409b8deb4eed28a%3AT%3D1713858126%3ART%3D1713858126%3AS%3DALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg&sc_status=6&hl=en&rpbu=http%3A%2F%2Fww1.icartservice.com%2F%3Fcaf%3D1%26query%3DPublic%2BOnline%2BHigh%2BSchool%26afdToken%3DChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw%26pcsa%3Dfalse%26nb%3D0&max_radlink_len=50&type=0&uiopt=false&swp=as-drid-2298147197369106&q=Public%20Online%20High%20School&afdt=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436&client...	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=9042052004&pcsa=false&channel=pid-bodis-gcontrol203%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol307%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol430&client=dp-bodis30_3ph&r=m&sct=ID%3Da409b8deb4eed28a%3AT%3D1713858126%3ART%3D1713858126%3AS%3DALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg&sc_status=6&hl=en&rpbu=http%3A%2F%2Fww1.icartservice.com%2F%3Fcaf%3D1%26query%3DOnline%2BVirtual%2BSchool%26afdToken%3DChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU%26pcsa%3Dfalse%26nb%3D0&max_radlink_len=50&type=0&uiopt=false&swp=as-drid-2298147197369106&q=Online%20Virtual%20School&afdt=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436&client_gdprApplies...	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=9042052004&pcsa=false&channel=pid-bodis-gcontrol203%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol307%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol430&client=dp-bodis30_3ph&r=m&sct=ID%3Da409b8deb4eed28a%3AT%3D1713858126%3ART%3D1713858126%3AS%3DALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg&sc_status=6&hl=en&rpbu=http%3A%2F%2Fww1.icartservice.com%2F%3Fcaf%3D1%26query%3DOnline%2BVirtual%2BSchool%26afdToken%3DChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU%26pcsa%3Dfalse%26nb%3D0&max_radlink_len=50&type=0&uiopt=false&swp=as-drid-2298147197369106&q=Online%20Virtual%20School&afdt=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436&client_gdprApplies...	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=9042052004&pcsa=false&channel=pid-bodis-gcontrol203%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol307%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol430&client=dp-bodis30_3ph&r=m&sct=ID%3Da409b8deb4eed28a%3AT%3D1713858126%3ART%3D1713858126%3AS%3DALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg&sc_status=6&hl=en&rpbu=http%3A%2F%2Fww1.icartservice.com%2F%3Fcaf%3D1%26query%3DOnline%2BVirtual%2BSchool%26afdToken%3DChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU%26pcsa%3Dfalse%26nb%3D0&max_radlink_len=50&type=0&uiopt=false&swp=as-drid-2298147197369106&q=Online%20Virtual%20School&afdt=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436&client_gdprApplies...	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=9042052004&pcsa=false&channel=pid-bodis-gcontrol203%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol307%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol430&client=dp-bodis30_3ph&r=m&sct=ID%3Da409b8deb4eed28a%3AT%3D1713858126%3ART%3D1713858126%3AS%3DALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg&sc_status=6&hl=en&rpbu=http%3A%2F%2Fww1.icartservice.com%2F%3Fcaf%3D1%26query%3DOnline%2BVirtual%2BSchool%26afdToken%3DChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU%26pcsa%3Dfalse%26nb%3D0&max_radlink_len=50&type=0&uiopt=false&swp=as-drid-2298147197369106&q=Online%20Virtual%20School&afdt=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436&client_gdprApplies...	HTTP Parser: No favicon
Source: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LfzTxMTAAAAAAHIvRILb-jIu7t-RzWErSMfee74&co=aHR0cHM6Ly93d3cuYm9kaXMuY29tOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&cb=c5eivrwj482n	HTTP Parser: No favicon
Source: https://www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfzTxMTAAAAAAHIvRILb-jIu7t-RzWErSMfee74	HTTP Parser: No favicon

Source: https://www.bodis.com/takedown-request	HTTP Parser: No <meta name="author".. found
Source: https://www.bodis.com/takedown-request	HTTP Parser: No <meta name="author".. found

Source: https://www.bodis.com/takedown-request	HTTP Parser: No <meta name="copyright".. found
Source: https://www.bodis.com/takedown-request	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49740 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.46.214.6:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.46.214.6:443 -> 192.168.2.5:49725 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49740 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: openrestydate: Tue, 23 Apr 2024 07:42:04 GMTcontent-type: text/html; charset=UTF-8content-encoding: gzipcontent-length: 2075cache-control: no-cachex-version: 2.118.0expires: Thu, 01 Jan 1970 00:00:01 GMTcache-control: no-store, must-revalidatecache-control: post-check=0, pre-check=0pragma: no-cacheset-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:05 GMT; Max-Age=900; path=/; httponlyData Raw: 1f 8b 08 00 00 00 00 00 04 03 bd 57 c9 76 e2 4a 16 fc a0 da 68 40 ae c7 e2 2d 10 a0 a9 91 30 32 68 c8 9d 94 c2 48 22 13 d4 c5 a0 e1 eb 3b 32 b1 81 aa b6 cf 3b bd e9 05 c7 06 29 ef 18 37 6e e4 a6 b3 8a c8 6f 03 2b 68 03 a5 1d 96 b3 79 9f 47 db de e3 c4 1a 0f 24 f1 34 92 b8 d5 b2 f2 1a 3a 55 3a 7f aa f4 fe 6c 7e f6 d7 e9 39 18 fc 0b 89 fd 7e c1 d9 a5 b0 a3 3e e7 d6 c9 ad da 8a f0 f0 9d 6a 51 5f f0 a8 4f b4 b0 c4 33 25 8b 55 e6 d6 c7 2e 18 e6 f0 b0 19 f9 6b 57 5d 4c bd 36 8d 0b b6 d6 4d 3c 1f 5f 68 ef be c0 6f 5b c4 9e 47 a6 ee 8b cb c3 76 11 7b 57 62 b3 c1 1f cc 77 5f 37 8f d2 be 3d 3e a7 31 bb 6c 78 74 c8 92 40 a1 dc ba 14 f2 7d 6b 58 c4 61 9f c5 ab b3 5f bb 06 32 51 e0 cf 40 9c da 72 3d 6f 83 ca 3d b9 07 93 d1 43 70 15 b1 66 49 c3 c8 dc da 0b bf 04 df a9 b6 c1 73 8f 51 3d 3a 15 4e b0 12 b1 ad b8 35 90 08 b9 49 fb a5 52 38 93 97 64 3a a6 0b bd d0 fd 37 a3 49 35 ab c7 bb b0 49 f0 ff e6 92 6a e3 b3 88 31 8f ad 51 24 6a b2 e9 58 ce 0b 25 c3 f9 60 3d 39 b9 3c 38 a6 b1 81 ba b5 a2 a6 ad 88 35 e5 e3 7d 96 f8 67 a2 21 ae 43 d8 e7 5a 8b 1a fb 27 6a b3 fd 67 fe 8b b8 a8 73 cd 40 ae e3 d3 72 4d bf 7d e6 0f 13 7d e1 98 0d 99 aa 55 ae 85 0d ed d5 03 62 ba 14 8e 77 cd 67 73 d5 af ba ef 7c 2a 38 5b a1 27 bf 0a d4 c3 95 b5 0a 19 e5 ea 80 be 55 22 a7 34 0e 15 82 7a 8b ef b9 46 b8 f8 8d ea a1 91 db d1 ad 5f f5 be 0d 66 6e 1b ac dd d6 9f ad 84 ad 5b 0c 6a c8 f2 c4 3c a5 49 c8 56 71 77 ca f5 62 88 b9 5f 2d 91 6b 11 47 63 f9 9e 3d ae 33 1d bf b1 f3 4f f7 10 1a d4 de 88 fa f4 24 ee 04 7e f6 c0 53 49 51 3b 19 87 c8 c7 b6 9a 1c f8 12 b1 d0 83 2f 7c a9 d9 66 dc 16 36 3b 8b be ba 75 c3 d3 b8 1b c8 1b 7a 71 88 50 63 f9 ee f0 fe d6 3d db 2f 89 23 cf ca da 0a 4c 7d 60 bd 24 c0 ba f0 55 c4 ec 95 3a 61 93 c7 ec 85 bc 3d e1 84 1b 6a 1e 03 2b 95 fb e2 eb 6a 01 ff 43 e1 b0 13 49 90 03 7e 43 9f ae c5 d4 fc 99 d8 a3 9d 3b 55 ce c0 9c 9e a1 7e d9 ec b8 f3 d7 73 c5 77 cc d1 52 ed 2e ef 51 77 49 6c 43 d4 c9 58 4c cd 63 61 ab 27 d7 39 d3 bc 9a e0 9c c9 45 cf 17 31 29 e1 ff b4 5d 1f 77 54 b3 30 27 aa 98 cb 86 54 ed ce 53 2c e0 dd 3a 79 c3 fd cc 91 c4 ec 90 39 ab 17 77 36 6f fd e9 e6 23 86 c9 2e e5 56 9d 69 45 9f eb d1 05 f8 40 ce dd 95 d6 c7 9d 3b 78 Data Ascii: WvJh@-02hH";2;)7no+hyG$4:U:l~9~>jQ_O3%U.kW]L6M<_ho[Gv{Wbw_7=>1lxt@}kXa_2Q@r=o=CpfIsQ=:N5IR8d:7I5Ij1Q$jX%`=9<85}g!C
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: openrestydate: Tue, 23 Apr 2024 07:42:07 GMTcontent-type: text/html; charset=UTF-8content-encoding: gzipcontent-length: 22cache-control: no-cachex-version: 2.118.0expires: Thu, 01 Jan 1970 00:00:01 GMTcache-control: no-store, must-revalidatecache-control: post-check=0, pre-check=0pragma: no-cacheset-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:08 GMT; Max-Age=900; path=/; httponlyData Raw: 1f 8b 08 00 00 00 00 00 04 03 cb cf 06 00 47 dd dc 79 02 00 00 00 Data Ascii: Gy
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: openrestydate: Tue, 23 Apr 2024 07:42:26 GMTcontent-type: text/html; charset=UTF-8content-encoding: gzipcontent-length: 2074cache-control: no-cachex-version: 2.118.0expires: Thu, 01 Jan 1970 00:00:01 GMTcache-control: no-store, must-revalidatecache-control: post-check=0, pre-check=0pragma: no-cacheset-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:26 GMT; Max-Age=900; path=/; httponlyData Raw: 1f 8b 08 00 00 00 00 00 04 03 bd 57 c9 76 a3 c8 12 fd a0 5a 3c 40 92 db 2c de 42 80 98 5a 20 1b 4b 0c b9 23 41 c5 a0 04 eb 94 06 86 af ef 9b 89 2d ab aa 55 a7 ce db bc 85 4e 95 81 cc 88 b8 71 23 e2 c6 ae 37 f3 d0 eb 7c d3 ef 7c a9 1b 37 c6 6a a0 e1 7e 70 1b 62 aa 23 89 5d 85 c4 4e b5 a9 dc 63 a6 4b bd a7 4b 83 67 ac ce de 36 39 7b f5 ab bc 6e c2 da ab 16 47 da 06 2c 6b 16 25 d5 9d 93 d3 90 43 3c f3 59 d6 12 96 31 f5 90 c4 01 cb 2d 76 26 6f ce 93 b7 cd 7a 6f 2c 64 58 91 fc aa ab 32 cb 6c c9 4e ed f0 fe 4a 5b af da b4 a7 2a b3 c3 ea 2d 7a e5 36 0f 99 2e 57 54 09 8e d9 e8 75 f1 e8 77 a9 b8 3f b8 d2 c8 3c 52 e6 32 a2 b0 31 b7 dd 92 b6 e2 fb 32 1b e4 43 d6 b0 c3 7a eb 0c 9b 6d d1 fb 46 d6 6f b6 d9 e8 d7 87 de 33 92 6a ad bb 1d 62 1a a9 02 5f 2d f6 44 a2 40 23 36 ec 36 a4 a4 b6 cf f0 7e 20 b1 2f 53 3b 18 77 c2 37 b7 cc 94 30 cc 9a 8e fb f3 9e db 41 b7 61 dd 35 d6 d5 59 3e ae 2e 69 e4 97 59 1b 08 9c f0 7f b6 6e fc 2b 7d e3 18 c8 e5 de e4 98 c8 1e 89 16 6d 6e 15 d5 a6 de 75 b8 bf 4e 2d f3 42 9b f0 e4 d4 ef 88 1f be 46 ee 95 58 6c 5c 47 79 0d bf a4 ac 51 4f 5e bd 1c d7 b6 76 24 9f f1 0f 72 9b 28 ea 05 b1 5e a9 71 98 fd fe 1d 32 39 f4 5d 1a bd 9e 93 46 3d a4 b1 77 26 0a 7c 6a 83 81 2a 5d ef 6f 9d d3 ef 6c fa 86 d7 39 c8 49 3a cb 10 ab c3 b1 92 80 d5 39 1b 9c 27 a7 e2 31 99 87 dc 0a c7 5c c7 df 8d da 10 fe ac f5 a5 7d d4 b3 29 5f ce c2 33 5e c1 8f 1d 7e 4b 89 df 35 f9 e0 ef 48 24 77 d4 32 25 b2 33 4f d4 52 67 99 7c ac 9d fa 28 65 6d c8 be bf f1 ef fa 6b a2 9c 47 3c a3 e0 9e b4 8f 35 26 f0 01 4e 9c 3f 04 b9 49 62 60 27 f2 2f e2 29 d3 68 c1 b2 0a be b4 ee c8 6d e5 11 7b c9 ec e0 48 23 e4 15 5c 23 8d 79 ca 94 1d fc 5e c8 34 72 c5 b7 de 4c 3a dd df 9f 44 81 38 2b b0 b5 c0 a9 26 1c b8 dd 04 f8 79 3c 8f 6d 78 dc ce 34 29 8d e4 e3 be d9 dd f3 e4 92 47 72 25 6a a3 f6 d5 18 31 64 b3 60 41 81 0f 3f bf 69 91 a7 d9 6b b1 97 fb 8b a3 2f cf 6b 70 2e 57 18 f0 2b 9e 1c 63 05 5e 6a dd de 38 67 b4 95 33 ca fa 0b c7 69 ff d6 15 a9 1d 9c a9 ae fd 15 5b f3 02 e7 0a d2 20 e7 ba dc 24 b0 4f ed c3 93 63 fb e0 ba 77 06 27 87 34 4a 4e 8e 9e 6b e0 3b ea 2e bb 9d 49 ad f0 48 94 52 da 54 4b 70 7e c9 36 93 0f 85 63 b9 25 30 6e c1 2f 99 36 e0 87 a2 9e Data Ascii: WvZ<@,BZ K#A-UNq#7\|\|7j~pb#]NcKKg69{nG,k%C<Y1-v&ozo,dX2lNJ[*-z6.WTuw?<R212CzmFo3jb_-D@#66~ /S;w70Aa5Y>.iYn+}mnuN-BFXl
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: openrestydate: Tue, 23 Apr 2024 07:42:28 GMTcontent-type: text/html; charset=UTF-8content-encoding: gzipcontent-length: 22cache-control: no-cachex-version: 2.118.0expires: Thu, 01 Jan 1970 00:00:01 GMTcache-control: no-store, must-revalidatecache-control: post-check=0, pre-check=0pragma: no-cacheset-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:28 GMT; Max-Age=900; path=/; httponlyData Raw: 1f 8b 08 00 00 00 00 00 04 03 cb cf 06 00 47 dd dc 79 02 00 00 00 Data Ascii: Gy
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: openrestydate: Tue, 23 Apr 2024 07:42:28 GMTcontent-type: text/html; charset=UTF-8content-encoding: gzipcontent-length: 2075cache-control: no-cachex-version: 2.118.0expires: Thu, 01 Jan 1970 00:00:01 GMTcache-control: no-store, must-revalidatecache-control: post-check=0, pre-check=0pragma: no-cacheset-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:29 GMT; Max-Age=900; path=/; httponlyData Raw: 1f 8b 08 00 00 00 00 00 04 03 bd 57 c9 76 e2 4a 16 fc a0 da 68 40 ae c7 e2 2d 10 a0 a9 91 30 32 68 c8 9d 94 c2 48 22 13 d4 c5 a0 e1 eb 3b 32 b1 81 aa b6 cf 3b bd e9 05 c7 06 29 ef 18 37 6e e4 a6 b3 8a c8 6f 03 2b 68 03 a5 1d 96 b3 79 9f 47 db de e3 c4 1a 0f 24 f1 34 92 b8 d5 b2 f2 1a 3a 55 3a 7f aa f4 fe 6c 7e f6 d7 e9 d9 1f 36 17 12 fb fd 82 b3 4b 61 47 7d ce ad 93 5b b5 15 e1 e1 3b d5 a2 be e0 51 9f 68 61 89 67 4a 16 ab cc ad 8f 5d 30 cc e1 61 33 f2 d7 2b 63 31 f5 da 34 2e d8 5a 37 f1 7c 7c a1 bd fb 02 bf 6d 11 7b 1e 99 ba 2f 2e 0f db 45 ec 5d 89 cd 06 7f 30 df 7d dd 3c 4a fb f6 f8 9c c6 ec b2 e1 d1 21 4b 02 85 72 eb 52 c8 f7 ad 61 11 87 7d 16 af ce 7e ed 1a c8 44 81 3f 23 18 7c 6d b9 9e b7 41 e5 9e dc 83 c9 e8 21 b8 8a 58 b3 a4 61 64 6e ed 85 5f 82 ef 54 db e0 b9 c7 a8 1e 9d 0a 27 58 89 d8 56 dc 1a 48 84 dc a4 fd 52 29 9c c9 4b 32 1d d3 85 5e e8 fe 9b d1 a4 9a d5 e3 5d d8 24 f8 7f 73 49 b5 f1 59 c4 98 c7 d6 28 12 35 d9 74 2c e7 85 92 e1 7c b0 9e 9c 5c 1e 1c d3 d8 40 dd 5a 51 d3 56 c4 9a f2 f1 3e 4b fc 33 d1 10 d7 21 ec 73 ad 45 8d fd 13 b5 d9 fe 33 ff 45 5c d4 b9 66 20 d7 f1 69 b9 a6 df 3e f3 87 89 be 70 cc 86 4c d5 2a d7 c2 86 f6 ea 01 31 5d 0a c7 bb e6 b3 b9 ea 57 dd 77 3e 15 9c ad d0 93 5f 05 ea e1 ca 5a 85 8c 72 75 40 df 2a 91 53 1a 87 0a 41 bd c5 f7 5c 23 5c fc 46 f5 d0 c8 ed e8 d6 af 7a df 06 33 b7 0d d6 6e eb cf 56 c2 d6 2d 06 35 64 79 62 9e d2 24 64 ab b8 3b e5 7a 31 c4 dc af 96 c8 b5 88 a3 b1 7c cf 1e d7 99 8e df d8 f9 a7 7b 08 0d 6a 6f 44 7d 7a 12 77 02 3f 7b e0 a9 a4 a8 9d 8c 43 e4 63 5b 4d 0e 7c 89 58 e8 c1 17 be d4 6c 33 6e 0b 9b 9d 45 5f dd ba e1 69 dc 0d e4 0d bd 38 44 a8 b1 7c 77 78 7f eb 9e ed 97 c4 91 67 65 6d 05 a6 3e b0 5e 12 60 5d f8 2a 62 f6 4a 9d b0 c9 63 f6 42 de 9e 70 c2 0d 35 8f 81 95 ca 7d f1 75 b5 80 ff a1 70 d8 89 24 c8 01 bf a1 4f d7 62 6a fe 4c ec d1 ce 9d 2a 67 60 4e cf 50 bf 6c 76 dc f9 eb b9 e2 3b e6 68 a9 76 97 f7 a8 bb 24 b6 21 ea 84 79 30 8f 85 ad 9e 5c e7 4c f3 6a 82 73 26 17 3d 5f c4 a4 84 ff d3 76 7d dc 51 cd c2 9c a8 62 2e 1b 52 b5 3b 4f b1 80 77 eb e4 0d f7 33 47 12 b3 43 e6 ac 5e dc d9 bc f5 a7 9b 8f 18 26 bb 94 5b 75 a6 15 7d ae 47 17 e0 03 39 77 57 5a 1f 77 ee e0 Data Ascii: WvJh@-02hH";2;)7no+hyG$4:U:l~6KaG}[;QhagJ]0a3+c14.Z7\|\|m{/.E]0}<J!KrRa}~D?#\|mA!Xadn_T'XVHR)K2^]$sIY(5t,\|\@ZQV>K3!
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: openrestydate: Tue, 23 Apr 2024 07:42:30 GMTcontent-type: text/html; charset=UTF-8content-encoding: gzipcontent-length: 22cache-control: no-cachex-version: 2.118.0expires: Thu, 01 Jan 1970 00:00:01 GMTcache-control: no-store, must-revalidatecache-control: post-check=0, pre-check=0pragma: no-cacheset-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:30 GMT; Max-Age=900; path=/; httponlyData Raw: 1f 8b 08 00 00 00 00 00 04 03 cb cf 06 00 47 dd dc 79 02 00 00 00 Data Ascii: Gy
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: openrestydate: Tue, 23 Apr 2024 07:42:29 GMTcontent-type: text/html; charset=UTF-8content-encoding: gzipcontent-length: 2075cache-control: no-cachex-version: 2.118.0expires: Thu, 01 Jan 1970 00:00:01 GMTcache-control: no-store, must-revalidatecache-control: post-check=0, pre-check=0pragma: no-cacheset-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:30 GMT; Max-Age=900; path=/; httponlyData Raw: 1f 8b 08 00 00 00 00 00 04 03 bd 57 c9 76 e2 4a 16 fc a0 da 68 40 ae c7 e2 2d 10 a0 a9 91 30 32 68 c8 9d 94 c2 48 22 13 d4 c5 a0 e1 eb 3b 32 b1 81 aa b6 cf 3b bd e9 05 c7 06 29 ef 18 37 6e e4 a6 b3 8a c8 6f 03 2b 68 03 a5 1d 96 b3 79 9f 47 db de e3 c4 1a 0f 24 f1 34 92 b8 d5 b2 f2 1a 3a 55 3a 7f aa f4 fe 6c 7e f6 d7 e9 39 18 fc 0b 89 fd 7e c1 d9 a5 b0 a3 3e e7 d6 c9 ad da 8a f0 f0 9d 6a 51 5f f0 a8 4f b4 b0 c4 33 25 8b 55 e6 d6 c7 2e 18 e6 f0 b0 19 f9 eb 4d bb 98 7a 6d 1a 17 6c ad 9b 78 3e be d0 de 7d 81 df b6 88 3d 8f 4c dd 17 97 87 ed 22 f6 ae c4 66 83 3f 98 ef be 6e 1e a5 7d 7b 7c 4e 63 76 d9 f0 e8 90 25 81 42 b9 75 29 e4 fb d6 b0 88 c3 3e 8b 57 67 bf 76 0d 64 a2 c0 9f 81 38 b5 e5 7a de 06 95 7b 72 0f 26 a3 87 e0 2a 62 cd 92 86 91 b9 b5 17 7e 09 be 53 6d 83 e7 1e a3 7a 74 2a 9c 60 25 62 5b 71 6b 20 11 72 93 f6 4b a5 70 26 2f c9 74 4c 17 7a a1 fb 6f 46 93 6a 56 8f 77 61 93 e0 ff cd 25 d5 c6 67 11 63 1e 5b a3 48 d4 64 d3 b1 9c 17 4a 86 f3 c1 7a 72 72 79 70 4c 63 03 75 6b 45 4d 5b 11 6b ca c7 fb 2c f1 cf 44 43 5c 87 b0 cf b5 16 35 f6 4f d4 66 fb cf fc 17 71 51 e7 9a 81 5c c7 a7 e5 9a 7e fb cc 1f 26 fa c2 31 1b 32 55 ab 5c 0b 1b da ab 07 c4 74 29 1c ef 9a cf e6 aa 5f 75 df f9 54 70 b6 42 4f 7e 15 a8 87 2b 6b 15 32 ca d5 01 7d ab 44 4e 69 1c 2a 04 f5 16 df 73 8d 70 f1 1b d5 43 23 b7 a3 5b bf ea 7d 1b cc dc 36 58 bb ad 3f 5b 09 5b b7 18 d4 90 e5 89 79 4a 93 90 ad e2 ee 94 eb c5 10 73 bf 5a 22 d7 22 8e c6 f2 3d 7b 5c 67 3a 7e 63 e7 9f ee 21 34 a8 bd 11 f5 e9 49 dc 09 fc ec 81 a7 92 a2 76 32 0e 91 8f 6d 35 39 f0 25 62 a1 07 5f f8 52 b3 cd b8 2d 6c 76 16 7d 75 eb 86 a7 71 37 90 37 f4 e2 10 a1 c6 f2 dd e1 fd ad 7b b6 5f 12 47 9e 95 b5 15 98 fa c0 7a 49 80 75 e1 ab 88 d9 2b 75 c2 26 8f d9 0b 79 7b c2 09 37 d4 3c 06 56 2a f7 c5 d7 d5 02 fe 87 c2 61 27 92 20 07 fc 86 3e 5d 8b a9 f9 33 b1 47 3b 77 aa 9c 81 39 3d 43 fd b2 d9 71 e7 af e7 8a ef 98 a3 a5 da 5d de a3 ee 92 d8 86 a8 93 b1 98 9a c7 c2 56 4f ae 73 a6 79 35 c1 39 93 8b 9e 2f 62 52 c2 ff 69 bb 3e ee a8 66 61 4e 54 31 97 0d a9 da 9d a7 58 c0 bb 75 f2 86 fb 99 23 89 d9 21 73 56 2f ee 6c de fa d3 cd 47 0c 93 5d ca ad 3a d3 8a 3e d7 a3 0b f0 81 9c bb 2b ad 8f 3b 77 f0 Data Ascii: WvJh@-02hH";2;)7no+hyG$4:U:l~9~>jQ_O3%U.Mzmlx>}=L"f?n}{\|Ncv%Bu)>Wgvd8z{r&b~Smzt`%b[qk rKp&/tLzoFjVwa%gc[HdJzrrypLcukEM[k,DC\
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: openrestydate: Tue, 23 Apr 2024 07:42:33 GMTcontent-type: text/html; charset=UTF-8content-encoding: gzipcontent-length: 22cache-control: no-cachex-version: 2.118.0expires: Thu, 01 Jan 1970 00:00:01 GMTcache-control: no-store, must-revalidatecache-control: post-check=0, pre-check=0pragma: no-cacheset-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:33 GMT; Max-Age=900; path=/; httponlyData Raw: 1f 8b 08 00 00 00 00 00 04 03 cb cf 06 00 47 dd dc 79 02 00 00 00 Data Ascii: Gy
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: openrestydate: Tue, 23 Apr 2024 07:42:33 GMTcontent-type: text/html; charset=UTF-8content-encoding: gzipcontent-length: 22cache-control: no-cachex-version: 2.118.0expires: Thu, 01 Jan 1970 00:00:01 GMTcache-control: no-store, must-revalidatecache-control: post-check=0, pre-check=0pragma: no-cacheset-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:33 GMT; Max-Age=900; path=/; httponlyData Raw: 1f 8b 08 00 00 00 00 00 04 03 cb cf 06 00 47 dd dc 79 02 00 00 00 Data Ascii: Gy

Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&bodis=true HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww1.icartservice.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.adsensecustomsearchads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron_expand.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.adsensecustomsearchads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron_expand.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.adsensecustomsearchads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /takedown-request HTTP/1.1Host: www.bodis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/app.css?id=c87e71429bf4f4d8f19a HTTP/1.1Host: www.bodis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bodis.com/takedown-requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlDUGJkS1BEYWxoOHRETGlibnlzbGc9PSIsInZhbHVlIjoiaFFYMGI1eUJjV283S1UrWjk4VGRLZng5ZEkrcjgrSERkRWRIaVROeU5iN3RTeHJ5UFp1TXArTmpWOHJlVTZMTzRhOFgzQzZyZWRxVG4wQkRvRStyUzNLZ3VDakZJdUVHYWduWEVWWDVCdkFXL2ZJWUpOWldocGNZMDg5aDVvNHMiLCJtYWMiOiIxMjBiNGEzNTIxMDdlZTY0OGZkNTBjMzgyZGJlYzFiZGQ5ZmQ4N2I4OGVmZTJlYTQwYmUyY2QxNWYxODc3YTIyIiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IkkrdlMxdlJLajUyNUlRSUhmRGdUSVE9PSIsInZhbHVlIjoicThNaFZwSXI0MTAwS0pxVHByVzR2Lzh3OHVmMmc2Q2puNi9Bck95N3RUYlhsZWtGTnQxNC9YWE4ybXB4UU03VkxTLzE4ZllORDY2T2VHQkJUOG1MbEZzSGo5K1pIcnZKb2d2eGlCWVBUMFhLTEo4YUNXVE8vZGZEcnNmRVQwNnYiLCJtYWMiOiIyMzhiM2Q4NWY1M2FmNDA3OGJmOWYzMGU1M2QzMTFkZWRkOTY0MTQ2ODU5OWJhMWQ0YmU5N2I4MzBhZWFhZmI1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /js/app.js?id=a6d102922d07b5b652c9 HTTP/1.1Host: www.bodis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bodis.com/takedown-requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlDUGJkS1BEYWxoOHRETGlibnlzbGc9PSIsInZhbHVlIjoiaFFYMGI1eUJjV283S1UrWjk4VGRLZng5ZEkrcjgrSERkRWRIaVROeU5iN3RTeHJ5UFp1TXArTmpWOHJlVTZMTzRhOFgzQzZyZWRxVG4wQkRvRStyUzNLZ3VDakZJdUVHYWduWEVWWDVCdkFXL2ZJWUpOWldocGNZMDg5aDVvNHMiLCJtYWMiOiIxMjBiNGEzNTIxMDdlZTY0OGZkNTBjMzgyZGJlYzFiZGQ5ZmQ4N2I4OGVmZTJlYTQwYmUyY2QxNWYxODc3YTIyIiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IkkrdlMxdlJLajUyNUlRSUhmRGdUSVE9PSIsInZhbHVlIjoicThNaFZwSXI0MTAwS0pxVHByVzR2Lzh3OHVmMmc2Q2puNi9Bck95N3RUYlhsZWtGTnQxNC9YWE4ybXB4UU03VkxTLzE4ZllORDY2T2VHQkJUOG1MbEZzSGo5K1pIcnZKb2d2eGlCWVBUMFhLTEo4YUNXVE8vZGZEcnNmRVQwNnYiLCJtYWMiOiIyMzhiM2Q4NWY1M2FmNDA3OGJmOWYzMGU1M2QzMTFkZWRkOTY0MTQ2ODU5OWJhMWQ0YmU5N2I4MzBhZWFhZmI1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /dfp.js HTTP/1.1Host: www.bodis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bodis.com/takedown-requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlDUGJkS1BEYWxoOHRETGlibnlzbGc9PSIsInZhbHVlIjoiaFFYMGI1eUJjV283S1UrWjk4VGRLZng5ZEkrcjgrSERkRWRIaVROeU5iN3RTeHJ5UFp1TXArTmpWOHJlVTZMTzRhOFgzQzZyZWRxVG4wQkRvRStyUzNLZ3VDakZJdUVHYWduWEVWWDVCdkFXL2ZJWUpOWldocGNZMDg5aDVvNHMiLCJtYWMiOiIxMjBiNGEzNTIxMDdlZTY0OGZkNTBjMzgyZGJlYzFiZGQ5ZmQ4N2I4OGVmZTJlYTQwYmUyY2QxNWYxODc3YTIyIiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IkkrdlMxdlJLajUyNUlRSUhmRGdUSVE9PSIsInZhbHVlIjoicThNaFZwSXI0MTAwS0pxVHByVzR2Lzh3OHVmMmc2Q2puNi9Bck95N3RUYlhsZWtGTnQxNC9YWE4ybXB4UU03VkxTLzE4ZllORDY2T2VHQkJUOG1MbEZzSGo5K1pIcnZKb2d2eGlCWVBUMFhLTEo4YUNXVE8vZGZEcnNmRVQwNnYiLCJtYWMiOiIyMzhiM2Q4NWY1M2FmNDA3OGJmOWYzMGU1M2QzMTFkZWRkOTY0MTQ2ODU5OWJhMWQ0YmU5N2I4MzBhZWFhZmI1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /api/account HTTP/1.1Host: www.bodis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /X-XSRF-TOKEN: eyJpdiI6IjlDUGJkS1BEYWxoOHRETGlibnlzbGc9PSIsInZhbHVlIjoiaFFYMGI1eUJjV283S1UrWjk4VGRLZng5ZEkrcjgrSERkRWRIaVROeU5iN3RTeHJ5UFp1TXArTmpWOHJlVTZMTzRhOFgzQzZyZWRxVG4wQkRvRStyUzNLZ3VDakZJdUVHYWduWEVWWDVCdkFXL2ZJWUpOWldocGNZMDg5aDVvNHMiLCJtYWMiOiIxMjBiNGEzNTIxMDdlZTY0OGZkNTBjMzgyZGJlYzFiZGQ5ZmQ4N2I4OGVmZTJlYTQwYmUyY2QxNWYxODc3YTIyIiwidGFnIjoiIn0=X-CSRF-TOKEN: hdBYEgWRP49Fk5dt7mvrmIcCM7eUDhZ1GYCFFCtDsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.bodis.com/takedown-requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlDUGJkS1BEYWxoOHRETGlibnlzbGc9PSIsInZhbHVlIjoiaFFYMGI1eUJjV283S1UrWjk4VGRLZng5ZEkrcjgrSERkRWRIaVROeU5iN3RTeHJ5UFp1TXArTmpWOHJlVTZMTzRhOFgzQzZyZWRxVG4wQkRvRStyUzNLZ3VDakZJdUVHYWduWEVWWDVCdkFXL2ZJWUpOWldocGNZMDg5aDVvNHMiLCJtYWMiOiIxMjBiNGEzNTIxMDdlZTY0OGZkNTBjMzgyZGJlYzFiZGQ5ZmQ4N2I4OGVmZTJlYTQwYmUyY2QxNWYxODc3YTIyIiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IkkrdlMxdlJLajUyNUlRSUhmRGdUSVE9PSIsInZhbHVlIjoicThNaFZwSXI0MTAwS0pxVHByVzR2Lzh3OHVmMmc2Q2puNi9Bck95N3RUYlhsZWtGTnQxNC9YWE4ybXB4UU03VkxTLzE4ZllORDY2T2VHQkJUOG1MbEZzSGo5K1pIcnZKb2d2eGlCWVBUMFhLTEo4YUNXVE8vZGZEcnNmRVQwNnYiLCJtYWMiOiIyMzhiM2Q4NWY1M2FmNDA3OGJmOWYzMGU1M2QzMTFkZWRkOTY0MTQ2ODU5OWJhMWQ0YmU5N2I4MzBhZWFhZmI1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /client_data/3155f51cab94cfafe4b265a7/script.js HTTP/1.1Host: cdn-cookieyes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bodis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/reamaze.js HTTP/1.1Host: cdn.reamaze.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bodis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /svg/logo.svg HTTP/1.1Host: www.bodis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bodis.com/takedown-requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlDUGJkS1BEYWxoOHRETGlibnlzbGc9PSIsInZhbHVlIjoiaFFYMGI1eUJjV283S1UrWjk4VGRLZng5ZEkrcjgrSERkRWRIaVROeU5iN3RTeHJ5UFp1TXArTmpWOHJlVTZMTzRhOFgzQzZyZWRxVG4wQkRvRStyUzNLZ3VDakZJdUVHYWduWEVWWDVCdkFXL2ZJWUpOWldocGNZMDg5aDVvNHMiLCJtYWMiOiIxMjBiNGEzNTIxMDdlZTY0OGZkNTBjMzgyZGJlYzFiZGQ5ZmQ4N2I4OGVmZTJlYTQwYmUyY2QxNWYxODc3YTIyIiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IkkrdlMxdlJLajUyNUlRSUhmRGdUSVE9PSIsInZhbHVlIjoicThNaFZwSXI0MTAwS0pxVHByVzR2Lzh3OHVmMmc2Q2puNi9Bck95N3RUYlhsZWtGTnQxNC9YWE4ybXB4UU03VkxTLzE4ZllORDY2T2VHQkJUOG1MbEZzSGo5K1pIcnZKb2d2eGlCWVBUMFhLTEo4YUNXVE8vZGZEcnNmRVQwNnYiLCJtYWMiOiIyMzhiM2Q4NWY1M2FmNDA3OGJmOWYzMGU1M2QzMTFkZWRkOTY0MTQ2ODU5OWJhMWQ0YmU5N2I4MzBhZWFhZmI1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /js/chunks/14.3a7973fff8110300ff48.js HTTP/1.1Host: www.bodis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bodis.com/takedown-requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjczS2xkTjNJTkx5SFl6ZkxsVW1IZXc9PSIsInZhbHVlIjoidmllZUpWL0c2bzNQVDdRZ3JSVTZqTFhpZTZZanhVb24zNk1nOG5RRUpOR3lBV0dnd0lJaWNyTDJodGdZVEJ5NXpQN1I1UDBVMDdVMDJ5d3FqK1lsTWI4NDE3bVFWM0QwKzAzUkN4bnlMREtWZ0prb0w4VU1uWEZMQkZqTm9JTVYiLCJtYWMiOiI1ZmJlYmY0MjUwM2E1Y2IyYzc3ODhkMWFmZjQ3OGUwOWU4MzZhN2MxNDUzNmRjOTJmMDNlZWExOGJkYmQ2MWRmIiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IldDNFA3bVRtenNBZFJKWjFIZG5CNkE9PSIsInZhbHVlIjoiQ3NKTHFIa3VOalkwZkVZbDNseEhyRmpwNmp1SThna1pZMnlDTzF4WjZXZlRlR1B2ZVV0MEkwNGVjbDlwSFVkbThMT0Q5dm9DeGpwUHNQTFlrUytWeEIxRkxvSXozNXYybnJXbzgwZkp2UjJMeTJUWDdzeUdZSFJsd0xkMUZKU0EiLCJtYWMiOiI3YzU4ODZlZWIzYmY0ZTAzODJjZGVmOWNkYmQwZGQwNTNjZTA1YmNhZTlkZGIyOTVkYmE3NGZiM2YwNDU0MmEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /svg/logo.svg HTTP/1.1Host: www.bodis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjczS2xkTjNJTkx5SFl6ZkxsVW1IZXc9PSIsInZhbHVlIjoidmllZUpWL0c2bzNQVDdRZ3JSVTZqTFhpZTZZanhVb24zNk1nOG5RRUpOR3lBV0dnd0lJaWNyTDJodGdZVEJ5NXpQN1I1UDBVMDdVMDJ5d3FqK1lsTWI4NDE3bVFWM0QwKzAzUkN4bnlMREtWZ0prb0w4VU1uWEZMQkZqTm9JTVYiLCJtYWMiOiI1ZmJlYmY0MjUwM2E1Y2IyYzc3ODhkMWFmZjQ3OGUwOWU4MzZhN2MxNDUzNmRjOTJmMDNlZWExOGJkYmQ2MWRmIiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IldDNFA3bVRtenNBZFJKWjFIZG5CNkE9PSIsInZhbHVlIjoiQ3NKTHFIa3VOalkwZkVZbDNseEhyRmpwNmp1SThna1pZMnlDTzF4WjZXZlRlR1B2ZVV0MEkwNGVjbDlwSFVkbThMT0Q5dm9DeGpwUHNQTFlrUytWeEIxRkxvSXozNXYybnJXbzgwZkp2UjJMeTJUWDdzeUdZSFJsd0xkMUZKU0EiLCJtYWMiOiI3YzU4ODZlZWIzYmY0ZTAzODJjZGVmOWNkYmQwZGQwNTNjZTA1YmNhZTlkZGIyOTVkYmE3NGZiM2YwNDU0MmEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /client_data/3155f51cab94cfafe4b265a7/banner.js HTTP/1.1Host: cdn-cookieyes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bodis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/countries HTTP/1.1Host: www.bodis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /X-XSRF-TOKEN: eyJpdiI6IjczS2xkTjNJTkx5SFl6ZkxsVW1IZXc9PSIsInZhbHVlIjoidmllZUpWL0c2bzNQVDdRZ3JSVTZqTFhpZTZZanhVb24zNk1nOG5RRUpOR3lBV0dnd0lJaWNyTDJodGdZVEJ5NXpQN1I1UDBVMDdVMDJ5d3FqK1lsTWI4NDE3bVFWM0QwKzAzUkN4bnlMREtWZ0prb0w4VU1uWEZMQkZqTm9JTVYiLCJtYWMiOiI1ZmJlYmY0MjUwM2E1Y2IyYzc3ODhkMWFmZjQ3OGUwOWU4MzZhN2MxNDUzNmRjOTJmMDNlZWExOGJkYmQ2MWRmIiwidGFnIjoiIn0=X-CSRF-TOKEN: hdBYEgWRP49Fk5dt7mvrmIcCM7eUDhZ1GYCFFCtDsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.bodis.com/takedown-requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjczS2xkTjNJTkx5SFl6ZkxsVW1IZXc9PSIsInZhbHVlIjoidmllZUpWL0c2bzNQVDdRZ3JSVTZqTFhpZTZZanhVb24zNk1nOG5RRUpOR3lBV0dnd0lJaWNyTDJodGdZVEJ5NXpQN1I1UDBVMDdVMDJ5d3FqK1lsTWI4NDE3bVFWM0QwKzAzUkN4bnlMREtWZ0prb0w4VU1uWEZMQkZqTm9JTVYiLCJtYWMiOiI1ZmJlYmY0MjUwM2E1Y2IyYzc3ODhkMWFmZjQ3OGUwOWU4MzZhN2MxNDUzNmRjOTJmMDNlZWExOGJkYmQ2MWRmIiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IldDNFA3bVRtenNBZFJKWjFIZG5CNkE9PSIsInZhbHVlIjoiQ3NKTHFIa3VOalkwZkVZbDNseEhyRmpwNmp1SThna1pZMnlDTzF4WjZXZlRlR1B2ZVV0MEkwNGVjbDlwSFVkbThMT0Q5dm9DeGpwUHNQTFlrUytWeEIxRkxvSXozNXYybnJXbzgwZkp2UjJMeTJUWDdzeUdZSFJsd0xkMUZKU0EiLCJtYWMiOiI3YzU4ODZlZWIzYmY0ZTAzODJjZGVmOWNkYmQwZGQwNTNjZTA1YmNhZTlkZGIyOTVkYmE3NGZiM2YwNDU0MmEwIiwidGFnIjoiIn0%3D; cookieyes-consent=consentid:cm56eWZ2UzdsNE51b3dzbFh0Qk1HY1hzOURESVVxUWk,consent:,action:,necessary:,functional:,analytics:,performance:,advertisement:,other:
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bodis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/brands/bodis/ping HTTP/1.1Host: cdn.reamaze.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.bodis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.bodis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/countries HTTP/1.1Host: www.bodis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookieyes-consent=consentid:cm56eWZ2UzdsNE51b3dzbFh0Qk1HY1hzOURESVVxUWk,consent:,action:,necessary:,functional:,analytics:,performance:,advertisement:,other:; _ga_L32F1DFB3K=GS1.1.1713858172.1.0.1713858172.60.0.0; _ga=GA1.1.1379586991.1713858172; XSRF-TOKEN=eyJpdiI6Im9IWlB6V1J0cWZRY09sMG95bHExOXc9PSIsInZhbHVlIjoiZklpcGhxZzlkZy9SK2hvc09VR25HUzBycHpja1F1Z3p4Mk91WHQwVEpFc0dpc3BXRXZkT2VtSlo0WCtGOHBPd2REbjE1a1Rpem8rQVJ0L2w0ZDJTZjA4aEgzN0FUenRJcXo3SjVlT1VsUERDZWVUSXJXbEUyTzdPQjd3Wm5wSEIiLCJtYWMiOiIyYjgyY2ViOGNlOGQ1MmFlM2ZjZGFjNjIxMDBlMTRlOGE3OGI4ZTkyMWQ2NGNhYzVjNjRjYjk1ZTgxYzc1MDI5IiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IjRvYU14T3ZXbU5pZjFjd05hZlBKZ0E9PSIsInZhbHVlIjoidmV1QWQzMHB3Rkp1eHFLa1NFZExJN0I4ZkRhUnRJY2ZrWkxaZVEzcVBHTGJ6Y2FxZ3A1MGZPc2pxZE9kZWRaTE5aR21BTGZFOUVCeGM3OHpaeUtWZTliaDRvY2J1czlHU0FxcU52aEZ4dTV2N3NSR1Vsd2J4YndST0lleHJQOVQiLCJtYWMiOiJjMDgwNWM1NzQ0ZGQ4ODJiYTgwN2QyNGM3MmNkNzYwZDI0ZjUxZGQ5YWUyN2ZhMDM4MzdkZGU2Y2VmYWI2YmIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /api/countries HTTP/1.1Host: www.bodis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /X-XSRF-TOKEN: eyJpdiI6IjczS2xkTjNJTkx5SFl6ZkxsVW1IZXc9PSIsInZhbHVlIjoidmllZUpWL0c2bzNQVDdRZ3JSVTZqTFhpZTZZanhVb24zNk1nOG5RRUpOR3lBV0dnd0lJaWNyTDJodGdZVEJ5NXpQN1I1UDBVMDdVMDJ5d3FqK1lsTWI4NDE3bVFWM0QwKzAzUkN4bnlMREtWZ0prb0w4VU1uWEZMQkZqTm9JTVYiLCJtYWMiOiI1ZmJlYmY0MjUwM2E1Y2IyYzc3ODhkMWFmZjQ3OGUwOWU4MzZhN2MxNDUzNmRjOTJmMDNlZWExOGJkYmQ2MWRmIiwidGFnIjoiIn0=X-CSRF-TOKEN: hdBYEgWRP49Fk5dt7mvrmIcCM7eUDhZ1GYCFFCtDsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.bodis.com/takedown-requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjczS2xkTjNJTkx5SFl6ZkxsVW1IZXc9PSIsInZhbHVlIjoidmllZUpWL0c2bzNQVDdRZ3JSVTZqTFhpZTZZanhVb24zNk1nOG5RRUpOR3lBV0dnd0lJaWNyTDJodGdZVEJ5NXpQN1I1UDBVMDdVMDJ5d3FqK1lsTWI4NDE3bVFWM0QwKzAzUkN4bnlMREtWZ0prb0w4VU1uWEZMQkZqTm9JTVYiLCJtYWMiOiI1ZmJlYmY0MjUwM2E1Y2IyYzc3ODhkMWFmZjQ3OGUwOWU4MzZhN2MxNDUzNmRjOTJmMDNlZWExOGJkYmQ2MWRmIiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IldDNFA3bVRtenNBZFJKWjFIZG5CNkE9PSIsInZhbHVlIjoiQ3NKTHFIa3VOalkwZkVZbDNseEhyRmpwNmp1SThna1pZMnlDTzF4WjZXZlRlR1B2ZVV0MEkwNGVjbDlwSFVkbThMT0Q5dm9DeGpwUHNQTFlrUytWeEIxRkxvSXozNXYybnJXbzgwZkp2UjJMeTJUWDdzeUdZSFJsd0xkMUZKU0EiLCJtYWMiOiI3YzU4ODZlZWIzYmY0ZTAzODJjZGVmOWNkYmQwZGQwNTNjZTA1YmNhZTlkZGIyOTVkYmE3NGZiM2YwNDU0MmEwIiwidGFnIjoiIn0%3D; cookieyes-consent=consentid:cm56eWZ2UzdsNE51b3dzbFh0Qk1HY1hzOURESVVxUWk,consent:,action:,necessary:,functional:,analytics:,performance:,advertisement:,other:
Source: global traffic	HTTP traffic detected: GET /ajax/libs/pusher/7.0.1/pusher.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bodis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/reamaze-push.js HTTP/1.1Host: push.reamaze.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bodis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/brands/bodis/ping HTTP/1.1Host: cdn.reamaze.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/?EIO=3&transport=websocket HTTP/1.1Host: ws.reamaze.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.bodis.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 5AcUhEstlNdfnCShnF5j/w==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /api/countries HTTP/1.1Host: www.bodis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookieyes-consent=consentid:cm56eWZ2UzdsNE51b3dzbFh0Qk1HY1hzOURESVVxUWk,consent:,action:,necessary:,functional:,analytics:,performance:,advertisement:,other:; _ga_L32F1DFB3K=GS1.1.1713858172.1.0.1713858172.60.0.0; _ga=GA1.1.1379586991.1713858172; XSRF-TOKEN=eyJpdiI6InJKTWU3dTJvSVZudE5wdk5uSklsN1E9PSIsInZhbHVlIjoiM1NyVmFMODhmaTJCc1Z4Sno0ZWNxbWd3VzlJelUwQ1hDUWpNZWlheERpREtDYUVSYzQzMGVubEY4eC8yS3NHMGJNQjE5Tmp3TEZQODNWSGc3WGtlUTIrdGtoSFc5ZHI5alpycjhvbzFxcWNVRyt1MmZyYnV4bjhwdVJGdGplRE0iLCJtYWMiOiI4MjhjZDVjNGVkYzliYjBkMmI3MjA2NzU4OWI2ODU3NTcwNmIwOTAzYzE0YWMxZTM3ODFiZjM1NzkzYWVkZTMyIiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IitNV1BUVmpueC9mTURxUm13anVCNUE9PSIsInZhbHVlIjoiZC9CVjZEZGJ2dEMrNi9rTWtrWExRRWd6VDFBMXYzYzBCazNZSWwvd2pLSnlhQVJaWit5bXhzOHY3dWdHRW1BbmxrZnU4dXZzVE5MMjVReUhJeWF0ZDRZUWhPY2hOeHRycUkzdjE1R09hOTlRY2dJMmZuOHlaT2NqRVd1enF5RUoiLCJtYWMiOiI2OWYxYTVmMjYyNjJhYjQzMDdhMmEzZTZhNThmMGIxYWExM2VkZDI2ODIzMGNiNTUwMzhhNTQ3YjNlNTE0ZDRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfzTxMTAAAAAAHIvRILb-jIu7t-RzWErSMfee74&co=aHR0cHM6Ly93d3cuYm9kaXMuY29tOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&cb=c5eivrwj482n HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.bodis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LfzTxMTAAAAAAHIvRILb-jIu7t-RzWErSMfee74&co=aHR0cHM6Ly93d3cuYm9kaXMuY29tOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&cb=c5eivrwj482nAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/F3t2rNz7bgl6HBEOkbpna2AoS4gdljz1bcAONYlXrnE.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.recaptcha.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client_data/3155f51cab94cfafe4b265a7/gZm2ypof.json HTTP/1.1Host: cdn-cookieyes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.bodis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.bodis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfzTxMTAAAAAAHIvRILb-jIu7t-RzWErSMfee74 HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.bodis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon-32x32.png HTTP/1.1Host: www.bodis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bodis.com/takedown-requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookieyes-consent=consentid:cm56eWZ2UzdsNE51b3dzbFh0Qk1HY1hzOURESVVxUWk,consent:,action:,necessary:,functional:,analytics:,performance:,advertisement:,other:; _ga_L32F1DFB3K=GS1.1.1713858172.1.0.1713858172.60.0.0; _ga=GA1.1.1379586991.1713858172; XSRF-TOKEN=eyJpdiI6IjJ4YTg1aGVzeXpMMnMzeHgxTi9mNlE9PSIsInZhbHVlIjoiRkFPZW1LdUpyQ2NHMnRzVllhOHdUY1NXbEU0WmlGSEs5Y1pOWWZlQzRNaUgyWWdBc2V0YS9WRnZUSnVZQi8rUDFGd3E0RDdmTW9mMEFoU2trV2h0cTRPMlpNRXg2aExMYjNlYmlEM0pqMFdsK09rRmVkVTFLQWdIajdvc25SSGgiLCJtYWMiOiI5OTY4ZDM0MTY1Njk2YjUxOTgzMTMyNmI0YTRmNWM2Nzc0Njk1ZTNlNWEzMDE1YjQxYzJkMmRiMzBkOTdjNGU3IiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IlVEckRGSEd0Tk9lNTZHUXZPRjZtZ0E9PSIsInZhbHVlIjoiYWVmdk1Ybjl1cStBV2NsVEpjWmtwMlU4OE4yWktPdnVjcmhTQmU3OEh5SjhyZWIzRUxvUzBuZEpHVnZWa1RpY3Q2a3YwWkplN29kZWk1cXVuSDdDaCtKM3FIL1ZOUHJjV0VkVUpxMWpsZjJFRFN5NkZKOUpPRGRGdzh6R1UrTlkiLCJtYWMiOiI0Mzk3YmRjZmQ5ZmJjZDE1ODA0MTY4NjgzNzNkNjQ5Mzc3NmFlZDY1OTQzMTgyNGNiMzgyY2NlMGYzNzA5MDc2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /client_data/3155f51cab94cfafe4b265a7/gZm2ypof.json HTTP/1.1Host: cdn-cookieyes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon-32x32.png HTTP/1.1Host: www.bodis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookieyes-consent=consentid:cm56eWZ2UzdsNE51b3dzbFh0Qk1HY1hzOURESVVxUWk,consent:,action:,necessary:,functional:,analytics:,performance:,advertisement:,other:; _ga_L32F1DFB3K=GS1.1.1713858172.1.0.1713858172.60.0.0; _ga=GA1.1.1379586991.1713858172; XSRF-TOKEN=eyJpdiI6IjJ4YTg1aGVzeXpMMnMzeHgxTi9mNlE9PSIsInZhbHVlIjoiRkFPZW1LdUpyQ2NHMnRzVllhOHdUY1NXbEU0WmlGSEs5Y1pOWWZlQzRNaUgyWWdBc2V0YS9WRnZUSnVZQi8rUDFGd3E0RDdmTW9mMEFoU2trV2h0cTRPMlpNRXg2aExMYjNlYmlEM0pqMFdsK09rRmVkVTFLQWdIajdvc25SSGgiLCJtYWMiOiI5OTY4ZDM0MTY1Njk2YjUxOTgzMTMyNmI0YTRmNWM2Nzc0Njk1ZTNlNWEzMDE1YjQxYzJkMmRiMzBkOTdjNGU3IiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IlVEckRGSEd0Tk9lNTZHUXZPRjZtZ0E9PSIsInZhbHVlIjoiYWVmdk1Ybjl1cStBV2NsVEpjWmtwMlU4OE4yWktPdnVjcmhTQmU3OEh5SjhyZWIzRUxvUzBuZEpHVnZWa1RpY3Q2a3YwWkplN29kZWk1cXVuSDdDaCtKM3FIL1ZOUHJjV0VkVUpxMWpsZjJFRFN5NkZKOUpPRGRGdzh6R1UrTlkiLCJtYWMiOiI0Mzk3YmRjZmQ5ZmJjZDE1ODA0MTY4NjgzNzNkNjQ5Mzc3NmFlZDY1OTQzMTgyNGNiMzgyY2NlMGYzNzA5MDc2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /api/v1/ip HTTP/1.1Host: directory.cookieyes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.bodis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.bodis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client_data/3155f51cab94cfafe4b265a7/audit-table/jYoNmHK1.json HTTP/1.1Host: cdn-cookieyes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.bodis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.bodis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/ip HTTP/1.1Host: directory.cookieyes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client_data/3155f51cab94cfafe4b265a7/audit-table/jYoNmHK1.json HTTP/1.1Host: cdn-cookieyes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/?EIO=3&transport=websocket HTTP/1.1Host: ws.reamaze.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.bodis.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: fuTMJHA487kH4drMJvnxPw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /app/?EIO=3&transport=websocket HTTP/1.1Host: ws.reamaze.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.bodis.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: RdbYPB6O+YLTC1YuIxJkOA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /app/?EIO=3&transport=websocket HTTP/1.1Host: ws.reamaze.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.bodis.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: qnwR31AaRQBEwNBX7dMnMw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: icartservice.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f
Source: global traffic	HTTP traffic detected: GET /bMtzPZXpI.js HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww1.icartservice.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad
Source: global traffic	HTTP traffic detected: GET /_fd HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad
Source: global traffic	HTTP traffic detected: GET /_tr HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /legal HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww1.icartservice.com/legalAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /?caf=1&query=Residential+Painting&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREm0BlLqpj85G31fQC_eX0OZ1K3-a4OuiTf69i9hvcgwdKJvXpLoWWcXmE6_agIF8lgRjy0Qo5LP2xgfTZKRUkyEguFq3OH33d6-gTDHTZMRKzpBUEZlrZBAi2ClP0NSGhfLtEPzwEQBlkZro-tgR&pcsa=false&nb=0 HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /blIRRVeVB.js HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww1.icartservice.com/?caf=1&query=Residential+Painting&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREm0BlLqpj85G31fQC_eX0OZ1K3-a4OuiTf69i9hvcgwdKJvXpLoWWcXmE6_agIF8lgRjy0Qo5LP2xgfTZKRUkyEguFq3OH33d6-gTDHTZMRKzpBUEZlrZBAi2ClP0NSGhfLtEPzwEQBlkZro-tgR&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /_fd?caf=1&query=Residential+Painting&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREm0BlLqpj85G31fQC_eX0OZ1K3-a4OuiTf69i9hvcgwdKJvXpLoWWcXmE6_agIF8lgRjy0Qo5LP2xgfTZKRUkyEguFq3OH33d6-gTDHTZMRKzpBUEZlrZBAi2ClP0NSGhfLtEPzwEQBlkZro-tgR&pcsa=false&nb=0 HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /_fd?caf=1&query=Residential+Painting&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREm0BlLqpj85G31fQC_eX0OZ1K3-a4OuiTf69i9hvcgwdKJvXpLoWWcXmE6_agIF8lgRjy0Qo5LP2xgfTZKRUkyEguFq3OH33d6-gTDHTZMRKzpBUEZlrZBAi2ClP0NSGhfLtEPzwEQBlkZro-tgR&pcsa=false&nb=0 HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /_tr HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /?caf=1&query=Public+Online+High+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw&pcsa=false&nb=0 HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /bKLzejCZh.js HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww1.icartservice.com/?caf=1&query=Public+Online+High+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /_fd?caf=1&query=Public+Online+High+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw&pcsa=false&nb=0 HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /?caf=1&query=Online+Virtual+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU&pcsa=false&nb=0 HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /bEMFyhlDA.js HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww1.icartservice.com/?caf=1&query=Online+Virtual+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /_tr HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /_fd?caf=1&query=Online+Virtual+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU&pcsa=false&nb=0 HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /_tr HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /legal HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww1.icartservice.com/legalAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /legal HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /legal HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww1.icartservice.com/legalAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ww1.icartservice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg

Source: chromecache_162.1.dr

String found in binary or memory: return b}vC.H="internal.enableAutoEventOnTimer";var dc=ia(["data-gtm-yt-inspected-"]),xC=["www.youtube.com","www.youtube-nocookie.com"],yC,zC=!1; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: www.google.com

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713858104943&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: chromecache_128.1.dr	String found in binary or memory: http://www.domainname.com/page.html
Source: chromecache_162.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_162.1.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_148.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AX0YUwQBOr4dOBZcxG4ZyukO-zXGf3xvW
Source: chromecache_108.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AX0YUwQUCVca6BXihhlIAYEg9U9j8I6NU
Source: chromecache_148.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AX0YUwQgn256pT_VGf8u8_Yqb3Uy8n5wd
Source: chromecache_147.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AX0YUwQuALCosq94pi-nvzJHSC6NsXXTY
Source: chromecache_147.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AX0YUwQy-61a-vwtB2-jepbT6F3-RxaeA
Source: chromecache_108.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AX0YUwRDkJHafZEY_19Xyh8n925DOn7r9
Source: chromecache_108.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AX0YUwRt4qQDVDY8Y_Oj8kpSizFojJbsn
Source: chromecache_148.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AX0YUwRzWLPflHXaY-D-voX48iWgilZ6r
Source: chromecache_147.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AX0YUwT4IM1EazSyiYiOfFn_28Maj7eWE
Source: chromecache_142.1.dr	String found in binary or memory: https://bodis.medium.com/
Source: chromecache_147.1.dr	String found in binary or memory: https://business.google.com/hernandez
Source: chromecache_162.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_122.1.dr, chromecache_151.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_122.1.dr, chromecache_151.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_122.1.dr, chromecache_151.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_122.1.dr, chromecache_151.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_122.1.dr, chromecache_151.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_136.1.dr	String found in binary or memory: https://easylist-downloads.adblockplus.org/easylist.txt
Source: chromecache_144.1.dr, chromecache_125.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_104.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:300
Source: chromecache_121.1.dr, chromecache_161.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:400
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_160.1.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_160.1.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.22.5/LICENSE
Source: chromecache_148.1.dr, chromecache_108.1.dr	String found in binary or memory: https://learn.connectionsacademy.com/
Source: chromecache_162.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_144.1.dr, chromecache_162.1.dr, chromecache_125.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_144.1.dr, chromecache_125.1.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_151.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_118.1.dr	String found in binary or memory: https://pusher.com/
Source: chromecache_151.1.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_162.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_162.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_151.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_122.1.dr, chromecache_151.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_122.1.dr, chromecache_151.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_122.1.dr, chromecache_151.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_144.1.dr, chromecache_125.1.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_162.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_122.1.dr, chromecache_151.1.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_143.1.dr	String found in binary or memory: https://www.bodis.com/dfp.js
Source: chromecache_143.1.dr	String found in binary or memory: https://www.bodis.com/favicon-32x32.png
Source: chromecache_128.1.dr	String found in binary or memory: https://www.bodis.com/takedown-request
Source: chromecache_128.1.dr	String found in binary or memory: https://www.bodis.com/terms/infringement-notification-policy
Source: chromecache_148.1.dr	String found in binary or memory: https://www.davidjohnstongis.com/products/locatemy
Source: chromecache_108.1.dr	String found in binary or memory: https://www.georgiacyber.org/
Source: chromecache_162.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_108.1.dr	String found in binary or memory: https://www.google.com/images/afs/snowman.png
Source: chromecache_122.1.dr, chromecache_151.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_162.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_148.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwik2tiR69eFAxU5XUcBHW-YDhAYABAAGgJxdQ
Source: chromecache_148.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwik2tiR69eFAxU5XUcBHW-YDhAYABABGgJxdQ
Source: chromecache_148.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwik2tiR69eFAxU5XUcBHW-YDhAYABACGgJxdQ
Source: chromecache_108.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwinjr-S69eFAxVXaEcBHYUMBGMYABAAGgJxdQ
Source: chromecache_108.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwinjr-S69eFAxVXaEcBHYUMBGMYABABGgJxdQ
Source: chromecache_108.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwinjr-S69eFAxVXaEcBHYUMBGMYABACGgJxdQ
Source: chromecache_147.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjJlsiQ69eFAxWxa0cBHaXHDhYYABAAGgJxdQ
Source: chromecache_147.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjJlsiQ69eFAxWxa0cBHaXHDhYYABABGgJxdQ
Source: chromecache_147.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjJlsiQ69eFAxWxa0cBHaXHDhYYABACGgJxdQ
Source: chromecache_162.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_122.1.dr, chromecache_151.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.
Source: chromecache_106.1.dr, chromecache_156.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js
Source: chromecache_108.1.dr	String found in binary or memory: https://www.lavnercampsandprograms.com/
Source: chromecache_148.1.dr	String found in binary or memory: https://www.learnwellcollective.org/discover/learnwell
Source: chromecache_162.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_106.1.dr	String found in binary or memory: https://www.recaptcha.net/recaptcha/api2/
Source: chromecache_147.1.dr	String found in binary or memory: https://www.swifthomerenovations.com/
Source: chromecache_121.1.dr, chromecache_161.1.dr	String found in binary or memory: https://www2.bodis.com/svg/logo.svg

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443

Source: unknown	HTTPS traffic detected: 23.46.214.6:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.46.214.6:443 -> 192.168.2.5:49725 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@25/113@56/23

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2272,i,11281871909517473848,17655367729308081419,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://icartservice.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2272,i,11281871909517473848,17655367729308081419,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://icartservice.com	0%	Avira URL Cloud	safe
http://icartservice.com	3%	Virustotal		Browse

Source	Detection	Scanner	Link
cdn-cookieyes.com	0%	Virustotal	Browse
windowsupdatebg.s.llnwi.net	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
icartservice.com	3%	Virustotal	Browse
www.recaptcha.net	0%	Virustotal	Browse
directory.cookieyes.com	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
log.cookieyes.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://syndicatedsearch.goog	0%	URL Reputation	safe
https://log.cookieyes.com/api/v1/log	0%	URL Reputation	safe
https://www.recaptcha.net/recaptcha/api2/	0%	URL Reputation	safe
https://directory.cookieyes.com/api/v1/ip	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://www.merchant-center-analytics.goog	0%	URL Reputation	safe
http://ww1.icartservice.com/_tr	0%	Avira URL Cloud	safe
http://ww1.icartservice.com/_fd?caf=1&query=Public+Online+High+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw&pcsa=false&nb=0	0%	Avira URL Cloud	safe
https://cdn-cookieyes.com/client_data/3155f51cab94cfafe4b265a7/gZm2ypof.json	0%	Avira URL Cloud	safe
http://ww1.icartservice.com/bEMFyhlDA.js	0%	Avira URL Cloud	safe
http://ww1.icartservice.com/blIRRVeVB.js	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://www.georgiacyber.org/	0%	Avira URL Cloud	safe
https://www.georgiacyber.org/	0%	Virustotal		Browse
https://cdn-cookieyes.com/client_data/3155f51cab94cfafe4b265a7/banner.js	0%	Avira URL Cloud	safe
http://ww1.icartservice.com/bKLzejCZh.js	0%	Avira URL Cloud	safe
https://www.learnwellcollective.org/discover/learnwell	0%	Avira URL Cloud	safe
https://cdn-cookieyes.com/client_data/3155f51cab94cfafe4b265a7/script.js	0%	Avira URL Cloud	safe
https://www.recaptcha.net/recaptcha/api.js	0%	Avira URL Cloud	safe
http://ww1.icartservice.com/favicon.ico	0%	Avira URL Cloud	safe
http://ww1.icartservice.com/_fd?caf=1&query=Online+Virtual+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU&pcsa=false&nb=0	0%	Avira URL Cloud	safe
http://ww1.icartservice.com/_fd	0%	Avira URL Cloud	safe
https://www.recaptcha.net/recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC	0%	Avira URL Cloud	safe
https://www.davidjohnstongis.com/products/locatemy	0%	Avira URL Cloud	safe
https://cdn-cookieyes.com/client_data/3155f51cab94cfafe4b265a7/audit-table/jYoNmHK1.json	0%	Avira URL Cloud	safe
https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.	0%	Avira URL Cloud	safe
http://www.domainname.com/page.html	0%	Avira URL Cloud	safe
http://icartservice.com/	0%	Avira URL Cloud	safe
https://www.swifthomerenovations.com/	0%	Avira URL Cloud	safe
https://www.recaptcha.net/recaptcha/api.js	0%	Virustotal		Browse
https://www.lavnercampsandprograms.com/	0%	Avira URL Cloud	safe
https://www.swifthomerenovations.com/	0%	Virustotal		Browse
http://www.domainname.com/page.html	0%	Virustotal		Browse
http://icartservice.com/	3%	Virustotal		Browse
https://www.lavnercampsandprograms.com/	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.bodis.com	199.59.243.50	true	false		high
www.recaptcha.net	64.233.176.94	true	false	0%, Virustotal, Browse	unknown
event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com	52.209.139.15	true	false		high
cdn-cookieyes.com	104.22.58.91	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	0%, Virustotal, Browse	unknown
stats.g.doubleclick.net	142.250.105.155	true	false		high
bg.microsoft.map.fastly.net	199.232.214.172	true	false	0%, Virustotal, Browse	unknown
icartservice.com	23.82.12.32	true	false	3%, Virustotal, Browse	unknown
analytics-alv.google.com	216.239.34.181	true	false		high
80880.bodis.com	199.59.243.225	true	false		high
www3.l.google.com	142.250.105.113	true	false		high
cdnjs.cloudflare.com	104.17.25.14	true	false		high
www.google.com	108.177.122.99	true	false		high
cdn.reamaze.com	104.22.9.8	true	false		high
log.cookieyes.com	52.209.139.15	true	false	0%, Virustotal, Browse	unknown
googlehosted.l.googleusercontent.com	142.250.9.132	true	false		high
push.reamaze.com	172.67.28.250	true	false		high
ws.reamaze.com	172.67.28.250	true	false		high
windowsupdatebg.s.llnwi.net	69.164.42.0	true	false	0%, Virustotal, Browse	unknown
afs.googleusercontent.com	unknown	unknown	false		high
www.adsensecustomsearchads.com	unknown	unknown	false		high
ww1.icartservice.com	unknown	unknown	false		unknown
directory.cookieyes.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
analytics.google.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/js/bg/F3t2rNz7bgl6HBEOkbpna2AoS4gdljz1bcAONYlXrnE.js	false		high
http://ww1.icartservice.com/_fd?caf=1&query=Public+Online+High+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw&pcsa=false&nb=0	false	Avira URL Cloud: safe	unknown
http://ww1.icartservice.com/_tr	false	Avira URL Cloud: safe	unknown
https://cdn.reamaze.com/data/brands/bodis/ping	false		high
https://cdn-cookieyes.com/client_data/3155f51cab94cfafe4b265a7/gZm2ypof.json	false	Avira URL Cloud: safe	unknown
https://www.bodis.com/dfp.js	false		high
http://ww1.icartservice.com/bEMFyhlDA.js	false	Avira URL Cloud: safe	unknown
https://www.bodis.com/svg/logo.svg	false		high
http://ww1.icartservice.com/blIRRVeVB.js	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	low
https://www.bodis.com/js/chunks/14.3a7973fff8110300ff48.js	false		high
https://log.cookieyes.com/api/v1/log	false	URL Reputation: safe	unknown
https://cdn-cookieyes.com/client_data/3155f51cab94cfafe4b265a7/banner.js	false	Avira URL Cloud: safe	unknown
https://cdn-cookieyes.com/client_data/3155f51cab94cfafe4b265a7/script.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/afs/snowman.png	false		high
https://www.bodis.com/api/account	false		high
https://cdnjs.cloudflare.com/ajax/libs/pusher/7.0.1/pusher.min.js	false		high
https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LfzTxMTAAAAAAHIvRILb-jIu7t-RzWErSMfee74&co=aHR0cHM6Ly93d3cuYm9kaXMuY29tOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&cb=c5eivrwj482n	false		unknown
http://ww1.icartservice.com/bKLzejCZh.js	false	Avira URL Cloud: safe	unknown
https://cdn.reamaze.com/assets/reamaze.js	false		high
https://analytics.google.com/g/collect?v=2&tid=G-L32F1DFB3K&_ng=1&gtm=45je44h0v9116287315za200&_p=1713858171019&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=1379586991.1713858172&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=1&dt=takedown-request&dp=%2Ftakedown-request&dl=https%3A%2F%2Fwww.bodis.com%2Ftakedown-request&sid=1713858172&sct=1&seg=0&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=3205	false		high
https://www.recaptcha.net/recaptcha/api.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ws.reamaze.com/app/?EIO=3&transport=websocket	false		high
http://ww1.icartservice.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.google.com/adsense/domains/caf.js?abp=1&bodis=true	false		high
http://ww1.icartservice.com/_fd?caf=1&query=Online+Virtual+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU&pcsa=false&nb=0	false	Avira URL Cloud: safe	unknown
http://ww1.icartservice.com/_fd	false	Avira URL Cloud: safe	unknown
http://ww1.icartservice.com/	false		unknown
https://www.adsensecustomsearchads.com/afs/ads/i/iframe.html	false		high
https://directory.cookieyes.com/api/v1/ip	false	URL Reputation: safe	unknown
https://www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfzTxMTAAAAAAHIvRILb-jIu7t-RzWErSMfee74	false		unknown
https://www.recaptcha.net/recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC	false	Avira URL Cloud: safe	unknown
https://cdn-cookieyes.com/client_data/3155f51cab94cfafe4b265a7/audit-table/jYoNmHK1.json	false	Avira URL Cloud: safe	unknown
https://www.bodis.com/takedown-request	false		high
https://www.bodis.com/js/app.js?id=a6d102922d07b5b652c9	false		high
https://push.reamaze.com/assets/reamaze-push.js	false		high
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b	false		high
https://www.bodis.com/css/app.css?id=c87e71429bf4f4d8f19a	false		high
https://stats.g.doubleclick.net/g/collect?v=2&_ng=1&tid=G-L32F1DFB3K&cid=1379586991.1713858172&gtm=45je44h0v9116287315za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0	false		high
http://ww1.icartservice.com/?caf=1&query=Public+Online+High+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw&pcsa=false&nb=0	false		unknown
http://ww1.icartservice.com/legal	false		unknown
http://ww1.icartservice.com/?caf=1&query=Online+Virtual+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU&pcsa=false&nb=0	false		unknown
https://www.bodis.com/api/countries	false		high
http://icartservice.com/	false	3%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.bodis.com/favicon-32x32.png	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_162.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_122.1.dr, chromecache_151.1.dr	false		high
https://syndicatedsearch.goog	chromecache_144.1.dr, chromecache_125.1.dr	false	URL Reputation: safe	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AX0YUwT4IM1EazSyiYiOfFn_28Maj7eWE	chromecache_147.1.dr	false		high
https://www.bodis.com/terms/infringement-notification-policy	chromecache_128.1.dr	false		high
https://github.com/zloirock/core-js	chromecache_160.1.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_122.1.dr, chromecache_151.1.dr	false		high
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AX0YUwQuALCosq94pi-nvzJHSC6NsXXTY	chromecache_147.1.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_122.1.dr, chromecache_151.1.dr	false		high
https://www.georgiacyber.org/	chromecache_108.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AX0YUwQgn256pT_VGf8u8_Yqb3Uy8n5wd	chromecache_148.1.dr	false		high
https://cloud.google.com/contact	chromecache_122.1.dr, chromecache_151.1.dr	false		high
https://www.google.com	chromecache_162.1.dr	false		high
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AX0YUwRzWLPflHXaY-D-voX48iWgilZ6r	chromecache_148.1.dr	false		high
https://www.recaptcha.net/recaptcha/api2/	chromecache_106.1.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_122.1.dr, chromecache_151.1.dr	false		high
https://www.learnwellcollective.org/discover/learnwell	chromecache_148.1.dr	false	Avira URL Cloud: safe	unknown
https://www2.bodis.com/svg/logo.svg	chromecache_121.1.dr, chromecache_161.1.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_122.1.dr, chromecache_151.1.dr	false		high
https://bodis.medium.com/	chromecache_142.1.dr	false		high
https://learn.connectionsacademy.com/	chromecache_148.1.dr, chromecache_108.1.dr	false		high
https://support.google.com/recaptcha	chromecache_151.1.dr	false		high
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AX0YUwQy-61a-vwtB2-jepbT6F3-RxaeA	chromecache_147.1.dr	false		high
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AX0YUwQUCVca6BXihhlIAYEg9U9j8I6NU	chromecache_108.1.dr	false		high
https://github.com/zloirock/core-js/blob/v3.22.5/LICENSE	chromecache_160.1.dr	false		high
https://www.davidjohnstongis.com/products/locatemy	chromecache_148.1.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_122.1.dr, chromecache_151.1.dr	false		high
https://recaptcha.net	chromecache_151.1.dr	false	URL Reputation: safe	unknown
https://www.apache.org/licenses/	chromecache_122.1.dr, chromecache_151.1.dr	false		high
https://adservice.google.com/pagead/regclk	chromecache_162.1.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.	chromecache_122.1.dr, chromecache_151.1.dr	false	Avira URL Cloud: safe	low
https://cct.google/taggy/agent.js	chromecache_162.1.dr	false	URL Reputation: safe	unknown
https://easylist-downloads.adblockplus.org/easylist.txt	chromecache_136.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_122.1.dr, chromecache_151.1.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_151.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_122.1.dr, chromecache_151.1.dr	false		high
https://pusher.com/	chromecache_118.1.dr	false		high
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AX0YUwRDkJHafZEY_19Xyh8n925DOn7r9	chromecache_108.1.dr	false		high
https://td.doubleclick.net	chromecache_162.1.dr	false		high
http://www.domainname.com/page.html	chromecache_128.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.merchant-center-analytics.goog	chromecache_162.1.dr	false	URL Reputation: safe	unknown
https://www.swifthomerenovations.com/	chromecache_147.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_162.1.dr	false		high
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AX0YUwRt4qQDVDY8Y_Oj8kpSizFojJbsn	chromecache_108.1.dr	false		high
https://business.google.com/hernandez	chromecache_147.1.dr	false		high
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AX0YUwQBOr4dOBZcxG4ZyukO-zXGf3xvW	chromecache_148.1.dr	false		high
https://www.lavnercampsandprograms.com/	chromecache_108.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
64.233.176.94	www.recaptcha.net	United States	15169	GOOGLEUS	false
216.239.34.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
104.22.9.8	cdn.reamaze.com	United States	13335	CLOUDFLARENETUS	false
142.250.105.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.22.8.8	unknown	United States	13335	CLOUDFLARENETUS	false
199.59.243.50	www.bodis.com	United States	395082	BODIS-NJUS	false
172.67.28.250	push.reamaze.com	United States	13335	CLOUDFLARENETUS	false
74.125.136.103	unknown	United States	15169	GOOGLEUS	false
142.251.15.103	unknown	United States	15169	GOOGLEUS	false
142.250.9.132	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
104.22.58.91	cdn-cookieyes.com	United States	13335	CLOUDFLARENETUS	false
172.253.124.132	unknown	United States	15169	GOOGLEUS	false
199.59.243.225	80880.bodis.com	United States	395082	BODIS-NJUS	false
172.253.124.94	unknown	United States	15169	GOOGLEUS	false
142.250.105.103	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.9.147	unknown	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
108.177.122.99	www.google.com	United States	15169	GOOGLEUS	false
23.82.12.32	icartservice.com	United States	30633	LEASEWEB-USA-WDCUS	false
52.209.139.15	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.16
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1430195
Start date and time:	2024-04-23 09:41:04 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://icartservice.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@25/113@56/23
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://ww1.icartservice.com/legal Browse: http://ww1.icartservice.com/?caf=1&query=Residential+Painting&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREm0BlLqpj85G31fQC_eX0OZ1K3-a4OuiTf69i9hvcgwdKJvXpLoWWcXmE6_agIF8lgRjy0Qo5LP2xgfTZKRUkyEguFq3OH33d6-gTDHTZMRKzpBUEZlrZBAi2ClP0NSGhfLtEPzwEQBlkZro-tgR&pcsa=false&nb=0 Browse: http://ww1.icartservice.com/?caf=1&query=Public+Online+High+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw&pcsa=false&nb=0 Browse: http://ww1.icartservice.com/?caf=1&query=Online+Virtual+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU&pcsa=false&nb=0 Browse: http://ww1.icartservice.com/legal Browse: https://www.bodis.com/takedown-request Browse: http://ww1.icartservice.com/legal

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 64.233.185.94, 142.250.105.113, 142.250.105.139, 142.250.105.100, 142.250.105.101, 142.250.105.138, 142.250.105.102, 64.233.185.84, 34.104.35.123, 64.233.177.157, 64.233.177.154, 64.233.177.156, 64.233.177.155, 20.114.59.183, 199.232.214.172, 192.229.211.108, 20.166.126.56, 23.38.188.186, 23.38.188.211, 23.38.188.187, 23.38.188.163, 23.38.188.216, 23.38.188.225, 13.85.23.206, 74.125.138.95, 142.250.105.97, 64.233.176.95, 142.251.15.95, 64.233.177.95, 74.125.136.95, 142.250.9.95, 172.217.215.95, 108.177.122.95, 64.233.185.95, 173.194.219.95, 142.250.105.95, 172.253.124.95, 142.250.9.94, 74.125.138.94, 142.250.105.94, 23.199.71.136, 23.199.71.208, 23.199.71.185, 199.232.210.172, 64.233.176.113, 64.233.176.102, 64.233.176.101, 64.233.176.139, 64.233.176.100, 64.233.176.138
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, partner.googleadservices.com, clientservices.googleapis.com, a767.dspw65.akamai.net, partner46.googleadservices.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, glb.sls.prod.dcat.dsp.trafficmanager.net, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 06:42:02 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9847032552657944
Encrypted:	false
SSDEEP:	48:8xdd7TjfuwH7idAKZdA19ehwiZUklqehvty+3:8xLHuEGy
MD5:	5B08E5859058F4223B771DB5A3711315
SHA1:	A29DE246CC576BD28DC00EB68869B7B0400A887C
SHA-256:	802E33CE1B269E287A4F7212BAFBBB62AFA58FE0A445C1D663B0E4FC4128F66E
SHA-512:	4C843F6D5C19F7FB9DD86D3455A55265B3840438867A1C5B4765BA7EC65E72FC9DC0C614747A00AA92D39C8DDCE9880E2DC143E661189C75E50DE950E94D87DF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....W.>.Q...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X<=....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X<=....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X<=....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X<=..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XB=...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............#.F.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 06:42:02 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.000240581503862
Encrypted:	false
SSDEEP:	48:82d7TjfuwH7idAKZdA1weh/iZUkAQkqehwty+2:8eHu29Qby
MD5:	D5385DA81FDABAE55201A25453491714
SHA1:	CCE313B7C943BC8C18C655F85AC54CD1A048FEA0
SHA-256:	A45147C3BD8B1D3FF6824418511F19484801CB466DF6127E021C772FB98BCCE0
SHA-512:	47463580DD9746B1298A0715A0582D26ED0DAA26E7B4FAD05D73B6F74B3A5BA29CA80B9C59D3DD6F784A08A3E046E2E1E541F7CC189015F98DE64A0696132B6A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Y..Q...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X<=....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X<=....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X<=....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X<=..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XB=...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............#.F.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.009021272670264
Encrypted:	false
SSDEEP:	48:8x4d7TjfsH7idAKZdA14tseh7sFiZUkmgqeh7s6ty+BX:8xUHanqy
MD5:	E5BE9E682FB49E7899AB3ECF3B05C3E8
SHA1:	6BC68C62A222BE817D1D22DAE4AC6705E8E758AC
SHA-256:	97C0E27302CB05201FA0D4307938B931D7D47DB5AF64015F1EBC1B8740A83830
SHA-512:	7962DE942D6426157E1CCCF15CC6B48CAA5417D3E883B79F5878DD3B8A1B6D97CFC41C4C4ACAFD31076A5DE9EBEF5EBB9FA9C3E003C99E52EBFAAF14B0D2DBEE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X<=....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X<=....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X<=....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X<=..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............#.F.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 06:42:02 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.997419766077214
Encrypted:	false
SSDEEP:	48:8ld7TjfuwH7idAKZdA1vehDiZUkwqeh8ty+R:8THud8y
MD5:	EE15E9B6EBE036AD32C7F2A207DE0831
SHA1:	9FA6EE9AEAAD45727862F3BC5CEEE2E54B839A81
SHA-256:	1863AD0748472AD7AE199CBF429965BFB5BD3E0414FF0613B72F548506A704A0
SHA-512:	835AF20AD1E582B9430940D68A4392DE2D82C8FB922C53A0FC44CE694AA410318027420B6FA39620D2B4776E59C5EF7DDF3555A834F16EF8BF2FF54E1834F6F5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......!.Q...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X<=....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X<=....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X<=....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X<=..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XB=...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............#.F.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 06:42:02 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.985372767641202
Encrypted:	false
SSDEEP:	48:8md7TjfuwH7idAKZdA1hehBiZUk1W1qeh+ty+C:8OHu994y
MD5:	131401C7A43201448F22259D98008171
SHA1:	33DCE42248112B24FB2A2BCAB33E115F1E61AB22
SHA-256:	B0C98A85F50AA78A0C18960EE0D2DEFB2EAA3B4BD97879563FD986963197D5B7
SHA-512:	876C7ABD21AA14A26FCA9C755151A134C501B341D74A3EEE266CAE6C9885B11B73CC09531521C1F0E694344C91DEF4EFB3B1D22B7D16F55DF5822B3A103F4C44
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....c.1.Q...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X<=....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X<=....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X<=....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X<=..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XB=...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............#.F.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 06:42:02 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9977565138115576
Encrypted:	false
SSDEEP:	48:8Yd7TjfuwH7idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbUty+yT+:80HuBT/TbxWOvTbqy7T
MD5:	FC743C317230EC61788D13588C87E7CE
SHA1:	861456DBE8D96C2EFFDF3FE95A33D9C015739143
SHA-256:	A2C291A4A1CC546483AC437D60233989881EAE61F2CE17BAFA5989E6F5961426
SHA-512:	7161D54E2B9E62C51FDD49DE996754FD5B6E860ACAB57E9556528369F5290BB3BC6CE05394A7D6C5665287DFBD858043934203D2D4D6E7FCDFFF368DCC4E7572
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....m...Q...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X<=....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X<=....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X<=....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X<=..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XB=...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............#.F.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65338)
Category:	downloaded
Size (bytes):	230283
Entropy (8bit):	5.029273855736903
Encrypted:	false
SSDEEP:	1536:aaeb9qxRZtlwg5RgfNOX35/FZ+wt7wZg74Doh/PFChdak/hlgraq5:aaebVwBHk/hOaq5
MD5:	C87E71429BF4F4D8F19A4ED1CBBC9365
SHA1:	A0339336170F75C801958AC8D73D2C05749C821F
SHA-256:	A7F7EF56CE1DA2FE89C795F858968B4B35A44C9FDD23144BEB64B50D1D2268AF
SHA-512:	E7E64531CE1D729BE2AC7565F06E00FFDD635638B10AC1C4DC1912C32860542582A7B7B5EE776C299A4425947548656CB90038DE82D3E519AF83B9646544310C
Malicious:	false
Reputation:	low
URL:	https://www.bodis.com/css/app.css?id=c87e71429bf4f4d8f19a
Preview:	@import url(https://fonts.googleapis.com/css?family=Roboto:300,400,500,700,400italic\|Open+Sans:100,300,400,500,700);../!. Vuetify v1.5.24.* Forged by John Leider.* Released under the MIT License..*/@-webkit-keyframes shake{59%{margin-left:0}60%,80%{margin-left:2px}70%,90%{margin-left:-2px}}@keyframes shake{59%{margin-left:0}60%,80%{margin-left:2px}70%,90%{margin-left:-2px}}.black{background-color:#000!important;border-color:#000!important}.black--text{color:#000!important;caret-color:#000!important}.white{background-color:#fff!important;border-color:#fff!important}.white--text{color:#fff!important;caret-color:#fff!important}.transparent{background-color:transparent!important;border-color:transparent!important}.transparent--text{color:transparent!important;caret-color:transparent!important}.red{background-color:#f44336!important;border-color:#f44336!important}.red--text{color:#f44336!important;caret-color:#f44336!important}.red.lighten-5{background-color:#ffebee!important;border-color

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	163
Entropy (8bit):	4.9795429783877125
Encrypted:	false
SSDEEP:	3:t6WCafDDS4vDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHEecyFTgrkcd6RLkqC:t6wfDpmc4slhohC/vmI4EeorkcdAC
MD5:	AA12127E298C6ECA341EA16A27ABA919
SHA1:	3B73E1D2F3A639A862ABE0C9C2D8994C38299C5D
SHA-256:	678F5D6A8029C07DAC96D17973705B354678045603FB19CE1586829A3518325B
SHA-512:	7E1BBCD84C93B2D5ECF68205516BEE67254CE79B80930A6293C571CCE4BEA38D3CAC1815D90922904FDECDFFEBB1A8F3A336F457A32A50597344C9B6002E0BCB
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M7.59 18.59L9 20L17 12L9 4L7.59 5.41L14.17 12"/></svg>.

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1536), with no line terminators
Category:	downloaded
Size (bytes):	1536
Entropy (8bit):	5.905439233993386
Encrypted:	false
SSDEEP:	24:2jkm94/zKPcAhAv+KVCLTLPeYAgFnu5vtTGJTlDTL5ncCxHgFnu5flWtX5l1A4fp:VKEAhtKonjfcvtTARXx/gh1mLrwUnG
MD5:	7D08C71A0C1E0A8294521F3F66AC4359
SHA1:	9D8944DD78EFBE2165616CE6449DA1006F43C23F
SHA-256:	BDB100EFCF00BA5BC59CD2234F7FF263CDD015C950B57211CEBF292075B3D17C
SHA-512:	D266224988006EEA8C2DF890455DBAAE26467E7069895555E6A5DB744FD5FD98E62CE8352C65A5E71B8792499F5A38E7F075300086E2EA44D1526A026918724E
Malicious:	false
Reputation:	low
URL:	https://www.recaptcha.net/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.recaptcha.net/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A89JPrWYXvEpNQ/xE+PjjlGJiBu/L2GfQcplC/QkDJOS1fBoX5Q4/HLfT1dXpD1td7C2peXE3bSCJiYdwoFcNgQAAACSeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='3NNj0GXVktLOmVKwWUDendk4Vq2qgMVDBDX+Sni48ATJl9JBj+zF+9W2HGB3pvt6qowOihTbQgTeBm9SKbdTwYAAABfeyJvcmlnaW4iOiJo

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	171
Entropy (8bit):	5.911306034084492
Encrypted:	false
SSDEEP:	3:yionv//thPl3xWrA4RthwkBDsTBZtoAV3ns7Lk89wvgpLZF+ladePhLup:6v/lhPKM4nDspndCQ89wgh1Wyp
MD5:	8D5FEB395D9213D29AAE3AF40E52C495
SHA1:	B5F5B77DFB3C7070595851572D609CF080957B7D
SHA-256:	56B1603B488EAA0B34FE9B942B3CD5A7070B1B17DB89F411EB28AFE9A02F3E7B
SHA-512:	8F4B9984B85EB792F0628E7AB250207DCE75A9448F052CDD50777D1A3C7456AFF9BB82D33CB2FB737C6EA2964E07DEF943EBBCEFF85DF70DAC0EECA239D0D2BD
Malicious:	false
Reputation:	low
URL:	https://www.bodis.com/favicon-32x32.png
Preview:	.PNG........IHDR... ... .....szz.....tEXtSoftware.Adobe ImageReadyq.e<...MIDATx.b`..#.0..R.S....g.s.v3.t..:`.....u.(....jp...*..nw...p.....u.hm8.....0...'........IEND.B`.

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (16164)
Category:	downloaded
Size (bytes):	34582
Entropy (8bit):	5.357852858181958
Encrypted:	false
SSDEEP:	768:2iPaGRUxGOghgvvPg4gGgBUagGgEgGwUxgd2:fivvY31BUR1rG7Sd2
MD5:	D30D123CBD732E4A892379E6E8D1C0A6
SHA1:	90CE7F36713326D91188C73A1536962E907308BA
SHA-256:	AF573E07C934F8D479B8BF10751FC292D4C41C1CCA9F416266AEBA7EB948016E
SHA-512:	A35BC99BE11622D44C145548588243C38ECD7CB11405A77FA583B844BB319CD54C54239A9A8BC1B5A5C09A87A2E433D9DA1554A212CDAA19ECF7254615E9889D
Malicious:	false
Reputation:	low
URL:	https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=9042052004&pcsa=false&channel=pid-bodis-gcontrol203%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol307%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol430&client=dp-bodis30_3ph&r=m&sct=ID%3Da409b8deb4eed28a%3AT%3D1713858126%3ART%3D1713858126%3AS%3DALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg&sc_status=6&hl=en&rpbu=http%3A%2F%2Fww1.icartservice.com%2F%3Fcaf%3D1%26query%3DOnline%2BVirtual%2BSchool%26afdToken%3DChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU%26pcsa%3Dfalse%26nb%3D0&max_radlink_len=50&type=0&uiopt=false&swp=as-drid-2298147197369106&q=Online%20Virtual%20School&afdt=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436&client_gdprApplies=0&format=n3&ad=n3&nocache=8141713858150218&num=0&output=afd_ads&domain_name=ww1.icartservice.com&v=3&bsl=8&pac=0&u_his=1&u_tz=120&dt=1713858150219&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=ad-1&drt=0&jsid=caf&nfp=1&jsv=625314022&rurl=http%3A%2F%2Fww1.icartservice.com%2F%3Fcaf%3D1%26query%3DOnline%2BVirtual%2BSchool%26afdToken%3DChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU%26pcsa%3Dfalse%26nb%3D0
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33788)
Category:	downloaded
Size (bytes):	33791
Entropy (8bit):	5.359166867850649
Encrypted:	false
SSDEEP:	768:TP2yRwVcbMnnZNdxBB5gPi0y8rnaVG4xYEW0Ddem+euROvvMzLXWI+6Ch75BGJ21:WnQrnSG4xYE4RLm
MD5:	8A51FDDCB2118F8428C7274D196B74B5
SHA1:	43C7043729A1372FE8E3B5AC45790AA8721F68E6
SHA-256:	4FFA4569923384331A8F6CB933100CBB1DAD86E5BEE0574C933AC399C792A3F7
SHA-512:	FAD215B987E1D80DE9AB71C47DFAC4405D2F802379522764810D5E35E4FF475DF6891A43AAC993EFF8A723D32125814A83937FD6728D3F9AF7D189864AE977BA
Malicious:	false
Reputation:	low
URL:	http://ww1.icartservice.com/bKLzejCZh.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).version={})}(this,(function(exports){"use strict";function __awaiter(e,t,n,i){return new(n\|\|(n=Promise))((function(s,a){function o(e){try{d(i.next(e))}catch(e){a(e)}}function r(e){try{d(i.throw(e))}catch(e){a(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,r)}d((i=i.apply(e,t\|\|[])).next())}))}var Blocking;"function"==typeof SuppressedError&&SuppressedError,function(e){e.PENDING="pending",e.NONE="none",e.BLOCKED="blocked",e.ALLOWED="allowed"}(Blocking\|\|(Blocking={}));class Adblock{constructor(e){this.state=Blocking.PENDING,this._mocked=!1,e?(this.state=e,this._mocked=!0):this.state=Blocking.ALLOWED}inject(){return __awaiter(this,void 0,void 0,(function*(){}))}get isBlocked(){return this.state===Blocking.BLOCKED}get isAllowed(){return this.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	119
Entropy (8bit):	4.572116595107445
Encrypted:	false
SSDEEP:	3:YMMLULLPYLLMfQ2pHG/4HviaNmX/ZiwKqyRHfHyY:YMMLULLm2pHrHaaNmXxtwyY
MD5:	8A86EA2384E22CF28DBD815C8E187C12
SHA1:	BC58423F88CB821B4AB13B55B732DEAB8DE4C3DD
SHA-256:	CD5B8066FB6AAFF47236E933B399383FACEA10FC0CEFAC5C67414B45532351FB
SHA-512:	64E1E4A8582F99F0FE882357A950A4A10F833C969DE72013BBA43C9D773A85A7F2B6639F7CF6827E12149D7A756A5FC3467FE0FFBE1BF7730A4D351496E4CFDB
Malicious:	false
Reputation:	low
URL:	https://directory.cookieyes.com/api/v1/ip
Preview:	{"ip":"89.187.171.132","country":"US","country_name":"United States","region_code":"GA","in_eu":false,"continent":"NA"}

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3847
Entropy (8bit):	4.650593742421098
Encrypted:	false
SSDEEP:	96:+OKfDt4KXndvbK/P28xy1BYE/4CE9OgOOklRunzFnl:9oDtJdzK/u8CBYg4CE4gOzqnzFl
MD5:	54E7A9A0BFB9E5BFC77C6BDB5558BE5B
SHA1:	051F12FB0E2FD868C4DDF9EF7F4D962EF5F0DBF2
SHA-256:	B2E7272CEB88761DB810B1D595B90BAB1894D597568B3D80E8DCA6AB88155747
SHA-512:	BBEF17C6F8F7F34E074C35F03536183743CD7E1403B1DC9269B1DCD5344696CDB13628E3FD4305F23709820B6779C7497267FEAAFEDF1FBC517D3E92C9B9D48C
Malicious:	false
Reputation:	low
URL:	https://www.bodis.com/svg/logo.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 16.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="182px" height="36px" viewBox="0 0 182 36" enable-background="new 0 0 182 36" xml:space="preserve">.<rect x="2" y="1" fill="#176392" width="37" height="14"/>.<rect x="14" y="20" fill="#57B9E8" width="25" height="15"/>.<g>..<path fill="#176392" d="M43,1h13.372c2.647,0,4.621,0.11,5.921,0.331C63.593,1.552,64.973,2.3,66,3s1.895,1.626,2.579,2.79...c0.685,1.164,0.799,2.734,0.799,4.179c0,1.567-0.422,3.004-1.267,4.312c-0.844,1.309-1.989,2.29-3.434,2.944...c2.039,0.593,3.605,1.605,4.701,3.035c1.095,1.43,1.643,3.111,1.643,5.043c0,1.521-0.354,3-1.061,4.438...c-0.708,1.438-1.674,2.586-2.898,3.446c-1.225,0.859-2.735,1.388-4.53,1.586c-1.12

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Category:	downloaded
Size (bytes):	15920
Entropy (8bit):	7.987786667472439
Encrypted:	false
SSDEEP:	384:sShqOXQlaSchOwK0uFvRqq3xR/xb5OY3aU/lHS9WE2YeK1os:sShJKaScJK0uFvRvxb5OY3aU/lHkmK
MD5:	3A44E06EB954B96AA043227F3534189D
SHA1:	23CEF6993DDB2B2979E8E7647FC3763694E2BA7D
SHA-256:	B019538234514166EC7665359D097403358F8A4C991901983922FB4D56989F1E
SHA-512:	FAB970B250DD88064730BD2603C530F3503ABB0AF4E4095786877F9660A159BF4AD98C5ABEA2E95EB39AE8C13417736B5772FCB9F87941FF5E0F383CB172997F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......>0.......T..=..........................d.....^.`.. .\..<.................6.$.... .... ..S.!.%c.......\|y...6..;.s#.....x_<..o..........l...J.`p.m..6...h....U.pD...R.J.$...W..`7w...[..qD....<P......J.x.+J-^....va...:.KW..Ph...."....{.W4C....p..1..........CH.....P.............Q%.=.F.....1.%J....d..X..J.<AU..b.N...<l...d...f..^Y..]..&...VQ.<.....F..{.....&{.+J;.... .2P.:.5..?.o.\|....V[t..M..#..d.fv...........4..`.).h..h......@u........4......~.....r.B...p1.P.T..<....r....Y..8...GQ1.t.....%..-Wh..:W.....1l-...@..hL}...lN.._.j...D`..sn.=(...W..?.Z..p.52..H...X...)..CJ...V..7.....<\|..i...{...R.M+[..\|..x-..M3...~!\.l6}.T.o.R'$.)..-.W.T....A...5?.{.2.bR.../....*l..;...{..I>.n..MJ.2........U&. ..(L]].%P.$..p59.LD.f.........V.....z.5~.2\......#.4....9_....%wp.OU.0.....CK..../.x. ..A2e...@...(.i..f./.....`1.......!......@....0 vbt.e v./!...N=>:..A...(...f....?.....iH.F..!k.6.O6S..54.^c..2.G.?6....)b......lv.,h....Y.}.?..uk....L.4d.g..6.\.1u..

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Category:	downloaded
Size (bytes):	15860
Entropy (8bit):	7.988022700476719
Encrypted:	false
SSDEEP:	384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N
MD5:	E9F5AAF547F165386CD313B995DDDD8E
SHA1:	ACDEF5603C2387B0E5BFFD744B679A24A8BC1968
SHA-256:	F5AEBDFEA35D1E7656EF4ACC5DB1F243209755AE3300943EF8FC6280F363C860
SHA-512:	2A71EDB5490F286642A874D52A1969F54282BC43CB24E8D5A297E13B320321FB7B7AF5524EAC609CF5F95EE08D5E4EC5803E2A3C8D13C09F6CC38713C665D0CE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......=...........=..........................d.....^.`.. .H..<........8........6.$.... ..~. ..)..~E......6..J..`.. :.....8.;..5......!.l.j.%SX.SDm...RXh...&.X......5..._...............@...8...Gi..g.;9..'.Q......1..5.U.....w.+.hn..........c.....5.#{..%.#.JP..i.J..U(.6.D5V.<"Ex6"...k..[..{.?.d2....{.........W.......S...hT,.l..'.9.;[@..._.L..\|+...)......S...9F......T..t...-=X.:FtZ..uZ.[.?..f<.....@.....'...I...e..........8.?..-R.3,%X...I2\|.Wk{i...V2C....H$.H.LH.{.........(...6U..%W[t.R....j.........iS..%..L....rf.=..7..9i.I...1.Mj..C..u.B.........vJ.....+.u$.=..3..T..R.._.gs...6).$.-.PUH..Hl....WDd.......fK.(B.F1>..5.._[..]}VA#X...c.....%.(s50...m...^...1...'.$U*H.t...H...s.AZu...'...8.p...@.@.....q..Y.#.....#.....G.....G@..o8. A........:.........S.:..N.S.j.....tav.}.9h..s.....he.......{,~k...,eK.z}.......5%G...l.uCK.....V..............m.....U}.Sz..Z.c.{.....:..g......>h..'\|Z........a....^.b...o.>...g........f../w'....Ja.o(

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1559)
Category:	downloaded
Size (bytes):	1560
Entropy (8bit):	5.355309435829034
Encrypted:	false
SSDEEP:	48:0JhAvOnK8lwSb6YS4tyPWp2PXihm0wQR2FgbnYfblV:8jDbL1tzAXr+0P
MD5:	799D868F8889CDBDB3E116818E0043B3
SHA1:	E05F9CD468989D44783148B639EA576D346223DE
SHA-256:	8FD5A04F11A93A19BDCD791C8AAEDC5F0271D8BCD892C4ECEF866F5A60A485E9
SHA-512:	8DD3C7FB9F87134DC0B469A2DE8C5C3F151AB89C659594F06376330F64D70EAAB11EF794A0D59F04150A93331B81966C10530845B47826BC8D3F2F0A91BECCD3
Malicious:	false
Reputation:	low
URL:	https://www.adsensecustomsearchads.com/afs/ads/i/iframe.html
Preview:	<!doctype html><html><head><meta name="ROBOTS" content="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta content="origin" name="referrer"></head><body><div id="adBlock"></div><script nonce="Q7iWneJVN82TVZRntn5Mvg">if (window.name.match(/^{"name":"master-\d+"/)) {var script = document.createElement('script');script.src = "/adsense/search/ads.js";var href = window.location.href;if (!!href && (href.indexOf('?pac=') > 0 \|\| href.indexOf('&pac=') > 0)) {if (href.indexOf('?pac=1') > 0 \|\| href.indexOf('&pac=1') > 0) {script.src += '?pac=1';} else if (href.indexOf('?pac=2') > 0 \|\| href.indexOf('&pac=2') > 0) {script.src += '?pac=2';} else {script.src += '?pac=0';}}document.head.appendChild(script);window.IS_GOOGLE_AFS_IFRAME_ = true;}function populate(el) {var adBlock = document.getElementById('adBlock');adBlock.innerHTML += el;}function getMaster() {var m = null;var pIndex = window.name.indexOf('\|');if (pIndex > -1 && window.name.charAt(0) != '{') {try {m = window.

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.208966082694623
Encrypted:	false
SSDEEP:	3:up/ICkY:upHkY
MD5:	7B105F75DBDF29981519E670CCD970B7
SHA1:	BC4C21456B811793A8ACCB131FCA3E61F46E84CB
SHA-256:	A7061F9CFD36E407F892747754B2C01B4287F1FE4CBE519ACBA51E8758DB8894
SHA-512:	05DED3BCFFF2898261E7DD542CCD6B7A2B122EC0E4206C05C198C89970AB335218B81D1B12298CBBD253B7B9F07D621F09BDDE499BA6F8D5D926834771F73075
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnzsQa2kiSpERIFDRNJOksSBQ1TWkfF?alt=proto
Preview:	ChIKBw0TSTpLGgAKBw1TWkfFGgA=

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	58
Entropy (8bit):	4.6701559435830715
Encrypted:	false
SSDEEP:	3:inEL0XH9YK1MqQYPQQIgXn:iVHCUyYTIs
MD5:	1F7C2DEC23C043D91014C48507519DC8
SHA1:	2E36EB4E85B55DB86CDF4E9B2E786A7930ACE8FA
SHA-256:	ED039C85779AF96DD672E99CA77B346A6DF578DC27E9EA6A2C42C7087DDD5862
SHA-512:	BB6F047DE8247F5616CE7C1BC441A5E38C4B948BFA2D2D4292FC2F5D7DA1D5FE92A92BE7EF1330A6D40084E62FE6E262BD6BF1F388E95F19A5338CC053160ED9
Malicious:	false
Reputation:	low
URL:	https://cdn-cookieyes.com/client_data/3155f51cab94cfafe4b265a7/gZm2ypof.json
Preview:	[{"targetBanner":695389,"condition":"regionName IS 'EU'"}]

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65405)
Category:	downloaded
Size (bytes):	65941
Entropy (8bit):	5.142153948609525
Encrypted:	false
SSDEEP:	768:jWds216t1KRv89yz+YDN+hHW8hIEyZc+NwBuxt64CTMFPWfAfMxv3fUyaKdUTf76:Sdsg6CaLy2+cUybdIfVwApDVstxOOfz
MD5:	E1BE14BCD111694D8E5AC59DB0560AA4
SHA1:	135246FFFDB51A130C046F7D7F8C371ED6872B8F
SHA-256:	355557A7ADDF5FF91B246281CEC6AD20F35B2BA7C44DD327926F337D6F0394E0
SHA-512:	C636BC7EB676353D3E6F568C9AE2DCDE77C78E197DD284E253697C479E56C5132843EA93B91F6990E32787F23D5FB1DCD9EDBBCF46A628D380266E976D87B6FC
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/pusher/7.0.1/pusher.min.js
Preview:	/!. Pusher JavaScript Library v7.0.1. * https://pusher.com/. . Copyright 2020, Pusher. * Released under the MIT licence.. */.!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.Pusher=e():t.Pusher=e()}(window,(function(){return function(t){var e={};function n(o){if(e[o])return e[o].exports;var r=e[o]={i:o,l:!1,exports:{}};return t[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}return n.m=t,n.c=e,n.d=function(t,e,o){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:o})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var o=Object.create(null);if(n.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)f

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5520
Entropy (8bit):	4.711780552168503
Encrypted:	false
SSDEEP:	96:I1D1g2I1YVZ18rWO1wXD91SG1OSH1SW78r1PF1rAxA6DeVKoenTGjujX2Fwfz/YS:IJcIZWrn+z9bksUeKzhuFuengwuEV
MD5:	F17B7A294C4D5B3575E5CF528EC3C19F
SHA1:	A408DEC791141800C64E0B9A5CCEC51416215DB5
SHA-256:	6F6AD8F69A30DDDDF8F5E0F1416F8C2B8B017952324DD4302292806E68E350E6
SHA-512:	AE82DA489E6AD7E33E72186636DCEB4C1E8EB86F513F3E7D302289CD3375C5140608D10290A42F98F4B7C3343DAE3F1DC19A67F71E0F0DA74F56C2347F8C005C
Malicious:	false
Reputation:	low
URL:	https://cdn-cookieyes.com/client_data/3155f51cab94cfafe4b265a7/audit-table/jYoNmHK1.json
Preview:	{"cookies":{"XSRF-TOKEN":{"cookie_id":"XSRF-TOKEN","duration":"2 hours","description":"Wix set this cookie for security purposes."},"_ga":{"cookie_id":"_ga","duration":"1 year 1 month 4 days","description":"Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors."},"_gid":{"cookie_id":"_gid","duration":"1 day","description":"Google Analytics sets this cookie to store information on how visitors use a website while also creating an analytics report of the website's performance. Some of the collected data includes the number of visitors, their source, and the pages they visit anonymously."},"_gat_gtag_UA_":{"cookie_id":"_gat_gtag_UA_","duration":"1 minute","description":"Google Analytics sets this cookie to store a unique user ID."},"_gcl_au":{"cookie_id":"_gcl_au","duration":"3 months","descriptio

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17687)
Category:	downloaded
Size (bytes):	18282
Entropy (8bit):	5.660943999253795
Encrypted:	false
SSDEEP:	384:eHqJezwxxSRS6Rua4aO8OiGa8VNUSfEeaeHOJZZ1NBjSTkQ:mirS1QavO8fGa8VF1aeHOd7xakQ
MD5:	133138DC8ED76A5E7F52FD72AEB36003
SHA1:	10C34D56309EF22C2BF88339D926EFA45F86C579
SHA-256:	177B76ACDCFB6E097A1C110E91BA676B60284B881D963CF56DC00E358957AE71
SHA-512:	06B3121679A88200E2AE49B47610DC28E60852911EF4313E1C96C09CE080654914C615A739234F952198F459C4FC7B50A2DDA3A88DE46D610DAD6225B2B86DE9
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/F3t2rNz7bgl6HBEOkbpna2AoS4gdljz1bcAONYlXrnE.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var b=function(a,y){if((a=(y=D.trustedTypes,null),!y)\|\|!y.createPolicy)return a;try{a=y.createPolicy("bg",{createHTML:P,createScript:P,createScriptURL:P})}catch(R){D.console&&D.console.error(R.message)}return a},P=function(a){return a},D=this\|\|self;(0,eval)(function(a,y){return(y=b())&&1===a.eval(y.createScript("1"))?function(R){return y.createScript(R)}:function(R){return""+R}}(D)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var ay=function(y,a){return C[y](C.prototype,{parent:a,length:a,prototype:a,splice:a,call:a,console:a,floor:a,stack:a,replace:a,document:a,propertyIsEnumerable:a,pop:a})},Br=function(y,a,D,P,B){if((D=a[0],D)==e)y.W=true,y.ls=25,y.P(a);else if(D==v){y.U=(P=a[1],true);try{B=y.R\|\|y.P(a)}catch(p){x(y,p),B=y.R}P(B)}else if(D==yB)a[3]&&(y.T=true),a[4]&&(y.W=true),a[5]&&(y.g=true),a[6]&&(y.U=true),y.P(a);els

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	15900
Entropy (8bit):	5.385568594245868
Encrypted:	false
SSDEEP:	384:K8JnuF0fNXiu8Un8o67c28h60e8KW3KWQeJI7:VzfN/tRK2Kp8I7
MD5:	B4C518CE4C5D7455962D6A751F1E9ED7
SHA1:	A6B61CCFADF987E6D8AEE808AD800A654D70EAFF
SHA-256:	5A551CEAE2739E89E72C8EB99C1F454C0864840D65EF077E757A2DC0EC96C98E
SHA-512:	BDBDA4593F4F1E7A0E2EF00C6CF986EED67C01C27E10A83745C176962D679EADC1AED2D8E8DFE5DA3C971C2ACA095C430278108201BA2E9985E5884C44B4C122
Malicious:	false
Reputation:	low
URL:	https://cdn.reamaze.com/data/brands/bodis/ping
Preview:	{"name":"BODIS","preferences":{"kb_meta_reduce_seo":true,"kb_header_bg_color":"rgb(23, 99, 146)","kb_header_font_color":"#ffffff","kb_header_url":"/","kb_header_show_brand_logo":false,"kb_header_logo_url":"https://www2.bodis.com/svg/logo.svg","kb_lang":"","kb_hero_bg_color":"rgb(23, 99, 146)","kb_hero_font_color":"#e4f7ff","kb_link_color":"rgb(23, 99, 146)","kb_body_color":"#555555","kb_body_font":"Roboto, sans-serif","kb_title_font":"Roboto, sans-serif","kb_title_color":"#555555","kb_title_light_color":"#FBFBFB","kb_custom_meta_html":"","kb_custom_header_html":"","kb_custom_footer_html":"","kb_custom_css_stylesheet":"@import url('https://fonts.googleapis.com/css?family=Roboto:400,500,700,400italic\|Material+Icons\|Open+Sans:100,300,400,500,700');\r\n\r\n#header .staff-avatars {\r\n display: none;\r\n}\r\n\r\nbody #header {\r\n background: #176392;\r\n}\r\n\r\nform#new_message #submit-container button {\r\n background: #176291;\r\n}","kb_custom_google_analytics":"","kb_custom_ga

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (597)
Category:	downloaded
Size (bytes):	518479
Entropy (8bit):	5.683759340720687
Encrypted:	false
SSDEEP:	12288:wTJtYdv7tmjTEyw+Z8ML8Vo1ukBO1N34PS+H7wIqBG7iIXXON2R+:kEcLVuN2R+
MD5:	8326C23D6B3EED35BC3E62F3294587FD
SHA1:	EDDA17E74E53E85073E5EAC9CB6BE2163DBFA23C
SHA-256:	57F03D3BA66117EDC152646341120DD3A1D7D71B9A98A3723AF5A8AE61BCB3AB
SHA-512:	F63FAEEA0ACCAC3FA74CF6168B319D901EDE869A83E7E6129158A120008E70E5B239BBBFF3159917F8AEEFCF997916A778AE21900B22035657E05AAAE9EBAAC0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (2752)
Category:	downloaded
Size (bytes):	2753
Entropy (8bit):	5.199788114504054
Encrypted:	false
SSDEEP:	48:DiyIQI7PI7Azy6k4SpgTJyMhwkcdZRsc+ZfrNoRUHfkuVu1uk+/o+TZ+XdRT:DDmy6TtyYbCRMZTa2/kuVu1uo+oXP
MD5:	42F8EEC1C24ED1CA9F6FBD72F0DDCEB9
SHA1:	198C2841C4D1AB1F7285301F8EFCE1E54F705182
SHA-256:	52132DA463628ECDD559B91C7B0C71EA3D7D6A9D00A644D9D90C16B489B2B721
SHA-512:	ACB325E6F40AC7A8853A7A517A3ACFDD9AD6F3BD3B91D7E81F80811C0CAC186B41706956696606443D4763C9ADC8C0758A163F6F15766D0ADC3D957BADB3D52F
Malicious:	false
Reputation:	low
URL:	https://push.reamaze.com/assets/reamaze-push.js
Preview:	(()=>{(function(){({initialize:function(){window.ReamazePushData&&(this.data=window.ReamazePushData,this.handleSubscription()),window.addEventListener("ReamazePushDataInit",function(){this.data=window.ReamazePushData,this.handleSubscription()}.bind(this))},handleSubscription:function(){let t="serviceWorker"in navigator&&"PushManager"in window,e=typeof Notification<"u"?Notification.permission:null;typeof this.data.customVapidToken<"u"?this.data.customVapidToken&&this.saveVapidToken(this.data.customVapidToken):t&&e==="granted"&&this._nonReamazeDomain()&&this.registerServiceWorker()},saveVapidToken:function(t){let e=new XMLHttpRequest;e.open("POST",this.data.baseDataUrl+"/data/push_tokens.json",!0),e.setRequestHeader("Content-Type","application/json");let i=JSON.stringify({sso:this.data.currentUser.ssoData(),push_token:{token:t,token_name:null,device_id:null,platform:"vapid",status:this.data.subscribed?"active":"paused"}});e.send(i)},applicationKey:function(){return this.urlB64ToUint8Arra

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2247)
Category:	downloaded
Size (bytes):	190570
Entropy (8bit):	5.671805856150403
Encrypted:	false
SSDEEP:	3072:yIGRDZpFmafXFUX38XqXGJjQYKnBk6qfkJ:yZ1IOwXEjDKBk65
MD5:	37DC83EFCDA7D54AF3828A80F8E9CACA
SHA1:	45E5B083E758AC3074164AA7940F8F76BDDF2954
SHA-256:	6B50DCA5FA5882945211122F89B52B8B0AAFBE85B708DA8D579482AC0ABEB821
SHA-512:	207A2A75D976E9CEB208DC2A809D0EFA62BB1523B84B1E67B0B418576EC2D387AF21071388B5C65D6B41306C9F12A3298F6DDBBAB4B171E18D39B6F95EB0DB34
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/domains/caf.js?abp=1&bodis=true
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"296391904020312482",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301431,17301433,17301436",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:""}};var m;function da(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ea="function"==typeof Object.defineProperties?Object.defi

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33788)
Category:	downloaded
Size (bytes):	33791
Entropy (8bit):	5.359166867850649
Encrypted:	false
SSDEEP:	768:TP2yRwVcbMnnZNdxBB5gPi0y8rnaVG4xYEW0Ddem+euROvvMzLXWI+6Ch75BGJ21:WnQrnSG4xYE4RLm
MD5:	8A51FDDCB2118F8428C7274D196B74B5
SHA1:	43C7043729A1372FE8E3B5AC45790AA8721F68E6
SHA-256:	4FFA4569923384331A8F6CB933100CBB1DAD86E5BEE0574C933AC399C792A3F7
SHA-512:	FAD215B987E1D80DE9AB71C47DFAC4405D2F802379522764810D5E35E4FF475DF6891A43AAC993EFF8A723D32125814A83937FD6728D3F9AF7D189864AE977BA
Malicious:	false
Reputation:	low
URL:	http://ww1.icartservice.com/blIRRVeVB.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).version={})}(this,(function(exports){"use strict";function __awaiter(e,t,n,i){return new(n\|\|(n=Promise))((function(s,a){function o(e){try{d(i.next(e))}catch(e){a(e)}}function r(e){try{d(i.throw(e))}catch(e){a(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,r)}d((i=i.apply(e,t\|\|[])).next())}))}var Blocking;"function"==typeof SuppressedError&&SuppressedError,function(e){e.PENDING="pending",e.NONE="none",e.BLOCKED="blocked",e.ALLOWED="allowed"}(Blocking\|\|(Blocking={}));class Adblock{constructor(e){this.state=Blocking.PENDING,this._mocked=!1,e?(this.state=e,this._mocked=!0):this.state=Blocking.ALLOWED}inject(){return __awaiter(this,void 0,void 0,(function*(){}))}get isBlocked(){return this.state===Blocking.BLOCKED}get isAllowed(){return this.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	98257
Entropy (8bit):	5.361567606937775
Encrypted:	false
SSDEEP:	768:ADlg6S3WP+Eb7bgTEKD6OFrEgahsdUTCFb5tdghyxahMKGCZrCkF34CYO7f+pUSE:gdb2xDtFDaBCFb5ZsLf94NUUghTFb75
MD5:	B7746A672378BB3E78FBB314EEEA4563
SHA1:	4B625511F4A59F695E29FF95C8C29FE33B9B2FFE
SHA-256:	B67ACD703769FEBB48BC02ACCF4F807E8370C62FC801A8A852937B44141D6016
SHA-512:	E6C6D66BEFF98CC25431C3CAEA8FFBC5F0E78FF137BAD849D247C8FE5D7E89C6BB4ECB219E59CDADCAAE8A039B5D2635941A20D2FBF0926ED46A380D436214DC
Malicious:	false
Reputation:	low
URL:	https://cdn-cookieyes.com/client_data/3155f51cab94cfafe4b265a7/banner.js
Preview:	!function(){var t={9662:function(t,e,n){var r=n(7854),o=n(614),i=n(6330),c=r.TypeError;t.exports=function(t){if(o(t))return t;throw c(i(t)+" is not a function")}},9483:function(t,e,n){var r=n(7854),o=n(4411),i=n(6330),c=r.TypeError;t.exports=function(t){if(o(t))return t;throw c(i(t)+" is not a constructor")}},6077:function(t,e,n){var r=n(7854),o=n(614),i=r.String,c=r.TypeError;t.exports=function(t){if("object"==typeof t\|\|o(t))return t;throw c("Can't set "+i(t)+" as a prototype")}},1223:function(t,e,n){var r=n(5112),o=n(30),i=n(3070),c=r("unscopables"),a=Array.prototype;null==a[c]&&i.f(a,c,{configurable:!0,value:o(null)}),t.exports=function(t){a[c][t]=!0}},1530:function(t,e,n){"use strict";var r=n(8710).charAt;t.exports=function(t,e,n){return e+(n?r(t,e).length:1)}},5787:function(t,e,n){var r=n(7854),o=n(7976),i=r.TypeError;t.exports=function(t,e){if(o(e,t))return t;throw i("Incorrect invocation")}},9670:function(t,e,n){var r=n(7854),o=n(111),i=r.String,c=r.TypeError;t.exports=function(

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	8131
Entropy (8bit):	4.6417718993676536
Encrypted:	false
SSDEEP:	96:BcJo/fDs0t4RGAjHLpj4bZwfkxKpylAydpg+XKxqnKYM8Tvu6KQrAv2gCvfncyTV:BcJ+HqRGgpAZwsxxA0fK3Uu3Qm2bvLb
MD5:	869C4A10BC717E37A1B2D61034F8BFC4
SHA1:	584C922FF58C4A000F251D1D55486CDBF347976C
SHA-256:	97D2094AB604D8079FE53BB5F595036EF8755894171E1E3146F3DC61356E8816
SHA-512:	E88606643B423DB20627EF5D10B4E237DDEECE592D2A5FDB35C18663CB2465B1751E6A65295F02C13BCA71A45F4A9A3A6589D7E95DCC6CD8AAB313D748B98695
Malicious:	false
Reputation:	low
URL:	http://ww1.icartservice.com/legal
Preview:	<!DOCTYPE html>.<html xmlns="http://www.w3.org/1999/xhtml" lang="en">.<head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8">. <title>Legal</title>. <style>. body {. font-family: Helvetica, trebuchet ms, arial, sans-serif;. margin: 0;. }.. .hic {. height: 70px;. position: relative;. width: 1000px;. margin: 0 auto;. border-bottom: 1px solid #000;. }.. .hicl {. position: absolute;. left: 20px;. top: 20px;. font-weight: 300;. font-size: 26px;. color: #000;. font-family: helvetica, arial, sans-serif;. }.. .c {. position: relative;. width: 1000px;. margin: 10px auto 0;. overflow: hidden;. }.. .cu {. font-size: 11px;. margin: 0 0 30px;. }.. h2 {. font-size: 16p

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56412), with no line terminators
Category:	downloaded
Size (bytes):	56412
Entropy (8bit):	5.907540404138125
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBblxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0BbchXwW49z2
MD5:	2C00B9F417B688224937053CD0C284A5
SHA1:	17B4C18EBC129055DD25F214C3F11E03E9DF2D82
SHA-256:	1E754B107428162C65A26D399B66DB3DAAEA09616BF8620D9DE4BC689CE48EED
SHA-512:	8DC644D4C8E6DA600C751975AC4A9E620E26179167A4021DDB1DA81B452ECF420E459DD1C23D1F2E177685B4E1006DBC5C8736024C447D0FF65F75838A785F57
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	171
Entropy (8bit):	5.911306034084492
Encrypted:	false
SSDEEP:	3:yionv//thPl3xWrA4RthwkBDsTBZtoAV3ns7Lk89wvgpLZF+ladePhLup:6v/lhPKM4nDspndCQ89wgh1Wyp
MD5:	8D5FEB395D9213D29AAE3AF40E52C495
SHA1:	B5F5B77DFB3C7070595851572D609CF080957B7D
SHA-256:	56B1603B488EAA0B34FE9B942B3CD5A7070B1B17DB89F411EB28AFE9A02F3E7B
SHA-512:	8F4B9984B85EB792F0628E7AB250207DCE75A9448F052CDD50777D1A3C7456AFF9BB82D33CB2FB737C6EA2964E07DEF943EBBCEFF85DF70DAC0EECA239D0D2BD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....tEXtSoftware.Adobe ImageReadyq.e<...MIDATx.b`..#.0..R.S....g.s.v3.t..:`.....u.(....jp...*..nw...p.....u.hm8.....0...'........IEND.B`.

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32763)
Category:	downloaded
Size (bytes):	793758
Entropy (8bit):	5.336974488782284
Encrypted:	false
SSDEEP:	6144:GFFPu+VNpKPliNKvpT1VtfqI3Hfl8UvGssyCKxRn534bi7o5Ol1Vaudo:G+JvhTK5ci
MD5:	AEEDB4A32733FD85A61B2FD52B58CCE6
SHA1:	70FE31CD6938F7744D10B71FB5F2F5DCA8D780C2
SHA-256:	3711FF519AA110D130F49369B783DE07359889A21589DCA3E4F4857A6B1B37F8
SHA-512:	78E039800D3729795AA02C51DEBAA4CCEA627D3742D1685E5DADF66D8A42CA32489D7A3F3E7B0DEB138E1DE23CA3B697833773F5CEAA64850E5AC33DF4979560
Malicious:	false
Reputation:	low
URL:	https://cdn.reamaze.com/assets/reamaze.js
Preview:	function ouibounce(e,t){"use strict";function n(e,t){return void 0===e?t:e}function r(){f.addEventListener("mouseleave",a),f.addEventListener("mouseenter",i)}function a(e){e.clientY>l\|\|(h=setTimeout(o,u))}function i(){h&&(clearTimeout(h),h=null)}function o(){s(),d()}function s(){f.removeEventListener("mouseleave",a),f.removeEventListener("mouseenter",i)}var p=t\|\|{},l=n(p.sensitivity,20),c=n(p.timer,1e3),u=n(p.delay,0),d=p.callback\|\|function(){},h=null,f=document.documentElement;return setTimeout(r,c),{fire:o,disable:s,enable:r}}function is_touch_device(){return!!("ontouchstart"in window)\|\|!!("onmsgesturechange"in window)}function webpushNotEnabled(){var e="safari"in window&&"pushNotification"in window.safari,t="serviceWorker"in navigator&&"PushManager"in window&&"Notification"in window,n=e&&"granted"===safari.pushNotification.permission("web.com.reamaze.push").permission,r=t&&"granted"===Notification.permission,a=e&&!n,i=t&&!r&&"denied"!==Notification.permission;return!window.cordova&&

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	58
Entropy (8bit):	4.6701559435830715
Encrypted:	false
SSDEEP:	3:inEL0XH9YK1MqQYPQQIgXn:iVHCUyYTIs
MD5:	1F7C2DEC23C043D91014C48507519DC8
SHA1:	2E36EB4E85B55DB86CDF4E9B2E786A7930ACE8FA
SHA-256:	ED039C85779AF96DD672E99CA77B346A6DF578DC27E9EA6A2C42C7087DDD5862
SHA-512:	BB6F047DE8247F5616CE7C1BC441A5E38C4B948BFA2D2D4292FC2F5D7DA1D5FE92A92BE7EF1330A6D40084E62FE6E262BD6BF1F388E95F19A5338CC053160ED9
Malicious:	false
Reputation:	low
Preview:	[{"targetBanner":695389,"condition":"regionName IS 'EU'"}]

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	119
Entropy (8bit):	4.572116595107445
Encrypted:	false
SSDEEP:	3:YMMLULLPYLLMfQ2pHG/4HviaNmX/ZiwKqyRHfHyY:YMMLULLm2pHrHaaNmXxtwyY
MD5:	8A86EA2384E22CF28DBD815C8E187C12
SHA1:	BC58423F88CB821B4AB13B55B732DEAB8DE4C3DD
SHA-256:	CD5B8066FB6AAFF47236E933B399383FACEA10FC0CEFAC5C67414B45532351FB
SHA-512:	64E1E4A8582F99F0FE882357A950A4A10F833C969DE72013BBA43C9D773A85A7F2B6639F7CF6827E12149D7A756A5FC3467FE0FFBE1BF7730A4D351496E4CFDB
Malicious:	false
Reputation:	low
Preview:	{"ip":"89.187.171.132","country":"US","country_name":"United States","region_code":"GA","in_eu":false,"continent":"NA"}

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	454
Entropy (8bit):	4.74484002549977
Encrypted:	false
SSDEEP:	12:jaEU4yr6F3kZm4zkcjLwZxYdDItgHsPucHdJ5cnKH:4ak5zkc/wIdDh6ucpcA
MD5:	0245D9DC4390BA3F9E18E4099EFE1374
SHA1:	5B4C107BAB954AE53BB455C2E2E3EC00BB68FE84
SHA-256:	FD83CE7A2441BC061F683A0B54941BC980CCF1FF4B0BF2569AF2BA77CC74687F
SHA-512:	69523A3DE6A9DB3E6582411B6DF3584D8E0933D5818DF39849C7EF061EC95558B16B25D88FBBB3E96EEB765B69D2B8A0C19B521D5AE72C5F9D5D5E016DFC65C7
Malicious:	false
Reputation:	low
URL:	https://www.bodis.com/dfp.js
Preview:	// When a user is using ad block, this file will be blocked via a whitelist like.// this: https://easylist-downloads.adblockplus.org/easylist.txt this means, we check if someone.// is using ad block and suggest they turn it off so they can register without an issue because.// of our third-party registration requirement (big G).var e = document.createElement('div');.e.id = 'ajsd0f91029jalksdf';.e.style.display = 'none';.document.body.appendChild(e);.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (37797), with no line terminators
Category:	downloaded
Size (bytes):	37801
Entropy (8bit):	5.113200143276631
Encrypted:	false
SSDEEP:	768:iNZY45jaeaELtdSzD2t3CUG1VuGhrsdywYgj+9goK1jOC4skZ4sKk0G4aFVhh5gM:ibxaELtdSH2t3CUG1VuGhrWywYgjJ/cL
MD5:	E13A3BB57B3DE64DDB1063EBF0B6EF06
SHA1:	1DEB092663574B4E08AB419152EC2AE9341537EF
SHA-256:	155F46382793DADA28B7E0ABA67158AB367F51B3AE3CEFF105D65FE71CDE9D24
SHA-512:	FD711877E4A9B11D3AD0EB21B34876BFD0A35D31B6D8D0852C5ED001C8ECA23313E8AAA5E7FF189AD9EF14B466A1723606C5DE3DF09F42D99863ED8E19D323D3
Malicious:	false
Reputation:	low
URL:	https://www.bodis.com/js/chunks/14.3a7973fff8110300ff48.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[14],{"+iyH":function(e,t,a){"use strict";var n=a("o0o1"),r=a.n(n),o=a("7Lkh");function s(e,t,a,n,r,o,s){try{var i=e[o](s),l=i.value}catch(e){return void a(e)}i.done?t(l):Promise.resolve(l).then(n,r)}var i={props:{value:{type:void 0,default:void 0},label:{type:String,default:""},rules:{type:Array,default:Array},itemValue:{type:Function,default:function(e){return e}},readonly:{type:Boolean,default:!1},disabled:{type:Boolean,default:!1}},data:function(){return{countries:[],country:null,loading:!0}},watch:{value:function(e){this.country=e}},mounted:function(){var e,t=this;return(e=r.a.mark((function e(){return r.a.wrap((function(e){for(;;)switch(e.prev=e.next){case 0:return e.next=2,o.b.get("/api/countries");case 2:t.countries=e.sent.data,t.country=t.value,t.loading=!1;case 5:case"end":return e.stop()}}),e)})),function(){var t=this,a=arguments;return new Promise((function(n,r){var o=e.apply(t,a);function i(e){s(o,n,r,i,l,"next",e)}functi

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (13032)
Category:	downloaded
Size (bytes):	13641
Entropy (8bit):	5.287043264077004
Encrypted:	false
SSDEEP:	96:2E/yk2iwlb5lphMzTronSVM31l0yEKvfNYrWAW/qLM8D7w9fDVxhlBM8DHw9fD0K:2E12ikpB0wl0yEMfWrkFRNKnOk
MD5:	C15B01B86E846C2D430A243A7D41BCBA
SHA1:	1151C56F226A87723BF50AD90953359A1416F9BA
SHA-256:	ED3503022C354A5A263AD4B6FA005FA178651724851787BF057C5150BA85E541
SHA-512:	CD8A01311FC5ABF216C46C1FC769B0901B68516A59AF0518860897674D732CD66A4B99884B8201472CE99A23A1BB05E1F90FB3E3CC9BBB2336D585D1318E9A7A
Malicious:	false
Reputation:	low
URL:	https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=9042052004&pcsa=false&channel=pid-bodis-gcontrol203%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol307%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol430&client=dp-bodis30_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww1.icartservice.com%2F%3Fcaf%3D1&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2298147197369106&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436&client_gdprApplies=0&format=r3&nocache=4851713858125717&num=0&output=afd_ads&domain_name=ww1.icartservice.com&v=3&bsl=8&pac=0&u_his=1&u_tz=120&dt=1713858125720&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=625314022&rurl=http%3A%2F%2Fww1.icartservice.com%2F
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48932
Entropy (8bit):	4.738726431625218
Encrypted:	false
SSDEEP:	384:BJNT31lRC9CWYMUzjThYjRMy3r5YJH0q5bTL3rklGDQ8BNsEVwx:7N71lR+CWYrThY13eJ3vL3glOjBNsEVI
MD5:	54D930AD5DF74842D73ADFCEB20ED111
SHA1:	2F799DF8DC57E8606D49FF7D6DDC5D829AD1266A
SHA-256:	D954741496AED53F2BE630F849812F9E41145550BC2EE34D1DC8551381E283DC
SHA-512:	59EB6605C8593F8DE59FC99CF75DC8CC3BCAA6E48915E7358584425288CE84A8420E1CE41F805D93B1E14BABD2DB65037CA7C0080B3516701AF14A227F04528B
Malicious:	false
Reputation:	low
Preview:	[{"country_id":1,"country_code":"af","country_name":"Afghanistan","calling_code":93,"is_sms_coverage":1,"is_phone_coverage":0,"timezone_gmt_start":4,"timezone_gmt_end":4,"address_format":"A~C"},{"country_id":2,"country_code":"al","country_name":"Albania","calling_code":355,"is_sms_coverage":1,"is_phone_coverage":1,"timezone_gmt_start":1,"timezone_gmt_end":1,"address_format":"A~C"},{"country_id":3,"country_code":"dz","country_name":"Algeria","calling_code":213,"is_sms_coverage":1,"is_phone_coverage":0,"timezone_gmt_start":0,"timezone_gmt_end":0,"address_format":"A~P C"},{"country_id":4,"country_code":"as","country_name":"American Samoa","calling_code":1684,"is_sms_coverage":0,"is_phone_coverage":1,"timezone_gmt_start":-11,"timezone_gmt_end":-11,"address_format":"A~C R P"},{"country_id":5,"country_code":"ad","country_name":"Andorra","calling_code":376,"is_sms_coverage":1,"is_phone_coverage":0,"timezone_gmt_start":1,"timezone_gmt_end":1,"address_format":"A~P C"},{"country_id":6,"country_c

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3847
Entropy (8bit):	4.650593742421098
Encrypted:	false
SSDEEP:	96:+OKfDt4KXndvbK/P28xy1BYE/4CE9OgOOklRunzFnl:9oDtJdzK/u8CBYg4CE4gOzqnzFl
MD5:	54E7A9A0BFB9E5BFC77C6BDB5558BE5B
SHA1:	051F12FB0E2FD868C4DDF9EF7F4D962EF5F0DBF2
SHA-256:	B2E7272CEB88761DB810B1D595B90BAB1894D597568B3D80E8DCA6AB88155747
SHA-512:	BBEF17C6F8F7F34E074C35F03536183743CD7E1403B1DC9269B1DCD5344696CDB13628E3FD4305F23709820B6779C7497267FEAAFEDF1FBC517D3E92C9B9D48C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 16.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="182px" height="36px" viewBox="0 0 182 36" enable-background="new 0 0 182 36" xml:space="preserve">.<rect x="2" y="1" fill="#176392" width="37" height="14"/>.<rect x="14" y="20" fill="#57B9E8" width="25" height="15"/>.<g>..<path fill="#176392" d="M43,1h13.372c2.647,0,4.621,0.11,5.921,0.331C63.593,1.552,64.973,2.3,66,3s1.895,1.626,2.579,2.79...c0.685,1.164,0.799,2.734,0.799,4.179c0,1.567-0.422,3.004-1.267,4.312c-0.844,1.309-1.989,2.29-3.434,2.944...c2.039,0.593,3.605,1.605,4.701,3.035c1.095,1.43,1.643,3.111,1.643,5.043c0,1.521-0.354,3-1.061,4.438...c-0.708,1.438-1.674,2.586-2.898,3.446c-1.225,0.859-2.735,1.388-4.53,1.586c-1.12

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.044104743214503
Encrypted:	false
SSDEEP:	6:t6+O4mc4slhohC/vmI4SmK0xhFELE47zF:t6+9noU/vmRI0xQTF
MD5:	D47125B2BA92BE53DCFF07BA322CE1DE
SHA1:	E4A70C8A133BACF1699FDFA4C10E24ED5B3E0C28
SHA-256:	5A0687EA8C9AA404A7724490F046E30023EC6B5AA81D01AE4F225889A64174F6
SHA-512:	78A1BF7547B1C28F600163689161955BC56A621ACE3228C9169143BE933CCF789FC6106BBF729F2E9483BCAA03271529D3913088094C7FB906B44673E13F1F92
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b
Preview:	<svg fill='#02198b' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65531), with no line terminators
Category:	downloaded
Size (bytes):	1114006
Entropy (8bit):	5.432392232260258
Encrypted:	false
SSDEEP:	12288:GPEAVeo9ySEXrJCpOHH/p0kWYR1haHBUk7220vke0Vxp0ki8v:GX6XJCpN7uM
MD5:	A6D102922D07B5B652C9F3989B52AD30
SHA1:	50CBA6BBF9F14E1F91070A282965B6533F5E813E
SHA-256:	69C1503C29447CC7332133614F97FDEC71777FBD49004925494C7406288F39C4
SHA-512:	AD9CC446ABC6E14360B96B605B3635D30ED8C7CE24AD64A63037714888F14BD8B8FDE689DE5F2176D29B8693B5427FF9FFFD3BA83BC718B80354530DAE8B808A
Malicious:	false
Reputation:	low
URL:	https://www.bodis.com/js/app.js?id=a6d102922d07b5b652c9
Preview:	!function(t){function e(e){for(var n,r,a=e[0],o=e[1],s=0,c=[];s<a.length;s++)r=a[s],Object.prototype.hasOwnProperty.call(i,r)&&i[r]&&c.push(i[r][0]),i[r]=0;for(n in o)Object.prototype.hasOwnProperty.call(o,n)&&(t[n]=o[n]);for(u&&u(e);c.length;)c.shift()()}var n={},i={5:0};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.e=function(t){var e=[],n=i[t];if(0!==n)if(n)e.push(n[2]);else{var a=new Promise((function(e,r){n=i[t]=[e,r]}));e.push(n[2]=a);var o,s=document.createElement("script");s.charset="utf-8",s.timeout=120,r.nc&&s.setAttribute("nonce",r.nc),s.src=function(t){return r.p+"js/chunks/"+({}[t]\|\|t)+"."+{0:"f51300bf11bd02aada18",1:"566a970248e0e89bb6fe",2:"e513aac931aa4f24cbb8",3:"d7fe331f43d09da6028c",4:"1c70a8fcd3b3543b6f94",8:"140a046f8491fa97587d",9:"bbcebe38304e18c85909",10:"3e2f451492a7b3745f01",11:"1257d514bc6cfdd35863",12:"fb585a0b80827b36e791",13:"cf562bf1c4dc9afc17ef",14:"3a7973fff8110300

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	813
Entropy (8bit):	4.797811088045964
Encrypted:	false
SSDEEP:	12:qTp7gBbHQ7UH066DS+XAV6J64RVmEdnIjP+6HpDCjlJmIO6oQL:0p7giAXwQV6J64R9JIyspuPwI
MD5:	2BB1104F55566CAF4EF87FEE7D005631
SHA1:	603C23E920791076CEAA762124993105571641DA
SHA-256:	66372DA51E1CD60A8C3CC447245E68D008DE69C0748793724F09A56F6AFF418F
SHA-512:	53514B00FFD7D67A43694820AD12A1058F5E127D10AEEF72676E91C9201466A372A0D52068FE370EF46F961FF4AA2955EEBE9B2A4603518144E114BC711DBEB9
Malicious:	false
Reputation:	low
URL:	https://www.bodis.com/takedown-request
Preview:	<!doctype html>.<html lang="en">. <head>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1">. <meta name="csrf-token" content="hdBYEgWRP49Fk5dt7mvrmIcCM7eUDhZ1GYCFFCtD">. <link rel="icon" type="image/png" sizes="32x32" href="https://www.bodis.com/favicon-32x32.png">. <link rel="stylesheet" type="text/css" href="/css/app.css?id=c87e71429bf4f4d8f19a">. <title>. BODIS. Smart Domain Monetization.. </title>. </head>. <body>. <div id="app">. <layout-app/>. </div>. <script src="/js/app.js?id=a6d102922d07b5b652c9"></script>. <script src="https://www.bodis.com/dfp.js" type="text/javascript"></script>. </body>.</html>.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2247)
Category:	downloaded
Size (bytes):	190586
Entropy (8bit):	5.671762344124658
Encrypted:	false
SSDEEP:	3072:vIGRDZpFmafXFUX38XqXGJjQYKnBk6qfkJ:vZ1IOwXEjDKBk65
MD5:	A3E88BEB5970825981244FBC8F81ABB8
SHA1:	088EF3D9AD132CFBAE31B0199D2E2B5DDD5FE854
SHA-256:	792A2E5567622E4BC6C06C22EAA8D10D03417794AA159D2BD9D420B5087C380C
SHA-512:	E28AE5356B8B2206ECBE0157BD0DD7020EDFA6525E11DFB6118BC5FEF1E114A6766C5C4EE552BB10280C27FB5CD12EC333387C4A18F60A26A603FE247B1D3031
Malicious:	false
Reputation:	low
URL:	https://www.adsensecustomsearchads.com/adsense/domains/caf.js?pac=0
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.adsensecustomsearchads.com",hash:"296391904020312482",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,17301439,17301442",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:""}};var m;function da(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ea="function"==typeof Object.defineProper

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	163
Entropy (8bit):	4.9795429783877125
Encrypted:	false
SSDEEP:	3:t6WCafDDS4vDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHEecyFTgrkcd6RLkqC:t6wfDpmc4slhohC/vmI4EeorkcdAC
MD5:	AA12127E298C6ECA341EA16A27ABA919
SHA1:	3B73E1D2F3A639A862ABE0C9C2D8994C38299C5D
SHA-256:	678F5D6A8029C07DAC96D17973705B354678045603FB19CE1586829A3518325B
SHA-512:	7E1BBCD84C93B2D5ECF68205516BEE67254CE79B80930A6293C571CCE4BEA38D3CAC1815D90922904FDECDFFEBB1A8F3A336F457A32A50597344C9B6002E0BCB
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron_expand.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M7.59 18.59L9 20L17 12L9 4L7.59 5.41L14.17 12"/></svg>.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (386), with no line terminators
Category:	downloaded
Size (bytes):	386
Entropy (8bit):	5.462202855451576
Encrypted:	false
SSDEEP:	6:xWzPgdaIPImGe4ASgAX2+luPJHDHvM7M+dy/IPImG8idpV2+luPJHDHvMAen:xWuGUAhlSbM7HyeG8iHHlSbM7n
MD5:	2F3A211131E895FD638C85DFBF968E69
SHA1:	038D20B73A32A23CD9ED58064CB75016CAC57441
SHA-256:	854D2EE0820FD7DD25816E04CCFEC5CF5125E102452649975931176CAE5DCB8C
SHA-512:	309D1C11C1219BEE88DBF29BEFEC007A07C373773B88FC5DFF53E8EDF19283F8AE5F306D1EB053951AC0C196B43F9CBBB5A3BA30EDD5200564223A9235E89169
Malicious:	false
Reputation:	low
URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=ww1.icartservice.com&client=dp-bodis30_3ph&product=SAS&callback=__sasCookie
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg","_expires_":1747554126,"_path_":"/","_domain_":"icartservice.com","_version_":1},{"_value_":"UID=00000de79caa4cc0:T=1713858126:RT=1713858126:S=ALNI_Mbs9SK8gnCA3eqNtLX63IWhjXr2Kw","_expires_":1747554126,"_path_":"/","_domain_":"icartservice.com","_version_":2}]});

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (22400)
Category:	downloaded
Size (bytes):	32499
Entropy (8bit):	5.300016176087918
Encrypted:	false
SSDEEP:	384:2ni8+aGRHK9J/m3ViDCdEKb/daSldO89o1HkJvl01dOa:2iPaGRUxGLEKb1aSldO8GHkJvl0ya
MD5:	73E9F3E84A680FFAAC7046E72D739679
SHA1:	B4471E8EF95FA8E129BE8C73D277D4FF4BFFE116
SHA-256:	A065280FCBB1FC87C3EA782F5CF0FB918AD92C3D4C41A6797081A77C0248DD15
SHA-512:	516B36430A8C093B8053CBECD4D20CD3954B782E4753ED7C23EF4211713DA35BCC77F11CC2F31551FD0AE943920D48102D99AA509DF1167EC293A62BC639A14B
Malicious:	false
Reputation:	low
URL:	https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=9042052004&pcsa=false&channel=pid-bodis-gcontrol203%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol307%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol430&client=dp-bodis30_3ph&r=m&sct=ID%3Da409b8deb4eed28a%3AT%3D1713858126%3ART%3D1713858126%3AS%3DALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg&sc_status=6&hl=en&rpbu=http%3A%2F%2Fww1.icartservice.com%2F%3Fcaf%3D1%26query%3DResidential%2BPainting%26afdToken%3DChMIqtHrhuvXhQMVkZCJBB0lbwBREm0BlLqpj85G31fQC_eX0OZ1K3-a4OuiTf69i9hvcgwdKJvXpLoWWcXmE6_agIF8lgRjy0Qo5LP2xgfTZKRUkyEguFq3OH33d6-gTDHTZMRKzpBUEZlrZBAi2ClP0NSGhfLtEPzwEQBlkZro-tgR%26pcsa%3Dfalse%26nb%3D0&max_radlink_len=50&type=0&uiopt=false&swp=as-drid-2298147197369106&q=Residential%20Painting&afdt=ChMIqtHrhuvXhQMVkZCJBB0lbwBREm0BlLqpj85G31fQC_eX0OZ1K3-a4OuiTf69i9hvcgwdKJvXpLoWWcXmE6_agIF8lgRjy0Qo5LP2xgfTZKRUkyEguFq3OH33d6-gTDHTZMRKzpBUEZlrZBAi2ClP0NSGhfLtEPzwEQBlkZro-tgR&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436&client_gdprApplies=0&format=n3&ad=n3&nocache=3581713858146139&num=0&output=afd_ads&domain_name=ww1.icartservice.com&v=3&bsl=8&pac=0&u_his=1&u_tz=120&dt=1713858146142&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=ad-1&drt=0&jsid=caf&nfp=1&jsv=625314022&rurl=http%3A%2F%2Fww1.icartservice.com%2F%3Fcaf%3D1%26query%3DResidential%2BPainting%26afdToken%3DChMIqtHrhuvXhQMVkZCJBB0lbwBREm0BlLqpj85G31fQC_eX0OZ1K3-a4OuiTf69i9hvcgwdKJvXpLoWWcXmE6_agIF8lgRjy0Qo5LP2xgfTZKRUkyEguFq3OH33d6-gTDHTZMRKzpBUEZlrZBAi2ClP0NSGhfLtEPzwEQBlkZro-tgR%26pcsa%3Dfalse%26nb%3D0
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (13055)
Category:	downloaded
Size (bytes):	29453
Entropy (8bit):	5.430844554434373
Encrypted:	false
SSDEEP:	384:2ni8OEGO/umDC2WqVtvTM6xM6q8wM65//J//Ft/t9pL//i1Oj:2iT0pVtvTdG8wd/x/Nt19J/pj
MD5:	37C57E5BEFF7F0C534F17EE042B3D629
SHA1:	23A9E7BBBA0A056A8DF39DC37AF4D30943876ADE
SHA-256:	9382440448B2EF2323ACF46C37532A20F50FA9CFFD2B419EEBA793BF0BD22298
SHA-512:	E2DAA62FBA9B55CD2F5EEBA459EE311E288DE915122E4CD442FB91B645F5DF21BC35017DF0DAB7E8EC793B317AF1A947EAB6E85D4CDBD6A31DACA2126C190D2A
Malicious:	false
Reputation:	low
URL:	https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=9042052004&pcsa=false&channel=pid-bodis-gcontrol203%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol307%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol430&client=dp-bodis30_3ph&r=m&sct=ID%3Da409b8deb4eed28a%3AT%3D1713858126%3ART%3D1713858126%3AS%3DALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg&sc_status=6&hl=en&rpbu=http%3A%2F%2Fww1.icartservice.com%2F%3Fcaf%3D1%26query%3DPublic%2BOnline%2BHigh%2BSchool%26afdToken%3DChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw%26pcsa%3Dfalse%26nb%3D0&max_radlink_len=50&type=0&uiopt=false&swp=as-drid-2298147197369106&q=Public%20Online%20High%20School&afdt=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436&client_gdprApplies=0&format=n3&ad=n3&nocache=8051713858148758&num=0&output=afd_ads&domain_name=ww1.icartservice.com&v=3&bsl=8&pac=0&u_his=1&u_tz=120&dt=1713858148759&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=ad-1&drt=0&jsid=caf&nfp=1&jsv=625314022&rurl=http%3A%2F%2Fww1.icartservice.com%2F%3Fcaf%3D1%26query%3DPublic%2BOnline%2BHigh%2BSchool%26afdToken%3DChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw%26pcsa%3Dfalse%26nb%3D0
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	166
Entropy (8bit):	5.852184084844084
Encrypted:	false
SSDEEP:	3:yionv//thPlGARtjmA66MF5DpwloyzFZp0xdkgl08mzsPS98WInwgblSHxp2p/Hb:6v/lhPIARoA6b5tQoEZCkglFmRhawgB5
MD5:	D2D649B406D7A325683E2CCBD3297E43
SHA1:	819D6E6BF4CE1219BF83DEB5CB33A04A57E12C07
SHA-256:	E9BDAE625005100947D641A34F00BDD51B435D2C5979DF3F3F32F0D812CB17F7
SHA-512:	19E7F5D74C422DB0DC24B1748C174931CCC59EA0F80EE7F92293C7EF05956D477C8287F21CB10FCFF6867E10AC81C96DC138F9C5FF1F83F3AC4FC66A7F7D1AE0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0......,.....PLTE....................r.....tRNS. ... ..<~...=IDATx.c.~.Q.I......!V....'......X%L.2.....b.U.U.(.&.0.V.a5...-...........IEND.B`.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	236
Entropy (8bit):	5.244389153471758
Encrypted:	false
SSDEEP:	6:1p3U24iBYsgdfmkkwLP3syLk8BdOkbNNGWSlIh2ng1g:1pU2VBYZdGwLPdEkbeVbng6
MD5:	97FBD2A4E9789633D10E874FB5D200CF
SHA1:	5CA9E1150B27732F90E8CDC8C72E62C2896E0407
SHA-256:	B193C36D5B9C3CC115320CC82F3BBDB2E9D8F386392EB7367B306430BF9172BB
SHA-512:	CC3ABC385EF02C1491B0CAD6649FA22E8853BE724A4F52D63663F05EA44A6A08D8D1F106F9ADFD9CD2311469F69B4CC97C6B4329EA6C6B488AF689A570D2DF64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAntnaLODmknRBIFDRNJOksSOgn4ZPkJQdMq9xIFDaQAs2USBQ2ebxO1EgUNkWGVThIFDfVV_3oSBQ0U_u-REgUNXTrR9BIFDeHMwoESLAnsrX_UUFbHbRIFDdh0mHASBQ2RYZVOEgUN4WWZwhIFDVhFQdwSBQ0841x-EhAJ3ZnhXILl-EISBQ14vOxDEhAJIWFEDu-OUxUSBQ2E6NSh?alt=proto
Preview:	CgkKBw0TSTpLGgAKWwoLDaQAs2UaBAg8GAEKCw2ebxO1GgQIBxgBCgsNkWGVThoECCQYAQoLDfVV/3oaBAghGAEKCw0U/u+RGgQITRgBCgsNXTrR9BoECAkYAQoLDeHMwoEaBAgNGAEKMQoHDdh0mHAaAAoLDZFhlU4aBAgkGAEKBw3hZZnCGgAKBw1YRUHcGgAKBw0841x+GgAKCQoHDXi87EMaAAoJCgcNhOjUoRoA

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (597)
Category:	downloaded
Size (bytes):	518479
Entropy (8bit):	5.683759340720687
Encrypted:	false
SSDEEP:	12288:wTJtYdv7tmjTEyw+Z8ML8Vo1ukBO1N34PS+H7wIqBG7iIXXON2R+:kEcLVuN2R+
MD5:	8326C23D6B3EED35BC3E62F3294587FD
SHA1:	EDDA17E74E53E85073E5EAC9CB6BE2163DBFA23C
SHA-256:	57F03D3BA66117EDC152646341120DD3A1D7D71B9A98A3723AF5A8AE61BCB3AB
SHA-512:	F63FAEEA0ACCAC3FA74CF6168B319D901EDE869A83E7E6129158A120008E70E5B239BBBFF3159917F8AEEFCF997916A778AE21900B22035657E05AAAE9EBAAC0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33788)
Category:	downloaded
Size (bytes):	33791
Entropy (8bit):	5.359166867850649
Encrypted:	false
SSDEEP:	768:TP2yRwVcbMnnZNdxBB5gPi0y8rnaVG4xYEW0Ddem+euROvvMzLXWI+6Ch75BGJ21:WnQrnSG4xYE4RLm
MD5:	8A51FDDCB2118F8428C7274D196B74B5
SHA1:	43C7043729A1372FE8E3B5AC45790AA8721F68E6
SHA-256:	4FFA4569923384331A8F6CB933100CBB1DAD86E5BEE0574C933AC399C792A3F7
SHA-512:	FAD215B987E1D80DE9AB71C47DFAC4405D2F802379522764810D5E35E4FF475DF6891A43AAC993EFF8A723D32125814A83937FD6728D3F9AF7D189864AE977BA
Malicious:	false
Reputation:	low
URL:	http://ww1.icartservice.com/bEMFyhlDA.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).version={})}(this,(function(exports){"use strict";function __awaiter(e,t,n,i){return new(n\|\|(n=Promise))((function(s,a){function o(e){try{d(i.next(e))}catch(e){a(e)}}function r(e){try{d(i.throw(e))}catch(e){a(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,r)}d((i=i.apply(e,t\|\|[])).next())}))}var Blocking;"function"==typeof SuppressedError&&SuppressedError,function(e){e.PENDING="pending",e.NONE="none",e.BLOCKED="blocked",e.ALLOWED="allowed"}(Blocking\|\|(Blocking={}));class Adblock{constructor(e){this.state=Blocking.PENDING,this._mocked=!1,e?(this.state=e,this._mocked=!0):this.state=Blocking.ALLOWED}inject(){return __awaiter(this,void 0,void 0,(function*(){}))}get isBlocked(){return this.state===Blocking.BLOCKED}get isAllowed(){return this.

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48932
Entropy (8bit):	4.738726431625218
Encrypted:	false
SSDEEP:	384:BJNT31lRC9CWYMUzjThYjRMy3r5YJH0q5bTL3rklGDQ8BNsEVwx:7N71lR+CWYrThY13eJ3vL3glOjBNsEVI
MD5:	54D930AD5DF74842D73ADFCEB20ED111
SHA1:	2F799DF8DC57E8606D49FF7D6DDC5D829AD1266A
SHA-256:	D954741496AED53F2BE630F849812F9E41145550BC2EE34D1DC8551381E283DC
SHA-512:	59EB6605C8593F8DE59FC99CF75DC8CC3BCAA6E48915E7358584425288CE84A8420E1CE41F805D93B1E14BABD2DB65037CA7C0080B3516701AF14A227F04528B
Malicious:	false
Reputation:	low
URL:	https://www.bodis.com/api/countries
Preview:	[{"country_id":1,"country_code":"af","country_name":"Afghanistan","calling_code":93,"is_sms_coverage":1,"is_phone_coverage":0,"timezone_gmt_start":4,"timezone_gmt_end":4,"address_format":"A~C"},{"country_id":2,"country_code":"al","country_name":"Albania","calling_code":355,"is_sms_coverage":1,"is_phone_coverage":1,"timezone_gmt_start":1,"timezone_gmt_end":1,"address_format":"A~C"},{"country_id":3,"country_code":"dz","country_name":"Algeria","calling_code":213,"is_sms_coverage":1,"is_phone_coverage":0,"timezone_gmt_start":0,"timezone_gmt_end":0,"address_format":"A~P C"},{"country_id":4,"country_code":"as","country_name":"American Samoa","calling_code":1684,"is_sms_coverage":0,"is_phone_coverage":1,"timezone_gmt_start":-11,"timezone_gmt_end":-11,"address_format":"A~C R P"},{"country_id":5,"country_code":"ad","country_name":"Andorra","calling_code":376,"is_sms_coverage":1,"is_phone_coverage":0,"timezone_gmt_start":1,"timezone_gmt_end":1,"address_format":"A~P C"},{"country_id":6,"country_c

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	166
Entropy (8bit):	5.852184084844084
Encrypted:	false
SSDEEP:	3:yionv//thPlGARtjmA66MF5DpwloyzFZp0xdkgl08mzsPS98WInwgblSHxp2p/Hb:6v/lhPIARoA6b5tQoEZCkglFmRhawgB5
MD5:	D2D649B406D7A325683E2CCBD3297E43
SHA1:	819D6E6BF4CE1219BF83DEB5CB33A04A57E12C07
SHA-256:	E9BDAE625005100947D641A34F00BDD51B435D2C5979DF3F3F32F0D812CB17F7
SHA-512:	19E7F5D74C422DB0DC24B1748C174931CCC59EA0F80EE7F92293C7EF05956D477C8287F21CB10FCFF6867E10AC81C96DC138F9C5FF1F83F3AC4FC66A7F7D1AE0
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/afs/snowman.png
Preview:	.PNG........IHDR...0...0......,.....PLTE....................r.....tRNS. ... ..<~...=IDATx.c.~.Q.I......!V....'......X%L.2.....b.U.U.(.&.0.V.a5...-...........IEND.B`.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	33303
Entropy (8bit):	5.4150618104903465
Encrypted:	false
SSDEEP:	768:rIE8EpQNN5Y1AWdbcMCw5Kqjjm4KtPcM573A43FM:rIE8M
MD5:	E5E956AE76786260368FC06814058B3A
SHA1:	5A3A087CB51FF5D3EB8E9B7BAE66D4F4071FF2D6
SHA-256:	D6838157457C9809FD811E8353A966C9672158AA0593B514FBC0A69F69FBB03D
SHA-512:	C5CDAD85A2793EC27C9736BDC73A01A13D7AB00A3F744FE907B1229ACA4199D39360577CEBD116935D87660A15E308FA7FE25F310EB7D85667D5C96336538B7E
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:300,400,500,700,400italic\|Open+Sans:100,300,400,500,700"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open Sans';. font-style: normal;

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.928019308351512
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKSbtQP5mwjWaee:PLKdXNQK+QP51L
MD5:	C193745DEB63FE67F3AA6B578C40DD99
SHA1:	8A3ECC2696074E71D3B011C99B98CB25229E1A31
SHA-256:	D41E076366E4207D57A5FD1725C2024F751C43AE4A3A8E93CC46DFB8462A3E5B
SHA-512:	A2FD9573CF80C9D14F9DCEAA1940407E88F7B35BDD01B1FF34891929DC5528A134E851B29CC2205EF8CE5F81A8DFAFED5D7A6A93A304C7B8844981844BA73A8E
Malicious:	false
Reputation:	low
URL:	https://www.recaptcha.net/recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js');

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5520
Entropy (8bit):	4.711780552168503
Encrypted:	false
SSDEEP:	96:I1D1g2I1YVZ18rWO1wXD91SG1OSH1SW78r1PF1rAxA6DeVKoenTGjujX2Fwfz/YS:IJcIZWrn+z9bksUeKzhuFuengwuEV
MD5:	F17B7A294C4D5B3575E5CF528EC3C19F
SHA1:	A408DEC791141800C64E0B9A5CCEC51416215DB5
SHA-256:	6F6AD8F69A30DDDDF8F5E0F1416F8C2B8B017952324DD4302292806E68E350E6
SHA-512:	AE82DA489E6AD7E33E72186636DCEB4C1E8EB86F513F3E7D302289CD3375C5140608D10290A42F98F4B7C3343DAE3F1DC19A67F71E0F0DA74F56C2347F8C005C
Malicious:	false
Reputation:	low
Preview:	{"cookies":{"XSRF-TOKEN":{"cookie_id":"XSRF-TOKEN","duration":"2 hours","description":"Wix set this cookie for security purposes."},"_ga":{"cookie_id":"_ga","duration":"1 year 1 month 4 days","description":"Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors."},"_gid":{"cookie_id":"_gid","duration":"1 day","description":"Google Analytics sets this cookie to store information on how visitors use a website while also creating an analytics report of the website's performance. Some of the collected data includes the number of visitors, their source, and the pages they visit anonymously."},"_gat_gtag_UA_":{"cookie_id":"_gat_gtag_UA_","duration":"1 minute","description":"Google Analytics sets this cookie to store a unique user ID."},"_gcl_au":{"cookie_id":"_gcl_au","duration":"3 months","descriptio

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.044104743214503
Encrypted:	false
SSDEEP:	6:t6+O4mc4slhohC/vmI4SmK0xhFELE47zF:t6+9noU/vmRI0xQTF
MD5:	D47125B2BA92BE53DCFF07BA322CE1DE
SHA1:	E4A70C8A133BACF1699FDFA4C10E24ED5B3E0C28
SHA-256:	5A0687EA8C9AA404A7724490F046E30023EC6B5AA81D01AE4F225889A64174F6
SHA-512:	78A1BF7547B1C28F600163689161955BC56A621ACE3228C9169143BE933CCF789FC6106BBF729F2E9483BCAA03271529D3913088094C7FB906B44673E13F1F92
Malicious:	false
Reputation:	low
Preview:	<svg fill='#02198b' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33788)
Category:	downloaded
Size (bytes):	33791
Entropy (8bit):	5.359166867850649
Encrypted:	false
SSDEEP:	768:TP2yRwVcbMnnZNdxBB5gPi0y8rnaVG4xYEW0Ddem+euROvvMzLXWI+6Ch75BGJ21:WnQrnSG4xYE4RLm
MD5:	8A51FDDCB2118F8428C7274D196B74B5
SHA1:	43C7043729A1372FE8E3B5AC45790AA8721F68E6
SHA-256:	4FFA4569923384331A8F6CB933100CBB1DAD86E5BEE0574C933AC399C792A3F7
SHA-512:	FAD215B987E1D80DE9AB71C47DFAC4405D2F802379522764810D5E35E4FF475DF6891A43AAC993EFF8A723D32125814A83937FD6728D3F9AF7D189864AE977BA
Malicious:	false
Reputation:	low
URL:	http://ww1.icartservice.com/bMtzPZXpI.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).version={})}(this,(function(exports){"use strict";function __awaiter(e,t,n,i){return new(n\|\|(n=Promise))((function(s,a){function o(e){try{d(i.next(e))}catch(e){a(e)}}function r(e){try{d(i.throw(e))}catch(e){a(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,r)}d((i=i.apply(e,t\|\|[])).next())}))}var Blocking;"function"==typeof SuppressedError&&SuppressedError,function(e){e.PENDING="pending",e.NONE="none",e.BLOCKED="blocked",e.ALLOWED="allowed"}(Blocking\|\|(Blocking={}));class Adblock{constructor(e){this.state=Blocking.PENDING,this._mocked=!1,e?(this.state=e,this._mocked=!0):this.state=Blocking.ALLOWED}inject(){return __awaiter(this,void 0,void 0,(function*(){}))}get isBlocked(){return this.state===Blocking.BLOCKED}get isAllowed(){return this.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (37205), with NEL line terminators
Category:	downloaded
Size (bytes):	96531
Entropy (8bit):	5.419929576595637
Encrypted:	false
SSDEEP:	1536:1xxs4/B23f6xJKeKzU8w7e8+E7/qCHZEtPTUPC+M:1XsUBCyiTel7/rCt
MD5:	ECD73684AD61A9D4CD0F5B678875F1D1
SHA1:	895631C45CE04D9A70BA60822B327003901A138F
SHA-256:	1853B1E586FBA02AF78F3C10847E0085A7920F6CA5B4777856F4907CCEF0A631
SHA-512:	6BBBB16F55898D6C4801451336F194543EBFDB6178D0557CD1D62B6CA68BC865DA233FAFA547BEE7249A79346340AF063C6471A7F63D04B7C888550DA2D74FC5
Malicious:	false
Reputation:	low
URL:	https://cdn-cookieyes.com/client_data/3155f51cab94cfafe4b265a7/script.js
Preview:	!function(){var t={3241:function(){"document"in window.self&&((!("classList"in document.createElement("_"))\|\|document.createElementNS&&!("classList"in document.createElementNS("http://www.w3.org/2000/svg","g")))&&function(t){"use strict";if("Element"in t){var e="classList",r=t.Element.prototype,n=Object,o=String.prototype.trim\|\|function(){return this.replace(/^\s+\|\s+$/g,"")},i=Array.prototype.indexOf\|\|function(t){for(var e=0,r=this.length;e<r;e++)if(e in this&&this[e]===t)return e;return-1},a=function(t,e){this.name=t,this.code=DOMException[t],this.message=e},s=function(t,e){if(""===e)throw new a("SYNTAX_ERR","An invalid or illegal string was specified");if(/\s/.test(e))throw new a("INVALID_CHARACTER_ERR","String contains an invalid character");return i.call(t,e)},u=function(t){for(var e=o.call(t.getAttribute("class")\|\|""),r=e?e.split(/\s+/):[],n=0,i=r.length;n<i;n++)this.push(r[n]);this._updateClassName=function(){t.setAttribute("class",this.toString())}},c=u.prototype=[],f=function(

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	15900
Entropy (8bit):	5.385568594245868
Encrypted:	false
SSDEEP:	384:K8JnuF0fNXiu8Un8o67c28h60e8KW3KWQeJI7:VzfN/tRK2Kp8I7
MD5:	B4C518CE4C5D7455962D6A751F1E9ED7
SHA1:	A6B61CCFADF987E6D8AEE808AD800A654D70EAFF
SHA-256:	5A551CEAE2739E89E72C8EB99C1F454C0864840D65EF077E757A2DC0EC96C98E
SHA-512:	BDBDA4593F4F1E7A0E2EF00C6CF986EED67C01C27E10A83745C176962D679EADC1AED2D8E8DFE5DA3C971C2ACA095C430278108201BA2E9985E5884C44B4C122
Malicious:	false
Reputation:	low
Preview:	{"name":"BODIS","preferences":{"kb_meta_reduce_seo":true,"kb_header_bg_color":"rgb(23, 99, 146)","kb_header_font_color":"#ffffff","kb_header_url":"/","kb_header_show_brand_logo":false,"kb_header_logo_url":"https://www2.bodis.com/svg/logo.svg","kb_lang":"","kb_hero_bg_color":"rgb(23, 99, 146)","kb_hero_font_color":"#e4f7ff","kb_link_color":"rgb(23, 99, 146)","kb_body_color":"#555555","kb_body_font":"Roboto, sans-serif","kb_title_font":"Roboto, sans-serif","kb_title_color":"#555555","kb_title_light_color":"#FBFBFB","kb_custom_meta_html":"","kb_custom_header_html":"","kb_custom_footer_html":"","kb_custom_css_stylesheet":"@import url('https://fonts.googleapis.com/css?family=Roboto:400,500,700,400italic\|Material+Icons\|Open+Sans:100,300,400,500,700');\r\n\r\n#header .staff-avatars {\r\n display: none;\r\n}\r\n\r\nbody #header {\r\n background: #176392;\r\n}\r\n\r\nform#new_message #submit-container button {\r\n background: #176291;\r\n}","kb_custom_google_analytics":"","kb_custom_ga

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	245087
Entropy (8bit):	5.5668687765490485
Encrypted:	false
SSDEEP:	3072:00WkAZVNSNcMzszFeINx8v9CBPIrTWRvYElfh6St2nBsLqpy5XDeltzvsXGh9Q:YkAFMgzFeSDLfh6St+aqpy5XDelJsXh
MD5:	0CA225AF5FBBD401DE2B72D40ACE9C50
SHA1:	7D2A2FA5C164B1A6A5930F5029A3C5359652AE3F
SHA-256:	2974786AE65C6E72AA2E8673422D605FF237865BDE2EAEBF4801795AE5DDC86A
SHA-512:	2771A10034A6C146EACDB92D35BFB4CA08F9DD19EBC2FB3F195BB3055B0240768E9FC094FF6BCF339B4CD4530280BC6ABE3A9C97F3D03DEB033A67BBFAD1605F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-L32F1DFB3K&l=dataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":2,"function":"__c","vtp_value":2},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":2,"function":"__c","vtp_value":2},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":8,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":14},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_s

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 23, 2024 09:41:54.975013971 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:41:54.975029945 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:41:55.084376097 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:42:03.163873911 CEST	49710	443	192.168.2.5	108.177.122.99
Apr 23, 2024 09:42:03.163955927 CEST	443	49710	108.177.122.99	192.168.2.5
Apr 23, 2024 09:42:03.164061069 CEST	49710	443	192.168.2.5	108.177.122.99
Apr 23, 2024 09:42:03.164272070 CEST	49710	443	192.168.2.5	108.177.122.99
Apr 23, 2024 09:42:03.164308071 CEST	443	49710	108.177.122.99	192.168.2.5
Apr 23, 2024 09:42:03.394779921 CEST	443	49710	108.177.122.99	192.168.2.5
Apr 23, 2024 09:42:03.395207882 CEST	49710	443	192.168.2.5	108.177.122.99
Apr 23, 2024 09:42:03.395265102 CEST	443	49710	108.177.122.99	192.168.2.5
Apr 23, 2024 09:42:03.396945000 CEST	443	49710	108.177.122.99	192.168.2.5
Apr 23, 2024 09:42:03.397172928 CEST	49710	443	192.168.2.5	108.177.122.99
Apr 23, 2024 09:42:03.398380995 CEST	49710	443	192.168.2.5	108.177.122.99
Apr 23, 2024 09:42:03.398694038 CEST	443	49710	108.177.122.99	192.168.2.5
Apr 23, 2024 09:42:03.443557978 CEST	49710	443	192.168.2.5	108.177.122.99
Apr 23, 2024 09:42:03.443614960 CEST	443	49710	108.177.122.99	192.168.2.5
Apr 23, 2024 09:42:03.496551037 CEST	49710	443	192.168.2.5	108.177.122.99
Apr 23, 2024 09:42:03.513592958 CEST	49711	80	192.168.2.5	23.82.12.32
Apr 23, 2024 09:42:03.514071941 CEST	49712	80	192.168.2.5	23.82.12.32
Apr 23, 2024 09:42:03.631726980 CEST	80	49711	23.82.12.32	192.168.2.5
Apr 23, 2024 09:42:03.631992102 CEST	49711	80	192.168.2.5	23.82.12.32
Apr 23, 2024 09:42:03.632281065 CEST	80	49712	23.82.12.32	192.168.2.5
Apr 23, 2024 09:42:03.632349968 CEST	49712	80	192.168.2.5	23.82.12.32
Apr 23, 2024 09:42:03.637412071 CEST	49712	80	192.168.2.5	23.82.12.32
Apr 23, 2024 09:42:03.755661964 CEST	80	49712	23.82.12.32	192.168.2.5
Apr 23, 2024 09:42:04.261466026 CEST	80	49712	23.82.12.32	192.168.2.5
Apr 23, 2024 09:42:04.261887074 CEST	80	49712	23.82.12.32	192.168.2.5
Apr 23, 2024 09:42:04.262068033 CEST	49712	80	192.168.2.5	23.82.12.32
Apr 23, 2024 09:42:04.262314081 CEST	49712	80	192.168.2.5	23.82.12.32
Apr 23, 2024 09:42:04.381877899 CEST	80	49712	23.82.12.32	192.168.2.5
Apr 23, 2024 09:42:04.413394928 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.519319057 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.519578934 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.519810915 CEST	49716	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.520196915 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.589442015 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:42:04.592211962 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:42:04.625963926 CEST	80	49716	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.626079082 CEST	49716	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.626458883 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.660728931 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.660770893 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.660969973 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.666944981 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.667036057 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.688709974 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:42:04.766911030 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.861279964 CEST	49717	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:04.861321926 CEST	443	49717	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:04.861377001 CEST	49717	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:04.862234116 CEST	49717	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:04.862251043 CEST	443	49717	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:04.889189005 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889234066 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889270067 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889305115 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889338970 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889373064 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889399052 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.889399052 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.889408112 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889444113 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889465094 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.889478922 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889514923 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.889518976 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889554977 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889575005 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.889609098 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889645100 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889662981 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.889679909 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889717102 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889750957 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889786005 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889821053 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889856100 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889908075 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889920950 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.889920950 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.889920950 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.889944077 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.889991999 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.896883965 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.896924973 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.896964073 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.896998882 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.897033930 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.897054911 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.897054911 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.897067070 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.897103071 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.897120953 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.897140980 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:04.897186995 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:04.929330111 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:05.076915979 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:05.081300974 CEST	443	49717	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.085767031 CEST	49717	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.085787058 CEST	443	49717	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.087363005 CEST	443	49717	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.087430000 CEST	49717	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.089610100 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:05.089652061 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:05.089684963 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:05.089782000 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:05.092658997 CEST	49717	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.093120098 CEST	443	49717	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.130533934 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:05.139554024 CEST	49717	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.139568090 CEST	443	49717	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.186081886 CEST	49717	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.193296909 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.193317890 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.193388939 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.195235968 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.195246935 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.394061089 CEST	49719	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:05.409044981 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.409461975 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.409470081 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.410566092 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.410629034 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.411075115 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.411170006 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.411392927 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.411397934 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.462562084 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.494905949 CEST	49720	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:05.498322010 CEST	80	49719	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:05.498424053 CEST	49719	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:05.498847008 CEST	49719	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:05.599220991 CEST	80	49720	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:05.599371910 CEST	49720	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:05.603044033 CEST	80	49719	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:05.626323938 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.626365900 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.626393080 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.626419067 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.626429081 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.626447916 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.626471043 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.626476049 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.626514912 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.633424044 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.637175083 CEST	80	49719	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:05.637202024 CEST	80	49719	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:05.637245893 CEST	49719	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:05.640733004 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.640774012 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.640806913 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.640811920 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.640846014 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.642863035 CEST	80	49719	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:05.642903090 CEST	49719	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:05.648154974 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.655392885 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.656976938 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.656984091 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.713103056 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.730871916 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.734467030 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.734517097 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.734520912 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.734530926 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.734568119 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.741811037 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.749155998 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.749200106 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.749208927 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.749218941 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.749264956 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.756519079 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.763983965 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.764025927 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.764031887 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.764041901 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.764077902 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.771075010 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.778702974 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.778743982 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.778779984 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.778784990 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.778824091 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.785171032 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.791941881 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.791986942 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.792006016 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.792011023 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.792047024 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.798501968 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.805211067 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.805253983 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.805267096 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.805270910 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.805327892 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.811861992 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.818627119 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.818670034 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.818705082 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.818710089 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.818752050 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.836724043 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.839188099 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.839231968 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.839251041 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.839257002 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.839416981 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.844521046 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.849332094 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.849373102 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.849384069 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.849387884 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.849438906 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.854103088 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.858900070 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.858958960 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.858973980 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.858978033 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.859021902 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.863675117 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.868488073 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.868534088 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.868541002 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.868545055 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.868577957 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.873481035 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.878057957 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.878212929 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.878216982 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.880491972 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.880565882 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.880568981 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.885288000 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.885463953 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.885468006 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.890268087 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.890311956 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.890316010 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.894885063 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.894952059 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.894956112 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.899696112 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.899749994 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.899755955 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.904527903 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.904596090 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.904599905 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.909255028 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.909349918 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.909353971 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.914042950 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.914088011 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.914092064 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.918656111 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.918761015 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.918765068 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.923266888 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.924952030 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.924954891 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.927751064 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.929254055 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.929258108 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.932198048 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.932435036 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.932440042 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.937993050 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.938035965 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.938040972 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.938052893 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.938144922 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.942214012 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.946146965 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.946192980 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.946197033 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.950537920 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.950583935 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.950596094 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.950599909 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.950639009 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.953144073 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.955581903 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.955625057 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.955768108 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.955771923 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.955807924 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.957953930 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.960489035 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.960542917 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.960670948 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.960675001 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.960715055 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.962990999 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.965547085 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.965595007 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.965604067 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.965610981 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.965656042 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.967964888 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.970551014 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.970607042 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.970624924 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.970628977 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.970662117 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.972995043 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.974107981 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.974150896 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.974154949 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.976496935 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.977170944 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.977174997 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.979091883 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.979561090 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.979564905 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.981414080 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.981765985 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.981770992 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.983668089 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.983720064 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.983724117 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.985783100 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.985838890 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.985842943 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.988040924 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.989017010 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.989022017 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.990355968 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.990411043 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.990415096 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.992651939 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.992729902 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.992733955 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.994774103 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.994842052 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.994846106 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.997030020 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.997071028 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.997075081 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.999319077 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:05.999377966 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:05.999382019 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.002533913 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.002583027 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:06.002588034 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.004797935 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.004826069 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.004838943 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:06.004842997 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.004893064 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:06.007013083 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.009278059 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.009326935 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.009344101 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:06.009347916 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.009385109 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:06.011189938 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.013298988 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.013338089 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.013354063 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:06.013358116 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.013396025 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:06.015351057 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.017461061 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.017493010 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.017539024 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:06.017543077 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.017587900 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:06.019553900 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.019656897 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.019697905 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:06.019701004 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.019757032 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.019805908 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:06.020426989 CEST	49718	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:06.020440102 CEST	443	49718	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:06.054358959 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 23, 2024 09:42:06.054454088 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:42:06.249739885 CEST	49722	443	192.168.2.5	23.46.214.6
Apr 23, 2024 09:42:06.249763966 CEST	443	49722	23.46.214.6	192.168.2.5
Apr 23, 2024 09:42:06.249840021 CEST	49722	443	192.168.2.5	23.46.214.6
Apr 23, 2024 09:42:06.251491070 CEST	49722	443	192.168.2.5	23.46.214.6
Apr 23, 2024 09:42:06.251503944 CEST	443	49722	23.46.214.6	192.168.2.5
Apr 23, 2024 09:42:06.502330065 CEST	443	49722	23.46.214.6	192.168.2.5
Apr 23, 2024 09:42:06.502427101 CEST	49722	443	192.168.2.5	23.46.214.6
Apr 23, 2024 09:42:06.507167101 CEST	49722	443	192.168.2.5	23.46.214.6
Apr 23, 2024 09:42:06.507175922 CEST	443	49722	23.46.214.6	192.168.2.5
Apr 23, 2024 09:42:06.507550955 CEST	443	49722	23.46.214.6	192.168.2.5
Apr 23, 2024 09:42:06.551716089 CEST	49722	443	192.168.2.5	23.46.214.6
Apr 23, 2024 09:42:06.690613985 CEST	49722	443	192.168.2.5	23.46.214.6
Apr 23, 2024 09:42:06.736115932 CEST	443	49722	23.46.214.6	192.168.2.5
Apr 23, 2024 09:42:06.813721895 CEST	443	49722	23.46.214.6	192.168.2.5
Apr 23, 2024 09:42:06.813822031 CEST	443	49722	23.46.214.6	192.168.2.5
Apr 23, 2024 09:42:06.814378977 CEST	49722	443	192.168.2.5	23.46.214.6
Apr 23, 2024 09:42:06.881192923 CEST	49722	443	192.168.2.5	23.46.214.6
Apr 23, 2024 09:42:06.881217957 CEST	443	49722	23.46.214.6	192.168.2.5
Apr 23, 2024 09:42:06.881230116 CEST	49722	443	192.168.2.5	23.46.214.6
Apr 23, 2024 09:42:06.881237030 CEST	443	49722	23.46.214.6	192.168.2.5
Apr 23, 2024 09:42:06.955327034 CEST	49725	443	192.168.2.5	23.46.214.6
Apr 23, 2024 09:42:06.955363035 CEST	443	49725	23.46.214.6	192.168.2.5
Apr 23, 2024 09:42:06.955420017 CEST	49725	443	192.168.2.5	23.46.214.6
Apr 23, 2024 09:42:06.955890894 CEST	49725	443	192.168.2.5	23.46.214.6
Apr 23, 2024 09:42:06.955904007 CEST	443	49725	23.46.214.6	192.168.2.5
Apr 23, 2024 09:42:07.200954914 CEST	443	49725	23.46.214.6	192.168.2.5
Apr 23, 2024 09:42:07.201021910 CEST	49725	443	192.168.2.5	23.46.214.6
Apr 23, 2024 09:42:07.230685949 CEST	49725	443	192.168.2.5	23.46.214.6
Apr 23, 2024 09:42:07.230703115 CEST	443	49725	23.46.214.6	192.168.2.5
Apr 23, 2024 09:42:07.231697083 CEST	443	49725	23.46.214.6	192.168.2.5
Apr 23, 2024 09:42:07.237730026 CEST	49725	443	192.168.2.5	23.46.214.6
Apr 23, 2024 09:42:07.284111023 CEST	443	49725	23.46.214.6	192.168.2.5
Apr 23, 2024 09:42:07.440810919 CEST	443	49725	23.46.214.6	192.168.2.5
Apr 23, 2024 09:42:07.441004992 CEST	443	49725	23.46.214.6	192.168.2.5
Apr 23, 2024 09:42:07.441076040 CEST	49725	443	192.168.2.5	23.46.214.6
Apr 23, 2024 09:42:07.442522049 CEST	49725	443	192.168.2.5	23.46.214.6
Apr 23, 2024 09:42:07.442538023 CEST	443	49725	23.46.214.6	192.168.2.5
Apr 23, 2024 09:42:07.442554951 CEST	49725	443	192.168.2.5	23.46.214.6
Apr 23, 2024 09:42:07.442560911 CEST	443	49725	23.46.214.6	192.168.2.5
Apr 23, 2024 09:42:08.471929073 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:08.471972942 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:08.576138020 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:08.576158047 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:08.576174021 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:08.594893932 CEST	49727	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:08.594932079 CEST	443	49727	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:08.594985008 CEST	49727	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:08.595282078 CEST	49728	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:08.595323086 CEST	443	49728	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:08.595379114 CEST	49728	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:08.595781088 CEST	49727	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:08.595792055 CEST	443	49727	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:08.596198082 CEST	49728	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:08.596213102 CEST	443	49728	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:08.614152908 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:08.620219946 CEST	49719	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:08.666143894 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:08.741676092 CEST	80	49719	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:08.741703033 CEST	80	49719	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:08.741779089 CEST	49719	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:08.746905088 CEST	80	49719	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:08.746974945 CEST	49719	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:08.750433922 CEST	80	49711	23.82.12.32	192.168.2.5
Apr 23, 2024 09:42:08.750505924 CEST	49711	80	192.168.2.5	23.82.12.32
Apr 23, 2024 09:42:08.814613104 CEST	443	49728	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:08.815072060 CEST	49728	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:08.815092087 CEST	443	49728	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:08.815454960 CEST	443	49728	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:08.815521955 CEST	49728	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:08.816145897 CEST	443	49728	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:08.816207886 CEST	49728	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:08.816216946 CEST	443	49728	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:08.818275928 CEST	49728	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:08.818344116 CEST	443	49728	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:08.818773031 CEST	49728	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:08.818779945 CEST	443	49728	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:08.826395988 CEST	443	49727	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:08.826674938 CEST	49727	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:08.826694965 CEST	443	49727	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:08.827400923 CEST	443	49727	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:08.827466011 CEST	49727	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:08.828418016 CEST	443	49727	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:08.828475952 CEST	49727	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:08.828483105 CEST	443	49727	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:08.830044985 CEST	49727	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:08.830311060 CEST	443	49727	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:08.830323935 CEST	49727	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:08.869149923 CEST	49728	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:08.876121044 CEST	443	49727	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:08.884768009 CEST	49727	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:08.884774923 CEST	443	49727	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:08.931641102 CEST	49727	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:09.026340961 CEST	443	49728	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:09.028476954 CEST	443	49728	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:09.028533936 CEST	49728	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:09.028948069 CEST	49728	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:09.028965950 CEST	443	49728	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:09.030050993 CEST	443	49727	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:09.031852007 CEST	443	49727	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:09.031929016 CEST	49727	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:09.032140017 CEST	49727	443	192.168.2.5	142.250.9.132
Apr 23, 2024 09:42:09.032154083 CEST	443	49727	142.250.9.132	192.168.2.5
Apr 23, 2024 09:42:09.444488049 CEST	49711	80	192.168.2.5	23.82.12.32
Apr 23, 2024 09:42:09.562458992 CEST	80	49711	23.82.12.32	192.168.2.5
Apr 23, 2024 09:42:09.590993881 CEST	49729	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:09.591034889 CEST	443	49729	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:09.591094971 CEST	49729	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:09.591252089 CEST	49730	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:09.591279030 CEST	443	49730	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:09.591325998 CEST	49730	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:09.591943979 CEST	49730	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:09.591959953 CEST	443	49730	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:09.592328072 CEST	49729	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:09.592336893 CEST	443	49729	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:09.809396029 CEST	443	49730	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:09.817876101 CEST	443	49729	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:09.859286070 CEST	49729	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:09.859288931 CEST	49730	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:10.617799044 CEST	49729	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:10.617836952 CEST	443	49729	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:10.618765116 CEST	49730	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:10.618797064 CEST	443	49730	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:10.619544983 CEST	443	49729	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:10.619626045 CEST	49729	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:10.620383978 CEST	443	49730	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:10.620449066 CEST	49730	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:10.622073889 CEST	443	49729	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:10.622138023 CEST	49729	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:10.622147083 CEST	443	49729	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:10.622749090 CEST	49729	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:10.622898102 CEST	443	49730	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:10.622952938 CEST	49730	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:10.622960091 CEST	443	49730	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:10.623202085 CEST	443	49729	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:10.623353958 CEST	49730	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:10.623531103 CEST	443	49730	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:10.623780966 CEST	49729	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:10.623786926 CEST	443	49729	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:10.624098063 CEST	49730	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:10.624108076 CEST	443	49730	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:10.671793938 CEST	49730	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:10.671796083 CEST	49729	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:10.731467009 CEST	443	49730	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:10.731606007 CEST	443	49729	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:10.734165907 CEST	443	49730	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:10.734230995 CEST	49730	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:10.734466076 CEST	443	49729	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:10.734533072 CEST	49729	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:11.863801956 CEST	49729	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:11.863828897 CEST	443	49729	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:11.864823103 CEST	49730	443	192.168.2.5	172.253.124.132
Apr 23, 2024 09:42:11.864857912 CEST	443	49730	172.253.124.132	192.168.2.5
Apr 23, 2024 09:42:13.383799076 CEST	443	49710	108.177.122.99	192.168.2.5
Apr 23, 2024 09:42:13.383935928 CEST	443	49710	108.177.122.99	192.168.2.5
Apr 23, 2024 09:42:13.384006977 CEST	49710	443	192.168.2.5	108.177.122.99
Apr 23, 2024 09:42:13.762573004 CEST	49710	443	192.168.2.5	108.177.122.99
Apr 23, 2024 09:42:13.762636900 CEST	443	49710	108.177.122.99	192.168.2.5
Apr 23, 2024 09:42:14.765125036 CEST	80	49716	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:14.765147924 CEST	80	49716	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:14.765218973 CEST	49716	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:14.772816896 CEST	80	49716	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:14.772877932 CEST	49716	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:15.089293003 CEST	443	49717	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:15.089483023 CEST	443	49717	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:15.089574099 CEST	49717	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:15.738219023 CEST	80	49720	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:15.738238096 CEST	80	49720	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:15.738313913 CEST	49720	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:15.744122028 CEST	80	49720	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:15.744184017 CEST	49720	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:15.763034105 CEST	49717	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:15.763062954 CEST	443	49717	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:15.814276934 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:15.918595076 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:15.935939074 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:15.935951948 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:15.935964108 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:15.935976982 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:15.935993910 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:15.936006069 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:15.936018944 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:15.936021090 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:15.936032057 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:15.936070919 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:15.936108112 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:16.251652002 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:16.373114109 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:16.373142004 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:16.373327971 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:16.585755110 CEST	49719	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:16.707401991 CEST	80	49719	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:16.707452059 CEST	80	49719	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:16.707500935 CEST	49719	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:16.714870930 CEST	80	49719	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:16.714922905 CEST	49719	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:17.663259029 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:42:17.663573027 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:42:17.664048910 CEST	49740	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:42:17.664150953 CEST	443	49740	23.1.237.91	192.168.2.5
Apr 23, 2024 09:42:17.664242029 CEST	49740	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:42:17.664537907 CEST	49740	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:42:17.664562941 CEST	443	49740	23.1.237.91	192.168.2.5
Apr 23, 2024 09:42:17.815782070 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 23, 2024 09:42:17.816072941 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 23, 2024 09:42:17.988502026 CEST	443	49740	23.1.237.91	192.168.2.5
Apr 23, 2024 09:42:17.988586903 CEST	49740	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:42:18.091666937 CEST	49740	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:42:18.091751099 CEST	443	49740	23.1.237.91	192.168.2.5
Apr 23, 2024 09:42:18.092889071 CEST	443	49740	23.1.237.91	192.168.2.5
Apr 23, 2024 09:42:18.092983961 CEST	49740	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:42:18.094403028 CEST	49740	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:42:18.094635963 CEST	443	49740	23.1.237.91	192.168.2.5
Apr 23, 2024 09:42:18.094971895 CEST	49740	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:42:18.094986916 CEST	443	49740	23.1.237.91	192.168.2.5
Apr 23, 2024 09:42:18.357980013 CEST	443	49740	23.1.237.91	192.168.2.5
Apr 23, 2024 09:42:18.358074903 CEST	49740	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:42:18.358588934 CEST	443	49740	23.1.237.91	192.168.2.5
Apr 23, 2024 09:42:18.358670950 CEST	49740	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:42:18.358762980 CEST	443	49740	23.1.237.91	192.168.2.5
Apr 23, 2024 09:42:18.358827114 CEST	49740	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:42:18.359147072 CEST	49740	443	192.168.2.5	23.1.237.91
Apr 23, 2024 09:42:18.359169960 CEST	443	49740	23.1.237.91	192.168.2.5
Apr 23, 2024 09:42:25.842056036 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:25.964232922 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:25.964278936 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:25.964330912 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:25.964339018 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.018294096 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.065855026 CEST	49741	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:26.065911055 CEST	443	49741	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:26.065980911 CEST	49741	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:26.066979885 CEST	49741	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:26.066999912 CEST	443	49741	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:26.084208965 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.205955982 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206001043 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206037998 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206089973 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206101894 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.206125975 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206146955 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.206162930 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206198931 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206204891 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.206234932 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206269026 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206290007 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.206304073 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206338882 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206353903 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.206373930 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206420898 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.206429005 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206464052 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206499100 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206511021 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.206535101 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206569910 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206572056 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.206656933 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206695080 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206707001 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.206731081 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206765890 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206783056 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.206800938 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206836939 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206872940 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206875086 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.206907988 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206911087 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.206945896 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206981897 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.206990004 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.207016945 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.207051992 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.207097054 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.283890963 CEST	443	49741	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:26.284164906 CEST	49741	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:26.284202099 CEST	443	49741	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:26.284707069 CEST	443	49741	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:26.285104990 CEST	49741	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:26.285203934 CEST	443	49741	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:26.329891920 CEST	49741	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:26.533212900 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.680931091 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.693602085 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.693643093 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.693680048 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.693722010 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.707519054 CEST	80	49719	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:26.708681107 CEST	49719	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.740299940 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.791002035 CEST	49719	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:26.895317078 CEST	80	49719	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:27.143321037 CEST	49720	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:27.143727064 CEST	49720	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:27.144088030 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:27.247761011 CEST	80	49720	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:27.248176098 CEST	80	49720	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:27.248199940 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:27.248416901 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:27.248681068 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:27.352941990 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:27.387073994 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:27.387118101 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:27.387151003 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:27.387227058 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:27.394757032 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:27.394829035 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:28.623924017 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:28.623924971 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:28.728473902 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:28.728518963 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:28.728554010 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:28.768788099 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:28.811415911 CEST	49748	443	192.168.2.5	74.125.136.103
Apr 23, 2024 09:42:28.811496019 CEST	443	49748	74.125.136.103	192.168.2.5
Apr 23, 2024 09:42:28.811599016 CEST	49748	443	192.168.2.5	74.125.136.103
Apr 23, 2024 09:42:28.812380075 CEST	49748	443	192.168.2.5	74.125.136.103
Apr 23, 2024 09:42:28.812403917 CEST	443	49748	74.125.136.103	192.168.2.5
Apr 23, 2024 09:42:28.817055941 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:28.820171118 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:28.886070013 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:28.938353062 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:28.938376904 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:28.938477039 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:28.942722082 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:28.942764044 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:28.990304947 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.007445097 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.007487059 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.007524014 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.007726908 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.025171995 CEST	443	49748	74.125.136.103	192.168.2.5
Apr 23, 2024 09:42:29.038885117 CEST	49748	443	192.168.2.5	74.125.136.103
Apr 23, 2024 09:42:29.038921118 CEST	443	49748	74.125.136.103	192.168.2.5
Apr 23, 2024 09:42:29.039910078 CEST	443	49748	74.125.136.103	192.168.2.5
Apr 23, 2024 09:42:29.039975882 CEST	49748	443	192.168.2.5	74.125.136.103
Apr 23, 2024 09:42:29.041285992 CEST	49748	443	192.168.2.5	74.125.136.103
Apr 23, 2024 09:42:29.041352034 CEST	443	49748	74.125.136.103	192.168.2.5
Apr 23, 2024 09:42:29.041527987 CEST	49748	443	192.168.2.5	74.125.136.103
Apr 23, 2024 09:42:29.041538000 CEST	443	49748	74.125.136.103	192.168.2.5
Apr 23, 2024 09:42:29.043073893 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.082969904 CEST	49748	443	192.168.2.5	74.125.136.103
Apr 23, 2024 09:42:29.165116072 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165137053 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165150881 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165165901 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165179968 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165188074 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.165198088 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165214062 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165227890 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.165230989 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165245056 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.165247917 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165258884 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.165263891 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165278912 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165292978 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165293932 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.165308952 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165323019 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165330887 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.165338039 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165353060 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165353060 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.165368080 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165381908 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165395975 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.165395975 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165411949 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165417910 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.165426970 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165441036 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165441990 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.165456057 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165471077 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165478945 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.165484905 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165501118 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165503979 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.165515900 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165533066 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.165541887 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165556908 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.165572882 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.189515114 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.240760088 CEST	443	49748	74.125.136.103	192.168.2.5
Apr 23, 2024 09:42:29.240833998 CEST	443	49748	74.125.136.103	192.168.2.5
Apr 23, 2024 09:42:29.240936041 CEST	49748	443	192.168.2.5	74.125.136.103
Apr 23, 2024 09:42:29.244450092 CEST	49748	443	192.168.2.5	74.125.136.103
Apr 23, 2024 09:42:29.244486094 CEST	443	49748	74.125.136.103	192.168.2.5
Apr 23, 2024 09:42:29.337021112 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.348668098 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.348721027 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.348761082 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.348913908 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.401207924 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.513205051 CEST	49749	443	192.168.2.5	142.250.105.103
Apr 23, 2024 09:42:29.513252974 CEST	443	49749	142.250.105.103	192.168.2.5
Apr 23, 2024 09:42:29.513317108 CEST	49749	443	192.168.2.5	142.250.105.103
Apr 23, 2024 09:42:29.513653994 CEST	49749	443	192.168.2.5	142.250.105.103
Apr 23, 2024 09:42:29.513675928 CEST	443	49749	142.250.105.103	192.168.2.5
Apr 23, 2024 09:42:29.537026882 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.658747911 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.658795118 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.658845901 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.658899069 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.662743092 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:29.662803888 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:29.726401091 CEST	443	49749	142.250.105.103	192.168.2.5
Apr 23, 2024 09:42:29.726852894 CEST	49749	443	192.168.2.5	142.250.105.103
Apr 23, 2024 09:42:29.726876974 CEST	443	49749	142.250.105.103	192.168.2.5
Apr 23, 2024 09:42:29.727745056 CEST	443	49749	142.250.105.103	192.168.2.5
Apr 23, 2024 09:42:29.727804899 CEST	49749	443	192.168.2.5	142.250.105.103
Apr 23, 2024 09:42:29.728790045 CEST	49749	443	192.168.2.5	142.250.105.103
Apr 23, 2024 09:42:29.728857040 CEST	443	49749	142.250.105.103	192.168.2.5
Apr 23, 2024 09:42:29.728935957 CEST	49749	443	192.168.2.5	142.250.105.103
Apr 23, 2024 09:42:29.728948116 CEST	443	49749	142.250.105.103	192.168.2.5
Apr 23, 2024 09:42:29.782433987 CEST	49749	443	192.168.2.5	142.250.105.103
Apr 23, 2024 09:42:29.943253994 CEST	443	49749	142.250.105.103	192.168.2.5
Apr 23, 2024 09:42:29.943320036 CEST	443	49749	142.250.105.103	192.168.2.5
Apr 23, 2024 09:42:29.943360090 CEST	49749	443	192.168.2.5	142.250.105.103
Apr 23, 2024 09:42:29.944519997 CEST	49749	443	192.168.2.5	142.250.105.103
Apr 23, 2024 09:42:29.944538116 CEST	443	49749	142.250.105.103	192.168.2.5
Apr 23, 2024 09:42:30.165788889 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.270123959 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.287478924 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.287523031 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.287558079 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.287734032 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.338938951 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.377559900 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.461894989 CEST	49716	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.461894989 CEST	49716	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.462048054 CEST	49716	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.469722986 CEST	49752	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.499167919 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499232054 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499268055 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499304056 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499339104 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499375105 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499378920 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.499378920 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.499411106 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499414921 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.499448061 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499484062 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499525070 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499573946 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499605894 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.499608994 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499605894 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.499663115 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.499670029 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499706984 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499742985 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499763966 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.499778032 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499811888 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499826908 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.499847889 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499882936 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499895096 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.499918938 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499953985 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.499963999 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.499989033 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.500024080 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.500039101 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.500063896 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.500121117 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.500139952 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.500180960 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.500217915 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.500231028 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.500252962 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.500288963 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.500300884 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.507950068 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.508030891 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.566216946 CEST	80	49716	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.566257000 CEST	80	49716	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.566288948 CEST	80	49716	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.566319942 CEST	80	49716	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.574059010 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.574615002 CEST	49752	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.612206936 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.649771929 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.654803991 CEST	49753	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.663290977 CEST	49752	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.699450016 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.713130951 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.759074926 CEST	80	49753	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.759155989 CEST	49753	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.767602921 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.817437887 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.817497015 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.817538977 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.817722082 CEST	49752	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.822834969 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.823019028 CEST	49752	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.835145950 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.835186005 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.835355997 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:30.870879889 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:30.871036053 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:31.001555920 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:31.123213053 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:31.123259068 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:31.123291016 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:31.123487949 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:31.158838987 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:31.162533045 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:33.406416893 CEST	49752	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:33.406507969 CEST	49752	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:33.510818005 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:33.510859013 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:33.510891914 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:33.547518969 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:33.661545992 CEST	49752	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:33.754987001 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:33.755203009 CEST	49752	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:34.068129063 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:34.189959049 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:34.189991951 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:34.190269947 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:34.242939949 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:34.243136883 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:36.287060976 CEST	443	49741	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:36.287136078 CEST	443	49741	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:36.287178993 CEST	49741	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:36.410396099 CEST	49741	443	192.168.2.5	142.251.15.103
Apr 23, 2024 09:42:36.410425901 CEST	443	49741	142.251.15.103	192.168.2.5
Apr 23, 2024 09:42:39.797038078 CEST	49752	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:39.901407003 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:39.918911934 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:39.918942928 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:39.918962002 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:39.918978930 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:39.918996096 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:39.919012070 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:39.919022083 CEST	49752	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:39.919029951 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:39.919047117 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:39.919055939 CEST	49752	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:39.919279099 CEST	49752	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:39.926805973 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:39.927037001 CEST	49752	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:40.005078077 CEST	49752	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:40.126691103 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:40.126713991 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:40.126907110 CEST	49752	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:40.174082041 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:40.178850889 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:40.179003954 CEST	49752	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:40.295617104 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:40.295671940 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:40.295737982 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:40.350878954 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:40.350971937 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:40.650927067 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:40.651144028 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:40.897789955 CEST	80	49753	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:40.897808075 CEST	80	49753	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:40.897866011 CEST	49753	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:40.904798985 CEST	80	49753	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:40.904843092 CEST	49753	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:41.205636978 CEST	49715	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:41.309887886 CEST	80	49715	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:49.930495977 CEST	49762	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:49.930550098 CEST	443	49762	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:49.930975914 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:49.931018114 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:49.931040049 CEST	49762	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:49.931140900 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:49.931595087 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:49.931612968 CEST	49762	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:49.931622982 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:49.931633949 CEST	443	49762	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.126166105 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:50.130650043 CEST	49752	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:50.292536020 CEST	443	49762	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.292983055 CEST	49762	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.293015003 CEST	443	49762	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.294553041 CEST	443	49762	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.294784069 CEST	49762	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.296112061 CEST	49762	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.296112061 CEST	49762	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.296137094 CEST	443	49762	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.296205997 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.296211004 CEST	443	49762	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.296365976 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:50.296514988 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.296524048 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:50.296540976 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.298233032 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.298305988 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.299418926 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.299520016 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.350290060 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.350292921 CEST	49762	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.350302935 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.350311995 CEST	443	49762	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.396114111 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.396116018 CEST	49762	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.443274975 CEST	443	49762	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.443458080 CEST	443	49762	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.443618059 CEST	49762	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.473002911 CEST	49762	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.473037958 CEST	443	49762	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.477783918 CEST	49752	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:50.477787971 CEST	49745	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:42:50.478296041 CEST	49764	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.478326082 CEST	443	49764	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.478414059 CEST	49764	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.478790998 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.478842020 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.478990078 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.479357004 CEST	49764	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.479360104 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.479372978 CEST	443	49764	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.479559898 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.479578972 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.520154953 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.582084894 CEST	80	49745	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:50.582113028 CEST	80	49752	199.59.243.225	192.168.2.5
Apr 23, 2024 09:42:50.602247000 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.602298975 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.602318048 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.602334976 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.602353096 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.602376938 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.602380991 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.602380991 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.602396965 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.602427006 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.602444887 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.602462053 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.602471113 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.602641106 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.602701902 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.602705956 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.602726936 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.602756977 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.645652056 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.706864119 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.706887007 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.706927061 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.706933022 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.706954956 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.706984997 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.707000971 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.707070112 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.707086086 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.707125902 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.707145929 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.707153082 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.707192898 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.707243919 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.707289934 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.707334042 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.707353115 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.707372904 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.707387924 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.707406044 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.811393023 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.811496973 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.811611891 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.811659098 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.811697960 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.811712027 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.811728954 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.811742067 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.811749935 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.811770916 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.811806917 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.811820030 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.811827898 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.811846018 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.811875105 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.811899900 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.812011957 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.812081099 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.812186003 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.812227964 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.812252998 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.812261105 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.812295914 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.812349081 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.812393904 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.812411070 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.812419891 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.812447071 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.812517881 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.812566042 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.812568903 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.812592030 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.812621117 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.812695026 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.812740088 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.812762022 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.812769890 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.812783003 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.832633018 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.832873106 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.832904100 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.833156109 CEST	443	49764	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.833409071 CEST	49764	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.833416939 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.833437920 CEST	443	49764	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.833714008 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.833821058 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.833849907 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.834606886 CEST	443	49764	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.834906101 CEST	49764	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.835051060 CEST	49764	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.835059881 CEST	443	49764	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.835083961 CEST	443	49764	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.862848997 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.876128912 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.878177881 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.878202915 CEST	49764	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.915361881 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.915406942 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.915441990 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.915462017 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.915513992 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.915533066 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.916064978 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.916126966 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.916127920 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.916153908 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.916188955 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.916198969 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.916353941 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.916415930 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.916424990 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.916526079 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.916584015 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.917180061 CEST	49763	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.917196989 CEST	443	49763	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.956816912 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.956839085 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.956847906 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.956857920 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.956918001 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.956923008 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.956970930 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.956986904 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.956988096 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.957019091 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.957020044 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.957040071 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.957061052 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.957084894 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.957787991 CEST	443	49764	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.957873106 CEST	443	49764	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:50.957990885 CEST	49764	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.965913057 CEST	49764	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:50.965928078 CEST	443	49764	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.061260939 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.061341047 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.061355114 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.061387062 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.061434031 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.061453104 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.061620951 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.061671019 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.061705112 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.061713934 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.061742067 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.061764956 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.061830997 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.061872005 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.061901093 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.061909914 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.061933994 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.061958075 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.062033892 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.062107086 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.165361881 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.165426970 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.165498972 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.165530920 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.165553093 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.165596962 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.166625023 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.166667938 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.166696072 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.166703939 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.166757107 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.166949987 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.167012930 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.167020082 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.167042017 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.167089939 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.167104006 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.167187929 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.167231083 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.167256117 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.167263985 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.167288065 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.167308092 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.269376993 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.269397974 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.269459009 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.269473076 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.269526005 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.269754887 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.269798994 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.269813061 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.269821882 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.269867897 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.269867897 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.269923925 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.269967079 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.270001888 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.270011902 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.270023108 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.270134926 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.271528006 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.271569967 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.271605968 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.271612883 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.271653891 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.271671057 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.271871090 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.271909952 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.271948099 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.271955013 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.271981955 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.271995068 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.272170067 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.272212029 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.272248983 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.272257090 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.272346020 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.272346020 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.272568941 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.272644997 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.272661924 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.272696018 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.272713900 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.272718906 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.272780895 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.272785902 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.272804976 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.272871017 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.273017883 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.273062944 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.273104906 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.273112059 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.273134947 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.273155928 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.273314953 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.273356915 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.273380041 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.273387909 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.273411989 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.273426056 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.273614883 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.273655891 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.273689032 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.273696899 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.273727894 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.273736954 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.273969889 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.274014950 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.274035931 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.274043083 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.274091959 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.314182043 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.314207077 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.314282894 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.314316034 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.314403057 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.377584934 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.377635002 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.377662897 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.377677917 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.377711058 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.377721071 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.377863884 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.377903938 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.377931118 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.377938986 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.377969027 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.377985954 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.378216982 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.378257990 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.378289938 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.378297091 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.378323078 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.378333092 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.378392935 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.378437042 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.378478050 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.378484964 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.378505945 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.378525019 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.378690004 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.378739119 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.378757954 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.378767014 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.378799915 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.378818989 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.379019022 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.379103899 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.379106998 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.379136086 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.379158974 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.379174948 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.382641077 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.382683992 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.382713079 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.382719994 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.382762909 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.382780075 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.383040905 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.383085966 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.383106947 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.383114100 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.383162975 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.383162975 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.383491039 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.383575916 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.383594036 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.383603096 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.383634090 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.383646011 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.383868933 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.383927107 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.383927107 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.383965015 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.383997917 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.384013891 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.384475946 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.384522915 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.384546995 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.384553909 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.384612083 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.384612083 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.384795904 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.384840012 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.384860039 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.384867907 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.384903908 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.384924889 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.385133982 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.385174990 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.385195017 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.385201931 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.385262012 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.385262012 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.385365963 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.385411024 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.385426998 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.385436058 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.385467052 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.385488987 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.385721922 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.385762930 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.385797024 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.385804892 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.385843039 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.385843039 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.386101007 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.386145115 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.386163950 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.386172056 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.386198044 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.386218071 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.386270046 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.386331081 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.386333942 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.386353970 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.386403084 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.386403084 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.386650085 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.386689901 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.386725903 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.386733055 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.386782885 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.386784077 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.386924028 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.386969090 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.386989117 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.386996984 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.387022972 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.387041092 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.387217045 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.387257099 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.387271881 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.387286901 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.387311935 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.387332916 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.387892008 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.387932062 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.387959957 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.387968063 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.388657093 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.418864012 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.418910027 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.418940067 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.418952942 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.418979883 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.419002056 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.419085026 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.419140100 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.419143915 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.419171095 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.419203997 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.419224977 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.419279099 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.419321060 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.419337988 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.419346094 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.419380903 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.419398069 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.483434916 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.483469009 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.483628988 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.483650923 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.483851910 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.483875036 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.483917952 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.483927011 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.483938932 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.483953953 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.483954906 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.484003067 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.484013081 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.484052896 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.484122992 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.484149933 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.484184980 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.484191895 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.484221935 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.484246016 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.484272957 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.484291077 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.484325886 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.484334946 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.484355927 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.484391928 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.484658003 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.484677076 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.484721899 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.484729052 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.484754086 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.484765053 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.484812975 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.484834909 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.484869957 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.484875917 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.484901905 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.484932899 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.485100031 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.485116959 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.485152960 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.485160112 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.485189915 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.485198021 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.485323906 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.485346079 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.485378981 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.485385895 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.485409975 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.485421896 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.485677958 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.485694885 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.485739946 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.485748053 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.485794067 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.485846996 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.485867023 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.485898972 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.485905886 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.485934019 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.485941887 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.486386061 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.486402988 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.486448050 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.486454964 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.486484051 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.486500978 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.487088919 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.487108946 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.487164021 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.487171888 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.487200022 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.487219095 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.488192081 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.488212109 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.488266945 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.488280058 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.488320112 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.491713047 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.491730928 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.491815090 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.491822004 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.491899967 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.492050886 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.492072105 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.492125988 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.492135048 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.492176056 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.492341042 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.492358923 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.492403030 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.492412090 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.492438078 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.492451906 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.492649078 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.492669106 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.492702961 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.492710114 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.492733002 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.492742062 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.492921114 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.492938995 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.492976904 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.492985010 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.493006945 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.493021011 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.493282080 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.493299007 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.493340015 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.493347883 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.493374109 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.493391037 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.493568897 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.493587971 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.493638039 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.493644953 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.493685961 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.493907928 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.493925095 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.493954897 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.493962049 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.493968964 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.493995905 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.494055033 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.494250059 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.498506069 CEST	49765	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.498523951 CEST	443	49765	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.793255091 CEST	49768	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.793279886 CEST	443	49768	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.793492079 CEST	49768	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.793936014 CEST	49769	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.793979883 CEST	443	49769	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.794110060 CEST	49769	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.794657946 CEST	49768	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.794672012 CEST	443	49768	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.796139002 CEST	49769	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:51.796150923 CEST	443	49769	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:51.898168087 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:51.898197889 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:51.898257017 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:51.898719072 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:51.898727894 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:51.898793936 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:51.899020910 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:51.899030924 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:51.899174929 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:51.899185896 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.023514032 CEST	443	49769	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.023879051 CEST	49769	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.023904085 CEST	443	49769	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.024267912 CEST	443	49769	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.025408030 CEST	49769	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.025475979 CEST	443	49769	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.027092934 CEST	49769	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.027113914 CEST	443	49769	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.125391960 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.125638962 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.125653982 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.127095938 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.127163887 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.127252102 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.128520966 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.128607988 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.128802061 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.128808975 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.129040956 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.129046917 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.130398989 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.130475044 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.131536961 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.131622076 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.131900072 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.131906033 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.147095919 CEST	443	49768	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.162462950 CEST	49768	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.162477016 CEST	443	49768	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.163650036 CEST	443	49768	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.164020061 CEST	49768	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.164172888 CEST	49768	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.164177895 CEST	443	49768	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.164248943 CEST	443	49768	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.176934958 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.177184105 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.207853079 CEST	49768	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.274267912 CEST	443	49769	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.274388075 CEST	443	49769	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.276684046 CEST	49769	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.277915955 CEST	49769	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.277935028 CEST	443	49769	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.282457113 CEST	49774	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.282538891 CEST	443	49774	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.282656908 CEST	49774	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.282931089 CEST	49774	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.282948971 CEST	443	49774	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.286931992 CEST	443	49768	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.286986113 CEST	443	49768	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.287060022 CEST	49768	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.287075996 CEST	443	49768	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.287168026 CEST	443	49768	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.287210941 CEST	49768	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.287658930 CEST	49768	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.287671089 CEST	443	49768	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.377118111 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.377176046 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.377212048 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.377227068 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.377243042 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.377269983 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.377275944 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.377315044 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.377355099 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.377367020 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.377372980 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.377410889 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.377427101 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.377491951 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.377527952 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.377563000 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.377574921 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.377583027 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.377605915 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.378324986 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.378364086 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.378388882 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.378393888 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.378426075 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.378431082 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.378442049 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.378587961 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.378593922 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.379200935 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.379240990 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.379276991 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.379292965 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.379301071 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.379318953 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.379955053 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.380017996 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.380023956 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.380063057 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.380127907 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.380167007 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.380198956 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.380222082 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.380229950 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.380233049 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.380244017 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.380264997 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.380271912 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.380283117 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.380399942 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.380486012 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.380487919 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.380517960 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.380583048 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.380594969 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.380743980 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.380825043 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.380906105 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.380930901 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.380938053 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.380950928 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.381022930 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.381083965 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.381119013 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.381135941 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.381148100 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.381182909 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.381182909 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.381195068 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.381207943 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.381220102 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.381270885 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.381352901 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.381398916 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.381403923 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.381849051 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.381880999 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.381895065 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.381907940 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.381907940 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.381917000 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.381917953 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.381927013 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.381962061 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.381962061 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.381984949 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.382018089 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.382050037 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.382056952 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.382174015 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.382256985 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.382266045 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.382277966 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.382329941 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.382369041 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.382725954 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.382788897 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.382796049 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.382977009 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.383028984 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.383034945 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.383120060 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.383196115 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.383234978 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.383243084 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.383315086 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.383697987 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.383874893 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.383939028 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.383956909 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.383968115 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.384032965 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.384042025 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.384592056 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.384654045 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.384660006 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.384763956 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.384845018 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.384886026 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.384892941 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.385577917 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.385643959 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.385651112 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.385730028 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.385775089 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.385781050 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.385838985 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.385858059 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.385865927 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.385888100 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.399059057 CEST	49775	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.399097919 CEST	443	49775	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.399221897 CEST	49775	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.399580956 CEST	49775	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.399595976 CEST	443	49775	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.433422089 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.433437109 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.481760025 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.481787920 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.481839895 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.481957912 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.482059002 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.482068062 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.482629061 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.482705116 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.482713938 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.482738972 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.482762098 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.483511925 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.483596087 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.483603954 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.483661890 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.484553099 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.484607935 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.484642982 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.484695911 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.484877110 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.484920025 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.484935045 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.484965086 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.484994888 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.485078096 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.485095024 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.485146046 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.485146046 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.485156059 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.485168934 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.485184908 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.485316992 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.485321999 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.485354900 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.485555887 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.485622883 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.485641003 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.485677004 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.485682011 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.485692978 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.485992908 CEST	49773	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.486007929 CEST	443	49773	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.486321926 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.486390114 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.486397028 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.486411095 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.486454010 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.486459970 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.487149000 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.487215042 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.487222910 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.487361908 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.487368107 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.488018036 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.488080978 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.488089085 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.488130093 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.488184929 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.488190889 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.488981009 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.489041090 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.489048004 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.489079952 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.489080906 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.489109993 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.489171028 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.489753962 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.489823103 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.490221977 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.490269899 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.490314960 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.490370035 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.511642933 CEST	443	49774	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.522947073 CEST	49774	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.522964954 CEST	443	49774	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.523488045 CEST	443	49774	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.523960114 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.523999929 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.524245977 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.524317980 CEST	49774	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.524415016 CEST	443	49774	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.524713993 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.524732113 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.524873972 CEST	49774	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.537055016 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.537147045 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.572148085 CEST	443	49774	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.588181973 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.588247061 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.589006901 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.589088917 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.589093924 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.589118958 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.589158058 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.589528084 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.589596033 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.589610100 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.589660883 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.590373039 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.590445042 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.590456009 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.590513945 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.591358900 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.591449976 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.591459036 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.591520071 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.591568947 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.591573954 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.592300892 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.592381954 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.592386961 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.592422962 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.592441082 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.593205929 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.593275070 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.593281031 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.593296051 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.593348980 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.593353987 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.593992949 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.594072104 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.594079018 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.594324112 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.594886065 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.594937086 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.595062971 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.595124006 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.595149994 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.595192909 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.595216990 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.595283031 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.596031904 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.596090078 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.596910954 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.596962929 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.596996069 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.597043991 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.597803116 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.597861052 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.597884893 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.597932100 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.598855972 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.598917007 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.600692987 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.600732088 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.600759029 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.600771904 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.600826025 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.602549076 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.602596045 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.602603912 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.602619886 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.602642059 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.604417086 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.604456902 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.604482889 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.604496956 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.604526043 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.606092930 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.606136084 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.606163979 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.606178999 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.606197119 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.607919931 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.607958078 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.607995033 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.608006001 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.608026981 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.610125065 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.610167980 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.610188961 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.610199928 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.610239029 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.626753092 CEST	49777	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:52.626792908 CEST	443	49777	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:52.626863956 CEST	49777	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:52.627110004 CEST	49777	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:52.627130985 CEST	443	49777	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:52.628242970 CEST	443	49775	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.628487110 CEST	49775	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.628494978 CEST	443	49775	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.629568100 CEST	443	49775	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.629625082 CEST	49775	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.630007029 CEST	49775	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.630064964 CEST	443	49775	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.630307913 CEST	49775	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.630314112 CEST	443	49775	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.641424894 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.641484022 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.641516924 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.641531944 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.641561031 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.682455063 CEST	49775	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.682643890 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.692940950 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.692955971 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.692996979 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.693017006 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.693043947 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.693073034 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.693098068 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.695029020 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.695061922 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.695095062 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.695105076 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.695131063 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.695149899 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.696316004 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.696350098 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.696398973 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.696403980 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.696434975 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.696454048 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.697858095 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.697877884 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.697937965 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.697945118 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.697978020 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.699580908 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.699600935 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.699636936 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.699644089 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.699676991 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.699682951 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.701441050 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.701468945 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.701522112 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.701530933 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.701564074 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.703953028 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.703974009 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.704021931 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.704035997 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.705760002 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.705782890 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.705830097 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.705838919 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.705869913 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.707128048 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.707148075 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.707200050 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.707209110 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.707233906 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.709763050 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.709785938 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.709820032 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.709831953 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.709851980 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.714215994 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.714274883 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.714288950 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.714314938 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.714337111 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.714524984 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.714571953 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.714586020 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.714598894 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.714634895 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.715912104 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.715979099 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.716000080 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.716011047 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.716036081 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.717715025 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.717761040 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.717778921 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.717791080 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.717813015 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.719778061 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.719819069 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.719839096 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.719852924 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.719888926 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.721554041 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.721600056 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.721625090 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.721636057 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.721656084 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.723460913 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.723509073 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.723552942 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.723561049 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.723592043 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.725203991 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.725251913 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.725265980 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.725284100 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.725316048 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.727180004 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.727219105 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.727251053 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.727262974 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.727294922 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.728882074 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.728928089 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.728934050 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.728961945 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.728991985 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.731147051 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.731187105 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.731205940 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.731219053 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.731239080 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.731985092 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.732037067 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.732073069 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.732083082 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.732093096 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.732109070 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.733791113 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.733848095 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.733865023 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.733880043 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.733916044 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.735985041 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.736032963 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.736044884 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.736063004 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.736085892 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.737730026 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.737776041 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.737828970 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.737834930 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.737849951 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.740775108 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.742604017 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.742624044 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.742983103 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.743408918 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.743477106 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.743817091 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:52.745991945 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.746038914 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.746051073 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.746068001 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.746102095 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.747735977 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.747778893 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.747801065 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.747812033 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.747843027 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.780669928 CEST	443	49774	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.780694962 CEST	443	49774	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.780709982 CEST	443	49774	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.780752897 CEST	49774	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.780778885 CEST	443	49774	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.780787945 CEST	443	49774	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.780790091 CEST	49774	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.780818939 CEST	443	49774	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.780849934 CEST	49774	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.780865908 CEST	443	49774	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.780884027 CEST	49774	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.780904055 CEST	443	49774	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.780924082 CEST	49774	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.780957937 CEST	49774	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.782347918 CEST	49774	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.782367945 CEST	443	49774	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.784140110 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:52.791861057 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.798145056 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.798213959 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.798218966 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.798240900 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.798260927 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.798429966 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.798486948 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.799220085 CEST	49772	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:52.799236059 CEST	443	49772	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:52.895095110 CEST	443	49775	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.895116091 CEST	443	49775	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.895200014 CEST	49775	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.895205975 CEST	443	49775	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.895246983 CEST	49775	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.925028086 CEST	49775	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.925054073 CEST	443	49775	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.952368975 CEST	49778	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.952425957 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:52.952497005 CEST	49778	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.953488111 CEST	49778	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:52.953507900 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.000900984 CEST	49779	443	192.168.2.5	64.233.176.94
Apr 23, 2024 09:42:53.000940084 CEST	443	49779	64.233.176.94	192.168.2.5
Apr 23, 2024 09:42:53.001038074 CEST	49779	443	192.168.2.5	64.233.176.94
Apr 23, 2024 09:42:53.001266956 CEST	49779	443	192.168.2.5	64.233.176.94
Apr 23, 2024 09:42:53.001281977 CEST	443	49779	64.233.176.94	192.168.2.5
Apr 23, 2024 09:42:53.001914024 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.001966000 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.002013922 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.002028942 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.002067089 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.002099991 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.002120972 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.002139091 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.002146006 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.002165079 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.002410889 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.002441883 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.002473116 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.002480030 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.002574921 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.002835035 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.002899885 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.002931118 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.002962112 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.002964020 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.002975941 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.003017902 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.003752947 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.003815889 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.003825903 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.003837109 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.003865004 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.003882885 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.003894091 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.004060984 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.004067898 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.004729986 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.004770994 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.004803896 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.004817009 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.004829884 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.004853964 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.005474091 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.005543947 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.005559921 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.005570889 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.005609989 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.005616903 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.005656004 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.005686045 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.005717993 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.005727053 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.005831957 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.006335020 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.006444931 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.006484985 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.006490946 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.006501913 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.006536007 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.006544113 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.007291079 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.007323980 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.007355928 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.007384062 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.007389069 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.007400990 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.007409096 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.007426977 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.008299112 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.008351088 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.106118917 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.106209040 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.106580019 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.106631994 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.106678963 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.106728077 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.107192039 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.107242107 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.107290983 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.107336998 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.108974934 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.109030962 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.109065056 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.109112978 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.109780073 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.109833002 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.109875917 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.109941006 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.110475063 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.110546112 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.110559940 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.110781908 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.110856056 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.137918949 CEST	49780	443	192.168.2.5	142.250.105.155
Apr 23, 2024 09:42:53.137955904 CEST	443	49780	142.250.105.155	192.168.2.5
Apr 23, 2024 09:42:53.138042927 CEST	49780	443	192.168.2.5	142.250.105.155
Apr 23, 2024 09:42:53.138524055 CEST	49781	443	192.168.2.5	216.239.34.181
Apr 23, 2024 09:42:53.138609886 CEST	443	49781	216.239.34.181	192.168.2.5
Apr 23, 2024 09:42:53.138673067 CEST	49781	443	192.168.2.5	216.239.34.181
Apr 23, 2024 09:42:53.138855934 CEST	49780	443	192.168.2.5	142.250.105.155
Apr 23, 2024 09:42:53.138873100 CEST	443	49780	142.250.105.155	192.168.2.5
Apr 23, 2024 09:42:53.139007092 CEST	49781	443	192.168.2.5	216.239.34.181
Apr 23, 2024 09:42:53.139039993 CEST	443	49781	216.239.34.181	192.168.2.5
Apr 23, 2024 09:42:53.180737972 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.220335960 CEST	443	49779	64.233.176.94	192.168.2.5
Apr 23, 2024 09:42:53.222074032 CEST	49778	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.222117901 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.222717047 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.225469112 CEST	49776	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:53.225491047 CEST	443	49776	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:53.226202965 CEST	49779	443	192.168.2.5	64.233.176.94
Apr 23, 2024 09:42:53.226218939 CEST	443	49779	64.233.176.94	192.168.2.5
Apr 23, 2024 09:42:53.226797104 CEST	443	49779	64.233.176.94	192.168.2.5
Apr 23, 2024 09:42:53.226816893 CEST	443	49779	64.233.176.94	192.168.2.5
Apr 23, 2024 09:42:53.226907969 CEST	49779	443	192.168.2.5	64.233.176.94
Apr 23, 2024 09:42:53.226917028 CEST	443	49779	64.233.176.94	192.168.2.5
Apr 23, 2024 09:42:53.226962090 CEST	49779	443	192.168.2.5	64.233.176.94
Apr 23, 2024 09:42:53.226963997 CEST	49778	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.227055073 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.227140903 CEST	49779	443	192.168.2.5	64.233.176.94
Apr 23, 2024 09:42:53.227524996 CEST	443	49779	64.233.176.94	192.168.2.5
Apr 23, 2024 09:42:53.241792917 CEST	49778	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.241852045 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.242522955 CEST	49779	443	192.168.2.5	64.233.176.94
Apr 23, 2024 09:42:53.242710114 CEST	49779	443	192.168.2.5	64.233.176.94
Apr 23, 2024 09:42:53.242717981 CEST	443	49779	64.233.176.94	192.168.2.5
Apr 23, 2024 09:42:53.242749929 CEST	443	49779	64.233.176.94	192.168.2.5
Apr 23, 2024 09:42:53.243185997 CEST	49783	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:53.243232965 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:53.243302107 CEST	49783	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:53.243494034 CEST	49783	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:53.243513107 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:53.279542923 CEST	443	49777	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:53.280999899 CEST	49777	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:53.281034946 CEST	443	49777	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:53.282927990 CEST	443	49777	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:53.282988071 CEST	49777	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:53.283653975 CEST	49779	443	192.168.2.5	64.233.176.94
Apr 23, 2024 09:42:53.283674002 CEST	443	49779	64.233.176.94	192.168.2.5
Apr 23, 2024 09:42:53.284389019 CEST	49777	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:53.284496069 CEST	443	49777	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:53.284796953 CEST	49777	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:53.284805059 CEST	443	49777	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:53.338723898 CEST	49777	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:53.338748932 CEST	49779	443	192.168.2.5	64.233.176.94
Apr 23, 2024 09:42:53.354780912 CEST	443	49781	216.239.34.181	192.168.2.5
Apr 23, 2024 09:42:53.355119944 CEST	49781	443	192.168.2.5	216.239.34.181
Apr 23, 2024 09:42:53.355192900 CEST	443	49781	216.239.34.181	192.168.2.5
Apr 23, 2024 09:42:53.355742931 CEST	443	49781	216.239.34.181	192.168.2.5
Apr 23, 2024 09:42:53.355837107 CEST	49781	443	192.168.2.5	216.239.34.181
Apr 23, 2024 09:42:53.356762886 CEST	443	49781	216.239.34.181	192.168.2.5
Apr 23, 2024 09:42:53.356817007 CEST	49781	443	192.168.2.5	216.239.34.181
Apr 23, 2024 09:42:53.357886076 CEST	49781	443	192.168.2.5	216.239.34.181
Apr 23, 2024 09:42:53.358000040 CEST	443	49781	216.239.34.181	192.168.2.5
Apr 23, 2024 09:42:53.358163118 CEST	49781	443	192.168.2.5	216.239.34.181
Apr 23, 2024 09:42:53.358171940 CEST	443	49781	216.239.34.181	192.168.2.5
Apr 23, 2024 09:42:53.358593941 CEST	443	49780	142.250.105.155	192.168.2.5
Apr 23, 2024 09:42:53.358818054 CEST	49780	443	192.168.2.5	142.250.105.155
Apr 23, 2024 09:42:53.358831882 CEST	443	49780	142.250.105.155	192.168.2.5
Apr 23, 2024 09:42:53.359868050 CEST	443	49780	142.250.105.155	192.168.2.5
Apr 23, 2024 09:42:53.359927893 CEST	49780	443	192.168.2.5	142.250.105.155
Apr 23, 2024 09:42:53.360923052 CEST	49780	443	192.168.2.5	142.250.105.155
Apr 23, 2024 09:42:53.361000061 CEST	443	49780	142.250.105.155	192.168.2.5
Apr 23, 2024 09:42:53.361119986 CEST	49780	443	192.168.2.5	142.250.105.155
Apr 23, 2024 09:42:53.361129045 CEST	443	49780	142.250.105.155	192.168.2.5
Apr 23, 2024 09:42:53.401055098 CEST	49781	443	192.168.2.5	216.239.34.181
Apr 23, 2024 09:42:53.401272058 CEST	49780	443	192.168.2.5	142.250.105.155
Apr 23, 2024 09:42:53.447185040 CEST	443	49779	64.233.176.94	192.168.2.5
Apr 23, 2024 09:42:53.449275970 CEST	443	49779	64.233.176.94	192.168.2.5
Apr 23, 2024 09:42:53.449399948 CEST	49779	443	192.168.2.5	64.233.176.94
Apr 23, 2024 09:42:53.449414968 CEST	443	49779	64.233.176.94	192.168.2.5
Apr 23, 2024 09:42:53.451689005 CEST	443	49779	64.233.176.94	192.168.2.5
Apr 23, 2024 09:42:53.451750994 CEST	49779	443	192.168.2.5	64.233.176.94
Apr 23, 2024 09:42:53.451967955 CEST	49779	443	192.168.2.5	64.233.176.94
Apr 23, 2024 09:42:53.451984882 CEST	443	49779	64.233.176.94	192.168.2.5
Apr 23, 2024 09:42:53.465820074 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:53.466059923 CEST	49783	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:53.466106892 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:53.468955994 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.468987942 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.469012022 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.469018936 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.469031096 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.469059944 CEST	49778	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.469109058 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.469134092 CEST	49778	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.469136953 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.469146013 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.469156981 CEST	49778	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.469170094 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.469182014 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.469192028 CEST	49778	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.469233036 CEST	49778	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.469940901 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:53.470025063 CEST	49783	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:53.470834017 CEST	49783	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:53.470921993 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:53.471366882 CEST	49785	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.471402884 CEST	443	49785	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.471503973 CEST	49785	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.471982002 CEST	49785	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.471992970 CEST	443	49785	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.472250938 CEST	49783	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:53.472259998 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:53.514832973 CEST	49783	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:53.569148064 CEST	443	49780	142.250.105.155	192.168.2.5
Apr 23, 2024 09:42:53.569233894 CEST	443	49780	142.250.105.155	192.168.2.5
Apr 23, 2024 09:42:53.569294930 CEST	49780	443	192.168.2.5	142.250.105.155
Apr 23, 2024 09:42:53.569587946 CEST	49780	443	192.168.2.5	142.250.105.155
Apr 23, 2024 09:42:53.569587946 CEST	49780	443	192.168.2.5	142.250.105.155
Apr 23, 2024 09:42:53.569603920 CEST	443	49780	142.250.105.155	192.168.2.5
Apr 23, 2024 09:42:53.569721937 CEST	443	49781	216.239.34.181	192.168.2.5
Apr 23, 2024 09:42:53.569767952 CEST	49780	443	192.168.2.5	142.250.105.155
Apr 23, 2024 09:42:53.569811106 CEST	443	49781	216.239.34.181	192.168.2.5
Apr 23, 2024 09:42:53.569859982 CEST	49781	443	192.168.2.5	216.239.34.181
Apr 23, 2024 09:42:53.570485115 CEST	49781	443	192.168.2.5	216.239.34.181
Apr 23, 2024 09:42:53.570504904 CEST	443	49781	216.239.34.181	192.168.2.5
Apr 23, 2024 09:42:53.573316097 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.573343039 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.573371887 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.573412895 CEST	49778	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.573447943 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.573468924 CEST	49778	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.573471069 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.573524952 CEST	49778	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.574100018 CEST	49778	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.574115992 CEST	443	49778	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.592596054 CEST	49787	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.592632055 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.592803001 CEST	49787	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.593035936 CEST	49787	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.593050957 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.755084991 CEST	443	49777	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:53.755172014 CEST	443	49777	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:53.755407095 CEST	49777	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:53.755579948 CEST	49777	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:53.755597115 CEST	443	49777	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:53.821106911 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.821491957 CEST	49787	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.821521044 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.823034048 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.825561047 CEST	49787	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.825669050 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.825709105 CEST	49787	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.829224110 CEST	443	49785	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.829648018 CEST	49785	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.829670906 CEST	443	49785	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.830121994 CEST	443	49785	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.830413103 CEST	49785	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.830480099 CEST	443	49785	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.830667973 CEST	49785	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.830688953 CEST	443	49785	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:53.869934082 CEST	49787	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:53.869946957 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.057398081 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:54.057512045 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:54.057591915 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:54.057590008 CEST	49783	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:54.057622910 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:54.057666063 CEST	49783	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:54.057718992 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:54.057853937 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:54.057888985 CEST	49783	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:54.057900906 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:54.057981014 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:54.058023930 CEST	49783	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:54.058032990 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:54.058114052 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:54.058150053 CEST	49783	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:54.058156013 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:54.058238029 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:54.058276892 CEST	49783	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:54.058283091 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:54.058484077 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:54.058537960 CEST	49783	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:54.060616970 CEST	49783	443	192.168.2.5	104.22.9.8
Apr 23, 2024 09:42:54.060631037 CEST	443	49783	104.22.9.8	192.168.2.5
Apr 23, 2024 09:42:54.080192089 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.080230951 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.080265045 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.080277920 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.080286980 CEST	49787	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.080322027 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.080334902 CEST	49787	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.080360889 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.080404997 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.080409050 CEST	49787	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.080440044 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.080476046 CEST	49787	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.118139029 CEST	443	49785	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.118194103 CEST	443	49785	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.118267059 CEST	443	49785	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.118268967 CEST	49785	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.118304968 CEST	443	49785	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.118326902 CEST	49785	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.118359089 CEST	49785	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.118458986 CEST	443	49785	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.118510962 CEST	443	49785	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.118550062 CEST	49785	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.118556023 CEST	443	49785	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.118588924 CEST	49785	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.118617058 CEST	49785	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.131195068 CEST	49787	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.184602976 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.184632063 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.184670925 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.184730053 CEST	49787	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.184746027 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.184772968 CEST	49787	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.184787989 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.184834957 CEST	49787	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.185074091 CEST	49787	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.185087919 CEST	443	49787	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.195528030 CEST	49788	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.195586920 CEST	443	49788	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.195717096 CEST	49788	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.196094036 CEST	49788	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.196125031 CEST	443	49788	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.201033115 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.201067924 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.201149940 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.201540947 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.201551914 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.205127001 CEST	49790	443	192.168.2.5	104.22.8.8
Apr 23, 2024 09:42:54.205179930 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.205245972 CEST	49790	443	192.168.2.5	104.22.8.8
Apr 23, 2024 09:42:54.205472946 CEST	49790	443	192.168.2.5	104.22.8.8
Apr 23, 2024 09:42:54.205507994 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.222127914 CEST	443	49785	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.222193956 CEST	443	49785	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.222224951 CEST	49785	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.222242117 CEST	443	49785	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.222279072 CEST	49785	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.222297907 CEST	49785	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.222302914 CEST	443	49785	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.222481012 CEST	443	49785	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.222536087 CEST	49785	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.222935915 CEST	49785	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.222948074 CEST	443	49785	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.238775015 CEST	49791	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.238814116 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.238899946 CEST	49791	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.239236116 CEST	49791	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.239249945 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.286145926 CEST	49792	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.286186934 CEST	443	49792	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.286391973 CEST	49792	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.286675930 CEST	49792	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.286686897 CEST	443	49792	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.416758060 CEST	443	49788	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.418982983 CEST	49788	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.419014931 CEST	443	49788	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.420337915 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.420559883 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.420593023 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.421631098 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.421709061 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.422338009 CEST	443	49788	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.422454119 CEST	49788	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.423293114 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.423383951 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.423671961 CEST	49788	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.423744917 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.423851013 CEST	443	49788	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.424017906 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.424030066 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.424165010 CEST	49790	443	192.168.2.5	104.22.8.8
Apr 23, 2024 09:42:54.424175024 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.424223900 CEST	49788	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.424235106 CEST	443	49788	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.425262928 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.425318003 CEST	49790	443	192.168.2.5	104.22.8.8
Apr 23, 2024 09:42:54.425591946 CEST	49790	443	192.168.2.5	104.22.8.8
Apr 23, 2024 09:42:54.425657988 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.425946951 CEST	49790	443	192.168.2.5	104.22.8.8
Apr 23, 2024 09:42:54.425955057 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.465864897 CEST	49788	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.466012001 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.481311083 CEST	49790	443	192.168.2.5	104.22.8.8
Apr 23, 2024 09:42:54.503948927 CEST	443	49792	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.504203081 CEST	49792	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.504213095 CEST	443	49792	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.506071091 CEST	443	49792	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.506134987 CEST	49792	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.507153988 CEST	49792	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.507263899 CEST	443	49792	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.507514000 CEST	49792	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.507520914 CEST	443	49792	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.548785925 CEST	49792	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.595653057 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.595910072 CEST	49791	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.595927954 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.597071886 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.597537994 CEST	49791	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.597659111 CEST	49791	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.597667933 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.597716093 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.651366949 CEST	49791	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.673422098 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.673476934 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.673518896 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.673525095 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.673553944 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.673593044 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.673594952 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.673604965 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.673640966 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.673646927 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.673665047 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.673697948 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.673705101 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.674232960 CEST	443	49788	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.674289942 CEST	443	49788	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.674312115 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.674330950 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.674350023 CEST	49788	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.674357891 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.674365997 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.674379110 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.674390078 CEST	443	49788	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.674401045 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.674412966 CEST	443	49788	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.674413919 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.674418926 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.674455881 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.674612999 CEST	49788	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.675112963 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.675158024 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.675246000 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.675302029 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.675332069 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.675374031 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.675381899 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.675421953 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.676181078 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.676230907 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.676263094 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.676294088 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.676304102 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.676317930 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.676331043 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.676713943 CEST	49788	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.676743984 CEST	443	49788	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.677117109 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.677150011 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.677162886 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.677175045 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.677203894 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.677211046 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.677217007 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.677252054 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.677257061 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.678050995 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.678081036 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.678136110 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.678143024 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.678153038 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.678195953 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.678204060 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.678212881 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.678230047 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.678909063 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.678940058 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.678947926 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.678961039 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.678986073 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.678994894 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.678999901 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.679038048 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.679841042 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.679913998 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.733794928 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.733865023 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.733884096 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.733922005 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.733922005 CEST	49791	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.733941078 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.733977079 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.733988047 CEST	49791	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.733988047 CEST	49791	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.733994961 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.734101057 CEST	49791	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.734110117 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.734143972 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.734193087 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.734198093 CEST	49791	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.734198093 CEST	49791	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.734216928 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.734256983 CEST	49791	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.734275103 CEST	49791	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.777867079 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.777923107 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.777950048 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.777981997 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.778002977 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.778033972 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.778049946 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.778091908 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.778599977 CEST	49789	443	192.168.2.5	104.17.25.14
Apr 23, 2024 09:42:54.778618097 CEST	443	49789	104.17.25.14	192.168.2.5
Apr 23, 2024 09:42:54.801595926 CEST	443	49792	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.801886082 CEST	49792	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.801924944 CEST	443	49792	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:54.802042961 CEST	49792	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:54.811431885 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.811563015 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.811626911 CEST	49790	443	192.168.2.5	104.22.8.8
Apr 23, 2024 09:42:54.811652899 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.811778069 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.811861992 CEST	49790	443	192.168.2.5	104.22.8.8
Apr 23, 2024 09:42:54.811865091 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.811893940 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.811956882 CEST	49790	443	192.168.2.5	104.22.8.8
Apr 23, 2024 09:42:54.811978102 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.812212944 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.812277079 CEST	49790	443	192.168.2.5	104.22.8.8
Apr 23, 2024 09:42:54.812290907 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.812396049 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.812454939 CEST	49790	443	192.168.2.5	104.22.8.8
Apr 23, 2024 09:42:54.812468052 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.812551975 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.812563896 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:54.812592983 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:54.812608004 CEST	49790	443	192.168.2.5	104.22.8.8
Apr 23, 2024 09:42:54.812622070 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.812645912 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:54.812830925 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.812885046 CEST	49790	443	192.168.2.5	104.22.8.8
Apr 23, 2024 09:42:54.813235044 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:54.813252926 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:54.813604116 CEST	49790	443	192.168.2.5	104.22.8.8
Apr 23, 2024 09:42:54.813626051 CEST	443	49790	104.22.8.8	192.168.2.5
Apr 23, 2024 09:42:54.838527918 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.838561058 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.838598967 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.838613033 CEST	49791	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.838635921 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.838705063 CEST	49791	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.838733912 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:54.838951111 CEST	49791	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.839104891 CEST	49791	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:54.839121103 CEST	443	49791	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:55.031646013 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.031871080 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.031883955 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.032656908 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.032674074 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.032749891 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.032758951 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.032768965 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.032792091 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.033699036 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.033907890 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.033984900 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.034167051 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.034172058 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.074469090 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.275830030 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.278225899 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.278270006 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.278295040 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.281883955 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.281959057 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.281970024 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.289239883 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.289299011 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.289309978 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.296739101 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.296792984 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.296804905 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.303930998 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.303991079 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.303999901 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.311224937 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.311283112 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.311290979 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.318555117 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.318614960 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.318623066 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.325933933 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.326045990 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.326056004 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.333281040 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.333339930 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.333350897 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.378618956 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.380357027 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.383964062 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.384004116 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.384042025 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.384051085 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.384089947 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.391371965 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.398705006 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.398780107 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.398785114 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.398811102 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.398859024 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.405996084 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.413292885 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.413345098 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.413353920 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.421160936 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.421205044 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.421212912 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.428013086 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.428085089 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.428091049 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.428133011 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.428179026 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.435358047 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.442639112 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.442702055 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.442711115 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.446428061 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.446487904 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.446501970 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.446762085 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:55.446835041 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.446963072 CEST	49794	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:55.446976900 CEST	443	49794	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:56.649477005 CEST	49799	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:56.649533033 CEST	443	49799	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:56.649682045 CEST	49799	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:56.650532007 CEST	49799	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:56.650547028 CEST	443	49799	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:56.718440056 CEST	49800	443	192.168.2.5	142.250.9.147
Apr 23, 2024 09:42:56.718480110 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:56.718580008 CEST	49800	443	192.168.2.5	142.250.9.147
Apr 23, 2024 09:42:56.718947887 CEST	49800	443	192.168.2.5	142.250.9.147
Apr 23, 2024 09:42:56.718964100 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:56.866616011 CEST	443	49799	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:56.866956949 CEST	49799	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:56.866977930 CEST	443	49799	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:56.867650032 CEST	443	49799	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:56.868069887 CEST	49799	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:56.868166924 CEST	443	49799	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:56.868237972 CEST	49799	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:56.916115046 CEST	443	49799	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:56.932118893 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:56.951459885 CEST	49800	443	192.168.2.5	142.250.9.147
Apr 23, 2024 09:42:56.951479912 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:56.952622890 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:56.952699900 CEST	49800	443	192.168.2.5	142.250.9.147
Apr 23, 2024 09:42:56.953397989 CEST	49800	443	192.168.2.5	142.250.9.147
Apr 23, 2024 09:42:56.953468084 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:56.953586102 CEST	49800	443	192.168.2.5	142.250.9.147
Apr 23, 2024 09:42:56.997384071 CEST	49800	443	192.168.2.5	142.250.9.147
Apr 23, 2024 09:42:56.997411013 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:57.043087959 CEST	49800	443	192.168.2.5	142.250.9.147
Apr 23, 2024 09:42:57.094228983 CEST	443	49799	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:57.095943928 CEST	443	49799	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:57.096004009 CEST	49799	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:57.096359015 CEST	49799	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:57.096381903 CEST	443	49799	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:57.148092031 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:57.148164988 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:57.148185968 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:57.148217916 CEST	49800	443	192.168.2.5	142.250.9.147
Apr 23, 2024 09:42:57.148233891 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:57.148246050 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:57.148274899 CEST	49800	443	192.168.2.5	142.250.9.147
Apr 23, 2024 09:42:57.148291111 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:57.148328066 CEST	49800	443	192.168.2.5	142.250.9.147
Apr 23, 2024 09:42:57.155215979 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:57.162570000 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:57.162590027 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:57.162623882 CEST	49800	443	192.168.2.5	142.250.9.147
Apr 23, 2024 09:42:57.162662983 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:57.162733078 CEST	49800	443	192.168.2.5	142.250.9.147
Apr 23, 2024 09:42:57.169967890 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:57.177289009 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:57.177361965 CEST	49800	443	192.168.2.5	142.250.9.147
Apr 23, 2024 09:42:57.177416086 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:57.228701115 CEST	49800	443	192.168.2.5	142.250.9.147
Apr 23, 2024 09:42:57.253086090 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:57.256516933 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:57.256609917 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:57.256653070 CEST	49800	443	192.168.2.5	142.250.9.147
Apr 23, 2024 09:42:57.256654024 CEST	49800	443	192.168.2.5	142.250.9.147
Apr 23, 2024 09:42:57.258799076 CEST	49800	443	192.168.2.5	142.250.9.147
Apr 23, 2024 09:42:57.258826017 CEST	443	49800	142.250.9.147	192.168.2.5
Apr 23, 2024 09:42:57.290038109 CEST	49803	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:57.290083885 CEST	443	49803	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:57.290162086 CEST	49803	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:57.290390968 CEST	49803	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:57.290404081 CEST	443	49803	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:57.455058098 CEST	49804	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:57.455108881 CEST	443	49804	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:57.455168962 CEST	49804	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:57.455599070 CEST	49805	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:57.455656052 CEST	443	49805	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:57.455758095 CEST	49805	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:57.455836058 CEST	49804	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:57.455857038 CEST	443	49804	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:57.456011057 CEST	49805	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:57.456031084 CEST	443	49805	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:57.507288933 CEST	443	49803	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:57.507854939 CEST	49803	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:57.507874012 CEST	443	49803	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:57.509412050 CEST	443	49803	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:57.509478092 CEST	49803	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:57.510658979 CEST	49803	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:57.510771990 CEST	443	49803	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:57.511051893 CEST	49803	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:57.511064053 CEST	443	49803	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:57.557372093 CEST	49803	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:57.670471907 CEST	443	49805	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:57.670797110 CEST	49805	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:57.670835972 CEST	443	49805	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:57.671334982 CEST	443	49805	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:57.671684027 CEST	49805	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:57.671745062 CEST	443	49805	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:57.671842098 CEST	49805	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:57.712126017 CEST	443	49805	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:57.712752104 CEST	49805	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:57.768223047 CEST	443	49803	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:57.768516064 CEST	443	49803	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:57.768697977 CEST	49803	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:57.769205093 CEST	49803	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:57.769222021 CEST	443	49803	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:57.810712099 CEST	443	49804	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:57.812747002 CEST	49804	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:57.812768936 CEST	443	49804	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:57.813292027 CEST	443	49804	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:57.813704967 CEST	49804	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:57.813802958 CEST	443	49804	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:57.813870907 CEST	49804	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:57.813901901 CEST	443	49804	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:57.880800962 CEST	49806	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:57.880845070 CEST	443	49806	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:57.881042957 CEST	49807	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:57.881067038 CEST	49806	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:57.881108046 CEST	443	49807	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:57.881165981 CEST	49807	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:57.881288052 CEST	49806	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:57.881300926 CEST	443	49806	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:57.881428957 CEST	49807	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:57.881443024 CEST	443	49807	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:57.909856081 CEST	443	49805	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:57.912185907 CEST	443	49805	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:57.912255049 CEST	49805	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:57.912307024 CEST	443	49805	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:57.915895939 CEST	443	49805	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:57.916317940 CEST	49805	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:57.916337013 CEST	443	49805	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:57.923229933 CEST	443	49805	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:57.926511049 CEST	49805	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:57.926526070 CEST	443	49805	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:57.930615902 CEST	443	49805	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:57.930670977 CEST	49805	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:57.931180000 CEST	49805	443	192.168.2.5	172.253.124.94
Apr 23, 2024 09:42:57.931200981 CEST	443	49805	172.253.124.94	192.168.2.5
Apr 23, 2024 09:42:57.936415911 CEST	443	49804	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:57.936506033 CEST	443	49804	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:57.936709881 CEST	49804	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:57.949536085 CEST	49804	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:57.949551105 CEST	443	49804	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:58.015609980 CEST	49808	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:58.015650988 CEST	443	49808	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:58.015866041 CEST	49808	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:58.016088009 CEST	49808	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:58.016103983 CEST	443	49808	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:58.102015972 CEST	443	49807	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:58.102310896 CEST	49807	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:58.102343082 CEST	443	49807	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:58.106002092 CEST	443	49807	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:58.106093884 CEST	49807	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:58.106492043 CEST	49807	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:58.106640100 CEST	49807	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:58.106707096 CEST	443	49807	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:58.151854992 CEST	49807	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:58.151887894 CEST	443	49807	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:58.198743105 CEST	49807	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:58.360953093 CEST	443	49807	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:58.361260891 CEST	443	49807	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:58.361361980 CEST	49807	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:58.361952066 CEST	49807	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:58.361979961 CEST	443	49807	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:58.368489027 CEST	443	49808	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:58.368730068 CEST	49808	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:58.368748903 CEST	443	49808	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:58.369235992 CEST	443	49808	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:58.369558096 CEST	49808	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:58.369643927 CEST	443	49808	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:58.369688988 CEST	49808	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:58.416111946 CEST	443	49808	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:58.491945982 CEST	443	49808	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:58.492149115 CEST	443	49808	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:58.492211103 CEST	49808	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:58.493329048 CEST	49808	443	192.168.2.5	199.59.243.50
Apr 23, 2024 09:42:58.493346930 CEST	443	49808	199.59.243.50	192.168.2.5
Apr 23, 2024 09:42:58.528132915 CEST	443	49806	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:58.529350042 CEST	49806	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:58.529376984 CEST	443	49806	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:58.530440092 CEST	443	49806	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:58.530504942 CEST	49806	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:58.531919003 CEST	49806	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:58.531985998 CEST	443	49806	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:58.532064915 CEST	49806	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:58.573050976 CEST	49806	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:58.573071957 CEST	443	49806	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:58.619961977 CEST	49806	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:58.745285988 CEST	443	49806	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:58.745366096 CEST	443	49806	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:58.745502949 CEST	49806	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:58.747210026 CEST	49806	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:58.747226954 CEST	443	49806	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:58.755140066 CEST	49810	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:58.755182028 CEST	443	49810	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:58.755251884 CEST	49810	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:58.755472898 CEST	49810	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:58.755492926 CEST	443	49810	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:58.875318050 CEST	49811	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:58.875350952 CEST	443	49811	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:58.875618935 CEST	49811	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:58.875618935 CEST	49811	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:58.875652075 CEST	443	49811	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:58.970666885 CEST	443	49810	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:58.971309900 CEST	49810	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:58.971339941 CEST	443	49810	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:58.971703053 CEST	443	49810	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:58.972070932 CEST	49810	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:58.972147942 CEST	443	49810	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:58.972238064 CEST	49810	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:59.016154051 CEST	443	49810	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.025320053 CEST	49810	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:59.228400946 CEST	443	49810	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.228446007 CEST	443	49810	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.228471994 CEST	443	49810	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.228496075 CEST	443	49810	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.228511095 CEST	49810	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:59.228543043 CEST	443	49810	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.228559017 CEST	49810	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:59.228641033 CEST	443	49810	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.228720903 CEST	49810	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:59.252300978 CEST	49810	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:59.252331018 CEST	443	49810	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.264858961 CEST	49812	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:59.264894962 CEST	443	49812	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:59.264966011 CEST	49812	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:59.265213013 CEST	49812	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:59.265222073 CEST	443	49812	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:59.271799088 CEST	49813	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:59.271827936 CEST	443	49813	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.271908998 CEST	49813	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:59.272397995 CEST	49813	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:59.272408009 CEST	443	49813	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.286783934 CEST	443	49811	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:59.287898064 CEST	49811	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:59.287910938 CEST	443	49811	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:59.289388895 CEST	443	49811	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:59.289520025 CEST	49811	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:59.313303947 CEST	49811	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:59.313435078 CEST	443	49811	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:59.313592911 CEST	49811	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:59.313608885 CEST	443	49811	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:59.357352018 CEST	49811	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:59.489430904 CEST	443	49813	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.489876032 CEST	49813	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:59.489890099 CEST	443	49813	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.490612030 CEST	443	49813	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.491235018 CEST	49813	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:59.491316080 CEST	443	49813	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.491506100 CEST	49813	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:59.536120892 CEST	443	49813	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.695626020 CEST	443	49811	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:59.695823908 CEST	443	49811	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:59.695885897 CEST	49811	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:59.696619034 CEST	49811	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:59.696639061 CEST	443	49811	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:59.745088100 CEST	443	49813	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.745151043 CEST	443	49813	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.745193005 CEST	443	49813	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.745202065 CEST	49813	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:59.745237112 CEST	443	49813	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.745279074 CEST	49813	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:59.745285988 CEST	443	49813	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.745395899 CEST	443	49813	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.745589972 CEST	49813	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:59.747452021 CEST	49813	443	192.168.2.5	104.22.58.91
Apr 23, 2024 09:42:59.747466087 CEST	443	49813	104.22.58.91	192.168.2.5
Apr 23, 2024 09:42:59.808303118 CEST	49814	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:59.808346987 CEST	443	49814	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:59.808495998 CEST	49814	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:59.809762955 CEST	49814	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:42:59.809775114 CEST	443	49814	172.67.28.250	192.168.2.5
Apr 23, 2024 09:42:59.910263062 CEST	443	49812	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:59.910599947 CEST	49812	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:59.910629034 CEST	443	49812	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:59.910984993 CEST	443	49812	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:59.911312103 CEST	49812	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:59.911380053 CEST	443	49812	52.209.139.15	192.168.2.5
Apr 23, 2024 09:42:59.911504030 CEST	49812	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:42:59.952133894 CEST	443	49812	52.209.139.15	192.168.2.5
Apr 23, 2024 09:43:00.027378082 CEST	443	49814	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:00.034405947 CEST	49814	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:00.034420967 CEST	443	49814	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:00.035635948 CEST	443	49814	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:00.035787106 CEST	49814	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:00.036726952 CEST	49814	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:00.036798954 CEST	443	49814	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:00.037231922 CEST	49814	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:00.037237883 CEST	443	49814	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:00.089864016 CEST	49814	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:00.326781034 CEST	443	49814	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:00.339600086 CEST	49814	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:00.339629889 CEST	443	49814	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:00.339775085 CEST	49814	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:00.384162903 CEST	443	49812	52.209.139.15	192.168.2.5
Apr 23, 2024 09:43:00.384459972 CEST	443	49812	52.209.139.15	192.168.2.5
Apr 23, 2024 09:43:00.384531975 CEST	49812	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:43:00.385452032 CEST	49812	443	192.168.2.5	52.209.139.15
Apr 23, 2024 09:43:00.385476112 CEST	443	49812	52.209.139.15	192.168.2.5
Apr 23, 2024 09:43:03.107750893 CEST	49815	443	192.168.2.5	108.177.122.99
Apr 23, 2024 09:43:03.107798100 CEST	443	49815	108.177.122.99	192.168.2.5
Apr 23, 2024 09:43:03.107990980 CEST	49815	443	192.168.2.5	108.177.122.99
Apr 23, 2024 09:43:03.108316898 CEST	49815	443	192.168.2.5	108.177.122.99
Apr 23, 2024 09:43:03.108328104 CEST	443	49815	108.177.122.99	192.168.2.5
Apr 23, 2024 09:43:03.321585894 CEST	443	49815	108.177.122.99	192.168.2.5
Apr 23, 2024 09:43:03.321949959 CEST	49815	443	192.168.2.5	108.177.122.99
Apr 23, 2024 09:43:03.321970940 CEST	443	49815	108.177.122.99	192.168.2.5
Apr 23, 2024 09:43:03.322295904 CEST	443	49815	108.177.122.99	192.168.2.5
Apr 23, 2024 09:43:03.322961092 CEST	49815	443	192.168.2.5	108.177.122.99
Apr 23, 2024 09:43:03.323013067 CEST	443	49815	108.177.122.99	192.168.2.5
Apr 23, 2024 09:43:03.368782997 CEST	49815	443	192.168.2.5	108.177.122.99
Apr 23, 2024 09:43:05.345129013 CEST	49816	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:05.345186949 CEST	443	49816	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:05.345269918 CEST	49816	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:05.345613956 CEST	49816	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:05.345628977 CEST	443	49816	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:05.561841965 CEST	443	49816	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:05.562200069 CEST	49816	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:05.562222004 CEST	443	49816	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:05.563185930 CEST	443	49816	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:05.563251019 CEST	49816	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:05.563638926 CEST	49816	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:05.563699007 CEST	443	49816	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:05.564163923 CEST	49816	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:05.564172029 CEST	443	49816	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:05.608478069 CEST	49816	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:05.856983900 CEST	443	49816	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:05.857259035 CEST	49817	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:05.857749939 CEST	49816	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:05.857811928 CEST	443	49816	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:05.858020067 CEST	443	49816	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:05.858052969 CEST	49816	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:05.858236074 CEST	49816	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:05.874747992 CEST	49753	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:05.875070095 CEST	49753	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:05.961415052 CEST	80	49817	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:05.961827993 CEST	49817	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:05.964838028 CEST	49817	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:05.978975058 CEST	80	49753	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:05.979207039 CEST	80	49753	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:06.069148064 CEST	80	49817	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:06.100790024 CEST	80	49817	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:06.100872040 CEST	80	49817	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:06.100883961 CEST	80	49817	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:06.100895882 CEST	80	49817	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:06.100903034 CEST	80	49817	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:06.100914001 CEST	80	49817	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:06.100924969 CEST	80	49817	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:06.100924969 CEST	49817	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:06.100934982 CEST	80	49817	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:06.101003885 CEST	49817	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:06.101003885 CEST	49817	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:06.108091116 CEST	80	49817	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:06.108170033 CEST	49817	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:06.594485044 CEST	49817	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:06.716582060 CEST	80	49817	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:06.716614962 CEST	80	49817	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:06.716685057 CEST	49817	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:06.731839895 CEST	49818	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:06.772067070 CEST	80	49817	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:06.772130966 CEST	49817	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:06.835824013 CEST	80	49818	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:06.835890055 CEST	49818	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:06.836757898 CEST	49818	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:06.940908909 CEST	80	49818	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:06.974760056 CEST	80	49818	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:06.974773884 CEST	80	49818	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:06.974832058 CEST	49818	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:06.980699062 CEST	80	49818	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:06.980757952 CEST	49818	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:11.518677950 CEST	49819	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:11.518729925 CEST	443	49819	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:11.518897057 CEST	49819	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:11.519349098 CEST	49819	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:11.519362926 CEST	443	49819	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:11.734761000 CEST	443	49819	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:11.758220911 CEST	49819	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:11.758261919 CEST	443	49819	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:11.759321928 CEST	443	49819	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:11.759408951 CEST	49819	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:11.759962082 CEST	49819	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:11.760025978 CEST	443	49819	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:11.760330915 CEST	49819	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:11.806787968 CEST	49819	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:11.806801081 CEST	443	49819	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:11.853678942 CEST	49819	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:12.035866022 CEST	443	49819	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:12.088083029 CEST	49819	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:12.088112116 CEST	443	49819	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:12.115000010 CEST	49819	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:12.115111113 CEST	443	49819	172.67.28.250	192.168.2.5
Apr 23, 2024 09:43:12.115176916 CEST	49819	443	192.168.2.5	172.67.28.250
Apr 23, 2024 09:43:13.359059095 CEST	443	49815	108.177.122.99	192.168.2.5
Apr 23, 2024 09:43:13.359220982 CEST	443	49815	108.177.122.99	192.168.2.5
Apr 23, 2024 09:43:13.359297037 CEST	49815	443	192.168.2.5	108.177.122.99
Apr 23, 2024 09:43:13.788527012 CEST	49815	443	192.168.2.5	108.177.122.99
Apr 23, 2024 09:43:13.788557053 CEST	443	49815	108.177.122.99	192.168.2.5
Apr 23, 2024 09:43:16.715954065 CEST	80	49817	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:16.716141939 CEST	49817	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:16.974755049 CEST	80	49818	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:16.974834919 CEST	49818	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:17.792876959 CEST	49818	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:17.792918921 CEST	49817	80	192.168.2.5	199.59.243.225
Apr 23, 2024 09:43:17.896990061 CEST	80	49818	199.59.243.225	192.168.2.5
Apr 23, 2024 09:43:17.897047043 CEST	80	49817	199.59.243.225	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 23, 2024 09:42:01.633616924 CEST	53	61269	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:01.641216993 CEST	53	58445	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:02.252566099 CEST	53	57483	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:03.057569027 CEST	64439	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:03.057616949 CEST	53403	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:03.162237883 CEST	53	64439	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:03.162482977 CEST	53	53403	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:03.363667965 CEST	56313	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:03.363910913 CEST	51904	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:03.482036114 CEST	53	56313	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:03.514522076 CEST	53	51904	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:04.264889956 CEST	54962	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:04.265045881 CEST	64129	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:04.385415077 CEST	53	54962	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:04.412832022 CEST	53	64129	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:04.748116016 CEST	54485	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:04.748481989 CEST	50624	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:04.852958918 CEST	53	50624	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:04.853207111 CEST	53	54485	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:05.241945028 CEST	58935	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:05.242322922 CEST	51347	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:05.387356997 CEST	53	51347	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:05.393342018 CEST	53	58935	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:05.663909912 CEST	57405	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:05.664376974 CEST	57226	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:05.768654108 CEST	53	57405	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:05.774343014 CEST	53	57226	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:06.474411964 CEST	57772	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:06.474919081 CEST	65109	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:06.579703093 CEST	53	57772	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:06.583920002 CEST	53	65109	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:08.482614040 CEST	52187	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:08.483294964 CEST	57424	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:08.588087082 CEST	53	52187	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:08.594286919 CEST	53	57424	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:09.447578907 CEST	50953	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:09.449719906 CEST	61474	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:09.552620888 CEST	53	50953	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:09.556730986 CEST	53	61474	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:19.623186111 CEST	53	59502	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:28.705276966 CEST	55908	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:28.705969095 CEST	58625	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:28.810231924 CEST	53	55908	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:28.810506105 CEST	53	58625	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:29.347079992 CEST	64304	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:29.350024939 CEST	53036	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:29.452277899 CEST	53	64304	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:29.454833031 CEST	53	53036	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:39.584534883 CEST	53	59640	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:49.805202961 CEST	55226	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:49.806539059 CEST	50881	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:49.911818027 CEST	53	55226	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:49.929786921 CEST	53	50881	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:51.047497034 CEST	53	62225	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:51.589705944 CEST	53	62521	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:51.791249990 CEST	59689	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:51.791625023 CEST	54029	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:51.792273045 CEST	51618	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:51.792707920 CEST	59976	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:51.829519033 CEST	53	51930	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:51.896400928 CEST	53	59689	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:51.897588015 CEST	53	54029	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:51.897640944 CEST	53	59976	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:51.897658110 CEST	53	51618	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:52.291764021 CEST	63491	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:52.291919947 CEST	55305	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:52.397437096 CEST	53	55305	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:52.398597956 CEST	53	63491	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:52.520900011 CEST	55238	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:52.521162987 CEST	62053	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:52.626121998 CEST	53	55238	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:52.626319885 CEST	53	62053	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:52.883263111 CEST	54649	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:52.883408070 CEST	65011	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:52.975481033 CEST	56055	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:52.975733042 CEST	57163	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:52.976841927 CEST	62396	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:52.977044106 CEST	59762	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:52.987724066 CEST	53	54649	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:52.987983942 CEST	53	65011	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:53.080656052 CEST	53	56055	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:53.080900908 CEST	53	57163	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:53.081485987 CEST	53	62396	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:53.082094908 CEST	53	59762	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:53.329530954 CEST	53	54169	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:53.561929941 CEST	53	50261	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:54.088237047 CEST	53410	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:54.088789940 CEST	49238	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:54.094738007 CEST	59728	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:54.094902039 CEST	56221	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:54.098645926 CEST	62035	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:54.098918915 CEST	65374	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:54.179800034 CEST	62032	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:54.179800034 CEST	60278	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:54.194390059 CEST	53	53410	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:54.194962978 CEST	53	49238	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:54.200063944 CEST	53	59728	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:54.200078964 CEST	53	56221	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:54.203592062 CEST	53	62035	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:54.204643011 CEST	53	65374	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:54.284890890 CEST	53	62032	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:54.285464048 CEST	53	60278	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:54.706893921 CEST	65133	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:54.707226992 CEST	52384	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:54.811927080 CEST	53	65133	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:54.811973095 CEST	53	52384	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:55.410409927 CEST	53	55023	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:56.613223076 CEST	52107	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:56.613404036 CEST	57270	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:56.717706919 CEST	53	52107	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:56.717881918 CEST	53	57270	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:56.753285885 CEST	53	56170	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:57.199722052 CEST	53	53723	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:57.772994041 CEST	56829	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:57.773165941 CEST	56366	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:57.773557901 CEST	59185	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:57.773705959 CEST	56485	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:57.878087997 CEST	53	56829	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:57.878861904 CEST	53	59185	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:57.880211115 CEST	53	56485	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:57.880237103 CEST	53	56366	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:58.635629892 CEST	53	62174	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:58.754415035 CEST	55919	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:58.754672050 CEST	61285	53	192.168.2.5	1.1.1.1
Apr 23, 2024 09:42:58.861327887 CEST	53	61285	1.1.1.1	192.168.2.5
Apr 23, 2024 09:42:58.874736071 CEST	53	55919	1.1.1.1	192.168.2.5
Apr 23, 2024 09:43:02.256786108 CEST	53	53886	1.1.1.1	192.168.2.5
Apr 23, 2024 09:43:27.419245958 CEST	53	56305	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 23, 2024 09:42:03.514609098 CEST	192.168.2.5	1.1.1.1	c221	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 23, 2024 09:42:03.057569027 CEST	192.168.2.5	1.1.1.1	0x594e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:03.057616949 CEST	192.168.2.5	1.1.1.1	0x503b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:03.363667965 CEST	192.168.2.5	1.1.1.1	0x4d66	Standard query (0)	icartservice.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:03.363910913 CEST	192.168.2.5	1.1.1.1	0xde85	Standard query (0)	icartservice.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:04.264889956 CEST	192.168.2.5	1.1.1.1	0xe788	Standard query (0)	ww1.icartservice.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:04.265045881 CEST	192.168.2.5	1.1.1.1	0xc4a6	Standard query (0)	ww1.icartservice.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:04.748116016 CEST	192.168.2.5	1.1.1.1	0xdc5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:04.748481989 CEST	192.168.2.5	1.1.1.1	0x77cf	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:05.241945028 CEST	192.168.2.5	1.1.1.1	0xc2bd	Standard query (0)	ww1.icartservice.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:05.242322922 CEST	192.168.2.5	1.1.1.1	0x49df	Standard query (0)	ww1.icartservice.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:05.663909912 CEST	192.168.2.5	1.1.1.1	0xfd07	Standard query (0)	www.adsensecustomsearchads.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:05.664376974 CEST	192.168.2.5	1.1.1.1	0x293d	Standard query (0)	www.adsensecustomsearchads.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:06.474411964 CEST	192.168.2.5	1.1.1.1	0xf4e9	Standard query (0)	www.adsensecustomsearchads.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:06.474919081 CEST	192.168.2.5	1.1.1.1	0x24a9	Standard query (0)	www.adsensecustomsearchads.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:08.482614040 CEST	192.168.2.5	1.1.1.1	0xfe4b	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:08.483294964 CEST	192.168.2.5	1.1.1.1	0xaf58	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:09.447578907 CEST	192.168.2.5	1.1.1.1	0xea4e	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:09.449719906 CEST	192.168.2.5	1.1.1.1	0xe7d5	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:28.705276966 CEST	192.168.2.5	1.1.1.1	0x982a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:28.705969095 CEST	192.168.2.5	1.1.1.1	0xc402	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:29.347079992 CEST	192.168.2.5	1.1.1.1	0xcb77	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:29.350024939 CEST	192.168.2.5	1.1.1.1	0x36ea	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:49.805202961 CEST	192.168.2.5	1.1.1.1	0x1fcc	Standard query (0)	www.bodis.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:49.806539059 CEST	192.168.2.5	1.1.1.1	0xc86c	Standard query (0)	www.bodis.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:51.791249990 CEST	192.168.2.5	1.1.1.1	0xede3	Standard query (0)	cdn.reamaze.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:51.791625023 CEST	192.168.2.5	1.1.1.1	0x5b4c	Standard query (0)	cdn.reamaze.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:51.792273045 CEST	192.168.2.5	1.1.1.1	0x9f5e	Standard query (0)	cdn-cookieyes.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:51.792707920 CEST	192.168.2.5	1.1.1.1	0x2f04	Standard query (0)	cdn-cookieyes.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:52.291764021 CEST	192.168.2.5	1.1.1.1	0x80d7	Standard query (0)	www.bodis.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:52.291919947 CEST	192.168.2.5	1.1.1.1	0xca67	Standard query (0)	www.bodis.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:52.520900011 CEST	192.168.2.5	1.1.1.1	0x5a9b	Standard query (0)	log.cookieyes.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:52.521162987 CEST	192.168.2.5	1.1.1.1	0x1465	Standard query (0)	log.cookieyes.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:52.883263111 CEST	192.168.2.5	1.1.1.1	0xff5d	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:52.883408070 CEST	192.168.2.5	1.1.1.1	0x3a5d	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Apr 23, 2024 09:42:52.975481033 CEST	192.168.2.5	1.1.1.1	0x63d8	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:52.975733042 CEST	192.168.2.5	1.1.1.1	0xc5d5	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:52.976841927 CEST	192.168.2.5	1.1.1.1	0xb4f8	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:52.977044106 CEST	192.168.2.5	1.1.1.1	0xb11c	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 23, 2024 09:42:54.088237047 CEST	192.168.2.5	1.1.1.1	0x64d1	Standard query (0)	push.reamaze.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:54.088789940 CEST	192.168.2.5	1.1.1.1	0x8e3	Standard query (0)	push.reamaze.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:54.094738007 CEST	192.168.2.5	1.1.1.1	0x96e8	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:54.094902039 CEST	192.168.2.5	1.1.1.1	0x265d	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:54.098645926 CEST	192.168.2.5	1.1.1.1	0xd983	Standard query (0)	cdn.reamaze.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:54.098918915 CEST	192.168.2.5	1.1.1.1	0x3d33	Standard query (0)	cdn.reamaze.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:54.179800034 CEST	192.168.2.5	1.1.1.1	0x512a	Standard query (0)	ws.reamaze.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:54.179800034 CEST	192.168.2.5	1.1.1.1	0x359d	Standard query (0)	ws.reamaze.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:54.706893921 CEST	192.168.2.5	1.1.1.1	0x70fb	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:54.707226992 CEST	192.168.2.5	1.1.1.1	0x2ef4	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Apr 23, 2024 09:42:56.613223076 CEST	192.168.2.5	1.1.1.1	0x2240	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:56.613404036 CEST	192.168.2.5	1.1.1.1	0x3415	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:57.772994041 CEST	192.168.2.5	1.1.1.1	0x21ec	Standard query (0)	directory.cookieyes.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:57.773165941 CEST	192.168.2.5	1.1.1.1	0x8a4b	Standard query (0)	directory.cookieyes.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:57.773557901 CEST	192.168.2.5	1.1.1.1	0x5d4f	Standard query (0)	cdn-cookieyes.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:57.773705959 CEST	192.168.2.5	1.1.1.1	0xbb79	Standard query (0)	cdn-cookieyes.com	65	IN (0x0001)	false
Apr 23, 2024 09:42:58.754415035 CEST	192.168.2.5	1.1.1.1	0xf2d1	Standard query (0)	directory.cookieyes.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:58.754672050 CEST	192.168.2.5	1.1.1.1	0x4227	Standard query (0)	directory.cookieyes.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 23, 2024 09:42:03.162237883 CEST	1.1.1.1	192.168.2.5	0x594e	No error (0)	www.google.com		108.177.122.99	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:03.162237883 CEST	1.1.1.1	192.168.2.5	0x594e	No error (0)	www.google.com		108.177.122.103	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:03.162237883 CEST	1.1.1.1	192.168.2.5	0x594e	No error (0)	www.google.com		108.177.122.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:03.162237883 CEST	1.1.1.1	192.168.2.5	0x594e	No error (0)	www.google.com		108.177.122.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:03.162237883 CEST	1.1.1.1	192.168.2.5	0x594e	No error (0)	www.google.com		108.177.122.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:03.162237883 CEST	1.1.1.1	192.168.2.5	0x594e	No error (0)	www.google.com		108.177.122.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:03.162482977 CEST	1.1.1.1	192.168.2.5	0x503b	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 23, 2024 09:42:03.482036114 CEST	1.1.1.1	192.168.2.5	0x4d66	No error (0)	icartservice.com		23.82.12.32	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:04.385415077 CEST	1.1.1.1	192.168.2.5	0xe788	No error (0)	ww1.icartservice.com	80880.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 09:42:04.385415077 CEST	1.1.1.1	192.168.2.5	0xe788	No error (0)	80880.bodis.com		199.59.243.225	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:04.412832022 CEST	1.1.1.1	192.168.2.5	0xc4a6	No error (0)	ww1.icartservice.com	80880.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 09:42:04.852958918 CEST	1.1.1.1	192.168.2.5	0x77cf	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 23, 2024 09:42:04.853207111 CEST	1.1.1.1	192.168.2.5	0xdc5	No error (0)	www.google.com		142.251.15.103	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:04.853207111 CEST	1.1.1.1	192.168.2.5	0xdc5	No error (0)	www.google.com		142.251.15.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:04.853207111 CEST	1.1.1.1	192.168.2.5	0xdc5	No error (0)	www.google.com		142.251.15.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:04.853207111 CEST	1.1.1.1	192.168.2.5	0xdc5	No error (0)	www.google.com		142.251.15.99	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:04.853207111 CEST	1.1.1.1	192.168.2.5	0xdc5	No error (0)	www.google.com		142.251.15.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:04.853207111 CEST	1.1.1.1	192.168.2.5	0xdc5	No error (0)	www.google.com		142.251.15.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:05.387356997 CEST	1.1.1.1	192.168.2.5	0x49df	No error (0)	ww1.icartservice.com	80880.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 09:42:05.393342018 CEST	1.1.1.1	192.168.2.5	0xc2bd	No error (0)	ww1.icartservice.com	80880.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 09:42:05.393342018 CEST	1.1.1.1	192.168.2.5	0xc2bd	No error (0)	80880.bodis.com		199.59.243.225	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:05.768654108 CEST	1.1.1.1	192.168.2.5	0xfd07	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 09:42:05.768654108 CEST	1.1.1.1	192.168.2.5	0xfd07	No error (0)	www3.l.google.com		142.250.105.113	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:05.768654108 CEST	1.1.1.1	192.168.2.5	0xfd07	No error (0)	www3.l.google.com		142.250.105.102	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:05.768654108 CEST	1.1.1.1	192.168.2.5	0xfd07	No error (0)	www3.l.google.com		142.250.105.138	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:05.768654108 CEST	1.1.1.1	192.168.2.5	0xfd07	No error (0)	www3.l.google.com		142.250.105.100	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:05.768654108 CEST	1.1.1.1	192.168.2.5	0xfd07	No error (0)	www3.l.google.com		142.250.105.101	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:05.768654108 CEST	1.1.1.1	192.168.2.5	0xfd07	No error (0)	www3.l.google.com		142.250.105.139	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:05.774343014 CEST	1.1.1.1	192.168.2.5	0x293d	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 09:42:06.579703093 CEST	1.1.1.1	192.168.2.5	0xf4e9	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 09:42:06.579703093 CEST	1.1.1.1	192.168.2.5	0xf4e9	No error (0)	www3.l.google.com		64.233.176.100	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:06.579703093 CEST	1.1.1.1	192.168.2.5	0xf4e9	No error (0)	www3.l.google.com		64.233.176.138	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:06.579703093 CEST	1.1.1.1	192.168.2.5	0xf4e9	No error (0)	www3.l.google.com		64.233.176.113	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:06.579703093 CEST	1.1.1.1	192.168.2.5	0xf4e9	No error (0)	www3.l.google.com		64.233.176.102	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:06.579703093 CEST	1.1.1.1	192.168.2.5	0xf4e9	No error (0)	www3.l.google.com		64.233.176.101	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:06.579703093 CEST	1.1.1.1	192.168.2.5	0xf4e9	No error (0)	www3.l.google.com		64.233.176.139	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:06.583920002 CEST	1.1.1.1	192.168.2.5	0x24a9	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 09:42:08.588087082 CEST	1.1.1.1	192.168.2.5	0xfe4b	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 09:42:08.588087082 CEST	1.1.1.1	192.168.2.5	0xfe4b	No error (0)	googlehosted.l.googleusercontent.com		142.250.9.132	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:08.594286919 CEST	1.1.1.1	192.168.2.5	0xaf58	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 09:42:09.552620888 CEST	1.1.1.1	192.168.2.5	0xea4e	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 09:42:09.552620888 CEST	1.1.1.1	192.168.2.5	0xea4e	No error (0)	googlehosted.l.googleusercontent.com		172.253.124.132	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:09.556730986 CEST	1.1.1.1	192.168.2.5	0xe7d5	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 09:42:15.752712965 CEST	1.1.1.1	192.168.2.5	0xb906	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 09:42:15.752712965 CEST	1.1.1.1	192.168.2.5	0xb906	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:16.047310114 CEST	1.1.1.1	192.168.2.5	0x7743	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:16.047310114 CEST	1.1.1.1	192.168.2.5	0x7743	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:28.810231924 CEST	1.1.1.1	192.168.2.5	0x982a	No error (0)	www.google.com		74.125.136.103	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:28.810231924 CEST	1.1.1.1	192.168.2.5	0x982a	No error (0)	www.google.com		74.125.136.99	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:28.810231924 CEST	1.1.1.1	192.168.2.5	0x982a	No error (0)	www.google.com		74.125.136.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:28.810231924 CEST	1.1.1.1	192.168.2.5	0x982a	No error (0)	www.google.com		74.125.136.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:28.810231924 CEST	1.1.1.1	192.168.2.5	0x982a	No error (0)	www.google.com		74.125.136.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:28.810231924 CEST	1.1.1.1	192.168.2.5	0x982a	No error (0)	www.google.com		74.125.136.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:28.810506105 CEST	1.1.1.1	192.168.2.5	0xc402	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 23, 2024 09:42:29.452277899 CEST	1.1.1.1	192.168.2.5	0xcb77	No error (0)	www.google.com		142.250.105.103	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:29.452277899 CEST	1.1.1.1	192.168.2.5	0xcb77	No error (0)	www.google.com		142.250.105.99	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:29.452277899 CEST	1.1.1.1	192.168.2.5	0xcb77	No error (0)	www.google.com		142.250.105.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:29.452277899 CEST	1.1.1.1	192.168.2.5	0xcb77	No error (0)	www.google.com		142.250.105.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:29.452277899 CEST	1.1.1.1	192.168.2.5	0xcb77	No error (0)	www.google.com		142.250.105.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:29.452277899 CEST	1.1.1.1	192.168.2.5	0xcb77	No error (0)	www.google.com		142.250.105.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:29.454833031 CEST	1.1.1.1	192.168.2.5	0x36ea	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 23, 2024 09:42:49.911818027 CEST	1.1.1.1	192.168.2.5	0x1fcc	No error (0)	www.bodis.com		199.59.243.50	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:51.896400928 CEST	1.1.1.1	192.168.2.5	0xede3	No error (0)	cdn.reamaze.com		104.22.9.8	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:51.896400928 CEST	1.1.1.1	192.168.2.5	0xede3	No error (0)	cdn.reamaze.com		104.22.8.8	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:51.896400928 CEST	1.1.1.1	192.168.2.5	0xede3	No error (0)	cdn.reamaze.com		172.67.28.250	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:51.897640944 CEST	1.1.1.1	192.168.2.5	0x2f04	No error (0)	cdn-cookieyes.com			65	IN (0x0001)	false
Apr 23, 2024 09:42:51.897658110 CEST	1.1.1.1	192.168.2.5	0x9f5e	No error (0)	cdn-cookieyes.com		104.22.58.91	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:51.897658110 CEST	1.1.1.1	192.168.2.5	0x9f5e	No error (0)	cdn-cookieyes.com		104.22.59.91	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:51.897658110 CEST	1.1.1.1	192.168.2.5	0x9f5e	No error (0)	cdn-cookieyes.com		172.67.20.8	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:52.398597956 CEST	1.1.1.1	192.168.2.5	0x80d7	No error (0)	www.bodis.com		199.59.243.50	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:52.626121998 CEST	1.1.1.1	192.168.2.5	0x5a9b	No error (0)	log.cookieyes.com		52.209.139.15	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:52.626121998 CEST	1.1.1.1	192.168.2.5	0x5a9b	No error (0)	log.cookieyes.com		54.74.204.68	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:52.987724066 CEST	1.1.1.1	192.168.2.5	0xff5d	No error (0)	www.recaptcha.net		64.233.176.94	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:53.080656052 CEST	1.1.1.1	192.168.2.5	0x63d8	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 09:42:53.080656052 CEST	1.1.1.1	192.168.2.5	0x63d8	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:53.080656052 CEST	1.1.1.1	192.168.2.5	0x63d8	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:53.080656052 CEST	1.1.1.1	192.168.2.5	0x63d8	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:53.080656052 CEST	1.1.1.1	192.168.2.5	0x63d8	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:53.080900908 CEST	1.1.1.1	192.168.2.5	0xc5d5	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 09:42:53.081485987 CEST	1.1.1.1	192.168.2.5	0xb4f8	No error (0)	stats.g.doubleclick.net		142.250.105.155	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:53.081485987 CEST	1.1.1.1	192.168.2.5	0xb4f8	No error (0)	stats.g.doubleclick.net		142.250.105.157	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:53.081485987 CEST	1.1.1.1	192.168.2.5	0xb4f8	No error (0)	stats.g.doubleclick.net		142.250.105.154	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:53.081485987 CEST	1.1.1.1	192.168.2.5	0xb4f8	No error (0)	stats.g.doubleclick.net		142.250.105.156	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:54.194390059 CEST	1.1.1.1	192.168.2.5	0x64d1	No error (0)	push.reamaze.com		172.67.28.250	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:54.194390059 CEST	1.1.1.1	192.168.2.5	0x64d1	No error (0)	push.reamaze.com		104.22.8.8	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:54.194390059 CEST	1.1.1.1	192.168.2.5	0x64d1	No error (0)	push.reamaze.com		104.22.9.8	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:54.200063944 CEST	1.1.1.1	192.168.2.5	0x96e8	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:54.200063944 CEST	1.1.1.1	192.168.2.5	0x96e8	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:54.200078964 CEST	1.1.1.1	192.168.2.5	0x265d	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 23, 2024 09:42:54.203592062 CEST	1.1.1.1	192.168.2.5	0xd983	No error (0)	cdn.reamaze.com		104.22.8.8	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:54.203592062 CEST	1.1.1.1	192.168.2.5	0xd983	No error (0)	cdn.reamaze.com		104.22.9.8	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:54.203592062 CEST	1.1.1.1	192.168.2.5	0xd983	No error (0)	cdn.reamaze.com		172.67.28.250	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:54.284890890 CEST	1.1.1.1	192.168.2.5	0x512a	No error (0)	ws.reamaze.com		172.67.28.250	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:54.284890890 CEST	1.1.1.1	192.168.2.5	0x512a	No error (0)	ws.reamaze.com		104.22.8.8	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:54.284890890 CEST	1.1.1.1	192.168.2.5	0x512a	No error (0)	ws.reamaze.com		104.22.9.8	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:54.811927080 CEST	1.1.1.1	192.168.2.5	0x70fb	No error (0)	www.recaptcha.net		172.253.124.94	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:54.815901995 CEST	1.1.1.1	192.168.2.5	0x38b5	No error (0)	windowsupdatebg.s.llnwi.net		69.164.42.0	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:56.717706919 CEST	1.1.1.1	192.168.2.5	0x2240	No error (0)	www.google.com		142.250.9.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:56.717706919 CEST	1.1.1.1	192.168.2.5	0x2240	No error (0)	www.google.com		142.250.9.103	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:56.717706919 CEST	1.1.1.1	192.168.2.5	0x2240	No error (0)	www.google.com		142.250.9.99	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:56.717706919 CEST	1.1.1.1	192.168.2.5	0x2240	No error (0)	www.google.com		142.250.9.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:56.717706919 CEST	1.1.1.1	192.168.2.5	0x2240	No error (0)	www.google.com		142.250.9.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:56.717706919 CEST	1.1.1.1	192.168.2.5	0x2240	No error (0)	www.google.com		142.250.9.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:56.717881918 CEST	1.1.1.1	192.168.2.5	0x3415	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 23, 2024 09:42:57.878087997 CEST	1.1.1.1	192.168.2.5	0x21ec	No error (0)	directory.cookieyes.com	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 09:42:57.878087997 CEST	1.1.1.1	192.168.2.5	0x21ec	No error (0)	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		52.209.139.15	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:57.878087997 CEST	1.1.1.1	192.168.2.5	0x21ec	No error (0)	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		54.74.204.68	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:57.878861904 CEST	1.1.1.1	192.168.2.5	0x5d4f	No error (0)	cdn-cookieyes.com		104.22.58.91	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:57.878861904 CEST	1.1.1.1	192.168.2.5	0x5d4f	No error (0)	cdn-cookieyes.com		172.67.20.8	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:57.878861904 CEST	1.1.1.1	192.168.2.5	0x5d4f	No error (0)	cdn-cookieyes.com		104.22.59.91	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:57.880211115 CEST	1.1.1.1	192.168.2.5	0xbb79	No error (0)	cdn-cookieyes.com			65	IN (0x0001)	false
Apr 23, 2024 09:42:57.880237103 CEST	1.1.1.1	192.168.2.5	0x8a4b	No error (0)	directory.cookieyes.com	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 09:42:58.861327887 CEST	1.1.1.1	192.168.2.5	0x4227	No error (0)	directory.cookieyes.com	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 09:42:58.874736071 CEST	1.1.1.1	192.168.2.5	0xf2d1	No error (0)	directory.cookieyes.com	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 09:42:58.874736071 CEST	1.1.1.1	192.168.2.5	0xf2d1	No error (0)	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		52.209.139.15	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:42:58.874736071 CEST	1.1.1.1	192.168.2.5	0xf2d1	No error (0)	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		54.74.204.68	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:43:18.703829050 CEST	1.1.1.1	192.168.2.5	0x5549	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 23, 2024 09:43:18.703829050 CEST	1.1.1.1	192.168.2.5	0x5549	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

ww1.icartservice.com

www.google.com

fs.microsoft.com

https:

afs.googleusercontent.com

www.bing.com

www.bodis.com

cdn-cookieyes.com

cdn.reamaze.com

www.recaptcha.net

log.cookieyes.com

analytics.google.com

stats.g.doubleclick.net

cdnjs.cloudflare.com

push.reamaze.com

directory.cookieyes.com

ws.reamaze.com

icartservice.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	23.82.12.32	80	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 23, 2024 09:42:03.637412071 CEST	431	OUT	GET / HTTP/1.1 Host: icartservice.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 23, 2024 09:42:04.261466026 CEST	372	IN	HTTP/1.1 302 Found cache-control: max-age=0, private, must-revalidate connection: close content-length: 11 date: Tue, 23 Apr 2024 07:42:04 GMT location: http://ww1.icartservice.com server: nginx set-cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; path=/; domain=.icartservice.com; expires=Sun, 11 May 2092 10:56:11 GMT; max-age=2147483647; HttpOnly Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 Data Ascii: Redirecting

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49715	199.59.243.225	80	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 23, 2024 09:42:04.520196915 CEST	485	OUT	GET / HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f
Apr 23, 2024 09:42:04.660728931 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:03 GMT content-type: text/html; charset=utf-8 content-length: 1062 x-request-id: 5ba563aa-2f00-4d05-ac08-134a3b0db2ad cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_SRE1RAz27jC2FAE/bSKrfYB4sUl5mfGNPc0x6pCT8oNjvjBSA/yJOzbRZUQqL0fUhGJOLg6+848Q/cSW6c9iWw== set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:04 GMT; path=/ Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 53 52 45 31 52 41 7a 32 37 6a 43 32 46 41 45 2f 62 53 4b 72 66 59 42 34 73 55 6c 35 6d 66 47 4e 50 63 30 78 36 70 43 54 38 6f 4e 6a 76 6a 42 53 41 2f 79 4a 4f 7a 62 52 5a 55 51 71 4c 30 66 55 68 47 4a 4f 4c 67 36 2b 38 34 38 51 2f 63 53 57 36 63 39 69 57 77 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 45 41 41 41 41 42 43 41 49 41 41 41 43 51 64 31 50 65 41 41 41 41 44 45 6c 45 51 56 51 49 31 32 50 34 2f 2f 38 2f 41 41 58 2b 41 76 37 63 7a 46 6e 6e Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_SRE1RAz27jC2FAE/bSKrfYB4sUl5mfGNPc0x6pCT8oNjvjBSA/yJOzbRZUQqL0fUhGJOLg6+848Q/cSW6c9iWw==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnn
Apr 23, 2024 09:42:04.660770893 CEST	532	IN	Data Raw: 41 41 41 41 41 45 6c 46 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f Data Ascii: AAAAAElFTkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNWJhNTYzYWEtMmYwMC00ZDA1LWFjMDgtMTM0YTNiMGRiMmFkIiwicGFnZV90a
Apr 23, 2024 09:42:04.666944981 CEST	532	IN	Data Raw: 41 41 41 41 41 45 6c 46 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f Data Ascii: AAAAAElFTkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNWJhNTYzYWEtMmYwMC00ZDA1LWFjMDgtMTM0YTNiMGRiMmFkIiwicGFnZV90a
Apr 23, 2024 09:42:04.766911030 CEST	428	OUT	GET /bMtzPZXpI.js HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww1.icartservice.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad
Apr 23, 2024 09:42:04.889189005 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:04 GMT content-type: application/javascript; charset=utf-8 content-length: 33791 x-request-id: 84ee05b5-a05a-4e97-a83c-475b44a9aaee set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:04 GMT Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 76 65 72 73 69 6f 6e 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 61 77 61 69 74 65 72 28 65 2c 74 2c 6e 2c 69 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 6e 7c 7c 28 6e 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 73 2c 61 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 74 72 79 7b 64 28 69 2e 6e 65 78 74 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 61 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 74 72 79 7b 64 28 69 2e 74 68 72 6f 77 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 61 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 76 61 72 20 74 3b 65 2e 64 6f 6e 65 3f 73 28 65 2e 76 61 6c 75 65 29 3a 28 74 3d 65 2e 76 61 6c 75 65 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6e 3f 74 3a 6e 65 77 20 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 29 29 2e 74 68 65 6e 28 6f 2c 72 29 7d 64 28 28 69 3d 69 2e 61 70 70 6c 79 28 65 2c 74 7c 7c 5b 5d 29 29 2e 6e 65 78 74 28 29 29 7d 29 29 7d 76 61 72 20 42 6c 6f 63 6b 69 6e 67 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 75 70 70 72 65 73 73 65 64 45 72 72 6f 72 26 26 53 75 70 70 72 65 73 73 65 64 45 72 72 6f 72 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 50 45 4e 44 49 4e 47 3d 22 70 65 6e 64 69 6e 67 22 2c 65 2e 4e 4f 4e 45 3d 22 6e 6f 6e 65 22 2c 65 2e 42 4c 4f 43 4b 45 44 3d 22 62 6c 6f 63 6b 65 64 22 2c 65 2e 41 4c 4c 4f 57 45 44 3d 22 61 6c 6c 6f 77 65 64 22 7d 28 42 6c 6f 63 6b 69 6e 67 7c 7c 28 42 6c 6f 63 6b 69 6e 67 3d 7b 7d 29 29 3b 63 6c 61 73 73 20 41 64 62 6c 6f 63 6b 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 73 74 61 74 65 3d 42 6c 6f 63 6b 69 6e 67 2e 50 45 4e 44 49 4e 47 2c 74 68 69 73 2e 5f 6d 6f 63 6b 65 64 3d 21 31 2c 65 3f 28 74 68 69 73 2e 73 74 61 74 65 3d 65 2c 74 68 69 73 2e 5f 6d 6f 63 6b 65 64 3d 21 30 29 3a 74 68 69 73 2e 73 74 61 74 65 3d 42 6c 6f 63 6b 69 6e 67 2e 41 4c 4c 4f 57 45 44 7d 69 6e 6a 65 63 74 28 29 7b 72 65 74 75 72 6e 20 5f 5f 61 77 61 69 74 65 72 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).version={})}(this,(function(exports){"use strict";function __awaiter(e,t,n,i){return new(n\|\|(n=Promise))((function(s,a){function o(e){try{d(i.next(e))}catch(e){a(e)}}function r(e){try{d(i.throw(e))}catch(e){a(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,r)}d((i=i.apply(e,t\|\|[])).next())}))}var Blocking;"function"==typeof SuppressedError&&SuppressedError,function(e){e.PENDING="pending",e.NONE="none",e.BLOCKED="blocked",e.ALLOWED="allowed"}(Blocking\|\|(Blocking={}));class Adblock{constructor(e){this.state=Blocking.PENDING,this._mocked=!1,e?(this.state=e,this._mocked=!0):this.state=Blocking.ALLOWED}inject(){return __awaiter(this,void 0,void 0,(function
Apr 23, 2024 09:42:04.889234066 CEST	1200	IN	Data Raw: 2a 28 29 7b 7d 29 29 7d 67 65 74 20 69 73 42 6c 6f 63 6b 65 64 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 61 74 65 3d 3d 3d 42 6c 6f 63 6b 69 6e 67 2e 42 4c 4f 43 4b 45 44 7d 67 65 74 20 69 73 41 6c 6c 6f 77 65 64 28 29 7b 72 65 74 75 72 Data Ascii: *(){}))}get isBlocked(){return this.state===Blocking.BLOCKED}get isAllowed(){return this.state===Blocking.ALLOWED}toContext(){return{user_has_ad_blocker:null,is_ad_blocked:null}}}const OBFUSCATING_BASE_64_PREFIX="UxFdVMwNFNwN0wzODEybV",encode=
Apr 23, 2024 09:42:04.889270067 CEST	1200	IN	Data Raw: 45 44 5f 47 42 3d 22 64 69 73 61 62 6c 65 64 5f 67 62 22 2c 65 2e 44 49 53 41 42 4c 45 44 5f 41 42 3d 22 64 69 73 61 62 6c 65 64 5f 61 62 22 2c 65 2e 44 49 53 41 42 4c 45 44 5f 44 53 3d 22 64 69 73 61 62 6c 65 64 5f 64 73 22 2c 65 2e 41 44 5f 42 Data Ascii: ED_GB="disabled_gb",e.DISABLED_AB="disabled_ab",e.DISABLED_DS="disabled_ds",e.AD_BLOCKED="ad_blocked",e.PREFERRED="preferred"}(ZeroClickReasons\|\|(ZeroClickReasons={}));const getZeroClick=e=>__awaiter(void 0,void 0,void 0,(function*(){const t=O
Apr 23, 2024 09:42:04.889305115 CEST	1200	IN	Data Raw: 3a 20 30 3b 5c 6e 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 5c 6e 7d 5c 6e 5c 6e 2f 2a 20 53 74 61 74 75 73 20 4d 65 73 73 61 67 65 73 20 2d 20 54 68 65 73 65 20 61 72 65 20 64 69 73 70 6c 61 79 65 64 20 77 68 65 6e 20 77 65 Data Ascii: : 0;\n visibility: hidden;\n}\n\n/* Status Messages - These are displayed when we are not rendering ad blocks or Related Search */\n\n#pk-status-message {\n height: 100vh;\n width: 100%;\n display: flex;\n flex-direction: column;\n align
Apr 23, 2024 09:42:04.889338970 CEST	1200	IN	Data Raw: 3a 20 33 33 70 78 3b 5c 6e 20 20 77 69 64 74 68 3a 20 31 33 70 78 3b 5c 6e 20 20 68 65 69 67 68 74 3a 20 31 33 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 63 63 Data Ascii: : 33px;\n width: 13px;\n height: 13px;\n border-radius: 50%;\n background: #ccc;\n animation-timing-function: cubic-bezier(0, 1, 1, 0);\n}\n\n.pk-loader div:nth-child(1) {\n left: 8px;\n animation: pk-anim-1 0.6s infinite;\n}\n\n.pk-loa
Apr 23, 2024 09:42:04.889373064 CEST	1200	IN	Data Raw: 7d 5c 6e 27 3b 63 6f 6e 73 74 20 41 50 50 5f 54 41 52 47 45 54 3d 22 23 74 61 72 67 65 74 22 2c 4d 45 53 53 41 47 45 5f 53 45 4c 45 43 54 4f 52 3d 22 23 70 6b 2d 73 74 61 74 75 73 2d 6d 65 73 73 61 67 65 22 2c 50 41 47 45 5f 52 45 41 44 59 5f 43 Data Ascii: }\n';const APP_TARGET="#target",MESSAGE_SELECTOR="#pk-status-message",PAGE_READY_CLASS="pk-page-ready",MESSAGE_TEMPLATE='<div id="pk-status-message"></div>';class Renderer{constructor(e){this._domIsReady=!1,this.revealPage=()=>{this.domNode&&t
Apr 23, 2024 09:42:04.889408112 CEST	1148	IN	Data Raw: 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 73 61 6c 65 73 2d 62 6f 78 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 68 72 65 66 20 24 7b 6f 7d 20 24 7b 72 7d 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 24 7b 69 7d 5c 6e 20 20 20 20 20 20 20 20 3c 2f 64 69 76 Data Ascii: <div id="sales-box" class="no-href ${o} ${r}">\n ${i}\n </div>\n `,"BOTTOM"===n?(a.style.marginTop="30px",document.body.appendChild(a)):document.body.prepend(a)}loading(e){let t="a few";e>0&&(t=`<span id="redirect">${
Apr 23, 2024 09:42:04.889444113 CEST	1200	IN	Data Raw: 61 6d 65 7d 20 63 75 72 72 65 6e 74 6c 79 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 6e 79 20 73 70 6f 6e 73 6f 72 73 20 66 6f 72 20 79 6f 75 2e 5c 6e 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 5c 6e 20 20 20 20 60 2c 65 29 7d 69 6d 70 72 69 6e Data Ascii: ame} currently does not have any sponsors for you.\n </span>\n `,e)}imprint(e){if(!e)return;const t=document.querySelector("#imprint-text");t&&(t.innerHTML=e.replace(/(?:\r\n\|\r\|\n)/g,"<br>"))}injectStyles(e){if(!e)return;const t=docum
Apr 23, 2024 09:42:04.889478922 CEST	1200	IN	Data Raw: 29 3b 6c 65 74 20 53 74 61 74 65 24 32 3d 63 6c 61 73 73 7b 67 65 74 20 74 72 61 63 6b 69 6e 67 54 79 70 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 74 72 61 63 6b 69 6e 67 54 79 70 65 7d 73 65 74 20 74 72 61 63 6b 69 6e 67 54 79 70 65 28 Data Ascii: );let State$2=class{get trackingType(){return this._trackingType}set trackingType(e){this._trackingType=e}get track(){return!!this.trackingType}};class Disabled extends State$2{constructor(){super(...arguments),this.type=Type.Disabled}static b
Apr 23, 2024 09:42:04.929330111 CEST	521	OUT	POST /_fd HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive Content-Length: 0 Accept: application/json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Origin: http://ww1.icartservice.com Referer: http://ww1.icartservice.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad
Apr 23, 2024 09:42:05.089610100 CEST	1200	IN	HTTP/1.1 200 OK server: openresty date: Tue, 23 Apr 2024 07:42:04 GMT content-type: text/html; charset=UTF-8 content-encoding: gzip content-length: 2075 cache-control: no-cache x-version: 2.118.0 expires: Thu, 01 Jan 1970 00:00:01 GMT cache-control: no-store, must-revalidate cache-control: post-check=0, pre-check=0 pragma: no-cache set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:05 GMT; Max-Age=900; path=/; httponly Data Raw: 1f 8b 08 00 00 00 00 00 04 03 bd 57 c9 76 e2 4a 16 fc a0 da 68 40 ae c7 e2 2d 10 a0 a9 91 30 32 68 c8 9d 94 c2 48 22 13 d4 c5 a0 e1 eb 3b 32 b1 81 aa b6 cf 3b bd e9 05 c7 06 29 ef 18 37 6e e4 a6 b3 8a c8 6f 03 2b 68 03 a5 1d 96 b3 79 9f 47 db de e3 c4 1a 0f 24 f1 34 92 b8 d5 b2 f2 1a 3a 55 3a 7f aa f4 fe 6c 7e f6 d7 e9 39 18 fc 0b 89 fd 7e c1 d9 a5 b0 a3 3e e7 d6 c9 ad da 8a f0 f0 9d 6a 51 5f f0 a8 4f b4 b0 c4 33 25 8b 55 e6 d6 c7 2e 18 e6 f0 b0 19 f9 6b 57 5d 4c bd 36 8d 0b b6 d6 4d 3c 1f 5f 68 ef be c0 6f 5b c4 9e 47 a6 ee 8b cb c3 76 11 7b 57 62 b3 c1 1f cc 77 5f 37 8f d2 be 3d 3e a7 31 bb 6c 78 74 c8 92 40 a1 dc ba 14 f2 7d 6b 58 c4 61 9f c5 ab b3 5f bb 06 32 51 e0 cf 40 9c da 72 3d 6f 83 ca 3d b9 07 93 d1 43 70 15 b1 66 49 c3 c8 dc da 0b bf 04 df a9 b6 c1 73 8f 51 3d 3a 15 4e b0 12 b1 ad b8 35 90 08 b9 49 fb a5 52 38 93 97 64 3a a6 0b bd d0 fd 37 a3 49 35 ab c7 bb b0 49 f0 ff e6 92 6a e3 b3 88 31 8f ad 51 24 6a b2 e9 58 ce 0b 25 c3 f9 60 3d 39 b9 3c 38 a6 b1 81 ba b5 a2 a6 ad 88 35 e5 e3 7d 96 f8 67 a2 21 ae 43 d8 e7 5a 8b 1a fb 27 6a b3 fd 67 fe 8b b8 a8 73 cd 40 ae e3 d3 72 4d bf 7d e6 0f 13 7d e1 98 0d 99 aa 55 ae 85 0d ed d5 03 62 ba 14 8e 77 cd 67 73 d5 af ba ef 7c 2a 38 5b a1 27 bf 0a d4 c3 95 b5 0a 19 e5 ea 80 be 55 22 a7 34 0e 15 82 7a 8b ef b9 46 b8 f8 8d ea a1 91 db d1 ad 5f f5 be 0d 66 6e 1b ac dd d6 9f ad 84 ad 5b 0c 6a c8 f2 c4 3c a5 49 c8 56 71 77 ca f5 62 88 b9 5f 2d 91 6b 11 47 63 f9 9e 3d ae 33 1d bf b1 f3 4f f7 10 1a d4 de 88 fa f4 24 ee 04 7e f6 c0 53 49 51 3b 19 87 c8 c7 b6 9a 1c f8 12 b1 d0 83 2f 7c a9 d9 66 dc 16 36 3b 8b be ba 75 c3 d3 b8 1b c8 1b 7a 71 88 50 63 f9 ee f0 fe d6 3d db 2f 89 23 cf ca da 0a 4c 7d 60 bd 24 c0 ba f0 55 c4 ec 95 3a 61 93 c7 ec 85 bc 3d e1 84 1b 6a 1e 03 2b 95 fb e2 eb 6a 01 ff 43 e1 b0 13 49 90 03 7e 43 9f ae c5 d4 fc 99 d8 a3 9d 3b 55 ce c0 9c 9e a1 7e d9 ec b8 f3 d7 73 c5 77 cc d1 52 ed 2e ef 51 77 49 6c 43 d4 c9 58 4c cd 63 61 ab 27 d7 39 d3 bc 9a e0 9c c9 45 cf 17 31 29 e1 ff b4 5d 1f 77 54 b3 30 27 aa 98 cb 86 54 ed ce 53 2c e0 dd 3a 79 c3 fd cc 91 c4 ec 90 39 ab 17 77 36 6f fd e9 e6 23 86 c9 2e e5 56 9d 69 45 9f eb d1 05 f8 40 ce dd 95 d6 c7 9d 3b 78 Data Ascii: WvJh@-02hH";2;)7no+hyG$4:U:l~9~>jQ_O3%U.kW]L6M<_ho[Gv{Wbw_7=>1lxt@}kXa_2Q@r=o=CpfIsQ=:N5IR8d:7I5Ij1Q$jX%`=9<85}g!CZ'jgs@rM}}Ubwgs\|*8['U"4zF_fn[j<IVqwb_-kGc=3O$~SIQ;/\|f6;uzqPc=/#L}`$U:a=j+jCI~C;U~swR.QwIlCXLca'9E1)]wT0'TS,:y9w6o#.ViE@;x
Apr 23, 2024 09:42:08.471929073 CEST	616	OUT	POST /_tr HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive Content-Length: 1677 Accept: application/json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Origin: http://ww1.icartservice.com Referer: http://ww1.icartservice.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:08.614152908 CEST	504	IN	HTTP/1.1 200 OK server: openresty date: Tue, 23 Apr 2024 07:42:07 GMT content-type: text/html; charset=UTF-8 content-encoding: gzip content-length: 22 cache-control: no-cache x-version: 2.118.0 expires: Thu, 01 Jan 1970 00:00:01 GMT cache-control: no-store, must-revalidate cache-control: post-check=0, pre-check=0 pragma: no-cache set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:08 GMT; Max-Age=900; path=/; httponly Data Raw: 1f 8b 08 00 00 00 00 00 04 03 cb cf 06 00 47 dd dc 79 02 00 00 00 Data Ascii: Gy
Apr 23, 2024 09:42:15.814276934 CEST	636	OUT	GET /legal HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:15.935939074 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:15 GMT content-type: text/html; charset=utf-8 content-length: 8131 x-request-id: 7e448dad-b20d-4ed3-b901-3830b5a4bfd3 set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:15 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4c 65 67 61 6c 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 48 65 6c 76 65 74 69 63 61 2c 20 74 72 65 62 75 63 68 65 74 20 6d 73 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 68 69 63 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 37 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 68 69 63 6c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 36 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 68 65 6c 76 65 74 69 63 61 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 63 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 61 75 74 6f 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 63 75 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 0a 20 20 20 20 20 Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>Legal</title> <style> body { font-family: Helvetica, trebuchet ms, arial, sans-serif; margin: 0; } .hic { height: 70px; position: relative; width: 1000px; margin: 0 auto; border-bottom: 1px solid #000; } .hicl { position: absolute; left: 20px; top: 20px; font-weight: 300; font-size: 26px; color: #000; font-family: helvetica, arial, sans-serif; } .c { position: relative; width: 1000px; margin: 10px auto 0; overflow: hidden; } .cu { font-size: 11px;
Apr 23, 2024 09:42:16.251652002 CEST	585	OUT	GET /favicon.ico HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww1.icartservice.com/legal Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:16.373114109 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:15 GMT content-type: text/html; charset=utf-8 content-length: 1138 x-request-id: f2046672-b556-412d-947f-51fbc54355dc cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pegRjBzXd+CHA0mNs87R96DxuEBBr7S+Tkmxb080m+ri2jZde+F19CYSMQrvaQ7q7msfhtk5v1fxknUhQnH9YA== set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:16 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 70 65 67 52 6a 42 7a 58 64 2b 43 48 41 30 6d 4e 73 38 37 52 39 36 44 78 75 45 42 42 72 37 53 2b 54 6b 6d 78 62 30 38 30 6d 2b 72 69 32 6a 5a 64 65 2b 46 31 39 43 59 53 4d 51 72 76 61 51 37 71 37 6d 73 66 68 74 6b 35 76 31 66 78 6b 6e 55 68 51 6e 48 39 59 41 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 45 41 41 41 41 42 43 41 49 41 41 41 43 51 64 31 50 65 41 41 41 41 44 45 6c 45 51 56 51 49 31 32 50 34 2f 2f 38 2f 41 41 58 2b 41 76 37 63 7a 46 6e 6e 41 41 41 41 41 45 6c 46 Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pegRjBzXd+CHA0mNs87R96DxuEBBr7S+Tkmxb080m+ri2jZde+F19CYSMQrvaQ7q7msfhtk5v1fxknUhQnH9YA==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF
Apr 23, 2024 09:42:25.842056036 CEST	866	OUT	GET /?caf=1&query=Residential+Painting&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREm0BlLqpj85G31fQC_eX0OZ1K3-a4OuiTf69i9hvcgwdKJvXpLoWWcXmE6_agIF8lgRjy0Qo5LP2xgfTZKRUkyEguFq3OH33d6-gTDHTZMRKzpBUEZlrZBAi2ClP0NSGhfLtEPzwEQBlkZro-tgR&pcsa=false&nb=0 HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:25.964232922 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:25 GMT content-type: text/html; charset=utf-8 content-length: 1742 x-request-id: 7ef819b0-48ca-4bad-97fa-bc5909ca4090 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_R29HYfPEUIrbmqIl3ApfbqG67hf+lWnOfVm/6XJSI/XrLcRAngnHmK7eEnKkmRbfzueySsYPFcEOdma0855Sig== set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:25 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 52 32 39 48 59 66 50 45 55 49 72 62 6d 71 49 6c 33 41 70 66 62 71 47 36 37 68 66 2b 6c 57 6e 4f 66 56 6d 2f 36 58 4a 53 49 2f 58 72 4c 63 52 41 6e 67 6e 48 6d 4b 37 65 45 6e 4b 6b 6d 52 62 66 7a 75 65 79 53 73 59 50 46 63 45 4f 64 6d 61 30 38 35 35 53 69 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 45 41 41 41 41 42 43 41 49 41 41 41 43 51 64 31 50 65 41 41 41 41 44 45 6c 45 51 56 51 49 31 32 50 34 2f 2f 38 2f 41 41 58 2b 41 76 37 63 7a 46 6e 6e 41 41 41 41 41 45 6c 46 Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_R29HYfPEUIrbmqIl3ApfbqG67hf+lWnOfVm/6XJSI/XrLcRAngnHmK7eEnKkmRbfzueySsYPFcEOdma0855Sig==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF
Apr 23, 2024 09:42:26.084208965 CEST	755	OUT	GET /blIRRVeVB.js HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww1.icartservice.com/?caf=1&query=Residential+Painting&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREm0BlLqpj85G31fQC_eX0OZ1K3-a4OuiTf69i9hvcgwdKJvXpLoWWcXmE6_agIF8lgRjy0Qo5LP2xgfTZKRUkyEguFq3OH33d6-gTDHTZMRKzpBUEZlrZBAi2ClP0NSGhfLtEPzwEQBlkZro-tgR&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:26.205955982 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:25 GMT content-type: application/javascript; charset=utf-8 content-length: 33791 x-request-id: 781df41b-ca72-41b9-bee1-15b004153694 set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:26 GMT Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 76 65 72 73 69 6f 6e 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 61 77 61 69 74 65 72 28 65 2c 74 2c 6e 2c 69 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 6e 7c 7c 28 6e 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 73 2c 61 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 74 72 79 7b 64 28 69 2e 6e 65 78 74 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 61 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 74 72 79 7b 64 28 69 2e 74 68 72 6f 77 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 61 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 76 61 72 20 74 3b 65 2e 64 6f 6e 65 3f 73 28 65 2e 76 61 6c 75 65 29 3a 28 74 3d 65 2e 76 61 6c 75 65 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6e 3f 74 3a 6e 65 77 20 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 29 29 2e 74 68 65 6e 28 6f 2c 72 29 7d 64 28 28 69 3d 69 2e 61 70 70 6c 79 28 65 2c 74 7c 7c 5b 5d 29 29 2e 6e 65 78 74 28 29 29 7d 29 29 7d 76 61 72 20 42 6c 6f 63 6b 69 6e 67 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 75 70 70 72 65 73 73 65 64 45 72 72 6f 72 26 26 53 75 70 70 72 65 73 73 65 64 45 72 72 6f 72 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 50 45 4e 44 49 4e 47 3d 22 70 65 6e 64 69 6e 67 22 2c 65 2e 4e 4f 4e 45 3d 22 6e 6f 6e 65 22 2c 65 2e 42 4c 4f 43 4b 45 44 3d 22 62 6c 6f 63 6b 65 64 22 2c 65 2e 41 4c 4c 4f 57 45 44 3d 22 61 6c 6c 6f 77 65 64 22 7d 28 42 6c 6f 63 6b 69 6e 67 7c 7c 28 42 6c 6f 63 6b 69 6e 67 3d 7b 7d 29 29 3b 63 6c 61 73 73 20 41 64 62 6c 6f 63 6b 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 73 74 61 74 65 3d 42 6c 6f 63 6b 69 6e 67 2e 50 45 4e 44 49 4e 47 2c 74 68 69 73 2e 5f 6d 6f 63 6b 65 64 3d 21 31 2c 65 3f 28 74 68 69 73 2e 73 74 61 74 65 3d 65 2c 74 68 69 73 2e 5f 6d 6f 63 6b 65 64 3d 21 30 29 3a 74 68 69 73 2e 73 74 61 74 65 3d 42 6c 6f 63 6b 69 6e 67 2e 41 4c 4c 4f 57 45 44 7d 69 6e 6a 65 63 74 28 29 7b 72 65 74 75 72 6e 20 5f 5f 61 77 61 69 74 65 72 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).version={})}(this,(function(exports){"use strict";function __awaiter(e,t,n,i){return new(n\|\|(n=Promise))((function(s,a){function o(e){try{d(i.next(e))}catch(e){a(e)}}function r(e){try{d(i.throw(e))}catch(e){a(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,r)}d((i=i.apply(e,t\|\|[])).next())}))}var Blocking;"function"==typeof SuppressedError&&SuppressedError,function(e){e.PENDING="pending",e.NONE="none",e.BLOCKED="blocked",e.ALLOWED="allowed"}(Blocking\|\|(Blocking={}));class Adblock{constructor(e){this.state=Blocking.PENDING,this._mocked=!1,e?(this.state=e,this._mocked=!0):this.state=Blocking.ALLOWED}inject(){return __awaiter(this,void 0,void 0,(function
Apr 23, 2024 09:42:26.533212900 CEST	1083	OUT	POST /_fd?caf=1&query=Residential+Painting&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREm0BlLqpj85G31fQC_eX0OZ1K3-a4OuiTf69i9hvcgwdKJvXpLoWWcXmE6_agIF8lgRjy0Qo5LP2xgfTZKRUkyEguFq3OH33d6-gTDHTZMRKzpBUEZlrZBAi2ClP0NSGhfLtEPzwEQBlkZro-tgR&pcsa=false&nb=0 HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive Content-Length: 0 Accept: application/json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Origin: http://ww1.icartservice.com Referer: http://ww1.icartservice.com/?caf=1&query=Residential+Painting&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREm0BlLqpj85G31fQC_eX0OZ1K3-a4OuiTf69i9hvcgwdKJvXpLoWWcXmE6_agIF8lgRjy0Qo5LP2xgfTZKRUkyEguFq3OH33d6-gTDHTZMRKzpBUEZlrZBAi2ClP0NSGhfLtEPzwEQBlkZro-tgR&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:26.693602085 CEST	1200	IN	HTTP/1.1 200 OK server: openresty date: Tue, 23 Apr 2024 07:42:26 GMT content-type: text/html; charset=UTF-8 content-encoding: gzip content-length: 2074 cache-control: no-cache x-version: 2.118.0 expires: Thu, 01 Jan 1970 00:00:01 GMT cache-control: no-store, must-revalidate cache-control: post-check=0, pre-check=0 pragma: no-cache set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:26 GMT; Max-Age=900; path=/; httponly Data Raw: 1f 8b 08 00 00 00 00 00 04 03 bd 57 c9 76 a3 c8 12 fd a0 5a 3c 40 92 db 2c de 42 80 98 5a 20 1b 4b 0c b9 23 41 c5 a0 04 eb 94 06 86 af ef 9b 89 2d ab aa 55 a7 ce db bc 85 4e 95 81 cc 88 b8 71 23 e2 c6 ae 37 f3 d0 eb 7c d3 ef 7c a9 1b 37 c6 6a a0 e1 7e 70 1b 62 aa 23 89 5d 85 c4 4e b5 a9 dc 63 a6 4b bd a7 4b 83 67 ac ce de 36 39 7b f5 ab bc 6e c2 da ab 16 47 da 06 2c 6b 16 25 d5 9d 93 d3 90 43 3c f3 59 d6 12 96 31 f5 90 c4 01 cb 2d 76 26 6f ce 93 b7 cd 7a 6f 2c 64 58 91 fc aa ab 32 cb 6c c9 4e ed f0 fe 4a 5b af da b4 a7 2a b3 c3 ea 2d 7a e5 36 0f 99 2e 57 54 09 8e d9 e8 75 f1 e8 77 a9 b8 3f b8 d2 c8 3c 52 e6 32 a2 b0 31 b7 dd 92 b6 e2 fb 32 1b e4 43 d6 b0 c3 7a eb 0c 9b 6d d1 fb 46 d6 6f b6 d9 e8 d7 87 de 33 92 6a ad bb 1d 62 1a a9 02 5f 2d f6 44 a2 40 23 36 ec 36 a4 a4 b6 cf f0 7e 20 b1 2f 53 3b 18 77 c2 37 b7 cc 94 30 cc 9a 8e fb f3 9e db 41 b7 61 dd 35 d6 d5 59 3e ae 2e 69 e4 97 59 1b 08 9c f0 7f b6 6e fc 2b 7d e3 18 c8 e5 de e4 98 c8 1e 89 16 6d 6e 15 d5 a6 de 75 b8 bf 4e 2d f3 42 9b f0 e4 d4 ef 88 1f be 46 ee 95 58 6c 5c 47 79 0d bf a4 ac 51 4f 5e bd 1c d7 b6 76 24 9f f1 0f 72 9b 28 ea 05 b1 5e a9 71 98 fd fe 1d 32 39 f4 5d 1a bd 9e 93 46 3d a4 b1 77 26 0a 7c 6a 83 81 2a 5d ef 6f 9d d3 ef 6c fa 86 d7 39 c8 49 3a cb 10 ab c3 b1 92 80 d5 39 1b 9c 27 a7 e2 31 99 87 dc 0a c7 5c c7 df 8d da 10 fe ac f5 a5 7d d4 b3 29 5f ce c2 33 5e c1 8f 1d 7e 4b 89 df 35 f9 e0 ef 48 24 77 d4 32 25 b2 33 4f d4 52 67 99 7c ac 9d fa 28 65 6d c8 be bf f1 ef fa 6b a2 9c 47 3c a3 e0 9e b4 8f 35 26 f0 01 4e 9c 3f 04 b9 49 62 60 27 f2 2f e2 29 d3 68 c1 b2 0a be b4 ee c8 6d e5 11 7b c9 ec e0 48 23 e4 15 5c 23 8d 79 ca 94 1d fc 5e c8 34 72 c5 b7 de 4c 3a dd df 9f 44 81 38 2b b0 b5 c0 a9 26 1c b8 dd 04 f8 79 3c 8f 6d 78 dc ce 34 29 8d e4 e3 be d9 dd f3 e4 92 47 72 25 6a a3 f6 d5 18 31 64 b3 60 41 81 0f 3f bf 69 91 a7 d9 6b b1 97 fb 8b a3 2f cf 6b 70 2e 57 18 f0 2b 9e 1c 63 05 5e 6a dd de 38 67 b4 95 33 ca fa 0b c7 69 ff d6 15 a9 1d 9c a9 ae fd 15 5b f3 02 e7 0a d2 20 e7 ba dc 24 b0 4f ed c3 93 63 fb e0 ba 77 06 27 87 34 4a 4e 8e 9e 6b e0 3b ea 2e bb 9d 49 ad f0 48 94 52 da 54 4b 70 7e c9 36 93 0f 85 63 b9 25 30 6e c1 2f 99 36 e0 87 a2 9e Data Ascii: WvZ<@,BZ K#A-UNq#7\|\|7j~pb#]NcKKg69{nG,k%C<Y1-v&ozo,dX2lNJ[-z6.WTuw?<R212CzmFo3jb_-D@#66~ /S;w70Aa5Y>.iYn+}mnuN-BFXl\GyQO^v$r(^q29]F=w&\|j]ol9I:9'1\})_3^~K5H$w2%3ORg\|(emkG<5&N?Ib`'/)hm{H#\#y^4rL:D8+&y<mx4)Gr%j1d`A?ik/kp.W+c^j8g3i[ $Ocw'4JNk;.IHRTKp~6c%0n/6
Apr 23, 2024 09:42:28.623924017 CEST	851	OUT	POST /_tr HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive Content-Length: 2413 Accept: application/json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Origin: http://ww1.icartservice.com Referer: http://ww1.icartservice.com/?caf=1&query=Residential+Painting&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREm0BlLqpj85G31fQC_eX0OZ1K3-a4OuiTf69i9hvcgwdKJvXpLoWWcXmE6_agIF8lgRjy0Qo5LP2xgfTZKRUkyEguFq3OH33d6-gTDHTZMRKzpBUEZlrZBAi2ClP0NSGhfLtEPzwEQBlkZro-tgR&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:28.768788099 CEST	504	IN	HTTP/1.1 200 OK server: openresty date: Tue, 23 Apr 2024 07:42:28 GMT content-type: text/html; charset=UTF-8 content-encoding: gzip content-length: 22 cache-control: no-cache x-version: 2.118.0 expires: Thu, 01 Jan 1970 00:00:01 GMT cache-control: no-store, must-revalidate cache-control: post-check=0, pre-check=0 pragma: no-cache set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:28 GMT; Max-Age=900; path=/; httponly Data Raw: 1f 8b 08 00 00 00 00 00 04 03 cb cf 06 00 47 dd dc 79 02 00 00 00 Data Ascii: Gy
Apr 23, 2024 09:42:28.886070013 CEST	870	OUT	GET /?caf=1&query=Public+Online+High+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw&pcsa=false&nb=0 HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:29.007445097 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:27 GMT content-type: text/html; charset=utf-8 content-length: 1750 x-request-id: a982ab5a-bbcd-4a42-9aed-8ef3998d5b82 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_RndRyi9PaWa2MSWSJI7qRgGigC0EPC50JBMlYmkrTFcKaBtyS5qhji8q75OLf8HCg17bEAUeDhKN0XOdtuGg2A== set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:28 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 52 6e 64 52 79 69 39 50 61 57 61 32 4d 53 57 53 4a 49 37 71 52 67 47 69 67 43 30 45 50 43 35 30 4a 42 4d 6c 59 6d 6b 72 54 46 63 4b 61 42 74 79 53 35 71 68 6a 69 38 71 37 35 4f 4c 66 38 48 43 67 31 37 62 45 41 55 65 44 68 4b 4e 30 58 4f 64 74 75 47 67 32 41 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 45 41 41 41 41 42 43 41 49 41 41 41 43 51 64 31 50 65 41 41 41 41 44 45 6c 45 51 56 51 49 31 32 50 34 2f 2f 38 2f 41 41 58 2b 41 76 37 63 7a 46 6e 6e 41 41 41 41 41 45 6c 46 Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_RndRyi9PaWa2MSWSJI7qRgGigC0EPC50JBMlYmkrTFcKaBtyS5qhji8q75OLf8HCg17bEAUeDhKN0XOdtuGg2A==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF
Apr 23, 2024 09:42:29.043073893 CEST	759	OUT	GET /bKLzejCZh.js HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww1.icartservice.com/?caf=1&query=Public+Online+High+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:29.165116072 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:28 GMT content-type: application/javascript; charset=utf-8 content-length: 33791 x-request-id: 7b7d916e-9f81-48bb-9f41-c8f599ac043c set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:29 GMT Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 76 65 72 73 69 6f 6e 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 61 77 61 69 74 65 72 28 65 2c 74 2c 6e 2c 69 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 6e 7c 7c 28 6e 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 73 2c 61 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 74 72 79 7b 64 28 69 2e 6e 65 78 74 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 61 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 74 72 79 7b 64 28 69 2e 74 68 72 6f 77 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 61 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 76 61 72 20 74 3b 65 2e 64 6f 6e 65 3f 73 28 65 2e 76 61 6c 75 65 29 3a 28 74 3d 65 2e 76 61 6c 75 65 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6e 3f 74 3a 6e 65 77 20 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 29 29 2e 74 68 65 6e 28 6f 2c 72 29 7d 64 28 28 69 3d 69 2e 61 70 70 6c 79 28 65 2c 74 7c 7c 5b 5d 29 29 2e 6e 65 78 74 28 29 29 7d 29 29 7d 76 61 72 20 42 6c 6f 63 6b 69 6e 67 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 75 70 70 72 65 73 73 65 64 45 72 72 6f 72 26 26 53 75 70 70 72 65 73 73 65 64 45 72 72 6f 72 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 50 45 4e 44 49 4e 47 3d 22 70 65 6e 64 69 6e 67 22 2c 65 2e 4e 4f 4e 45 3d 22 6e 6f 6e 65 22 2c 65 2e 42 4c 4f 43 4b 45 44 3d 22 62 6c 6f 63 6b 65 64 22 2c 65 2e 41 4c 4c 4f 57 45 44 3d 22 61 6c 6c 6f 77 65 64 22 7d 28 42 6c 6f 63 6b 69 6e 67 7c 7c 28 42 6c 6f 63 6b 69 6e 67 3d 7b 7d 29 29 3b 63 6c 61 73 73 20 41 64 62 6c 6f 63 6b 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 73 74 61 74 65 3d 42 6c 6f 63 6b 69 6e 67 2e 50 45 4e 44 49 4e 47 2c 74 68 69 73 2e 5f 6d 6f 63 6b 65 64 3d 21 31 2c 65 3f 28 74 68 69 73 2e 73 74 61 74 65 3d 65 2c 74 68 69 73 2e 5f 6d 6f 63 6b 65 64 3d 21 30 29 3a 74 68 69 73 2e 73 74 61 74 65 3d 42 6c 6f 63 6b 69 6e 67 2e 41 4c 4c 4f 57 45 44 7d 69 6e 6a 65 63 74 28 29 7b 72 65 74 75 72 6e 20 5f 5f 61 77 61 69 74 65 72 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).version={})}(this,(function(exports){"use strict";function __awaiter(e,t,n,i){return new(n\|\|(n=Promise))((function(s,a){function o(e){try{d(i.next(e))}catch(e){a(e)}}function r(e){try{d(i.throw(e))}catch(e){a(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,r)}d((i=i.apply(e,t\|\|[])).next())}))}var Blocking;"function"==typeof SuppressedError&&SuppressedError,function(e){e.PENDING="pending",e.NONE="none",e.BLOCKED="blocked",e.ALLOWED="allowed"}(Blocking\|\|(Blocking={}));class Adblock{constructor(e){this.state=Blocking.PENDING,this._mocked=!1,e?(this.state=e,this._mocked=!0):this.state=Blocking.ALLOWED}inject(){return __awaiter(this,void 0,void 0,(function
Apr 23, 2024 09:42:29.189515114 CEST	1091	OUT	POST /_fd?caf=1&query=Public+Online+High+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw&pcsa=false&nb=0 HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive Content-Length: 0 Accept: application/json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Origin: http://ww1.icartservice.com Referer: http://ww1.icartservice.com/?caf=1&query=Public+Online+High+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:29.348668098 CEST	1200	IN	HTTP/1.1 200 OK server: openresty date: Tue, 23 Apr 2024 07:42:28 GMT content-type: text/html; charset=UTF-8 content-encoding: gzip content-length: 2075 cache-control: no-cache x-version: 2.118.0 expires: Thu, 01 Jan 1970 00:00:01 GMT cache-control: no-store, must-revalidate cache-control: post-check=0, pre-check=0 pragma: no-cache set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:29 GMT; Max-Age=900; path=/; httponly Data Raw: 1f 8b 08 00 00 00 00 00 04 03 bd 57 c9 76 e2 4a 16 fc a0 da 68 40 ae c7 e2 2d 10 a0 a9 91 30 32 68 c8 9d 94 c2 48 22 13 d4 c5 a0 e1 eb 3b 32 b1 81 aa b6 cf 3b bd e9 05 c7 06 29 ef 18 37 6e e4 a6 b3 8a c8 6f 03 2b 68 03 a5 1d 96 b3 79 9f 47 db de e3 c4 1a 0f 24 f1 34 92 b8 d5 b2 f2 1a 3a 55 3a 7f aa f4 fe 6c 7e f6 d7 e9 d9 1f 36 17 12 fb fd 82 b3 4b 61 47 7d ce ad 93 5b b5 15 e1 e1 3b d5 a2 be e0 51 9f 68 61 89 67 4a 16 ab cc ad 8f 5d 30 cc e1 61 33 f2 d7 2b 63 31 f5 da 34 2e d8 5a 37 f1 7c 7c a1 bd fb 02 bf 6d 11 7b 1e 99 ba 2f 2e 0f db 45 ec 5d 89 cd 06 7f 30 df 7d dd 3c 4a fb f6 f8 9c c6 ec b2 e1 d1 21 4b 02 85 72 eb 52 c8 f7 ad 61 11 87 7d 16 af ce 7e ed 1a c8 44 81 3f 23 18 7c 6d b9 9e b7 41 e5 9e dc 83 c9 e8 21 b8 8a 58 b3 a4 61 64 6e ed 85 5f 82 ef 54 db e0 b9 c7 a8 1e 9d 0a 27 58 89 d8 56 dc 1a 48 84 dc a4 fd 52 29 9c c9 4b 32 1d d3 85 5e e8 fe 9b d1 a4 9a d5 e3 5d d8 24 f8 7f 73 49 b5 f1 59 c4 98 c7 d6 28 12 35 d9 74 2c e7 85 92 e1 7c b0 9e 9c 5c 1e 1c d3 d8 40 dd 5a 51 d3 56 c4 9a f2 f1 3e 4b fc 33 d1 10 d7 21 ec 73 ad 45 8d fd 13 b5 d9 fe 33 ff 45 5c d4 b9 66 20 d7 f1 69 b9 a6 df 3e f3 87 89 be 70 cc 86 4c d5 2a d7 c2 86 f6 ea 01 31 5d 0a c7 bb e6 b3 b9 ea 57 dd 77 3e 15 9c ad d0 93 5f 05 ea e1 ca 5a 85 8c 72 75 40 df 2a 91 53 1a 87 0a 41 bd c5 f7 5c 23 5c fc 46 f5 d0 c8 ed e8 d6 af 7a df 06 33 b7 0d d6 6e eb cf 56 c2 d6 2d 06 35 64 79 62 9e d2 24 64 ab b8 3b e5 7a 31 c4 dc af 96 c8 b5 88 a3 b1 7c cf 1e d7 99 8e df d8 f9 a7 7b 08 0d 6a 6f 44 7d 7a 12 77 02 3f 7b e0 a9 a4 a8 9d 8c 43 e4 63 5b 4d 0e 7c 89 58 e8 c1 17 be d4 6c 33 6e 0b 9b 9d 45 5f dd ba e1 69 dc 0d e4 0d bd 38 44 a8 b1 7c 77 78 7f eb 9e ed 97 c4 91 67 65 6d 05 a6 3e b0 5e 12 60 5d f8 2a 62 f6 4a 9d b0 c9 63 f6 42 de 9e 70 c2 0d 35 8f 81 95 ca 7d f1 75 b5 80 ff a1 70 d8 89 24 c8 01 bf a1 4f d7 62 6a fe 4c ec d1 ce 9d 2a 67 60 4e cf 50 bf 6c 76 dc f9 eb b9 e2 3b e6 68 a9 76 97 f7 a8 bb 24 b6 21 ea 84 79 30 8f 85 ad 9e 5c e7 4c f3 6a 82 73 26 17 3d 5f c4 a4 84 ff d3 76 7d dc 51 cd c2 9c a8 62 2e 1b 52 b5 3b 4f b1 80 77 eb e4 0d f7 33 47 12 b3 43 e6 ac 5e dc d9 bc f5 a7 9b 8f 18 26 bb 94 5b 75 a6 15 7d ae 47 17 e0 03 39 77 57 5a 1f 77 ee e0 Data Ascii: WvJh@-02hH";2;)7no+hyG$4:U:l~6KaG}[;QhagJ]0a3+c14.Z7\|\|m{/.E]0}<J!KrRa}~D?#\|mA!Xadn_T'XVHR)K2^]$sIY(5t,\|\@ZQV>K3!sE3E\f i>pL1]Ww>_Zru@SA\#\Fz3nV-5dyb$d;z1\|{joD}zw?{Cc[M\|Xl3nE_i8D\|wxgem>^`]bJcBp5}up$ObjLg`NPlv;hv$!y0\Ljs&=_v}Qb.R;Ow3GC^&[u}G9wWZw
Apr 23, 2024 09:42:30.165788889 CEST	866	OUT	GET /?caf=1&query=Online+Virtual+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU&pcsa=false&nb=0 HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:30.287478924 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:30 GMT content-type: text/html; charset=utf-8 content-length: 1742 x-request-id: 1ef87705-c2b2-4f8a-8b1e-0c1d10fb62b7 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_LxffBjztgE35oW3Q8n4txDIFrz3lc1Y6L1Swyjp/OfsoMUA23ZN6LUJgOMGi3hYArRRYHevz23D/uso1+9BtRA== set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:30 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 4c 78 66 66 42 6a 7a 74 67 45 33 35 6f 57 33 51 38 6e 34 74 78 44 49 46 72 7a 33 6c 63 31 59 36 4c 31 53 77 79 6a 70 2f 4f 66 73 6f 4d 55 41 32 33 5a 4e 36 4c 55 4a 67 4f 4d 47 69 33 68 59 41 72 52 52 59 48 65 76 7a 32 33 44 2f 75 73 6f 31 2b 39 42 74 52 41 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 45 41 41 41 41 42 43 41 49 41 41 41 43 51 64 31 50 65 41 41 41 41 44 45 6c 45 51 56 51 49 31 32 50 34 2f 2f 38 2f 41 41 58 2b 41 76 37 63 7a 46 6e 6e 41 41 41 41 41 45 6c 46 Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_LxffBjztgE35oW3Q8n4txDIFrz3lc1Y6L1Swyjp/OfsoMUA23ZN6LUJgOMGi3hYArRRYHevz23D/uso1+9BtRA==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF
Apr 23, 2024 09:42:30.377559900 CEST	755	OUT	GET /bEMFyhlDA.js HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww1.icartservice.com/?caf=1&query=Online+Virtual+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:30.499167919 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:29 GMT content-type: application/javascript; charset=utf-8 content-length: 33791 x-request-id: 2c254b4d-d8fb-40b4-963c-9db27c276d9c set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:30 GMT Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 76 65 72 73 69 6f 6e 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 61 77 61 69 74 65 72 28 65 2c 74 2c 6e 2c 69 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 6e 7c 7c 28 6e 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 73 2c 61 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 74 72 79 7b 64 28 69 2e 6e 65 78 74 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 61 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 74 72 79 7b 64 28 69 2e 74 68 72 6f 77 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 61 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 76 61 72 20 74 3b 65 2e 64 6f 6e 65 3f 73 28 65 2e 76 61 6c 75 65 29 3a 28 74 3d 65 2e 76 61 6c 75 65 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6e 3f 74 3a 6e 65 77 20 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 29 29 2e 74 68 65 6e 28 6f 2c 72 29 7d 64 28 28 69 3d 69 2e 61 70 70 6c 79 28 65 2c 74 7c 7c 5b 5d 29 29 2e 6e 65 78 74 28 29 29 7d 29 29 7d 76 61 72 20 42 6c 6f 63 6b 69 6e 67 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 75 70 70 72 65 73 73 65 64 45 72 72 6f 72 26 26 53 75 70 70 72 65 73 73 65 64 45 72 72 6f 72 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 50 45 4e 44 49 4e 47 3d 22 70 65 6e 64 69 6e 67 22 2c 65 2e 4e 4f 4e 45 3d 22 6e 6f 6e 65 22 2c 65 2e 42 4c 4f 43 4b 45 44 3d 22 62 6c 6f 63 6b 65 64 22 2c 65 2e 41 4c 4c 4f 57 45 44 3d 22 61 6c 6c 6f 77 65 64 22 7d 28 42 6c 6f 63 6b 69 6e 67 7c 7c 28 42 6c 6f 63 6b 69 6e 67 3d 7b 7d 29 29 3b 63 6c 61 73 73 20 41 64 62 6c 6f 63 6b 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 73 74 61 74 65 3d 42 6c 6f 63 6b 69 6e 67 2e 50 45 4e 44 49 4e 47 2c 74 68 69 73 2e 5f 6d 6f 63 6b 65 64 3d 21 31 2c 65 3f 28 74 68 69 73 2e 73 74 61 74 65 3d 65 2c 74 68 69 73 2e 5f 6d 6f 63 6b 65 64 3d 21 30 29 3a 74 68 69 73 2e 73 74 61 74 65 3d 42 6c 6f 63 6b 69 6e 67 2e 41 4c 4c 4f 57 45 44 7d 69 6e 6a 65 63 74 28 29 7b 72 65 74 75 72 6e 20 5f 5f 61 77 61 69 74 65 72 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).version={})}(this,(function(exports){"use strict";function __awaiter(e,t,n,i){return new(n\|\|(n=Promise))((function(s,a){function o(e){try{d(i.next(e))}catch(e){a(e)}}function r(e){try{d(i.throw(e))}catch(e){a(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,r)}d((i=i.apply(e,t\|\|[])).next())}))}var Blocking;"function"==typeof SuppressedError&&SuppressedError,function(e){e.PENDING="pending",e.NONE="none",e.BLOCKED="blocked",e.ALLOWED="allowed"}(Blocking\|\|(Blocking={}));class Adblock{constructor(e){this.state=Blocking.PENDING,this._mocked=!1,e?(this.state=e,this._mocked=!0):this.state=Blocking.ALLOWED}inject(){return __awaiter(this,void 0,void 0,(function
Apr 23, 2024 09:42:30.507950068 CEST	855	OUT	POST /_tr HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive Content-Length: 2433 Accept: application/json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Origin: http://ww1.icartservice.com Referer: http://ww1.icartservice.com/?caf=1&query=Public+Online+High+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:30.649771929 CEST	504	IN	HTTP/1.1 200 OK server: openresty date: Tue, 23 Apr 2024 07:42:30 GMT content-type: text/html; charset=UTF-8 content-encoding: gzip content-length: 22 cache-control: no-cache x-version: 2.118.0 expires: Thu, 01 Jan 1970 00:00:01 GMT cache-control: no-store, must-revalidate cache-control: post-check=0, pre-check=0 pragma: no-cache set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:30 GMT; Max-Age=900; path=/; httponly Data Raw: 1f 8b 08 00 00 00 00 00 04 03 cb cf 06 00 47 dd dc 79 02 00 00 00 Data Ascii: Gy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49719	199.59.243.225	80	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 23, 2024 09:42:05.498847008 CEST	380	OUT	GET /_fd HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad
Apr 23, 2024 09:42:05.637175083 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:04 GMT content-type: text/html; charset=utf-8 content-length: 1066 x-request-id: 5cfd8aa5-1278-42b9-9149-01915388c3cd cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_aUWp38n0fKzyBctLunGJBRdnQGOdnjd3pnirYf8zdl+hBJMpl8EtE1uyY04d9qreEytlE2PUZ6tH+e0ui2EDWA== set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:05 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 61 55 57 70 33 38 6e 30 66 4b 7a 79 42 63 74 4c 75 6e 47 4a 42 52 64 6e 51 47 4f 64 6e 6a 64 33 70 6e 69 72 59 66 38 7a 64 6c 2b 68 42 4a 4d 70 6c 38 45 74 45 31 75 79 59 30 34 64 39 71 72 65 45 79 74 6c 45 32 50 55 5a 36 74 48 2b 65 30 75 69 32 45 44 57 41 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 45 41 41 41 41 42 43 41 49 41 41 41 43 51 64 31 50 65 41 41 41 41 44 45 6c 45 51 56 51 49 31 32 50 34 2f 2f 38 2f 41 41 58 2b 41 76 37 63 7a 46 6e 6e 41 41 41 41 41 45 6c 46 Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_aUWp38n0fKzyBctLunGJBRdnQGOdnjd3pnirYf8zdl+hBJMpl8EtE1uyY04d9qreEytlE2PUZ6tH+e0ui2EDWA==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF
Apr 23, 2024 09:42:05.637202024 CEST	528	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNWJhNTYzYWEtMmYwMC00ZDA1LWFjMDgtMTM0YTNiMGRiMmFkIiwicGFnZV90aW1lIjoxN
Apr 23, 2024 09:42:05.642863035 CEST	528	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNWJhNTYzYWEtMmYwMC00ZDA1LWFjMDgtMTM0YTNiMGRiMmFkIiwicGFnZV90aW1lIjoxN
Apr 23, 2024 09:42:08.620219946 CEST	472	OUT	GET /_tr HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:08.741676092 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:08 GMT content-type: text/html; charset=utf-8 content-length: 1066 x-request-id: 34c16a6d-ccfc-4726-ad59-db2d8b228c95 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pgxESr4EQrSWLStrwGAyFzqkVw9t4wf0DP6HiXtVarorvkSjKUhcrnThR/mD5v/xd9xr6ZZuLchV+AnZ0stilg== set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:08 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 70 67 78 45 53 72 34 45 51 72 53 57 4c 53 74 72 77 47 41 79 46 7a 71 6b 56 77 39 74 34 77 66 30 44 50 36 48 69 58 74 56 61 72 6f 72 76 6b 53 6a 4b 55 68 63 72 6e 54 68 52 2f 6d 44 35 76 2f 78 64 39 78 72 36 5a 5a 75 4c 63 68 56 2b 41 6e 5a 30 73 74 69 6c 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 45 41 41 41 41 42 43 41 49 41 41 41 43 51 64 31 50 65 41 41 41 41 44 45 6c 45 51 56 51 49 31 32 50 34 2f 2f 38 2f 41 41 58 2b 41 76 37 63 7a 46 6e 6e 41 41 41 41 41 45 6c 46 Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pgxESr4EQrSWLStrwGAyFzqkVw9t4wf0DP6HiXtVarorvkSjKUhcrnThR/mD5v/xd9xr6ZZuLchV+AnZ0stilg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF
Apr 23, 2024 09:42:08.741703033 CEST	528	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNWJhNTYzYWEtMmYwMC00ZDA1LWFjMDgtMTM0YTNiMGRiMmFkIiwicGFnZV90aW1lIjoxN
Apr 23, 2024 09:42:08.746905088 CEST	528	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNWJhNTYzYWEtMmYwMC00ZDA1LWFjMDgtMTM0YTNiMGRiMmFkIiwicGFnZV90aW1lIjoxN
Apr 23, 2024 09:42:16.585755110 CEST	480	OUT	GET /favicon.ico HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:16.707401991 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:16 GMT content-type: text/html; charset=utf-8 content-length: 1078 x-request-id: f938c924-ae3d-42cf-9ff7-da7cfd4fe0ad cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pegRjBzXd+CHA0mNs87R96DxuEBBr7S+Tkmxb080m+ri2jZde+F19CYSMQrvaQ7q7msfhtk5v1fxknUhQnH9YA== set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:16 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 70 65 67 52 6a 42 7a 58 64 2b 43 48 41 30 6d 4e 73 38 37 52 39 36 44 78 75 45 42 42 72 37 53 2b 54 6b 6d 78 62 30 38 30 6d 2b 72 69 32 6a 5a 64 65 2b 46 31 39 43 59 53 4d 51 72 76 61 51 37 71 37 6d 73 66 68 74 6b 35 76 31 66 78 6b 6e 55 68 51 6e 48 39 59 41 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 45 41 41 41 41 42 43 41 49 41 41 41 43 51 64 31 50 65 41 41 41 41 44 45 6c 45 51 56 51 49 31 32 50 34 2f 2f 38 2f 41 41 58 2b 41 76 37 63 7a 46 6e 6e 41 41 41 41 41 45 6c 46 Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pegRjBzXd+CHA0mNs87R96DxuEBBr7S+Tkmxb080m+ri2jZde+F19CYSMQrvaQ7q7msfhtk5v1fxknUhQnH9YA==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF
Apr 23, 2024 09:42:16.707452059 CEST	540	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNWJhNTYzYWEtMmYwMC00ZDA1LWFjMDgtMTM0YTNiMGRiMmFkIiwicGFnZV90aW1lIjoxN
Apr 23, 2024 09:42:16.714870930 CEST	540	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNWJhNTYzYWEtMmYwMC00ZDA1LWFjMDgtMTM0YTNiMGRiMmFkIiwicGFnZV90aW1lIjoxN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	199.59.243.225	80	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 23, 2024 09:42:14.765125036 CEST	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>
Apr 23, 2024 09:42:30.461894989 CEST	855	OUT	POST /_tr HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive Content-Length: 2433 Accept: application/json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Origin: http://ww1.icartservice.com Referer: http://ww1.icartservice.com/?caf=1&query=Public+Online+High+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:30.461894989 CEST	2433	OUT	Data Raw: 7b 22 73 69 67 6e 61 74 75 72 65 22 3a 22 55 78 46 64 56 4d 77 4e 46 4e 77 4e 30 77 7a 4f 44 45 79 62 56 65 79 4a 68 5a 46 39 73 62 32 46 6b 5a 57 52 66 59 32 46 73 62 47 4a 68 59 32 73 69 4f 6e 73 69 59 32 39 75 64 47 46 70 62 6d 56 79 54 6d 46 Data Ascii: {"signature":"UxFdVMwNFNwN0wzODEybVeyJhZF9sb2FkZWRfY2FsbGJhY2siOnsiY29udGFpbmVyTmFtZSI6ImFkLTEiLCJhZHNMb2FkZWQiOnRydWUsImNhbGxiYWNrT3B0aW9ucyI6eyJjYWZSZXF1ZXN0QWNjZXB0ZWQiOnRydWUsImNhZlN0YXR1cyI6eyJjbGllbnQiOiJwYXJ0bmVyLWRwLWJvZGlzMzBfM3BoIiwi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49720	199.59.243.225	80	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 23, 2024 09:42:15.738219023 CEST	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>
Apr 23, 2024 09:42:27.143321037 CEST	707	OUT	GET /_fd?caf=1&query=Residential+Painting&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREm0BlLqpj85G31fQC_eX0OZ1K3-a4OuiTf69i9hvcgwdKJvXpLoWWcXmE6_agIF8lgRjy0Qo5LP2xgfTZKRUkyEguFq3OH33d6-gTDHTZMRKzpBUEZlrZBAi2ClP0NSGhfLtEPzwEQBlkZro-tgR&pcsa=false&nb=0 HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49745	199.59.243.225	80	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 23, 2024 09:42:27.248681068 CEST	707	OUT	GET /_fd?caf=1&query=Residential+Painting&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREm0BlLqpj85G31fQC_eX0OZ1K3-a4OuiTf69i9hvcgwdKJvXpLoWWcXmE6_agIF8lgRjy0Qo5LP2xgfTZKRUkyEguFq3OH33d6-gTDHTZMRKzpBUEZlrZBAi2ClP0NSGhfLtEPzwEQBlkZro-tgR&pcsa=false&nb=0 HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:27.387073994 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:27 GMT content-type: text/html; charset=utf-8 content-length: 1746 x-request-id: 1ff56628-4959-4e04-a46e-880245333d61 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_QwyL3qVXwhzSixI5LT9PQNCJcAMH2zB+OwsX/p9nWPg9ZMRLizmxKru73xTfrxfrmipi4t1WlHktA6uBxnuskQ== set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:27 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 51 77 79 4c 33 71 56 58 77 68 7a 53 69 78 49 35 4c 54 39 50 51 4e 43 4a 63 41 4d 48 32 7a 42 2b 4f 77 73 58 2f 70 39 6e 57 50 67 39 5a 4d 52 4c 69 7a 6d 78 4b 72 75 37 33 78 54 66 72 78 66 72 6d 69 70 69 34 74 31 57 6c 48 6b 74 41 36 75 42 78 6e 75 73 6b 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 45 41 41 41 41 42 43 41 49 41 41 41 43 51 64 31 50 65 41 41 41 41 44 45 6c 45 51 56 51 49 31 32 50 34 2f 2f 38 2f 41 41 58 2b 41 76 37 63 7a 46 6e 6e 41 41 41 41 41 45 6c 46 Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_QwyL3qVXwhzSixI5LT9PQNCJcAMH2zB+OwsX/p9nWPg9ZMRLizmxKru73xTfrxfrmipi4t1WlHktA6uBxnuskQ==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF
Apr 23, 2024 09:42:27.387118101 CEST	1200	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNWJhNTYzYWEtMmYwMC00ZDA1LWFjMDgtMTM0YTNiMGRiMmFkIiwicGFnZV90aW1lIjoxN
Apr 23, 2024 09:42:27.387151003 CEST	8	IN	Data Raw: 3c 2f 68 74 6d 6c 3e 0a Data Ascii: </html>
Apr 23, 2024 09:42:27.394757032 CEST	8	IN	Data Raw: 3c 2f 68 74 6d 6c 3e 0a Data Ascii: </html>
Apr 23, 2024 09:42:28.817055941 CEST	472	OUT	GET /_tr HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:28.938353062 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:28 GMT content-type: text/html; charset=utf-8 content-length: 1066 x-request-id: 0b7a9c1d-9cc1-41a5-8599-4b0cc26d05b3 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pgxESr4EQrSWLStrwGAyFzqkVw9t4wf0DP6HiXtVarorvkSjKUhcrnThR/mD5v/xd9xr6ZZuLchV+AnZ0stilg== set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:28 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 70 67 78 45 53 72 34 45 51 72 53 57 4c 53 74 72 77 47 41 79 46 7a 71 6b 56 77 39 74 34 77 66 30 44 50 36 48 69 58 74 56 61 72 6f 72 76 6b 53 6a 4b 55 68 63 72 6e 54 68 52 2f 6d 44 35 76 2f 78 64 39 78 72 36 5a 5a 75 4c 63 68 56 2b 41 6e 5a 30 73 74 69 6c 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 45 41 41 41 41 42 43 41 49 41 41 41 43 51 64 31 50 65 41 41 41 41 44 45 6c 45 51 56 51 49 31 32 50 34 2f 2f 38 2f 41 41 58 2b 41 76 37 63 7a 46 6e 6e 41 41 41 41 41 45 6c 46 Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pgxESr4EQrSWLStrwGAyFzqkVw9t4wf0DP6HiXtVarorvkSjKUhcrnThR/mD5v/xd9xr6ZZuLchV+AnZ0stilg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF
Apr 23, 2024 09:42:28.938376904 CEST	528	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNWJhNTYzYWEtMmYwMC00ZDA1LWFjMDgtMTM0YTNiMGRiMmFkIiwicGFnZV90aW1lIjoxN
Apr 23, 2024 09:42:28.942722082 CEST	528	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNWJhNTYzYWEtMmYwMC00ZDA1LWFjMDgtMTM0YTNiMGRiMmFkIiwicGFnZV90aW1lIjoxN
Apr 23, 2024 09:42:29.537026882 CEST	711	OUT	GET /_fd?caf=1&query=Public+Online+High+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj5ChLdQmlm3hGhEGZ9fB9fWxBdR4asXU5Tinx_BkmmMtx_k8epg4Yv3Awlyy89h7ugm6YX2UG5c2wh2YQBpTFSpLpUYwac74qfmqtnHcjDrpdh_R4lx9-biSL-LXhyFqZc_ocKipgaw&pcsa=false&nb=0 HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:29.658747911 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:29 GMT content-type: text/html; charset=utf-8 content-length: 1754 x-request-id: b8d127d4-b854-46b3-a242-e6ac6044931b cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_fuTJcJFfsCDzO2mvPChi1yD3YNodg5jC77khzHbHh+hgkluXwiKx1ETqg5OcqZ1cTbcuWi5Tl8hbMgRmgTDF5w== set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:29 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 66 75 54 4a 63 4a 46 66 73 43 44 7a 4f 32 6d 76 50 43 68 69 31 79 44 33 59 4e 6f 64 67 35 6a 43 37 37 6b 68 7a 48 62 48 68 2b 68 67 6b 6c 75 58 77 69 4b 78 31 45 54 71 67 35 4f 63 71 5a 31 63 54 62 63 75 57 69 35 54 6c 38 68 62 4d 67 52 6d 67 54 44 46 35 77 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 45 41 41 41 41 42 43 41 49 41 41 41 43 51 64 31 50 65 41 41 41 41 44 45 6c 45 51 56 51 49 31 32 50 34 2f 2f 38 2f 41 41 58 2b 41 76 37 63 7a 46 6e 6e 41 41 41 41 41 45 6c 46 Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_fuTJcJFfsCDzO2mvPChi1yD3YNodg5jC77khzHbHh+hgkluXwiKx1ETqg5OcqZ1cTbcuWi5Tl8hbMgRmgTDF5w==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF
Apr 23, 2024 09:42:29.658795118 CEST	1200	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNWJhNTYzYWEtMmYwMC00ZDA1LWFjMDgtMTM0YTNiMGRiMmFkIiwicGFnZV90aW1lIjoxN
Apr 23, 2024 09:42:29.658845901 CEST	16	IN	Data Raw: 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: </body></html>
Apr 23, 2024 09:42:29.662743092 CEST	16	IN	Data Raw: 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: </body></html>
Apr 23, 2024 09:42:30.713130951 CEST	472	OUT	GET /_tr HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:30.835145950 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:30 GMT content-type: text/html; charset=utf-8 content-length: 1066 x-request-id: 2ea3da72-ed2b-4f0a-80a6-5cc31892fca5 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pgxESr4EQrSWLStrwGAyFzqkVw9t4wf0DP6HiXtVarorvkSjKUhcrnThR/mD5v/xd9xr6ZZuLchV+AnZ0stilg== set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:30 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 70 67 78 45 53 72 34 45 51 72 53 57 4c 53 74 72 77 47 41 79 46 7a 71 6b 56 77 39 74 34 77 66 30 44 50 36 48 69 58 74 56 61 72 6f 72 76 6b 53 6a 4b 55 68 63 72 6e 54 68 52 2f 6d 44 35 76 2f 78 64 39 78 72 36 5a 5a 75 4c 63 68 56 2b 41 6e 5a 30 73 74 69 6c 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 45 41 41 41 41 42 43 41 49 41 41 41 43 51 64 31 50 65 41 41 41 41 44 45 6c 45 51 56 51 49 31 32 50 34 2f 2f 38 2f 41 41 58 2b 41 76 37 63 7a 46 6e 6e 41 41 41 41 41 45 6c 46 Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pgxESr4EQrSWLStrwGAyFzqkVw9t4wf0DP6HiXtVarorvkSjKUhcrnThR/mD5v/xd9xr6ZZuLchV+AnZ0stilg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF
Apr 23, 2024 09:42:30.835186005 CEST	528	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNWJhNTYzYWEtMmYwMC00ZDA1LWFjMDgtMTM0YTNiMGRiMmFkIiwicGFnZV90aW1lIjoxN
Apr 23, 2024 09:42:30.870879889 CEST	528	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNWJhNTYzYWEtMmYwMC00ZDA1LWFjMDgtMTM0YTNiMGRiMmFkIiwicGFnZV90aW1lIjoxN
Apr 23, 2024 09:42:31.001555920 CEST	707	OUT	GET /_fd?caf=1&query=Online+Virtual+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU&pcsa=false&nb=0 HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:31.123213053 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:30 GMT content-type: text/html; charset=utf-8 content-length: 1746 x-request-id: 7d2bc3af-5707-4e4b-acb6-0107726de661 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_e4gNrTDvdYg90HrxMBIuwCWTv6SKavEO8b2xI6+VkuDjs5aPNterhXSM93zhO+l6Sk9UKsylA3gX0igimXhYVg== set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:31 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 65 34 67 4e 72 54 44 76 64 59 67 39 30 48 72 78 4d 42 49 75 77 43 57 54 76 36 53 4b 61 76 45 4f 38 62 32 78 49 36 2b 56 6b 75 44 6a 73 35 61 50 4e 74 65 72 68 58 53 4d 39 33 7a 68 4f 2b 6c 36 53 6b 39 55 4b 73 79 6c 41 33 67 58 30 69 67 69 6d 58 68 59 56 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 45 41 41 41 41 42 43 41 49 41 41 41 43 51 64 31 50 65 41 41 41 41 44 45 6c 45 51 56 51 49 31 32 50 34 2f 2f 38 2f 41 41 58 2b 41 76 37 63 7a 46 6e 6e 41 41 41 41 41 45 6c 46 Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_e4gNrTDvdYg90HrxMBIuwCWTv6SKavEO8b2xI6+VkuDjs5aPNterhXSM93zhO+l6Sk9UKsylA3gX0igimXhYVg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF
Apr 23, 2024 09:42:34.068129063 CEST	472	OUT	GET /_tr HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:34.189959049 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:33 GMT content-type: text/html; charset=utf-8 content-length: 1066 x-request-id: 6011e33b-14d0-4458-8772-9bcbd486edfa cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pgxESr4EQrSWLStrwGAyFzqkVw9t4wf0DP6HiXtVarorvkSjKUhcrnThR/mD5v/xd9xr6ZZuLchV+AnZ0stilg== set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:34 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 70 67 78 45 53 72 34 45 51 72 53 57 4c 53 74 72 77 47 41 79 46 7a 71 6b 56 77 39 74 34 77 66 30 44 50 36 48 69 58 74 56 61 72 6f 72 76 6b 53 6a 4b 55 68 63 72 6e 54 68 52 2f 6d 44 35 76 2f 78 64 39 78 72 36 5a 5a 75 4c 63 68 56 2b 41 6e 5a 30 73 74 69 6c 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 45 41 41 41 41 42 43 41 49 41 41 41 43 51 64 31 50 65 41 41 41 41 44 45 6c 45 51 56 51 49 31 32 50 34 2f 2f 38 2f 41 41 58 2b 41 76 37 63 7a 46 6e 6e 41 41 41 41 41 45 6c 46 Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pgxESr4EQrSWLStrwGAyFzqkVw9t4wf0DP6HiXtVarorvkSjKUhcrnThR/mD5v/xd9xr6ZZuLchV+AnZ0stilg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF
Apr 23, 2024 09:42:40.174082041 CEST	480	OUT	GET /favicon.ico HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:40.295617104 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:39 GMT content-type: text/html; charset=utf-8 content-length: 1078 x-request-id: 3fda1ebd-e5a5-494a-b263-e4db07c0ea77 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pegRjBzXd+CHA0mNs87R96DxuEBBr7S+Tkmxb080m+ri2jZde+F19CYSMQrvaQ7q7msfhtk5v1fxknUhQnH9YA== set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:40 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 70 65 67 52 6a 42 7a 58 64 2b 43 48 41 30 6d 4e 73 38 37 52 39 36 44 78 75 45 42 42 72 37 53 2b 54 6b 6d 78 62 30 38 30 6d 2b 72 69 32 6a 5a 64 65 2b 46 31 39 43 59 53 4d 51 72 76 61 51 37 71 37 6d 73 66 68 74 6b 35 76 31 66 78 6b 6e 55 68 51 6e 48 39 59 41 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 45 41 41 41 41 42 43 41 49 41 41 41 43 51 64 31 50 65 41 41 41 41 44 45 6c 45 51 56 51 49 31 32 50 34 2f 2f 38 2f 41 41 58 2b 41 76 37 63 7a 46 6e 6e 41 41 41 41 41 45 6c 46 Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pegRjBzXd+CHA0mNs87R96DxuEBBr7S+Tkmxb080m+ri2jZde+F19CYSMQrvaQ7q7msfhtk5v1fxknUhQnH9YA==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49752	199.59.243.225	80	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 23, 2024 09:42:30.663290977 CEST	1083	OUT	POST /_fd?caf=1&query=Online+Virtual+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU&pcsa=false&nb=0 HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive Content-Length: 0 Accept: application/json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Origin: http://ww1.icartservice.com Referer: http://ww1.icartservice.com/?caf=1&query=Online+Virtual+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:30.817437887 CEST	1200	IN	HTTP/1.1 200 OK server: openresty date: Tue, 23 Apr 2024 07:42:29 GMT content-type: text/html; charset=UTF-8 content-encoding: gzip content-length: 2075 cache-control: no-cache x-version: 2.118.0 expires: Thu, 01 Jan 1970 00:00:01 GMT cache-control: no-store, must-revalidate cache-control: post-check=0, pre-check=0 pragma: no-cache set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:30 GMT; Max-Age=900; path=/; httponly Data Raw: 1f 8b 08 00 00 00 00 00 04 03 bd 57 c9 76 e2 4a 16 fc a0 da 68 40 ae c7 e2 2d 10 a0 a9 91 30 32 68 c8 9d 94 c2 48 22 13 d4 c5 a0 e1 eb 3b 32 b1 81 aa b6 cf 3b bd e9 05 c7 06 29 ef 18 37 6e e4 a6 b3 8a c8 6f 03 2b 68 03 a5 1d 96 b3 79 9f 47 db de e3 c4 1a 0f 24 f1 34 92 b8 d5 b2 f2 1a 3a 55 3a 7f aa f4 fe 6c 7e f6 d7 e9 39 18 fc 0b 89 fd 7e c1 d9 a5 b0 a3 3e e7 d6 c9 ad da 8a f0 f0 9d 6a 51 5f f0 a8 4f b4 b0 c4 33 25 8b 55 e6 d6 c7 2e 18 e6 f0 b0 19 f9 eb 4d bb 98 7a 6d 1a 17 6c ad 9b 78 3e be d0 de 7d 81 df b6 88 3d 8f 4c dd 17 97 87 ed 22 f6 ae c4 66 83 3f 98 ef be 6e 1e a5 7d 7b 7c 4e 63 76 d9 f0 e8 90 25 81 42 b9 75 29 e4 fb d6 b0 88 c3 3e 8b 57 67 bf 76 0d 64 a2 c0 9f 81 38 b5 e5 7a de 06 95 7b 72 0f 26 a3 87 e0 2a 62 cd 92 86 91 b9 b5 17 7e 09 be 53 6d 83 e7 1e a3 7a 74 2a 9c 60 25 62 5b 71 6b 20 11 72 93 f6 4b a5 70 26 2f c9 74 4c 17 7a a1 fb 6f 46 93 6a 56 8f 77 61 93 e0 ff cd 25 d5 c6 67 11 63 1e 5b a3 48 d4 64 d3 b1 9c 17 4a 86 f3 c1 7a 72 72 79 70 4c 63 03 75 6b 45 4d 5b 11 6b ca c7 fb 2c f1 cf 44 43 5c 87 b0 cf b5 16 35 f6 4f d4 66 fb cf fc 17 71 51 e7 9a 81 5c c7 a7 e5 9a 7e fb cc 1f 26 fa c2 31 1b 32 55 ab 5c 0b 1b da ab 07 c4 74 29 1c ef 9a cf e6 aa 5f 75 df f9 54 70 b6 42 4f 7e 15 a8 87 2b 6b 15 32 ca d5 01 7d ab 44 4e 69 1c 2a 04 f5 16 df 73 8d 70 f1 1b d5 43 23 b7 a3 5b bf ea 7d 1b cc dc 36 58 bb ad 3f 5b 09 5b b7 18 d4 90 e5 89 79 4a 93 90 ad e2 ee 94 eb c5 10 73 bf 5a 22 d7 22 8e c6 f2 3d 7b 5c 67 3a 7e 63 e7 9f ee 21 34 a8 bd 11 f5 e9 49 dc 09 fc ec 81 a7 92 a2 76 32 0e 91 8f 6d 35 39 f0 25 62 a1 07 5f f8 52 b3 cd b8 2d 6c 76 16 7d 75 eb 86 a7 71 37 90 37 f4 e2 10 a1 c6 f2 dd e1 fd ad 7b b6 5f 12 47 9e 95 b5 15 98 fa c0 7a 49 80 75 e1 ab 88 d9 2b 75 c2 26 8f d9 0b 79 7b c2 09 37 d4 3c 06 56 2a f7 c5 d7 d5 02 fe 87 c2 61 27 92 20 07 fc 86 3e 5d 8b a9 f9 33 b1 47 3b 77 aa 9c 81 39 3d 43 fd b2 d9 71 e7 af e7 8a ef 98 a3 a5 da 5d de a3 ee 92 d8 86 a8 93 b1 98 9a c7 c2 56 4f ae 73 a6 79 35 c1 39 93 8b 9e 2f 62 52 c2 ff 69 bb 3e ee a8 66 61 4e 54 31 97 0d a9 da 9d a7 58 c0 bb 75 f2 86 fb 99 23 89 d9 21 73 56 2f ee 6c de fa d3 cd 47 0c 93 5d ca ad 3a d3 8a 3e d7 a3 0b f0 81 9c bb 2b ad 8f 3b 77 f0 Data Ascii: WvJh@-02hH";2;)7no+hyG$4:U:l~9~>jQ_O3%U.Mzmlx>}=L"f?n}{\|Ncv%Bu)>Wgvd8z{r&b~Smzt`%b[qk rKp&/tLzoFjVwa%gc[HdJzrrypLcukEM[k,DC\5OfqQ\~&12U\t)_uTpBO~+k2}DNispC#[}6X?[[yJsZ""={\g:~c!4Iv2m59%b_R-lv}uq77{_GzIu+u&y{7<Va' >]3G;w9=Cq]VOsy59/bRi>faNT1Xu#!sV/lG]:>+;w
Apr 23, 2024 09:42:30.817497015 CEST	1200	IN	Data Raw: a6 fe de ed 57 f5 dd c6 39 4d bc 43 16 8f 60 03 71 c4 ec 4c ed 71 8f 9a 5f 8a d9 fd 9d 36 d7 83 06 f5 be e6 b0 41 79 24 fa db 14 fc e1 2f d7 09 f0 43 d0 6f 7a de 22 ef 0c 78 26 76 74 f9 cc db d5 43 f4 b4 60 8f 3a 4d 76 f0 33 64 b0 93 6b f0 ed 78 Data Ascii: W9MC`qLq_6Ay$/Coz"x&vtC`:Mv3dkx,-%Kg)bK4o1g NO)~1M^}fFT-sD.I>{TExOH3RCA]`:s{A9!8sn>sXSxp}uRs
Apr 23, 2024 09:42:30.817538977 CEST	159	IN	Data Raw: f7 81 cc 09 15 3a 6b e8 42 05 47 25 8c 8b fb 55 5e 19 d0 10 2a 5d 0c f8 bf 56 bf bc b7 79 88 83 cc 14 63 33 1f 6f fc c1 1f 05 ca 9e 53 1b ba 3e 86 d6 9e 29 6a ca e7 6a 50 07 65 fa a6 f4 a4 9e b4 8b 75 b8 f7 67 1b 70 ab df 2e c5 dd 78 08 4b 5f 73 Data Ascii: :kBG%U^*]Vyc3oS>)jjPeugp.xK_s[bcs.{<L7m>{Hg{w+]y6~afqTHvYZ
Apr 23, 2024 09:42:30.822834969 CEST	159	IN	Data Raw: f7 81 cc 09 15 3a 6b e8 42 05 47 25 8c 8b fb 55 5e 19 d0 10 2a 5d 0c f8 bf 56 bf bc b7 79 88 83 cc 14 63 33 1f 6f fc c1 1f 05 ca 9e 53 1b ba 3e 86 d6 9e 29 6a ca e7 6a 50 07 65 fa a6 f4 a4 9e b4 8b 75 b8 f7 67 1b 70 ab df 2e c5 dd 78 08 4b 5f 73 Data Ascii: :kBG%U^*]Vyc3oS>)jjPeugp.xK_s[bcs.{<L7m>{Hg{w+]y6~afqTHvYZ
Apr 23, 2024 09:42:33.406416893 CEST	851	OUT	POST /_tr HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive Content-Length: 2413 Accept: application/json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Origin: http://ww1.icartservice.com Referer: http://ww1.icartservice.com/?caf=1&query=Online+Virtual+School&afdToken=ChMIqtHrhuvXhQMVkZCJBB0lbwBREmwBlLqpj8IRoaLYZ22EDSGqHbN-qoQ_blA2mzFsjfbKRA5ScAnQrjHST9MPR_oMQeKpFSOYHmRnasogCk82bXBtiJmRKw40K3Ns5FSskyCQw5AJNiV-cN0fS54ciX9CATS3eVH7K799YgYRJsU&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:33.406507969 CEST	2413	OUT	Data Raw: 7b 22 73 69 67 6e 61 74 75 72 65 22 3a 22 55 78 46 64 56 4d 77 4e 46 4e 77 4e 30 77 7a 4f 44 45 79 62 56 65 79 4a 68 5a 46 39 73 62 32 46 6b 5a 57 52 66 59 32 46 73 62 47 4a 68 59 32 73 69 4f 6e 73 69 59 32 39 75 64 47 46 70 62 6d 56 79 54 6d 46 Data Ascii: {"signature":"UxFdVMwNFNwN0wzODEybVeyJhZF9sb2FkZWRfY2FsbGJhY2siOnsiY29udGFpbmVyTmFtZSI6ImFkLTEiLCJhZHNMb2FkZWQiOnRydWUsImNhbGxiYWNrT3B0aW9ucyI6eyJjYWZSZXF1ZXN0QWNjZXB0ZWQiOnRydWUsImNhZlN0YXR1cyI6eyJjbGllbnQiOiJwYXJ0bmVyLWRwLWJvZGlzMzBfM3BoIiwi
Apr 23, 2024 09:42:33.547518969 CEST	504	IN	HTTP/1.1 200 OK server: openresty date: Tue, 23 Apr 2024 07:42:33 GMT content-type: text/html; charset=UTF-8 content-encoding: gzip content-length: 22 cache-control: no-cache x-version: 2.118.0 expires: Thu, 01 Jan 1970 00:00:01 GMT cache-control: no-store, must-revalidate cache-control: post-check=0, pre-check=0 pragma: no-cache set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:33 GMT; Max-Age=900; path=/; httponly Data Raw: 1f 8b 08 00 00 00 00 00 04 03 cb cf 06 00 47 dd dc 79 02 00 00 00 Data Ascii: Gy
Apr 23, 2024 09:42:33.754987001 CEST	504	IN	HTTP/1.1 200 OK server: openresty date: Tue, 23 Apr 2024 07:42:33 GMT content-type: text/html; charset=UTF-8 content-encoding: gzip content-length: 22 cache-control: no-cache x-version: 2.118.0 expires: Thu, 01 Jan 1970 00:00:01 GMT cache-control: no-store, must-revalidate cache-control: post-check=0, pre-check=0 pragma: no-cache set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:33 GMT; Max-Age=900; path=/; httponly Data Raw: 1f 8b 08 00 00 00 00 00 04 03 cb cf 06 00 47 dd dc 79 02 00 00 00 Data Ascii: Gy
Apr 23, 2024 09:42:39.797038078 CEST	636	OUT	GET /legal HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:39.918911934 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:39 GMT content-type: text/html; charset=utf-8 content-length: 8131 x-request-id: a418b160-615e-464e-b1aa-4a1da5a12337 set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:39 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4c 65 67 61 6c 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 48 65 6c 76 65 74 69 63 61 2c 20 74 72 65 62 75 63 68 65 74 20 6d 73 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 68 69 63 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 37 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 68 69 63 6c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 36 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 68 65 6c 76 65 74 69 63 61 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 63 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 61 75 74 6f 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 63 75 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 0a 20 20 20 20 20 Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>Legal</title> <style> body { font-family: Helvetica, trebuchet ms, arial, sans-serif; margin: 0; } .hic { height: 70px; position: relative; width: 1000px; margin: 0 auto; border-bottom: 1px solid #000; } .hicl { position: absolute; left: 20px; top: 20px; font-weight: 300; font-size: 26px; color: #000; font-family: helvetica, arial, sans-serif; } .c { position: relative; width: 1000px; margin: 10px auto 0; overflow: hidden; } .cu { font-size: 11px;
Apr 23, 2024 09:42:39.918942928 CEST	1200	IN	Data Raw: 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 68 32 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 20 Data Ascii: margin: 0 0 30px; } h2 { font-size: 16px; margin: 30px 0 10px; } p, ol { font-size: 13px; margin: 10px 0; } .indent { margin-
Apr 23, 2024 09:42:39.918962002 CEST	1200	IN	Data Raw: 71 75 65 73 74 20 46 6f 72 6d 20 75 73 69 6e 67 20 74 68 65 20 6c 69 6e 6b 20 62 65 6c 6f 77 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 79 6f 75 72 0a 20 20 20 20 20 20 20 20 63 6f 6d 70 6c 61 69 6e 74 20 63 61 6e 20 62 65 20 65 76 61 6c 75 Data Ascii: quest Form using the link below to ensure that your complaint can be evaluated by our legal department:</p> <p><a target="_blank" href="https://www.bodis.com/takedown-request">https://www.bodis.com/takedown-request</a></p> <p>A
Apr 23, 2024 09:42:39.918978930 CEST	1200	IN	Data Raw: 64 65 73 63 72 69 62 65 64 20 61 62 6f 76 65 2c 20 69 6e 20 74 68 65 20 6d 61 6e 6e 65 72 20 63 6f 6d 70 6c 61 69 6e 65 64 20 6f 66 2c 20 69 73 20 6e 6f 74 20 61 75 74 68 6f 72 69 7a 65 64 20 62 79 20 74 68 65 0a 20 20 20 20 20 20 20 20 74 72 61 Data Ascii: described above, in the manner complained of, is not authorized by the trademark owner, its agent, or the law; (b) you state under penalty of perjury that the information supplied is accurate, and that you are the trademark own
Apr 23, 2024 09:42:39.918996096 CEST	1200	IN	Data Raw: 3e 0a 0a 20 20 20 20 3c 68 32 3e 43 4f 50 59 52 49 47 48 54 20 49 4e 46 52 49 4e 47 45 4d 45 4e 54 3c 2f 68 32 3e 0a 20 20 20 20 3c 70 3e 41 6e 79 20 63 6f 6e 74 65 6e 74 20 70 6c 61 63 65 64 20 6f 6e 20 61 20 77 65 62 70 61 67 65 20 61 63 63 65 Data Ascii: > <h2>COPYRIGHT INFRINGEMENT</h2> <p>Any content placed on a webpage accessed through or via a domain name is the responsibility of the owner. Bodis does not provide webpage content creation services, or any other similar serv
Apr 23, 2024 09:42:39.919012070 CEST	1200	IN	Data Raw: 63 74 69 76 69 74 79 20 69 73 20 69 6e 66 72 69 6e 67 69 6e 67 20 79 6f 75 72 20 63 6f 70 79 72 69 67 68 74 2e 20 41 63 63 6f 72 64 69 6e 67 6c 79 2c 20 43 6f 6d 70 61 6e 79 20 73 75 67 67 65 73 74 73 20 74 68 61 74 20 79 6f 75 20 66 69 72 73 74 Data Ascii: ctivity is infringing your copyright. Accordingly, Company suggests that you first contact an attorney. To expedite Companys ability to process your request, please use the following format (including section numbers):</p>
Apr 23, 2024 09:42:39.919029951 CEST	1148	IN	Data Raw: 68 65 20 63 6f 70 79 72 69 67 68 74 65 64 20 6d 61 74 65 72 69 61 6c 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 73 63 72 69 62 65 64 20 61 62 6f 76 65 20 61 73 20 61 6c 6c 65 67 65 64 6c 79 20 69 6e 66 72 69 6e 67 69 6e 67 20 69 73 20 6e 6f Data Ascii: he copyrighted materials described above as allegedly infringing is not authorized by the copyright owner, its agent, or the law.</p> <p>6. Include the following statement: I swear, under penalty of perjur
Apr 23, 2024 09:42:40.005078077 CEST	585	OUT	GET /favicon.ico HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww1.icartservice.com/legal Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:42:40.126691103 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:42:39 GMT content-type: text/html; charset=utf-8 content-length: 1138 x-request-id: 7ee9eeca-d761-42b4-9fdd-caf2e8fe1b6d cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pegRjBzXd+CHA0mNs87R96DxuEBBr7S+Tkmxb080m+ri2jZde+F19CYSMQrvaQ7q7msfhtk5v1fxknUhQnH9YA== set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:57:40 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 70 65 67 52 6a 42 7a 58 64 2b 43 48 41 30 6d 4e 73 38 37 52 39 36 44 78 75 45 42 42 72 37 53 2b 54 6b 6d 78 62 30 38 30 6d 2b 72 69 32 6a 5a 64 65 2b 46 31 39 43 59 53 4d 51 72 76 61 51 37 71 37 6d 73 66 68 74 6b 35 76 31 66 78 6b 6e 55 68 51 6e 48 39 59 41 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 45 41 41 41 41 42 43 41 49 41 41 41 43 51 64 31 50 65 41 41 41 41 44 45 6c 45 51 56 51 49 31 32 50 34 2f 2f 38 2f 41 41 58 2b 41 76 37 63 7a 46 6e 6e 41 41 41 41 41 45 6c 46 Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pegRjBzXd+CHA0mNs87R96DxuEBBr7S+Tkmxb080m+ri2jZde+F19CYSMQrvaQ7q7msfhtk5v1fxknUhQnH9YA==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49753	199.59.243.225	80	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 23, 2024 09:42:40.897789955 CEST	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>
Apr 23, 2024 09:43:05.874747992 CEST	636	OUT	GET /legal HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49817	199.59.243.225	80	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 23, 2024 09:43:05.964838028 CEST	636	OUT	GET /legal HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:43:06.100790024 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:43:05 GMT content-type: text/html; charset=utf-8 content-length: 8131 x-request-id: e427e90a-6551-4725-ba71-0e7bcea2ddb2 set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:58:06 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4c 65 67 61 6c 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 48 65 6c 76 65 74 69 63 61 2c 20 74 72 65 62 75 63 68 65 74 20 6d 73 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 68 69 63 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 37 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 68 69 63 6c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 36 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 68 65 6c 76 65 74 69 63 61 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 63 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 61 75 74 6f 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 63 75 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 0a 20 20 20 20 20 Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>Legal</title> <style> body { font-family: Helvetica, trebuchet ms, arial, sans-serif; margin: 0; } .hic { height: 70px; position: relative; width: 1000px; margin: 0 auto; border-bottom: 1px solid #000; } .hicl { position: absolute; left: 20px; top: 20px; font-weight: 300; font-size: 26px; color: #000; font-family: helvetica, arial, sans-serif; } .c { position: relative; width: 1000px; margin: 10px auto 0; overflow: hidden; } .cu { font-size: 11px;
Apr 23, 2024 09:43:06.100872040 CEST	1200	IN	Data Raw: 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 68 32 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 20 Data Ascii: margin: 0 0 30px; } h2 { font-size: 16px; margin: 30px 0 10px; } p, ol { font-size: 13px; margin: 10px 0; } .indent { margin-
Apr 23, 2024 09:43:06.100883961 CEST	1200	IN	Data Raw: 71 75 65 73 74 20 46 6f 72 6d 20 75 73 69 6e 67 20 74 68 65 20 6c 69 6e 6b 20 62 65 6c 6f 77 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 79 6f 75 72 0a 20 20 20 20 20 20 20 20 63 6f 6d 70 6c 61 69 6e 74 20 63 61 6e 20 62 65 20 65 76 61 6c 75 Data Ascii: quest Form using the link below to ensure that your complaint can be evaluated by our legal department:</p> <p><a target="_blank" href="https://www.bodis.com/takedown-request">https://www.bodis.com/takedown-request</a></p> <p>A
Apr 23, 2024 09:43:06.100895882 CEST	1200	IN	Data Raw: 64 65 73 63 72 69 62 65 64 20 61 62 6f 76 65 2c 20 69 6e 20 74 68 65 20 6d 61 6e 6e 65 72 20 63 6f 6d 70 6c 61 69 6e 65 64 20 6f 66 2c 20 69 73 20 6e 6f 74 20 61 75 74 68 6f 72 69 7a 65 64 20 62 79 20 74 68 65 0a 20 20 20 20 20 20 20 20 74 72 61 Data Ascii: described above, in the manner complained of, is not authorized by the trademark owner, its agent, or the law; (b) you state under penalty of perjury that the information supplied is accurate, and that you are the trademark own
Apr 23, 2024 09:43:06.100903034 CEST	1200	IN	Data Raw: 3e 0a 0a 20 20 20 20 3c 68 32 3e 43 4f 50 59 52 49 47 48 54 20 49 4e 46 52 49 4e 47 45 4d 45 4e 54 3c 2f 68 32 3e 0a 20 20 20 20 3c 70 3e 41 6e 79 20 63 6f 6e 74 65 6e 74 20 70 6c 61 63 65 64 20 6f 6e 20 61 20 77 65 62 70 61 67 65 20 61 63 63 65 Data Ascii: > <h2>COPYRIGHT INFRINGEMENT</h2> <p>Any content placed on a webpage accessed through or via a domain name is the responsibility of the owner. Bodis does not provide webpage content creation services, or any other similar serv
Apr 23, 2024 09:43:06.100914001 CEST	1200	IN	Data Raw: 63 74 69 76 69 74 79 20 69 73 20 69 6e 66 72 69 6e 67 69 6e 67 20 79 6f 75 72 20 63 6f 70 79 72 69 67 68 74 2e 20 41 63 63 6f 72 64 69 6e 67 6c 79 2c 20 43 6f 6d 70 61 6e 79 20 73 75 67 67 65 73 74 73 20 74 68 61 74 20 79 6f 75 20 66 69 72 73 74 Data Ascii: ctivity is infringing your copyright. Accordingly, Company suggests that you first contact an attorney. To expedite Companys ability to process your request, please use the following format (including section numbers):</p>
Apr 23, 2024 09:43:06.100924969 CEST	1148	IN	Data Raw: 68 65 20 63 6f 70 79 72 69 67 68 74 65 64 20 6d 61 74 65 72 69 61 6c 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 73 63 72 69 62 65 64 20 61 62 6f 76 65 20 61 73 20 61 6c 6c 65 67 65 64 6c 79 20 69 6e 66 72 69 6e 67 69 6e 67 20 69 73 20 6e 6f Data Ascii: he copyrighted materials described above as allegedly infringing is not authorized by the copyright owner, its agent, or the law.</p> <p>6. Include the following statement: I swear, under penalty of perjur
Apr 23, 2024 09:43:06.100934982 CEST	58	IN	Data Raw: 6c 79 20 72 65 61 73 6f 6e 61 62 6c 65 20 74 69 6d 65 20 61 6e 64 20 6d 61 6e 6e 65 72 2e 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: ly reasonable time and manner.</p></div></body></html>
Apr 23, 2024 09:43:06.108091116 CEST	58	IN	Data Raw: 6c 79 20 72 65 61 73 6f 6e 61 62 6c 65 20 74 69 6d 65 20 61 6e 64 20 6d 61 6e 6e 65 72 2e 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: ly reasonable time and manner.</p></div></body></html>
Apr 23, 2024 09:43:06.594485044 CEST	585	OUT	GET /favicon.ico HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww1.icartservice.com/legal Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:43:06.716582060 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:43:06 GMT content-type: text/html; charset=utf-8 content-length: 1138 x-request-id: 4eaf13d8-3c82-4d42-8151-1b681a6e0467 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pegRjBzXd+CHA0mNs87R96DxuEBBr7S+Tkmxb080m+ri2jZde+F19CYSMQrvaQ7q7msfhtk5v1fxknUhQnH9YA== set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:58:06 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 70 65 67 52 6a 42 7a 58 64 2b 43 48 41 30 6d 4e 73 38 37 52 39 36 44 78 75 45 42 42 72 37 53 2b 54 6b 6d 78 62 30 38 30 6d 2b 72 69 32 6a 5a 64 65 2b 46 31 39 43 59 53 4d 51 72 76 61 51 37 71 37 6d 73 66 68 74 6b 35 76 31 66 78 6b 6e 55 68 51 6e 48 39 59 41 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 45 41 41 41 41 42 43 41 49 41 41 41 43 51 64 31 50 65 41 41 41 41 44 45 6c 45 51 56 51 49 31 32 50 34 2f 2f 38 2f 41 41 58 2b 41 76 37 63 7a 46 6e 6e 41 41 41 41 41 45 6c 46 Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pegRjBzXd+CHA0mNs87R96DxuEBBr7S+Tkmxb080m+ri2jZde+F19CYSMQrvaQ7q7msfhtk5v1fxknUhQnH9YA==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF
Apr 23, 2024 09:43:06.716614962 CEST	600	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNWJhNTYzYWEtMmYwMC00ZDA1LWFjMDgtMTM0YTNiMGRiMmFkIiwicGFnZV90aW1lIjoxN
Apr 23, 2024 09:43:06.772067070 CEST	600	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNWJhNTYzYWEtMmYwMC00ZDA1LWFjMDgtMTM0YTNiMGRiMmFkIiwicGFnZV90aW1lIjoxN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49818	199.59.243.225	80	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 23, 2024 09:43:06.836757898 CEST	480	OUT	GET /favicon.ico HTTP/1.1 Host: ww1.icartservice.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=fa166cca-0144-11ef-95ca-423deebcb72f; parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; __gsas=ID=a409b8deb4eed28a:T=1713858126:RT=1713858126:S=ALNI_MZX3TQld0PkLFpeqbp0XBa4rNyEFg
Apr 23, 2024 09:43:06.974760056 CEST	1200	IN	HTTP/1.1 200 OK date: Tue, 23 Apr 2024 07:43:06 GMT content-type: text/html; charset=utf-8 content-length: 1078 x-request-id: 1cb501be-bca1-4985-85cd-190f11357e41 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pegRjBzXd+CHA0mNs87R96DxuEBBr7S+Tkmxb080m+ri2jZde+F19CYSMQrvaQ7q7msfhtk5v1fxknUhQnH9YA== set-cookie: parking_session=5ba563aa-2f00-4d05-ac08-134a3b0db2ad; expires=Tue, 23 Apr 2024 07:58:06 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 70 65 67 52 6a 42 7a 58 64 2b 43 48 41 30 6d 4e 73 38 37 52 39 36 44 78 75 45 42 42 72 37 53 2b 54 6b 6d 78 62 30 38 30 6d 2b 72 69 32 6a 5a 64 65 2b 46 31 39 43 59 53 4d 51 72 76 61 51 37 71 37 6d 73 66 68 74 6b 35 76 31 66 78 6b 6e 55 68 51 6e 48 39 59 41 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 45 41 41 41 41 42 43 41 49 41 41 41 43 51 64 31 50 65 41 41 41 41 44 45 6c 45 51 56 51 49 31 32 50 34 2f 2f 38 2f 41 41 58 2b 41 76 37 63 7a 46 6e 6e 41 41 41 41 41 45 6c 46 Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pegRjBzXd+CHA0mNs87R96DxuEBBr7S+Tkmxb080m+ri2jZde+F19CYSMQrvaQ7q7msfhtk5v1fxknUhQnH9YA==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElF
Apr 23, 2024 09:43:06.974773884 CEST	540	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNWJhNTYzYWEtMmYwMC00ZDA1LWFjMDgtMTM0YTNiMGRiMmFkIiwicGFnZV90aW1lIjoxN
Apr 23, 2024 09:43:06.980699062 CEST	540	IN	Data Raw: 54 6b 53 75 51 6d 43 43 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c Data Ascii: TkSuQmCC"> <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNWJhNTYzYWEtMmYwMC00ZDA1LWFjMDgtMTM0YTNiMGRiMmFkIiwicGFnZV90aW1lIjoxN

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49718	142.251.15.103	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:05 UTC	653	OUT	GET /adsense/domains/caf.js?abp=1&bodis=true HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww1.icartservice.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:05 UTC	854	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 190570 Date: Tue, 23 Apr 2024 07:42:05 GMT Expires: Tue, 23 Apr 2024 07:42:05 GMT Cache-Control: private, max-age=3600 ETag: "18326131645859351753" X-Content-Type-Options: nosniff Link: <https://www.adsensecustomsearchads.com>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 07:42:05 UTC	401	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 32 39 36 33 39 31 39 30 34 30 32 30 33 31 32 34 38 32 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 33 2c 31 37 33 30 31 34 33 31 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"296391904020312482",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301431,17301
2024-04-23 07:42:05 UTC	1255	IN	Data Raw: 74 72 61 74 65 67 79 22 3a 74 72 75 65 2c 22 5f 66 69 78 43 74 63 4c 69 6e 6b 73 4f 6e 49 6f 73 22 3a 74 72 75 65 2c 22 5f 67 6f 6f 67 45 6e 61 62 6c 65 51 75 70 22 3a 74 72 75 65 2c 22 5f 73 77 69 74 63 68 47 77 73 52 65 71 75 65 73 74 54 6f 55 73 65 41 64 73 65 6e 73 65 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 75 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 Data Ascii: trategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:180
2024-04-23 07:42:05 UTC	1255	IN	Data Raw: 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 62 65 3d 66 3b 65 61 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 31 45 39 2a Data Ascii: ew TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.be=f;ea(this,"description",{configurable:!0,writable:!0,value:g})}if(a)return a;c.prototype.toString=function(){return this.be};var d="jscomp_symbol_"+(1E9*
2024-04-23 07:42:05 UTC	1255	IN	Data Raw: 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 29 6e 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6f 61 3b 61 3a 7b 76 61 72 20 70 61 3d 7b 61 3a 21 30 7d 2c 71 61 3d 7b 7d 3b 74 72 79 7b 71 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 70 61 3b 6f 61 3d 71 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6f 61 3d 21 31 7d 6e 61 3d 6f 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c Data Ascii: n"==typeof Object.setPrototypeOf)na=Object.setPrototypeOf;else{var oa;a:{var pa={a:!0},qa={};try{qa.__proto__=pa;oa=qa.a;break a}catch(a){}oa=!1}na=oa?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:nul
2024-04-23 07:42:05 UTC	1255	IN	Data Raw: 2e 43 2e 66 61 29 72 65 74 75 72 6e 20 78 61 28 74 68 69 73 2c 74 68 69 73 2e 43 2e 66 61 5b 22 74 68 72 6f 77 22 5d 2c 61 2c 74 68 69 73 2e 43 2e 53 61 29 3b 74 68 69 73 2e 43 2e 58 61 28 61 29 3b 72 65 74 75 72 6e 20 79 61 28 74 68 69 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 2c 62 2c 63 2c 64 29 7b 74 72 79 7b 76 61 72 20 65 3d 62 2e 63 61 6c 6c 28 61 2e 43 2e 66 61 2c 63 29 3b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 65 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 65 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 61 2e 43 2e 4e 61 3d 21 31 2c 65 3b 76 61 72 20 66 3d Data Ascii: .C.fa)return xa(this,this.C.fa["throw"],a,this.C.Sa);this.C.Xa(a);return ya(this)};function xa(a,b,c,d){try{var e=b.call(a.C.fa,c);if(!(e instanceof Object))throw new TypeError("Iterator result "+e+" is not an object");if(!e.done)return a.C.Na=!1,e;var f=
2024-04-23 07:42:05 UTC	1255	IN	Data Raw: 6f 6e 20 64 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 3f 67 3a 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 67 29 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 2e 62 61 29 7b 74 68 69 73 2e 62 61 3d 5b 5d 3b 76 61 72 20 68 3d 74 68 69 73 3b 74 68 69 73 2e 6e 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 57 65 28 29 7d 29 7d 74 68 69 73 2e 62 61 2e 70 75 73 68 28 67 29 7d 3b 76 61 72 20 65 3d 68 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 65 28 67 2c 30 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 57 65 3d 66 75 Data Ascii: on d(g){return g instanceof b?g:new b(function(h){h(g)})}if(a)return a;c.prototype.md=function(g){if(null==this.ba){this.ba=[];var h=this;this.nd(function(){h.We()})}this.ba.push(g)};var e=ha.setTimeout;c.prototype.nd=function(g){e(g,0)};c.prototype.We=fu
2024-04-23 07:42:05 UTC	1255	IN	Data Raw: 68 69 73 2e 58 65 28 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 2e 44 66 28 29 29 7b 76 61 72 20 68 3d 68 61 2e 63 6f 6e 73 6f 6c 65 3b 0a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 68 26 26 68 2e 65 72 72 6f 72 28 67 2e 57 61 29 7d 7d 2c 31 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 44 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 42 64 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 67 3d 68 61 2e 43 75 73 74 6f 6d 45 76 65 6e 74 2c 68 3d 68 61 2e 45 76 65 6e 74 2c 6b 3d 68 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 6b Data Ascii: his.Xe()};b.prototype.Uf=function(){var g=this;e(function(){if(g.Df()){var h=ha.console;"undefined"!==typeof h&&h.error(g.Wa)}},1)};b.prototype.Df=function(){if(this.Bd)return!1;var g=ha.CustomEvent,h=ha.Event,k=ha.dispatchEvent;if("undefined"===typeof k
2024-04-23 07:42:05 UTC	1255	IN	Data Raw: 68 69 73 2e 42 61 2e 70 75 73 68 28 6b 29 3b 74 68 69 73 2e 42 64 3d 21 30 7d 3b 62 2e 72 65 73 6f 6c 76 65 3d 64 3b 62 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 6b 28 67 29 7d 29 7d 3b 62 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 77 28 67 29 2c 6e 3d 6c 2e 6e 65 78 74 28 29 3b 21 6e 2e 64 6f 6e 65 3b 6e 3d 6c 2e 6e 65 78 74 28 29 29 64 28 6e 2e 76 61 6c 75 65 29 2e 6a 62 28 68 2c 6b 29 7d 29 7d 3b 62 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 77 28 67 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 Data Ascii: his.Ba.push(k);this.Bd=!0};b.resolve=d;b.reject=function(g){return new b(function(h,k){k(g)})};b.race=function(g){return new b(function(h,k){for(var l=w(g),n=l.next();!n.done;n=l.next())d(n.value).jb(h,k)})};b.all=function(g){var h=w(g),k=h.next();return
2024-04-23 07:42:05 UTC	1255	IN	Data Raw: 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 67 2c 66 2c 64 29 29 7b 62 3d 67 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 46 61 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 26 26 63 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d Data Ascii: (b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var g=d[f];if(b.call(c,g,f,d)){b=g;break a}}b=void 0}return b}});function Fa(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){var f=
2024-04-23 07:42:05 UTC	1255	IN	Data Raw: 3d 3d 3d 63 3f 30 21 3d 3d 62 7c 7c 31 2f 62 3d 3d 3d 31 2f 63 3a 62 21 3d 3d 62 26 26 63 21 3d 3d 63 7d 7d 29 3b 0a 70 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 3b 63 3d 63 7c 7c 30 3b 66 6f 72 28 30 3e 63 26 26 28 63 3d 4d 61 74 68 2e 6d 61 78 28 63 2b 65 2c 30 29 29 3b 63 3c 65 3b 63 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 63 5d 3b 69 66 28 66 3d 3d 3d 62 7c 7c 4f 62 6a 65 63 74 2e 69 73 28 66 2c 62 29 29 72 65 74 75 72 6e 21 30 Data Ascii: ===c?0!==b\|\|1/b===1/c:b!==b&&c!==c}});p("Array.prototype.includes",function(a){return a?a:function(b,c){var d=this;d instanceof String&&(d=String(d));var e=d.length;c=c\|\|0;for(0>c&&(c=Math.max(c+e,0));c<e;c++){var f=d[c];if(f===b\|\|Object.is(f,b))return!0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49722	23.46.214.6	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:06 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-23 07:42:06 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=84092 Date: Tue, 23 Apr 2024 07:42:06 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49725	23.46.214.6	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:07 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-23 07:42:07 UTC	520	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-MSEdge-Ref: Ref A: 86D4C1EC23844E65A40A9F1508D7BABF Ref B: BL2EDGE2514 Ref C: 2023-04-05T23:36:05Z Cache-Control: public, max-age=84071 Date: Tue, 23 Apr 2024 07:42:07 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-23 07:42:07 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49728	142.250.9.132	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:08 UTC	758	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.adsensecustomsearchads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:09 UTC	788	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 Date: Tue, 23 Apr 2024 07:42:08 GMT Expires: Wed, 24 Apr 2024 06:42:08 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 07:42:09 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 30 32 31 39 38 62 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#02198b' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49727	142.250.9.132	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:08 UTC	765	OUT	GET /ad_icons/standard/publisher_icon_image/chevron_expand.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.adsensecustomsearchads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:09 UTC	788	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 163 Date: Tue, 23 Apr 2024 07:42:08 GMT Expires: Wed, 24 Apr 2024 06:42:08 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 07:42:09 UTC	163	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 37 2e 35 39 20 31 38 2e 35 39 4c 39 20 32 30 4c 31 37 20 31 32 4c 39 20 34 4c 37 2e 35 39 20 35 2e 34 31 4c 31 34 2e 31 37 20 31 32 22 2f 3e 3c 2f 73 76 67 3e 0a Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M7.59 18.59L9 20L17 12L9 4L7.59 5.41L14.17 12"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49729	172.253.124.132	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:10 UTC	508	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:10 UTC	788	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 Date: Tue, 23 Apr 2024 07:42:10 GMT Expires: Wed, 24 Apr 2024 06:42:10 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 07:42:10 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 30 32 31 39 38 62 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#02198b' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49730	172.253.124.132	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:10 UTC	515	OUT	GET /ad_icons/standard/publisher_icon_image/chevron_expand.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:10 UTC	788	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 163 Date: Tue, 23 Apr 2024 07:42:10 GMT Expires: Wed, 24 Apr 2024 06:42:10 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 07:42:10 UTC	163	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 37 2e 35 39 20 31 38 2e 35 39 4c 39 20 32 30 4c 31 37 20 31 32 4c 39 20 34 4c 37 2e 35 39 20 35 2e 34 31 4c 31 34 2e 31 37 20 31 32 22 2f 3e 3c 2f 73 76 67 3e 0a Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M7.59 18.59L9 20L17 12L9 4L7.59 5.41L14.17 12"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49740	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:18 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713858104943&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-23 07:42:18 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-23 07:42:18 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-23 07:42:18 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: C9EB0C6B522C4D2CA58776108EE72A4F Ref B: LAX311000108051 Ref C: 2024-04-23T07:42:18Z Date: Tue, 23 Apr 2024 07:42:18 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1713858138.581f866

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49748	74.125.136.103	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:29 UTC	707	OUT	GET /images/afs/snowman.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.adsensecustomsearchads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:29 UTC	670	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 166 Date: Tue, 23 Apr 2024 07:42:29 GMT Expires: Tue, 23 Apr 2024 07:42:29 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 15 Nov 2023 17:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 07:42:29 UTC	166	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 04 03 00 00 00 a5 2c e4 b4 00 00 00 12 50 4c 54 45 00 00 00 97 9f 9f 9a a0 a5 9a a0 a6 9a a0 a6 97 9f a7 fa 03 72 95 00 00 00 06 74 52 4e 53 00 20 bf ef ff 20 e0 82 3c 7e 00 00 00 3d 49 44 41 54 78 01 63 18 7e 80 51 d9 49 00 ab 84 b0 8b 8b 21 56 09 15 17 17 27 ac 12 2e 2e 2e ce 58 25 4c 80 32 a4 19 15 ec e2 62 8a 55 82 55 c5 28 80 26 e1 30 1a 56 a3 61 35 ec 00 00 2d a2 14 b9 af 08 13 f6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR00,PLTErtRNS <~=IDATxc~QI!V'...X%L2bUU(&0Va5-IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49749	142.250.105.103	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:29 UTC	457	OUT	GET /images/afs/snowman.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:29 UTC	670	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 166 Date: Tue, 23 Apr 2024 07:42:29 GMT Expires: Tue, 23 Apr 2024 07:42:29 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 15 Nov 2023 17:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 07:42:29 UTC	166	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 04 03 00 00 00 a5 2c e4 b4 00 00 00 12 50 4c 54 45 00 00 00 97 9f 9f 9a a0 a5 9a a0 a6 9a a0 a6 97 9f a7 fa 03 72 95 00 00 00 06 74 52 4e 53 00 20 bf ef ff 20 e0 82 3c 7e 00 00 00 3d 49 44 41 54 78 01 63 18 7e 80 51 d9 49 00 ab 84 b0 8b 8b 21 56 09 15 17 17 27 ac 12 2e 2e 2e ce 58 25 4c 80 32 a4 19 15 ec e2 62 8a 55 82 55 c5 28 80 26 e1 30 1a 56 a3 61 35 ec 00 00 2d a2 14 b9 af 08 13 f6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR00,PLTErtRNS <~=IDATxc~QI!V'...X%L2bUU(&0Va5-IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49762	199.59.243.50	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:50 UTC	652	OUT	GET /takedown-request HTTP/1.1 Host: www.bodis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:50 UTC	1119	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Cache-Control: no-cache, private X-Version: 2.118.0 Set-Cookie: XSRF-TOKEN=eyJpdiI6IjlDUGJkS1BEYWxoOHRETGlibnlzbGc9PSIsInZhbHVlIjoiaFFYMGI1eUJjV283S1UrWjk4VGRLZng5ZEkrcjgrSERkRWRIaVROeU5iN3RTeHJ5UFp1TXArTmpWOHJlVTZMTzRhOFgzQzZyZWRxVG4wQkRvRStyUzNLZ3VDakZJdUVHYWduWEVWWDVCdkFXL2ZJWUpOWldocGNZMDg5aDVvNHMiLCJtYWMiOiIxMjBiNGEzNTIxMDdlZTY0OGZkNTBjMzgyZGJlYzFiZGQ5ZmQ4N2I4OGVmZTJlYTQwYmUyY2QxNWYxODc3YTIyIiwidGFnIjoiIn0%3D; expires=Tue, 23 Apr 2024 09:42:50 GMT; Max-Age=7200; path=/; domain=.bodis.com Set-Cookie: bodis_session=eyJpdiI6IkkrdlMxdlJLajUyNUlRSUhmRGdUSVE9PSIsInZhbHVlIjoicThNaFZwSXI0MTAwS0pxVHByVzR2Lzh3OHVmMmc2Q2puNi9Bck95N3RUYlhsZWtGTnQxNC9YWE4ybXB4UU03VkxTLzE4ZllORDY2T2VHQkJUOG1MbEZzSGo5K1pIcnZKb2d2eGlCWVBUMFhLTEo4YUNXVE8vZGZEcnNmRVQwNnYiLCJtYWMiOiIyMzhiM2Q4NWY1M2FmNDA3OGJmOWYzMGU1M2QzMTFkZWRkOTY0MTQ2ODU5OWJhMWQ0YmU5N2I4MzBhZWFhZmI1IiwidGFnIjoiIn0%3D; expires=Tue, 23 Apr 2024 09:42:50 GMT; Max-Age=7200; path=/; domain=.bodis.com; httponly
2024-04-23 07:42:50 UTC	820	IN	Data Raw: 33 32 64 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 68 64 42 59 45 67 57 52 50 34 39 46 6b 35 64 74 37 6d 76 72 6d 49 63 43 4d 37 65 55 44 68 5a 31 47 59 43 46 46 43 74 44 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 Data Ascii: 32d<!doctype html><html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="csrf-token" content="hdBYEgWRP49Fk5dt7mvrmIcCM7eUDhZ1GYCFFCtD"> <link
2024-04-23 07:42:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49763	199.59.243.50	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:50 UTC	1297	OUT	GET /css/app.css?id=c87e71429bf4f4d8f19a HTTP/1.1 Host: www.bodis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bodis.com/takedown-request Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjlDUGJkS1BEYWxoOHRETGlibnlzbGc9PSIsInZhbHVlIjoiaFFYMGI1eUJjV283S1UrWjk4VGRLZng5ZEkrcjgrSERkRWRIaVROeU5iN3RTeHJ5UFp1TXArTmpWOHJlVTZMTzRhOFgzQzZyZWRxVG4wQkRvRStyUzNLZ3VDakZJdUVHYWduWEVWWDVCdkFXL2ZJWUpOWldocGNZMDg5aDVvNHMiLCJtYWMiOiIxMjBiNGEzNTIxMDdlZTY0OGZkNTBjMzgyZGJlYzFiZGQ5ZmQ4N2I4OGVmZTJlYTQwYmUyY2QxNWYxODc3YTIyIiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IkkrdlMxdlJLajUyNUlRSUhmRGdUSVE9PSIsInZhbHVlIjoicThNaFZwSXI0MTAwS0pxVHByVzR2Lzh3OHVmMmc2Q2puNi9Bck95N3RUYlhsZWtGTnQxNC9YWE4ybXB4UU03VkxTLzE4ZllORDY2T2VHQkJUOG1MbEZzSGo5K1pIcnZKb2d2eGlCWVBUMFhLTEo4YUNXVE8vZGZEcnNmRVQwNnYiLCJtYWMiOiIyMzhiM2Q4NWY1M2FmNDA3OGJmOWYzMGU1M2QzMTFkZWRkOTY0MTQ2ODU5OWJhMWQ0YmU5N2I4MzBhZWFhZmI1IiwidGFnIjoiIn0%3D
2024-04-23 07:42:50 UTC	230	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:50 GMT Content-Type: text/css Content-Length: 230283 Connection: close Server: nginx Last-Modified: Mon, 22 Apr 2024 20:34:25 GMT ETag: "6626c9d1-3838b" Accept-Ranges: bytes
2024-04-23 07:42:50 UTC	16154	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 3a 33 30 30 2c 34 30 30 2c 35 30 30 2c 37 30 30 2c 34 30 30 69 74 61 6c 69 63 7c 4f 70 65 6e 2b 53 61 6e 73 3a 31 30 30 2c 33 30 30 2c 34 30 30 2c 35 30 30 2c 37 30 30 29 3b 0a 0a 2f 2a 21 0a 2a 20 56 75 65 74 69 66 79 20 76 31 2e 35 2e 32 34 0a 2a 20 46 6f 72 67 65 64 20 62 79 20 4a 6f 68 6e 20 4c 65 69 64 65 72 0a 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 2a 2f 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 68 61 6b 65 7b 35 39 25 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 36 30 25 2c 38 30 25 7b 6d 61 72 67 Data Ascii: @import url(https://fonts.googleapis.com/css?family=Roboto:300,400,500,700,400italic\|Open+Sans:100,300,400,500,700);/! Vuetify v1.5.24* Forged by John Leider* Released under the MIT License.*/@-webkit-keyframes shake{59%{margin-left:0}60%,80%{marg
2024-04-23 07:42:50 UTC	16379	IN	Data Raw: 6c 75 65 2e 64 61 72 6b 65 6e 2d 34 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 31 35 37 39 62 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 31 35 37 39 62 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6c 69 67 68 74 2d 62 6c 75 65 2d 2d 74 65 78 74 2e 74 65 78 74 2d 2d 64 61 72 6b 65 6e 2d 34 7b 63 6f 6c 6f 72 3a 23 30 31 35 37 39 62 21 69 6d 70 6f 72 74 61 6e 74 3b 63 61 72 65 74 2d 63 6f 6c 6f 72 3a 23 30 31 35 37 39 62 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6c 69 67 68 74 2d 62 6c 75 65 2e 61 63 63 65 6e 74 2d 31 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 38 30 64 38 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 38 30 64 38 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6c Data Ascii: lue.darken-4{background-color:#01579b!important;border-color:#01579b!important}.light-blue--text.text--darken-4{color:#01579b!important;caret-color:#01579b!important}.light-blue.accent-1{background-color:#80d8ff!important;border-color:#80d8ff!important}.l
2024-04-23 07:42:50 UTC	16384	IN	Data Raw: 2d 2d 61 63 63 65 6e 74 2d 31 7b 63 6f 6c 6f 72 3a 23 66 66 65 35 37 66 21 69 6d 70 6f 72 74 61 6e 74 3b 63 61 72 65 74 2d 63 6f 6c 6f 72 3a 23 66 66 65 35 37 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6d 62 65 72 2e 61 63 63 65 6e 74 2d 32 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 64 37 34 30 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 64 37 34 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6d 62 65 72 2d 2d 74 65 78 74 2e 74 65 78 74 2d 2d 61 63 63 65 6e 74 2d 32 7b 63 6f 6c 6f 72 3a 23 66 66 64 37 34 30 21 69 6d 70 6f 72 74 61 6e 74 3b 63 61 72 65 74 2d 63 6f 6c 6f 72 3a 23 66 66 64 37 34 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6d 62 65 72 2e 61 63 63 65 6e 74 2d 33 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: --accent-1{color:#ffe57f!important;caret-color:#ffe57f!important}.amber.accent-2{background-color:#ffd740!important;border-color:#ffd740!important}.amber--text.text--accent-2{color:#ffd740!important;caret-color:#ffd740!important}.amber.accent-3{background
2024-04-23 07:42:50 UTC	16384	IN	Data Raw: 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 31 30 30 25 29 7d 2e 63 61 72 6f 75 73 65 6c 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 65 6e 74 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 31 30 30 25 29 7d 2e 63 61 72 6f 75 73 65 6c 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 6c 65 61 76 65 2c 2e 63 61 72 6f 75 73 65 6c 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 6c 65 61 76 65 2d 74 6f 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 7d 2e 63 61 72 6f 75 73 65 6c 2d 72 65 76 65 72 73 65 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 65 6e 74 65 72 2c 2e 63 61 72 6f 75 73 65 6c 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 6c 65 61 76 65 2c 2e 63 61 72 6f 75 73 65 6c 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 6c 65 61 76 65 2d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: orm:translateY(100%)}.carousel-transition-enter{transform:translate(100%)}.carousel-transition-leave,.carousel-transition-leave-to{position:absolute;top:0}.carousel-reverse-transition-enter,.carousel-transition-leave,.carousel-transition-leave-to{transfor
2024-04-23 07:42:50 UTC	16384	IN	Data Raw: 6d 69 73 73 69 62 6c 65 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 33 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 35 2c 2e 38 2c 2e 35 2c 31 29 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 76 2d 61 6c 65 72 74 5f 5f 64 69 73 6d 69 73 73 69 62 6c 65 3a 68 6f 76 65 72 7b 6f 70 61 Data Ascii: missible{align-self:flex-start;color:inherit;margin-left:16px;margin-right:0;text-decoration:none;transition:.3s cubic-bezier(.25,.8,.5,1);-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.v-alert__dismissible:hover{opa
2024-04-23 07:42:50 UTC	7570	IN	Data Raw: 72 74 79 20 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 73 65 6c 65 63 74 2e 76 2d 69 6e 70 75 74 2d 2d 69 73 2d 64 69 72 74 79 20 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 2d 73 65 6c 65 63 74 3a 6e 6f 74 28 2e 76 2d 69 6e 70 75 74 2d 2d 69 73 2d 64 69 72 74 79 29 3a 6e 6f 74 28 2e 76 2d 69 6e 70 75 74 2d 2d 69 73 2d 66 6f 63 75 73 65 64 29 20 2e 76 2d 74 65 78 74 2d 66 69 65 6c 64 5f 5f 70 72 65 66 69 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 37 70 78 3b 74 72 61 6e 73 69 74 69 6f Data Ascii: rty ::-moz-placeholder{color:transparent!important}.v-select.v-input--is-dirty ::placeholder{color:transparent!important}.v-select:not(.v-input--is-dirty):not(.v-input--is-focused) .v-text-field__prefix{line-height:20px;position:absolute;top:7px;transitio
2024-04-23 07:42:50 UTC	16384	IN	Data Raw: 2d 73 68 6f 72 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 32 2e 32 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 32 2e 32 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 7d 2e 76 2d 70 72 6f 67 72 65 73 73 2d 6c 69 6e 65 61 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 33 73 20 65 61 73 65 2d 69 6e 7d 2e 76 2d 70 72 6f 67 72 65 73 73 2d 6c 69 6e 65 61 72 5f 5f Data Ascii: -short;-webkit-animation-duration:2.2s;animation-duration:2.2s;-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.v-progress-linear__background{position:absolute;top:0;left:0;bottom:0;transition:.3s ease-in}.v-progress-linear__
2024-04-23 07:42:50 UTC	16384	IN	Data Raw: 3a 68 69 64 64 65 6e 7d 2e 76 2d 6d 65 6e 75 3e 2e 76 2d 6d 65 6e 75 5f 5f 63 6f 6e 74 65 6e 74 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 7d 2e 76 2d 6d 65 6e 75 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 65 6e 74 65 72 20 2e 76 2d 6c 69 73 74 5f 5f 74 69 6c 65 7b 6d 69 6e 2d 77 69 64 74 68 3a 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 76 2d 6d 65 6e 75 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 65 6e 74 65 72 2d 74 6f 20 2e 76 2d 6c 69 73 74 5f 5f 74 69 6c 65 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 31 73 7d 2e 76 2d 6d 65 6e 75 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 6c 65 61 76 65 2d 61 63 74 69 76 65 2c 2e 76 2d 6d 65 6e 75 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 6c 65 Data Ascii: :hidden}.v-menu>.v-menu__content{max-width:none}.v-menu-transition-enter .v-list__tile{min-width:0;pointer-events:none}.v-menu-transition-enter-to .v-list__tile{pointer-events:auto;transition-delay:.1s}.v-menu-transition-leave-active,.v-menu-transition-le
2024-04-23 07:42:50 UTC	3028	IN	Data Raw: 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 20 38 70 78 3b 6d 61 72 67 69 6e 3a 30 3b 6f 70 61 63 69 74 79 3a 2e 34 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 76 2d 62 74 6e 2d 74 6f 67 67 6c 65 20 2e 76 2d 62 74 6e 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 76 2d 62 74 6e 2d 74 6f 67 67 6c 65 20 2e 76 2d 62 74 6e 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 76 2d 62 74 6e 2d 74 6f 67 67 6c 65 20 2e 76 2d 62 74 6e 2e 76 2d 62 74 6e 2d 2d 61 63 74 69 76 65 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 76 2d 62 74 6e 2d 74 6f 67 67 6c 65 20 2e 76 2d 62 74 6e 20 73 70 61 6e 2b 2e 76 2d 69 63 6f 6e 7b 66 6f 6e 74 2d 73 69 Data Ascii: :auto;padding:0 8px;margin:0;opacity:.4;border-radius:0}.v-btn-toggle .v-btn:not(:last-child){border-right:1px solid transparent}.v-btn-toggle .v-btn:after{display:none}.v-btn-toggle .v-btn.v-btn--active{opacity:1}.v-btn-toggle .v-btn span+.v-icon{font-si
2024-04-23 07:42:50 UTC	16384	IN	Data Raw: 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 32 70 78 7d 2e 76 2d 63 61 6c 65 6e 64 61 72 2d 77 65 65 6b 6c 79 5f 5f 64 61 79 2d 6c 61 62 65 6c 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 76 2d 63 61 6c 65 6e 64 61 72 2d 77 65 65 6b 6c 79 5f 5f 64 61 79 2d 6d 6f 6e 74 68 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 6f 70 3a Data Ascii: x;line-height:32px}.v-calendar-weekly__day-label:hover{text-decoration:underline}.v-calendar-weekly__day-month{position:absolute;text-decoration:none;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;box-shadow:none;top:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49765	199.59.243.50	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:50 UTC	1281	OUT	GET /js/app.js?id=a6d102922d07b5b652c9 HTTP/1.1 Host: www.bodis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bodis.com/takedown-request Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjlDUGJkS1BEYWxoOHRETGlibnlzbGc9PSIsInZhbHVlIjoiaFFYMGI1eUJjV283S1UrWjk4VGRLZng5ZEkrcjgrSERkRWRIaVROeU5iN3RTeHJ5UFp1TXArTmpWOHJlVTZMTzRhOFgzQzZyZWRxVG4wQkRvRStyUzNLZ3VDakZJdUVHYWduWEVWWDVCdkFXL2ZJWUpOWldocGNZMDg5aDVvNHMiLCJtYWMiOiIxMjBiNGEzNTIxMDdlZTY0OGZkNTBjMzgyZGJlYzFiZGQ5ZmQ4N2I4OGVmZTJlYTQwYmUyY2QxNWYxODc3YTIyIiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IkkrdlMxdlJLajUyNUlRSUhmRGdUSVE9PSIsInZhbHVlIjoicThNaFZwSXI0MTAwS0pxVHByVzR2Lzh3OHVmMmc2Q2puNi9Bck95N3RUYlhsZWtGTnQxNC9YWE4ybXB4UU03VkxTLzE4ZllORDY2T2VHQkJUOG1MbEZzSGo5K1pIcnZKb2d2eGlCWVBUMFhLTEo4YUNXVE8vZGZEcnNmRVQwNnYiLCJtYWMiOiIyMzhiM2Q4NWY1M2FmNDA3OGJmOWYzMGU1M2QzMTFkZWRkOTY0MTQ2ODU5OWJhMWQ0YmU5N2I4MzBhZWFhZmI1IiwidGFnIjoiIn0%3D
2024-04-23 07:42:50 UTC	261	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:50 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 1114006 Connection: close Server: nginx Last-Modified: Mon, 22 Apr 2024 20:34:25 GMT ETag: "6626c9d1-10ff96" Accept-Ranges: bytes
2024-04-23 07:42:50 UTC	16123	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 2c 61 3d 65 5b 30 5d 2c 6f 3d 65 5b 31 5d 2c 73 3d 30 2c 63 3d 5b 5d 3b 73 3c 61 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 72 3d 61 5b 73 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 72 29 26 26 69 5b 72 5d 26 26 63 2e 70 75 73 68 28 69 5b 72 5d 5b 30 5d 29 2c 69 5b 72 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 6f 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 6e 29 26 26 28 74 5b 6e 5d 3d 6f 5b 6e 5d 29 3b 66 6f 72 28 75 26 26 75 28 65 29 3b 63 2e 6c 65 6e 67 74 68 3b 29 63 2e 73 68 69 66 74 28 29 28 29 Data Ascii: !function(t){function e(e){for(var n,r,a=e[0],o=e[1],s=0,c=[];s<a.length;s++)r=a[s],Object.prototype.hasOwnProperty.call(i,r)&&i[r]&&c.push(i[r][0]),i[r]=0;for(n in o)Object.prototype.hasOwnProperty.call(o,n)&&(t[n]=o[n]);for(u&&u(e);c.length;)c.shift()()
2024-04-23 07:42:50 UTC	16379	IN	Data Raw: 29 29 2c 6e 3d 74 5b 74 2e 6c 65 6e 67 74 68 2d 31 5d 3b 65 2e 67 65 74 43 68 69 6c 64 28 6e 29 2e 72 75 6e 74 69 6d 65 26 26 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6e 29 7d 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 65 74 28 74 2e 73 6c 69 63 65 28 30 2c 2d 31 29 29 2c 6e 3d 74 5b 74 2e 6c 65 6e 67 74 68 2d 31 5d 3b 72 65 74 75 72 6e 20 65 2e 68 61 73 43 68 69 6c 64 28 6e 29 7d 3b 76 61 72 20 75 3b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 2c 21 75 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 Data Ascii: )),n=t[t.length-1];e.getChild(n).runtime&&e.removeChild(n)},s.prototype.isRegistered=function(t){var e=this.get(t.slice(0,-1)),n=t[t.length-1];return e.hasChild(n)};var u;var c=function(t){var e=this;void 0===t&&(t={}),!u&&"undefined"!=typeof window&&wind
2024-04-23 07:42:51 UTC	16384	IN	Data Raw: 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 42 72 69 74 69 73 68 20 56 69 72 67 69 6e 20 49 73 6c 61 6e 64 73 22 2c 22 70 6f 73 74 61 6c 43 6f 64 65 46 6f 72 6d 61 74 22 3a 22 56 47 2e 6a 73 6f 6e 22 2c 22 61 6c 70 68 61 32 22 3a 22 56 47 22 2c 22 61 6c 70 68 61 33 22 3a 22 56 47 42 22 2c 22 6e 75 6d 65 72 69 63 33 22 3a 22 39 32 22 7d 2c 22 49 4f 22 3a 7b 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 42 72 69 74 69 73 68 20 49 6e 64 69 61 6e 20 4f 63 65 61 6e 20 54 65 72 72 69 74 6f 72 79 22 2c 22 70 6f 73 74 61 6c 43 6f 64 65 46 6f 72 6d 61 74 22 3a 22 49 4f 2e 6a 73 6f 6e 22 2c 22 61 6c 70 68 61 32 22 3a 22 49 4f 22 2c 22 61 6c 70 68 61 33 22 3a 22 49 4f 54 22 2c 22 6e 75 6d 65 72 69 63 33 22 3a 22 38 36 22 7d 2c 22 42 4e 22 3a 7b 22 63 6f 75 6e 74 72 Data Ascii: "countryName":"British Virgin Islands","postalCodeFormat":"VG.json","alpha2":"VG","alpha3":"VGB","numeric3":"92"},"IO":{"countryName":"British Indian Ocean Territory","postalCodeFormat":"IO.json","alpha2":"IO","alpha3":"IOT","numeric3":"86"},"BN":{"countr
2024-04-23 07:42:51 UTC	16384	IN	Data Raw: 6d 65 72 69 63 33 22 3a 22 36 34 36 22 7d 2c 22 42 4c 22 3a 7b 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 53 61 69 6e 74 2d 42 61 72 74 68 c3 a9 6c 65 6d 79 22 2c 22 70 6f 73 74 61 6c 43 6f 64 65 46 6f 72 6d 61 74 22 3a 22 42 4c 2e 6a 73 6f 6e 22 2c 22 61 6c 70 68 61 32 22 3a 22 42 4c 22 2c 22 61 6c 70 68 61 33 22 3a 22 42 4c 4d 22 2c 22 6e 75 6d 65 72 69 63 33 22 3a 22 36 35 32 22 7d 2c 22 53 48 22 3a 7b 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 53 61 69 6e 74 20 48 65 6c 65 6e 61 22 2c 22 70 6f 73 74 61 6c 43 6f 64 65 46 6f 72 6d 61 74 22 3a 22 53 48 2e 6a 73 6f 6e 22 2c 22 61 6c 70 68 61 32 22 3a 22 53 48 22 2c 22 61 6c 70 68 61 33 22 3a 22 53 48 4e 22 2c 22 6e 75 6d 65 72 69 63 33 22 3a 22 36 35 34 22 7d 2c 22 4b 4e 22 3a 7b 22 63 6f 75 6e 74 72 Data Ascii: meric3":"646"},"BL":{"countryName":"Saint-Barthlemy","postalCodeFormat":"BL.json","alpha2":"BL","alpha3":"BLM","numeric3":"652"},"SH":{"countryName":"Saint Helena","postalCodeFormat":"SH.json","alpha2":"SH","alpha3":"SHN","numeric3":"654"},"KN":{"countr
2024-04-23 07:42:51 UTC	16384	IN	Data Raw: 6c 29 26 26 28 61 28 74 29 7c 7c 72 28 74 29 29 7d 7d 2c 22 34 75 54 77 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 22 5a 30 63 6d 22 29 2c 72 3d 6e 28 22 39 67 67 47 22 29 2c 61 3d 6e 28 22 47 4e 69 4d 22 29 2c 6f 3d 6e 28 22 64 74 30 7a 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 69 28 74 29 3f 74 3a 72 28 74 2c 65 29 3f 5b 74 5d 3a 61 28 6f 28 74 29 29 7d 7d 2c 22 34 76 4b 63 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 69 3d 5b 5d 2c 72 3d 22 4d 31 37 33 2e Data Ascii: l)&&(a(t)\|\|r(t))}},"4uTw":function(t,e,n){var i=n("Z0cm"),r=n("9ggG"),a=n("GNiM"),o=n("dt0z");t.exports=function(t,e){return i(t)?t:r(t,e)?[t]:a(o(t))}},"4vKc":function(t,e,n){"use strict";Object.defineProperty(e,"__esModule",{value:!0});var i=[],r="M173.
2024-04-23 07:42:51 UTC	7570	IN	Data Raw: 22 2c 69 63 6f 6e 4e 61 6d 65 3a 22 74 68 2d 6c 69 73 74 22 2c 69 63 6f 6e 3a 5b 35 31 32 2c 35 31 32 2c 69 2c 22 66 30 30 62 22 2c 72 5d 7d 2c 65 2e 66 61 54 68 4c 69 73 74 3d 65 2e 64 65 66 69 6e 69 74 69 6f 6e 2c 65 2e 70 72 65 66 69 78 3d 22 66 61 73 22 2c 65 2e 69 63 6f 6e 4e 61 6d 65 3d 22 74 68 2d 6c 69 73 74 22 2c 65 2e 77 69 64 74 68 3d 35 31 32 2c 65 2e 68 65 69 67 68 74 3d 35 31 32 2c 65 2e 6c 69 67 61 74 75 72 65 73 3d 69 2c 65 2e 75 6e 69 63 6f 64 65 3d 22 66 30 30 62 22 2c 65 2e 73 76 67 50 61 74 68 44 61 74 61 3d 72 7d 2c 22 37 59 74 75 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b Data Ascii: ",iconName:"th-list",icon:[512,512,i,"f00b",r]},e.faThList=e.definition,e.prefix="fas",e.iconName="th-list",e.width=512,e.height=512,e.ligatures=i,e.unicode="f00b",e.svgPathData=r},"7Ytu":function(t,e,n){"use strict";Object.defineProperty(e,"__esModule",{
2024-04-23 07:42:51 UTC	16384	IN	Data Raw: 37 22 2c 72 5d 7d 2c 65 2e 66 61 50 6c 75 73 3d 65 2e 64 65 66 69 6e 69 74 69 6f 6e 2c 65 2e 70 72 65 66 69 78 3d 22 66 61 73 22 2c 65 2e 69 63 6f 6e 4e 61 6d 65 3d 22 70 6c 75 73 22 2c 65 2e 77 69 64 74 68 3d 34 34 38 2c 65 2e 68 65 69 67 68 74 3d 35 31 32 2c 65 2e 6c 69 67 61 74 75 72 65 73 3d 69 2c 65 2e 75 6e 69 63 6f 64 65 3d 22 66 30 36 37 22 2c 65 2e 73 76 67 50 61 74 68 44 61 74 61 3d 72 7d 2c 22 38 6f 65 69 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 28 30 2c 6f 2e 64 65 66 61 75 6c Data Ascii: 7",r]},e.faPlus=e.definition,e.prefix="fas",e.iconName="plus",e.width=448,e.height=512,e.ligatures=i,e.unicode="f067",e.svgPathData=r},"8oei":function(t,e,n){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.default=function(t,e){(0,o.defaul
2024-04-23 07:42:51 UTC	16384	IN	Data Raw: 2c 72 2e 64 65 66 61 75 6c 74 29 28 31 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 65 3d 28 30 2c 69 2e 64 65 66 61 75 6c 74 29 28 74 29 2c 6e 3d 65 2e 67 65 74 4d 6f 6e 74 68 28 29 3b 72 65 74 75 72 6e 20 65 2e 73 65 74 46 75 6c 6c 59 65 61 72 28 65 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 6e 2b 31 2c 30 29 2c 65 2e 73 65 74 48 6f 75 72 73 28 30 2c 30 2c 30 2c 30 29 2c 65 7d 3b 76 61 72 20 69 3d 61 28 6e 28 22 32 4f 69 78 22 29 29 2c 72 3d 61 28 6e 28 22 59 47 6a 59 22 29 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 74 3a 7b 64 65 66 61 75 6c 74 3a 74 7d 7d 74 2e 65 78 70 6f 72 74 73 3d 65 2e 64 65 66 61 75 6c 74 7d 2c 42 50 34 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e Data Ascii: ,r.default)(1,arguments);var e=(0,i.default)(t),n=e.getMonth();return e.setFullYear(e.getFullYear(),n+1,0),e.setHours(0,0,0,0),e};var i=a(n("2Oix")),r=a(n("YGjY"));function a(t){return t&&t.__esModule?t:{default:t}}t.exports=e.default},BP4e:function(t,e,n
2024-04-23 07:42:51 UTC	16384	IN	Data Raw: 74 22 3d 3d 3d 6c 29 72 2e 73 74 79 6c 65 53 68 65 65 74 3f 72 2e 73 74 79 6c 65 53 68 65 65 74 2e 63 73 73 54 65 78 74 3d 69 2e 63 73 73 54 65 78 74 3a 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 69 2e 63 73 73 54 65 78 74 29 29 3b 65 6c 73 65 20 69 66 28 2d 31 21 3d 3d 5b 74 2e 74 61 67 49 44 4b 65 79 4e 61 6d 65 2c 22 62 6f 64 79 22 5d 2e 69 6e 64 65 78 4f 66 28 6c 29 29 7b 76 61 72 20 64 3d 22 64 61 74 61 2d 22 2b 6c 2c 66 3d 76 6f 69 64 20 30 3d 3d 3d 69 5b 6c 5d 3f 22 22 3a 69 5b 6c 5d 3b 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 64 2c 66 29 7d 65 6c 73 65 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3d 3d 3d 69 5b 6c 5d 3f 22 22 3a 69 5b 6c 5d 3b 72 2e 73 65 74 41 74 74 72 69 62 75 Data Ascii: t"===l)r.styleSheet?r.styleSheet.cssText=i.cssText:r.appendChild(document.createTextNode(i.cssText));else if(-1!==[t.tagIDKeyName,"body"].indexOf(l)){var d="data-"+l,f=void 0===i[l]?"":i[l];r.setAttribute(d,f)}else{var h=void 0===i[l]?"":i[l];r.setAttribu
2024-04-23 07:42:51 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 4e 61 4e 29 3b 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 7d 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 28 30 2c 69 2e 64 65 66 61 75 6c 74 29 28 74 29 3b 28 76 6f 69 64 20 30 3d 3d 3d 6e 7c 7c 6e 3e 65 7c 7c 69 73 4e 61 4e 28 65 29 29 26 26 28 6e 3d 65 29 7d 29 29 2c 6e 7c 7c 6e 65 77 20 44 61 74 65 28 4e 61 4e 29 7d 3b 76 61 72 20 69 3d 61 28 6e 28 22 32 4f 69 78 22 29 29 2c 72 3d 61 28 6e 28 22 59 47 6a 59 22 29 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 74 3a 7b 64 65 66 61 75 6c 74 3a 74 7d 7d 74 2e 65 78 70 6f 72 74 73 Data Ascii: eturn new Date(NaN);e=Array.prototype.slice.call(t)}return e.forEach((function(t){var e=(0,i.default)(t);(void 0===n\|\|n>e\|\|isNaN(e))&&(n=e)})),n\|\|new Date(NaN)};var i=a(n("2Oix")),r=a(n("YGjY"));function a(t){return t&&t.__esModule?t:{default:t}}t.exports

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49764	199.59.243.50	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:50 UTC	1254	OUT	GET /dfp.js HTTP/1.1 Host: www.bodis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bodis.com/takedown-request Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjlDUGJkS1BEYWxoOHRETGlibnlzbGc9PSIsInZhbHVlIjoiaFFYMGI1eUJjV283S1UrWjk4VGRLZng5ZEkrcjgrSERkRWRIaVROeU5iN3RTeHJ5UFp1TXArTmpWOHJlVTZMTzRhOFgzQzZyZWRxVG4wQkRvRStyUzNLZ3VDakZJdUVHYWduWEVWWDVCdkFXL2ZJWUpOWldocGNZMDg5aDVvNHMiLCJtYWMiOiIxMjBiNGEzNTIxMDdlZTY0OGZkNTBjMzgyZGJlYzFiZGQ5ZmQ4N2I4OGVmZTJlYTQwYmUyY2QxNWYxODc3YTIyIiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IkkrdlMxdlJLajUyNUlRSUhmRGdUSVE9PSIsInZhbHVlIjoicThNaFZwSXI0MTAwS0pxVHByVzR2Lzh3OHVmMmc2Q2puNi9Bck95N3RUYlhsZWtGTnQxNC9YWE4ybXB4UU03VkxTLzE4ZllORDY2T2VHQkJUOG1MbEZzSGo5K1pIcnZKb2d2eGlCWVBUMFhLTEo4YUNXVE8vZGZEcnNmRVQwNnYiLCJtYWMiOiIyMzhiM2Q4NWY1M2FmNDA3OGJmOWYzMGU1M2QzMTFkZWRkOTY0MTQ2ODU5OWJhMWQ0YmU5N2I4MzBhZWFhZmI1IiwidGFnIjoiIn0%3D
2024-04-23 07:42:50 UTC	254	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:50 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 454 Connection: close Server: nginx Last-Modified: Tue, 18 Jul 2023 14:57:39 GMT ETag: "64b6a863-1c6" Accept-Ranges: bytes
2024-04-23 07:42:50 UTC	454	IN	Data Raw: 2f 2f 20 57 68 65 6e 20 61 20 75 73 65 72 20 69 73 20 75 73 69 6e 67 20 61 64 20 62 6c 6f 63 6b 2c 20 74 68 69 73 20 20 66 69 6c 65 20 77 69 6c 6c 20 62 65 20 62 6c 6f 63 6b 65 64 20 76 69 61 20 61 20 77 68 69 74 65 6c 69 73 74 20 6c 69 6b 65 0a 2f 2f 20 74 68 69 73 3a 20 68 74 74 70 73 3a 2f 2f 65 61 73 79 6c 69 73 74 2d 64 6f 77 6e 6c 6f 61 64 73 2e 61 64 62 6c 6f 63 6b 70 6c 75 73 2e 6f 72 67 2f 65 61 73 79 6c 69 73 74 2e 74 78 74 20 74 68 69 73 20 6d 65 61 6e 73 2c 20 77 65 20 63 68 65 63 6b 20 69 66 20 73 6f 6d 65 6f 6e 65 0a 2f 2f 20 69 73 20 75 73 69 6e 67 20 61 64 20 62 6c 6f 63 6b 20 61 6e 64 20 73 75 67 67 65 73 74 20 74 68 65 79 20 74 75 72 6e 20 69 74 20 6f 66 66 20 73 6f 20 74 68 65 79 20 63 61 6e 20 72 65 67 69 73 74 65 72 20 77 69 74 68 6f Data Ascii: // When a user is using ad block, this file will be blocked via a whitelist like// this: https://easylist-downloads.adblockplus.org/easylist.txt this means, we check if someone// is using ad block and suggest they turn it off so they can register witho

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49769	199.59.243.50	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:52 UTC	1697	OUT	GET /api/account HTTP/1.1 Host: www.bodis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / X-XSRF-TOKEN: eyJpdiI6IjlDUGJkS1BEYWxoOHRETGlibnlzbGc9PSIsInZhbHVlIjoiaFFYMGI1eUJjV283S1UrWjk4VGRLZng5ZEkrcjgrSERkRWRIaVROeU5iN3RTeHJ5UFp1TXArTmpWOHJlVTZMTzRhOFgzQzZyZWRxVG4wQkRvRStyUzNLZ3VDakZJdUVHYWduWEVWWDVCdkFXL2ZJWUpOWldocGNZMDg5aDVvNHMiLCJtYWMiOiIxMjBiNGEzNTIxMDdlZTY0OGZkNTBjMzgyZGJlYzFiZGQ5ZmQ4N2I4OGVmZTJlYTQwYmUyY2QxNWYxODc3YTIyIiwidGFnIjoiIn0= X-CSRF-TOKEN: hdBYEgWRP49Fk5dt7mvrmIcCM7eUDhZ1GYCFFCtD sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.bodis.com/takedown-request Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjlDUGJkS1BEYWxoOHRETGlibnlzbGc9PSIsInZhbHVlIjoiaFFYMGI1eUJjV283S1UrWjk4VGRLZng5ZEkrcjgrSERkRWRIaVROeU5iN3RTeHJ5UFp1TXArTmpWOHJlVTZMTzRhOFgzQzZyZWRxVG4wQkRvRStyUzNLZ3VDakZJdUVHYWduWEVWWDVCdkFXL2ZJWUpOWldocGNZMDg5aDVvNHMiLCJtYWMiOiIxMjBiNGEzNTIxMDdlZTY0OGZkNTBjMzgyZGJlYzFiZGQ5ZmQ4N2I4OGVmZTJlYTQwYmUyY2QxNWYxODc3YTIyIiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IkkrdlMxdlJLajUyNUlRSUhmRGdUSVE9PSIsInZhbHVlIjoicThNaFZwSXI0MTAwS0pxVHByVzR2Lzh3OHVmMmc2Q2puNi9Bck95N3RUYlhsZWtGTnQxNC9YWE4ybXB4UU03VkxTLzE4ZllORDY2T2VHQkJUOG1MbEZzSGo5K1pIcnZKb2d2eGlCWVBUMFhLTEo4YUNXVE8vZGZEcnNmRVQwNnYiLCJtYWMiOiIyMzhiM2Q4NWY1M2FmNDA3OGJmOWYzMGU1M2QzMTFkZWRkOTY0MTQ2ODU5OWJhMWQ0YmU5N2I4MzBhZWFhZmI1IiwidGFnIjoiIn0%3D
2024-04-23 07:42:52 UTC	1101	IN	HTTP/1.1 401 Unauthorized Date: Tue, 23 Apr 2024 07:42:52 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Server: nginx Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6IjczS2xkTjNJTkx5SFl6ZkxsVW1IZXc9PSIsInZhbHVlIjoidmllZUpWL0c2bzNQVDdRZ3JSVTZqTFhpZTZZanhVb24zNk1nOG5RRUpOR3lBV0dnd0lJaWNyTDJodGdZVEJ5NXpQN1I1UDBVMDdVMDJ5d3FqK1lsTWI4NDE3bVFWM0QwKzAzUkN4bnlMREtWZ0prb0w4VU1uWEZMQkZqTm9JTVYiLCJtYWMiOiI1ZmJlYmY0MjUwM2E1Y2IyYzc3ODhkMWFmZjQ3OGUwOWU4MzZhN2MxNDUzNmRjOTJmMDNlZWExOGJkYmQ2MWRmIiwidGFnIjoiIn0%3D; expires=Tue, 23 Apr 2024 09:42:52 GMT; Max-Age=7200; path=/; domain=.bodis.com Set-Cookie: bodis_session=eyJpdiI6IldDNFA3bVRtenNBZFJKWjFIZG5CNkE9PSIsInZhbHVlIjoiQ3NKTHFIa3VOalkwZkVZbDNseEhyRmpwNmp1SThna1pZMnlDTzF4WjZXZlRlR1B2ZVV0MEkwNGVjbDlwSFVkbThMT0Q5dm9DeGpwUHNQTFlrUytWeEIxRkxvSXozNXYybnJXbzgwZkp2UjJMeTJUWDdzeUdZSFJsd0xkMUZKU0EiLCJtYWMiOiI3YzU4ODZlZWIzYmY0ZTAzODJjZGVmOWNkYmQwZGQwNTNjZTA1YmNhZTlkZGIyOTVkYmE3NGZiM2YwNDU0MmEwIiwidGFnIjoiIn0%3D; expires=Tue, 23 Apr 2024 09:42:52 GMT; Max-Age=7200; path=/; domain=.bodis.com; httponly
2024-04-23 07:42:52 UTC	36	IN	Data Raw: 31 65 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 65 6e 74 69 63 61 74 65 64 2e 22 7d 0d 0a Data Ascii: 1e{"message":"Unauthenticated."}
2024-04-23 07:42:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49773	104.22.58.91	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:52 UTC	560	OUT	GET /client_data/3155f51cab94cfafe4b265a7/script.js HTTP/1.1 Host: cdn-cookieyes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bodis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:52 UTC	485	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:52 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Wed, 17 Apr 2024 21:35:02 GMT etag: W/"17913-61651a0940f8e-gzip" vary: Accept-Encoding access-control-allow-origin: * access-control-allow-methods: GET, OPTIONS Cache-Control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate CF-Cache-Status: HIT Age: 466864 Server: cloudflare CF-RAY: 878c3828f8077b90-ATL
2024-04-23 07:42:52 UTC	884	IN	Data Raw: 37 64 62 38 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 33 32 34 31 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 22 64 6f 63 75 6d 65 6e 74 22 69 6e 20 77 69 6e 64 6f 77 2e 73 65 6c 66 26 26 28 28 21 28 22 63 6c 61 73 73 4c 69 73 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 5f 22 29 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 26 26 21 28 22 63 6c 61 73 73 4c 69 73 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 22 67 22 29 29 29 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 22 45 6c 65 6d 65 6e 74 Data Ascii: 7db8!function(){var t={3241:function(){"document"in window.self&&((!("classList"in document.createElement("_"))\|\|document.createElementNS&&!("classList"in document.createElementNS("http://www.w3.org/2000/svg","g")))&&function(t){"use strict";if("Element
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 2b 2b 29 74 68 69 73 2e 70 75 73 68 28 72 5b 6e 5d 29 3b 74 68 69 73 2e 5f 75 70 64 61 74 65 43 6c 61 73 73 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 74 68 69 73 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 7d 2c 63 3d 75 2e 70 72 6f 74 6f 74 79 70 65 3d 5b 5d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 74 68 69 73 29 7d 3b 69 66 28 61 2e 70 72 6f 74 6f 74 79 70 65 3d 45 72 72 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 63 2e 69 74 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 74 5d 7c 7c 6e 75 6c 6c 7d 2c 63 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2d 31 21 3d 3d 73 28 74 68 69 Data Ascii: ++)this.push(r[n]);this._updateClassName=function(){t.setAttribute("class",this.toString())}},c=u.prototype=[],f=function(){return new u(this)};if(a.prototype=Error.prototype,c.item=function(t){return this[t]\|\|null},c.contains=function(t){return-1!==s(thi
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 22 29 29 7b 76 61 72 20 72 3d 44 4f 4d 54 6f 6b 65 6e 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 67 67 6c 65 3b 44 4f 4d 54 6f 6b 65 6e 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 67 67 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 31 20 69 6e 20 61 72 67 75 6d 65 6e 74 73 26 26 21 74 68 69 73 2e 63 6f 6e 74 61 69 6e 73 28 74 29 3d 3d 21 65 3f 65 3a 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7d 7d 74 3d 6e 75 6c 6c 7d 28 29 29 7d 2c 39 36 36 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 37 38 35 34 29 2c 6f 3d 72 28 36 31 34 29 2c 69 3d 72 28 36 33 33 30 29 2c 61 3d 6e 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6f 28 74 Data Ascii: ")){var r=DOMTokenList.prototype.toggle;DOMTokenList.prototype.toggle=function(t,e){return 1 in arguments&&!this.contains(t)==!e?e:r.call(this,t)}}t=null}())},9662:function(t,e,r){var n=r(7854),o=r(614),i=r(6330),a=n.TypeError;t.exports=function(t){if(o(t
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 61 6c 75 65 3a 38 7d 29 7d 7d 29 29 7d 2c 38 34 35 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 37 38 35 34 29 2c 6f 3d 72 28 39 39 37 34 29 2c 69 3d 72 28 36 39 31 36 29 2c 61 3d 72 28 37 39 30 38 29 2c 73 3d 72 28 33 34 31 31 29 2c 75 3d 72 28 37 36 35 39 29 2c 63 3d 72 28 34 34 31 31 29 2c 66 3d 72 28 36 32 34 34 29 2c 6c 3d 72 28 36 31 33 35 29 2c 70 3d 72 28 38 35 35 34 29 2c 68 3d 72 28 31 32 34 36 29 2c 64 3d 6e 2e 41 72 72 61 79 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 61 28 74 29 2c 72 3d 63 28 74 68 69 73 29 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 76 3d 6e 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f Data Ascii: alue:8})}}))},8457:function(t,e,r){"use strict";var n=r(7854),o=r(9974),i=r(6916),a=r(7908),s=r(3411),u=r(7659),c=r(4411),f=r(6244),l=r(6135),p=r(8554),h=r(1246),d=n.Array;t.exports=function(t){var e=a(t),r=c(this),n=arguments.length,v=n>1?arguments[1]:vo
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 3a 66 28 33 29 2c 65 76 65 72 79 3a 66 28 34 29 2c 66 69 6e 64 3a 66 28 35 29 2c 66 69 6e 64 49 6e 64 65 78 3a 66 28 36 29 2c 66 69 6c 74 65 72 52 65 6a 65 63 74 3a 66 28 37 29 7d 7d 2c 31 31 39 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 37 32 39 33 29 2c 6f 3d 72 28 35 31 31 32 29 2c 69 3d 72 28 37 33 39 32 29 2c 61 3d 6f 28 22 73 70 65 63 69 65 73 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 3e 3d 35 31 7c 7c 21 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 3b 72 65 74 75 72 6e 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 7b 7d 29 5b 61 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 66 6f 6f 3a 31 7d 7d 2c 31 21 3d 3d 65 5b 74 5d 28 Data Ascii: :f(3),every:f(4),find:f(5),findIndex:f(6),filterReject:f(7)}},1194:function(t,e,r){var n=r(7293),o=r(5112),i=r(7392),a=o("species");t.exports=function(t){return i>=51\|\|!n((function(){var e=[];return(e.constructor={})[a]=function(){return{foo:1}},1!==e[t](
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 37 34 37 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 6e 28 74 29 29 28 30 3d 3d 3d 65 3f 30 3a 65 29 7d 7d 2c 33 34 31 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 39 36 37 30 29 2c 6f 3d 72 28 39 32 31 32 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 69 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 69 3f 65 28 6e 28 72 29 5b 30 5d 2c 72 5b 31 5d 29 3a 65 28 72 29 7d 63 61 74 63 68 28 65 29 7b 6f 28 74 2c 22 74 68 72 6f 77 22 2c 65 29 7d 7d 7d 2c 37 30 37 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 35 31 31 32 29 28 22 69 74 65 72 61 Data Ascii: tion(t,e,r){var n=r(7475);t.exports=function(t,e){return new(n(t))(0===e?0:e)}},3411:function(t,e,r){var n=r(9670),o=r(9212);t.exports=function(t,e,r,i){try{return i?e(n(r)[0],r[1]):e(r)}catch(e){o(t,"throw",e)}}},7072:function(t,e,r){var n=r(5112)("itera
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 26 75 28 6e 2c 74 5b 63 5d 2c 7b 74 68 61 74 3a 74 2c 41 53 5f 45 4e 54 52 49 45 53 3a 72 7d 29 7d 29 29 2c 68 3d 66 2e 70 72 6f 74 6f 74 79 70 65 2c 79 3d 76 28 65 29 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 2c 6f 2c 69 3d 79 28 74 29 2c 61 3d 6d 28 74 2c 65 29 3b 72 65 74 75 72 6e 20 61 3f 61 2e 76 61 6c 75 65 3d 72 3a 28 69 2e 6c 61 73 74 3d 61 3d 7b 69 6e 64 65 78 3a 6f 3d 70 28 65 2c 21 30 29 2c 6b 65 79 3a 65 2c 76 61 6c 75 65 3a 72 2c 70 72 65 76 69 6f 75 73 3a 6e 3d 69 2e 6c 61 73 74 2c 6e 65 78 74 3a 76 6f 69 64 20 30 2c 72 65 6d 6f 76 65 64 3a 21 31 7d 2c 69 2e 66 69 72 73 74 7c 7c 28 69 2e 66 69 72 73 74 3d 61 29 2c 6e 26 26 28 6e 2e 6e 65 78 74 3d 61 29 2c 6c 3f 69 2e 73 69 7a 65 2b 2b 3a 74 2e 73 69 7a 65 2b 2b Data Ascii: &u(n,t[c],{that:t,AS_ENTRIES:r})})),h=f.prototype,y=v(e),g=function(t,e,r){var n,o,i=y(t),a=m(t,e);return a?a.value=r:(i.last=a={index:o=p(e,!0),key:e,value:r,previous:n=i.last,next:void 0,removed:!1},i.first\|\|(i.first=a),n&&(n.next=a),l?i.size++:t.size++
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 69 28 74 68 69 73 29 2c 65 3d 74 2e 6b 69 6e 64 2c 72 3d 74 2e 6c 61 73 74 3b 72 26 26 72 2e 72 65 6d 6f 76 65 64 3b 29 72 3d 72 2e 70 72 65 76 69 6f 75 73 3b 72 65 74 75 72 6e 20 74 2e 74 61 72 67 65 74 26 26 28 74 2e 6c 61 73 74 3d 72 3d 72 3f 72 2e 6e 65 78 74 3a 74 2e 73 74 61 74 65 2e 66 69 72 73 74 29 3f 22 6b 65 79 73 22 3d 3d 65 3f 7b 76 61 6c 75 65 3a 72 2e 6b 65 79 2c 64 6f 6e 65 3a 21 31 7d 3a 22 76 61 6c 75 65 73 22 3d 3d 65 3f 7b 76 61 6c 75 65 3a 72 2e 76 61 6c 75 65 2c 64 6f 6e 65 3a 21 31 7d 3a 7b 76 61 6c 75 65 3a 5b 72 2e 6b 65 79 2c 72 2e 76 61 6c 75 65 5d 2c 64 6f 6e 65 3a 21 31 7d 3a 28 74 2e 74 61 72 67 65 74 3d 76 6f 69 64 20 30 2c 7b 76 61 6c 75 65 3a 76 6f 69 64 Data Ascii: ,(function(){for(var t=i(this),e=t.kind,r=t.last;r&&r.removed;)r=r.previous;return t.target&&(t.last=r=r?r.next:t.state.first)?"keys"==e?{value:r.key,done:!1}:"values"==e?{value:r.value,done:!1}:{value:[r.key,r.value],done:!1}:(t.target=void 0,{value:void
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 64 65 6c 65 74 65 22 29 2c 5f 28 22 68 61 73 22 29 2c 67 26 26 5f 28 22 67 65 74 22 29 29 2c 28 54 7c 7c 4f 29 26 26 5f 28 62 29 2c 6d 26 26 78 2e 63 6c 65 61 72 26 26 64 65 6c 65 74 65 20 78 2e 63 6c 65 61 72 7d 72 65 74 75 72 6e 20 6b 5b 74 5d 3d 53 2c 6e 28 7b 67 6c 6f 62 61 6c 3a 21 30 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 21 30 2c 66 6f 72 63 65 64 3a 53 21 3d 77 7d 2c 6b 29 2c 76 28 53 2c 74 29 2c 6d 7c 7c 72 2e 73 65 74 53 74 72 6f 6e 67 28 53 2c 74 2c 67 29 2c 53 7d 7d 2c 39 39 32 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 32 35 39 37 29 2c 6f 3d 72 28 33 38 38 37 29 2c 69 3d 72 28 31 32 33 36 29 2c 61 3d 72 28 33 30 37 30 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f Data Ascii: delete"),_("has"),g&&_("get")),(T\|\|O)&&_(b),m&&x.clear&&delete x.clear}return k[t]=S,n({global:!0,constructor:!0,forced:S!=w},k),v(S,t),m\|\|r.setStrong(S,t,g),S}},9920:function(t,e,r){var n=r(2597),o=r(3887),i=r(1236),a=r(3070);t.exports=function(t,e,r){fo
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 72 2e 67 65 74 26 26 6e 28 72 2e 67 65 74 2c 65 2c 7b 67 65 74 74 65 72 3a 21 30 7d 29 2c 72 2e 73 65 74 26 26 6e 28 72 2e 73 65 74 2c 65 2c 7b 73 65 74 74 65 72 3a 21 30 7d 29 2c 6f 2e 66 28 74 2c 65 2c 72 29 7d 7d 2c 38 30 35 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 37 38 35 34 29 2c 6f 3d 72 28 36 31 34 29 2c 69 3d 72 28 38 38 38 30 29 2c 61 3d 72 28 36 33 33 39 29 2c 73 3d 72 28 33 35 30 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 75 29 7b 76 61 72 20 63 3d 21 21 75 26 26 21 21 75 2e 75 6e 73 61 66 65 2c 66 3d 21 21 75 26 26 21 21 75 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 6c 3d 21 21 75 26 26 21 21 75 2e 6e 6f 54 61 72 67 65 74 47 65 74 2c 70 3d 75 26 26 76 6f 69 64 20 30 21 3d Data Ascii: r.get&&n(r.get,e,{getter:!0}),r.set&&n(r.set,e,{setter:!0}),o.f(t,e,r)}},8052:function(t,e,r){var n=r(7854),o=r(614),i=r(8880),a=r(6339),s=r(3505);t.exports=function(t,e,r,u){var c=!!u&&!!u.unsafe,f=!!u&&!!u.enumerable,l=!!u&&!!u.noTargetGet,p=u&&void 0!=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49772	104.22.9.8	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:52 UTC	529	OUT	GET /assets/reamaze.js HTTP/1.1 Host: cdn.reamaze.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bodis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:52 UTC	317	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:52 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-encoding last-modified: Mon, 22 Apr 2024 22:30:46 GMT etag: W/"32d60-616b6fd12f180" CF-Cache-Status: HIT Age: 4015 Server: cloudflare CF-RAY: 878c3828fa8e451f-ATL
2024-04-23 07:42:52 UTC	1052	IN	Data Raw: 37 65 36 30 0d 0a 66 75 6e 63 74 69 6f 6e 20 6f 75 69 62 6f 75 6e 63 65 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 3f 74 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 66 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 61 29 2c 66 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 65 2e 63 6c 69 65 6e 74 59 3e 6c 7c 7c 28 68 3d 73 65 74 54 69 6d 65 6f 75 74 28 6f 2c 75 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 68 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 68 29 2c 68 3d 6e 75 6c 6c 29 7d 66 75 6e Data Ascii: 7e60function ouibounce(e,t){"use strict";function n(e,t){return void 0===e?t:e}function r(){f.addEventListener("mouseleave",a),f.addEventListener("mouseenter",i)}function a(e){e.clientY>l\|\|(h=setTimeout(o,u))}function i(){h&&(clearTimeout(h),h=null)}fun
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 61 72 6b 65 64 2e 52 65 6e 64 65 72 65 72 3b 74 3f 72 3d 21 28 6e 3d 7b 65 6c 65 6d 65 6e 74 73 3a 5b 22 73 70 61 6e 22 5d 2c 61 74 74 72 69 62 75 74 65 73 3a 7b 73 70 61 6e 3a 5b 22 63 6c 61 73 73 22 5d 7d 7d 29 3a 28 6e 3d 7b 65 6c 65 6d 65 6e 74 73 3a 5b 5d 7d 2c 72 3d 21 30 29 3b 76 61 72 20 69 3d 6e 65 77 20 53 61 6e 69 74 69 7a 65 28 6e 29 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 6f 2e 69 6e 6e 65 72 48 54 4d 4c 3d 6d 61 72 6b 65 64 28 65 2c 7b 73 61 6e 69 74 69 7a 65 3a 72 2c 67 66 6d 3a 21 30 2c 72 65 6e 64 65 72 65 72 3a 61 2c 73 69 6c 65 6e 74 3a 21 30 7d 29 3b 76 61 72 20 73 3d 69 2e 63 6c 65 61 6e 5f 6e 6f 64 65 28 6f 29 2c 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d Data Ascii: arked.Renderer;t?r=!(n={elements:["span"],attributes:{span:["class"]}}):(n={elements:[]},r=!0);var i=new Sanitize(n),o=document.createElement("div");o.innerHTML=marked(e,{sanitize:r,gfm:!0,renderer:a,silent:!0});var s=i.clean_node(o),p=document.createElem
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 30 29 3b 6e 26 26 39 3c 28 69 2a 3d 32 29 26 26 28 69 2d 3d 39 29 2c 74 2b 3d 69 2c 6e 3d 21 6e 7d 72 65 74 75 72 6e 20 74 25 31 30 3d 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 69 6e 68 65 72 69 74 73 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 Data Ascii: 0);n&&9<(i*=2)&&(i-=9),t+=i,n=!n}return t%10==0}function _classCallCheck(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function _inherits(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Super expression mus
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 69 6e 68 65 72 69 74 73 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d Data Ascii: ror("Cannot call a class as a function")}function _inherits(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function, not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enum
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 71 75 6f 74 65 28 65 29 7b 72 65 74 75 72 6e 20 65 73 63 61 70 61 62 6c 65 2e 6c 61 73 74 49 6e 64 65 78 3d 30 2c 65 73 63 61 70 61 62 6c 65 2e 74 65 73 74 28 65 29 3f 27 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 65 73 63 61 70 61 62 6c 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6d 65 74 61 5b 65 5d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 22 5c 5c 75 22 2b 28 22 30 30 30 30 22 2b 65 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 34 29 7d 29 2b 27 22 27 3a 27 22 27 2b 65 2b 27 22 27 7d 66 75 6e 63 74 69 6f 6e 20 73 74 72 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 61 2c 69 2c 6f 2c 73 3d 67 61 70 2c 70 3d 74 5b 65 5d 3b 73 77 Data Ascii: tion quote(e){return escapable.lastIndex=0,escapable.test(e)?'"'+e.replace(escapable,function(e){var t=meta[e];return"string"==typeof t?t:"\\u"+("0000"+e.charCodeAt(0).toString(16)).slice(-4)})+'"':'"'+e+'"'}function str(e,t){var n,r,a,i,o,s=gap,p=t[e];sw
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 22 3a 6e 75 6c 6c 7d 2c 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 4e 75 6d 62 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 4f 66 28 29 7d 29 3b 76 61 72 20 63 78 3d 2f 5b 5c 75 30 30 30 30 5c 75 30 30 61 64 5c 75 30 36 30 30 2d 5c 75 30 36 30 34 5c 75 30 37 30 66 5c 75 31 37 62 34 5c 75 31 37 62 35 5c 75 32 30 30 63 2d 5c 75 32 30 30 66 5c 75 32 30 32 38 2d 5c 75 32 30 32 66 5c 75 32 30 36 30 2d 5c 75 32 30 36 66 5c 75 66 65 66 66 5c 75 66 66 66 30 2d 5c 75 66 66 66 66 5d 2f 67 2c 65 73 63 61 70 61 62 6c 65 3d 2f 5b 5c 5c 5c 22 5c 78 30 30 2d 5c 78 31 66 Data Ascii: ":null},String.prototype.toJSON=Number.prototype.toJSON=Boolean.prototype.toJSON=function(){return this.valueOf()});var cx=/[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,escapable=/[\\\"\x00-\x1f
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 2c 22 22 29 29 29 72 65 74 75 72 6e 20 6a 3d 65 76 61 6c 28 22 28 22 2b 74 65 78 74 2b 22 29 22 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 76 69 76 65 72 3f 77 61 6c 6b 28 7b 22 22 3a 6a 7d 2c 22 22 29 3a 6a 3b 74 68 72 6f 77 20 6e 65 77 20 53 79 6e 74 61 78 45 72 72 6f 72 28 22 4a 53 4f 4e 2e 70 61 72 73 65 22 29 7d 29 7d 28 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 Data Ascii: ,"")))return j=eval("("+text+")"),"function"==typeof reviver?walk({"":j},""):j;throw new SyntaxError("JSON.parse")})}(),function(e,t){"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)thr
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 3d 74 79 70 65 6f 66 28 6e 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 29 7b 74 72 79 7b 6e 3d 22 74 72 75 65 22 3d 3d 3d 6e 7c 7c 22 66 61 6c 73 65 22 21 3d 3d 6e 26 26 28 22 6e 75 6c 6c 22 3d 3d 3d 6e 3f 6e 75 6c 6c 3a 2b 6e 2b 22 22 3d 3d 3d 6e 3f 2b 6e 3a 49 65 2e 74 65 73 74 28 6e 29 3f 68 65 2e 70 61 72 73 65 4a 53 4f 4e 28 6e 29 3a 6e 29 7d 63 61 74 63 68 28 61 29 7b 7d 68 65 2e 64 61 74 61 28 65 2c 74 2c 6e 29 7d 65 6c 73 65 20 6e 3d 75 6e 64 65 66 69 6e 65 64 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 69 66 28 28 22 64 61 74 61 22 21 3d 3d 74 7c 7c 21 68 65 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 65 5b 74 5d 29 29 26 26 22 74 6f 4a 53 4f 4e 22 21 3d Data Ascii: =typeof(n=e.getAttribute(r))){try{n="true"===n\|\|"false"!==n&&("null"===n?null:+n+""===n?+n:Ie.test(n)?he.parseJSON(n):n)}catch(a){}he.data(e,t,n)}else n=undefined}return n}function l(e){var t;for(t in e)if(("data"!==t\|\|!he.isEmptyObject(e[t]))&&"toJSON"!=
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 2e 63 73 73 28 65 2c 74 29 29 3b 69 66 28 63 26 26 63 5b 33 5d 21 3d 3d 6c 29 66 6f 72 28 6c 3d 6c 7c 7c 63 5b 33 5d 2c 6e 3d 6e 7c 7c 5b 5d 2c 63 3d 2b 70 7c 7c 31 3b 63 2f 3d 69 3d 69 7c 7c 22 2e 35 22 2c 68 65 2e 73 74 79 6c 65 28 65 2c 74 2c 63 2b 6c 29 2c 69 21 3d 3d 28 69 3d 73 28 29 2f 70 29 26 26 31 21 3d 3d 69 26 26 2d 2d 6f 3b 29 3b 72 65 74 75 72 6e 20 6e 26 26 28 63 3d 2b 63 7c 7c 2b 70 7c 7c 30 2c 61 3d 6e 5b 31 5d 3f 63 2b 28 6e 5b 31 5d 2b 31 29 2a 6e 5b 32 5d 3a 2b 6e 5b 32 5d 2c 72 26 26 28 72 2e 75 6e 69 74 3d 6c 2c 72 2e 73 74 61 72 74 3d 63 2c 72 2e 65 6e 64 3d 61 29 29 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 76 61 72 20 74 3d 47 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 6e 3d 65 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 Data Ascii: .css(e,t));if(c&&c[3]!==l)for(l=l\|\|c[3],n=n\|\|[],c=+p\|\|1;c/=i=i\|\|".5",he.style(e,t,c+l),i!==(i=s()/p)&&1!==i&&--o;);return n&&(c=+c\|\|+p\|\|0,a=n[1]?c+(n[1]+1)*n[2]:+n[2],r&&(r.unit=l,r.start=c,r.end=a)),a}function g(e){var t=Ge.split("\|"),n=e.createDocumentF
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 65 73 2e 6c 65 6e 67 74 68 3b 69 2d 2d 3b 29 68 65 2e 6e 6f 64 65 4e 61 6d 65 28 63 3d 6f 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 69 5d 2c 22 74 62 6f 64 79 22 29 26 26 21 63 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 26 26 6f 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 63 29 3b 66 6f 72 28 68 65 2e 6d 65 72 67 65 28 66 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 22 3b 70 2e 66 69 72 73 74 43 68 69 6c 64 3b 29 70 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 70 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 70 3d 68 2e 6c 61 73 74 43 68 69 6c 64 7d 65 6c 73 65 20 66 2e 70 75 73 68 28 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6f 29 29 3b 66 6f 72 28 70 26 26 68 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 70 29 2c 75 65 Data Ascii: es.length;i--;)he.nodeName(c=o.childNodes[i],"tbody")&&!c.childNodes.length&&o.removeChild(c);for(he.merge(f,p.childNodes),p.textContent="";p.firstChild;)p.removeChild(p.firstChild);p=h.lastChild}else f.push(t.createTextNode(o));for(p&&h.removeChild(p),ue

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49768	199.59.243.50	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:52 UTC	1320	OUT	GET /svg/logo.svg HTTP/1.1 Host: www.bodis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bodis.com/takedown-request Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjlDUGJkS1BEYWxoOHRETGlibnlzbGc9PSIsInZhbHVlIjoiaFFYMGI1eUJjV283S1UrWjk4VGRLZng5ZEkrcjgrSERkRWRIaVROeU5iN3RTeHJ5UFp1TXArTmpWOHJlVTZMTzRhOFgzQzZyZWRxVG4wQkRvRStyUzNLZ3VDakZJdUVHYWduWEVWWDVCdkFXL2ZJWUpOWldocGNZMDg5aDVvNHMiLCJtYWMiOiIxMjBiNGEzNTIxMDdlZTY0OGZkNTBjMzgyZGJlYzFiZGQ5ZmQ4N2I4OGVmZTJlYTQwYmUyY2QxNWYxODc3YTIyIiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IkkrdlMxdlJLajUyNUlRSUhmRGdUSVE9PSIsInZhbHVlIjoicThNaFZwSXI0MTAwS0pxVHByVzR2Lzh3OHVmMmc2Q2puNi9Bck95N3RUYlhsZWtGTnQxNC9YWE4ybXB4UU03VkxTLzE4ZllORDY2T2VHQkJUOG1MbEZzSGo5K1pIcnZKb2d2eGlCWVBUMFhLTEo4YUNXVE8vZGZEcnNmRVQwNnYiLCJtYWMiOiIyMzhiM2Q4NWY1M2FmNDA3OGJmOWYzMGU1M2QzMTFkZWRkOTY0MTQ2ODU5OWJhMWQ0YmU5N2I4MzBhZWFhZmI1IiwidGFnIjoiIn0%3D
2024-04-23 07:42:52 UTC	231	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:52 GMT Content-Type: image/svg+xml Content-Length: 3847 Connection: close Server: nginx Last-Modified: Tue, 18 Jul 2023 14:57:39 GMT ETag: "64b6a863-f07" Accept-Ranges: bytes
2024-04-23 07:42:52 UTC	3847	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 33 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1" id=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49774	199.59.243.50	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:52 UTC	1284	OUT	GET /js/chunks/14.3a7973fff8110300ff48.js HTTP/1.1 Host: www.bodis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bodis.com/takedown-request Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjczS2xkTjNJTkx5SFl6ZkxsVW1IZXc9PSIsInZhbHVlIjoidmllZUpWL0c2bzNQVDdRZ3JSVTZqTFhpZTZZanhVb24zNk1nOG5RRUpOR3lBV0dnd0lJaWNyTDJodGdZVEJ5NXpQN1I1UDBVMDdVMDJ5d3FqK1lsTWI4NDE3bVFWM0QwKzAzUkN4bnlMREtWZ0prb0w4VU1uWEZMQkZqTm9JTVYiLCJtYWMiOiI1ZmJlYmY0MjUwM2E1Y2IyYzc3ODhkMWFmZjQ3OGUwOWU4MzZhN2MxNDUzNmRjOTJmMDNlZWExOGJkYmQ2MWRmIiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IldDNFA3bVRtenNBZFJKWjFIZG5CNkE9PSIsInZhbHVlIjoiQ3NKTHFIa3VOalkwZkVZbDNseEhyRmpwNmp1SThna1pZMnlDTzF4WjZXZlRlR1B2ZVV0MEkwNGVjbDlwSFVkbThMT0Q5dm9DeGpwUHNQTFlrUytWeEIxRkxvSXozNXYybnJXbzgwZkp2UjJMeTJUWDdzeUdZSFJsd0xkMUZKU0EiLCJtYWMiOiI3YzU4ODZlZWIzYmY0ZTAzODJjZGVmOWNkYmQwZGQwNTNjZTA1YmNhZTlkZGIyOTVkYmE3NGZiM2YwNDU0MmEwIiwidGFnIjoiIn0%3D
2024-04-23 07:42:52 UTC	257	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:52 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 37801 Connection: close Server: nginx Last-Modified: Mon, 22 Apr 2024 20:34:25 GMT ETag: "6626c9d1-93a9" Accept-Ranges: bytes
2024-04-23 07:42:52 UTC	16127	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 34 5d 2c 7b 22 2b 69 79 48 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 61 28 22 6f 30 6f 31 22 29 2c 72 3d 61 2e 6e 28 6e 29 2c 6f 3d 61 28 22 37 4c 6b 68 22 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 2c 61 2c 6e 2c 72 2c 6f 2c 73 29 7b 74 72 79 7b 76 61 72 20 69 3d 65 5b 6f 5d 28 73 29 2c 6c 3d 69 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 61 28 65 29 7d 69 2e 64 6f 6e 65 3f 74 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6e 2c 72 29 7d 76 61 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[14],{"+iyH":function(e,t,a){"use strict";var n=a("o0o1"),r=a.n(n),o=a("7Lkh");function s(e,t,a,n,r,o,s){try{var i=e[o](s),l=i.value}catch(e){return void a(e)}i.done?t(l):Promise.resolve(l).then(n,r)}var
2024-04-23 07:42:52 UTC	10458	IN	Data Raw: 74 29 7b 65 2e 24 73 65 74 28 65 2e 74 61 6b 65 64 6f 77 6e 2c 22 69 70 5f 68 6f 6c 64 65 72 5f 65 6d 61 69 6c 22 2c 74 29 7d 2c 65 78 70 72 65 73 73 69 6f 6e 3a 22 74 61 6b 65 64 6f 77 6e 2e 69 70 5f 68 6f 6c 64 65 72 5f 65 6d 61 69 6c 22 7d 7d 29 2c 65 2e 5f 76 28 22 20 22 29 2c 61 28 22 76 2d 74 65 78 74 2d 66 69 65 6c 64 22 2c 7b 61 74 74 72 73 3a 7b 6e 61 6d 65 3a 22 69 70 5f 68 6f 6c 64 65 72 5f 70 68 6f 6e 65 5f 6e 75 6d 62 65 72 22 2c 72 75 6c 65 73 3a 5b 65 2e 72 75 6c 65 73 2e 72 65 71 75 69 72 65 64 2c 65 2e 72 75 6c 65 73 2e 6d 61 78 28 32 30 29 5d 2c 70 72 65 66 69 78 3a 65 2e 70 68 6f 6e 65 32 50 72 65 66 69 78 65 64 2c 6c 61 62 65 6c 3a 22 50 68 6f 6e 65 20 6e 75 6d 62 65 72 22 7d 2c 6d 6f 64 65 6c 3a 7b 76 61 6c 75 65 3a 65 2e 74 61 6b 65 Data Ascii: t){e.$set(e.takedown,"ip_holder_email",t)},expression:"takedown.ip_holder_email"}}),e._v(" "),a("v-text-field",{attrs:{name:"ip_holder_phone_number",rules:[e.rules.required,e.rules.max(20)],prefix:e.phone2Prefixed,label:"Phone number"},model:{value:e.take
2024-04-23 07:42:52 UTC	11216	IN	Data Raw: 28 22 76 2d 66 6c 65 78 22 2c 7b 61 74 74 72 73 3a 7b 78 73 31 32 3a 22 22 2c 6d 64 35 3a 22 22 2c 6c 67 34 3a 22 22 7d 7d 2c 5b 65 2e 5f 76 28 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 6f 73 74 61 6c 20 63 6f 64 65 3a 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 29 5d 29 2c 65 2e 5f 76 28 22 20 22 29 2c 61 28 22 76 2d 66 6c 65 78 22 2c 7b 61 74 74 72 73 3a 7b 78 73 31 32 3a 22 22 2c 6d 64 37 3a 22 22 2c 6c 67 38 3a 22 22 7d 7d 2c 5b 65 2e 5f 76 28 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 2b 65 2e 5f 73 28 65 2e 74 61 6b 65 64 6f 77 6e 2e 69 70 5f 68 6f 6c 64 65 72 5f 7a 69 70 5f 63 6f 64 65 7c 7c 22 6e 2f 61 22 29 2b 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ("v-flex",{attrs:{xs12:"",md5:"",lg4:""}},[e._v("\n Postal code:\n ")]),e._v(" "),a("v-flex",{attrs:{xs12:"",md7:"",lg8:""}},[e._v("\n "+e._s(e.takedown.ip_holder_zip_code\|\|"n/a")+"\n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49775	199.59.243.50	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:52 UTC	1070	OUT	GET /svg/logo.svg HTTP/1.1 Host: www.bodis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjczS2xkTjNJTkx5SFl6ZkxsVW1IZXc9PSIsInZhbHVlIjoidmllZUpWL0c2bzNQVDdRZ3JSVTZqTFhpZTZZanhVb24zNk1nOG5RRUpOR3lBV0dnd0lJaWNyTDJodGdZVEJ5NXpQN1I1UDBVMDdVMDJ5d3FqK1lsTWI4NDE3bVFWM0QwKzAzUkN4bnlMREtWZ0prb0w4VU1uWEZMQkZqTm9JTVYiLCJtYWMiOiI1ZmJlYmY0MjUwM2E1Y2IyYzc3ODhkMWFmZjQ3OGUwOWU4MzZhN2MxNDUzNmRjOTJmMDNlZWExOGJkYmQ2MWRmIiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IldDNFA3bVRtenNBZFJKWjFIZG5CNkE9PSIsInZhbHVlIjoiQ3NKTHFIa3VOalkwZkVZbDNseEhyRmpwNmp1SThna1pZMnlDTzF4WjZXZlRlR1B2ZVV0MEkwNGVjbDlwSFVkbThMT0Q5dm9DeGpwUHNQTFlrUytWeEIxRkxvSXozNXYybnJXbzgwZkp2UjJMeTJUWDdzeUdZSFJsd0xkMUZKU0EiLCJtYWMiOiI3YzU4ODZlZWIzYmY0ZTAzODJjZGVmOWNkYmQwZGQwNTNjZTA1YmNhZTlkZGIyOTVkYmE3NGZiM2YwNDU0MmEwIiwidGFnIjoiIn0%3D
2024-04-23 07:42:52 UTC	231	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:52 GMT Content-Type: image/svg+xml Content-Length: 3847 Connection: close Server: nginx Last-Modified: Tue, 18 Jul 2023 14:57:39 GMT ETag: "64b6a863-f07" Accept-Ranges: bytes
2024-04-23 07:42:52 UTC	3847	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 33 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1" id=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49776	104.22.58.91	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:52 UTC	560	OUT	GET /client_data/3155f51cab94cfafe4b265a7/banner.js HTTP/1.1 Host: cdn-cookieyes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bodis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:52 UTC	485	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:52 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Wed, 17 Apr 2024 21:35:02 GMT etag: W/"17fd1-61651a093ffee-gzip" vary: Accept-Encoding access-control-allow-origin: * access-control-allow-methods: GET, OPTIONS Cache-Control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate CF-Cache-Status: HIT Age: 466863 Server: cloudflare CF-RAY: 878c382cd9c253df-ATL
2024-04-23 07:42:52 UTC	884	IN	Data Raw: 37 64 62 38 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 39 36 36 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 38 35 34 29 2c 6f 3d 6e 28 36 31 34 29 2c 69 3d 6e 28 36 33 33 30 29 2c 63 3d 72 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6f 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 63 28 69 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 7d 2c 39 34 38 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 38 35 34 29 2c 6f 3d 6e 28 34 34 31 31 29 2c 69 3d 6e 28 36 33 33 30 29 2c 63 3d 72 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f Data Ascii: 7db8!function(){var t={9662:function(t,e,n){var r=n(7854),o=n(614),i=n(6330),c=r.TypeError;t.exports=function(t){if(o(t))return t;throw c(i(t)+" is not a function")}},9483:function(t,e,n){var r=n(7854),o=n(4411),i=n(6330),c=r.TypeError;t.exports=functio
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 74 68 72 6f 77 20 69 28 22 49 6e 63 6f 72 72 65 63 74 20 69 6e 76 6f 63 61 74 69 6f 6e 22 29 7d 7d 2c 39 36 37 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 38 35 34 29 2c 6f 3d 6e 28 31 31 31 29 2c 69 3d 72 2e 53 74 72 69 6e 67 2c 63 3d 72 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6f 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 63 28 69 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 7d 7d 2c 37 35 35 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 32 39 33 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: throw i("Incorrect invocation")}},9670:function(t,e,n){var r=n(7854),o=n(111),i=r.String,c=r.TypeError;t.exports=function(t){if(o(t))return t;throw c(i(t)+" is not an object")}},7556:function(t,e,n){var r=n(7293);t.exports=r((function(){if("function"==typ
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 39 39 37 34 29 2c 6f 3d 6e 28 31 37 30 32 29 2c 69 3d 6e 28 38 33 36 31 29 2c 63 3d 6e 28 37 39 30 38 29 2c 61 3d 6e 28 36 32 34 34 29 2c 75 3d 6e 28 35 34 31 37 29 2c 73 3d 6f 28 5b 5d 2e 70 75 73 68 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 31 3d 3d 74 2c 6e 3d 32 3d 3d 74 2c 6f 3d 33 3d 3d 74 2c 66 3d 34 3d 3d 74 2c 6c 3d 36 3d 3d 74 2c 70 3d 37 3d 3d 74 2c 76 3d 35 3d 3d 74 7c 7c 6c 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 64 2c 79 2c 68 2c 67 29 7b 66 6f 72 28 76 61 72 20 62 2c 6d 2c 5f 3d 63 28 64 29 2c 78 3d 69 28 5f 29 2c 6b 3d 72 28 79 2c 68 29 2c 53 3d 61 28 78 29 2c 77 3d 30 2c 4f 3d 67 7c 7c 75 2c 6a 3d 65 3f 4f 28 64 2c 53 29 3a 6e 7c 7c 70 3f 4f 28 64 Data Ascii: ion(t,e,n){var r=n(9974),o=n(1702),i=n(8361),c=n(7908),a=n(6244),u=n(5417),s=o([].push),f=function(t){var e=1==t,n=2==t,o=3==t,f=4==t,l=6==t,p=7==t,v=5==t\|\|l;return function(d,y,h,g){for(var b,m,_=c(d),x=i(_),k=r(y,h),S=a(x),w=0,O=g\|\|u,j=e?O(d,S):n\|\|p?O(d
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 6e 73 74 72 75 63 74 6f 72 2c 28 69 28 65 29 26 26 28 65 3d 3d 3d 75 7c 7c 6f 28 65 2e 70 72 6f 74 6f 74 79 70 65 29 29 7c 7c 63 28 65 29 26 26 6e 75 6c 6c 3d 3d 3d 28 65 3d 65 5b 61 5d 29 29 26 26 28 65 3d 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 3d 3d 3d 65 3f 75 3a 65 7d 7d 2c 35 34 31 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 34 37 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 72 28 74 29 29 28 30 3d 3d 3d 65 3f 30 3a 65 29 7d 7d 2c 33 34 31 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 39 36 37 30 29 2c 6f 3d 6e 28 39 32 31 32 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 69 Data Ascii: nstructor,(i(e)&&(e===u\|\|o(e.prototype))\|\|c(e)&&null===(e=e[a]))&&(e=void 0)),void 0===e?u:e}},5417:function(t,e,n){var r=n(7475);t.exports=function(t,e){return new(r(t))(0===e?0:e)}},3411:function(t,e,n){var r=n(9670),o=n(9212);t.exports=function(t,e,n,i
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 61 28 74 2c 76 29 2c 64 28 74 2c 7b 74 79 70 65 3a 65 2c 69 6e 64 65 78 3a 6f 28 6e 75 6c 6c 29 2c 66 69 72 73 74 3a 76 6f 69 64 20 30 2c 6c 61 73 74 3a 76 6f 69 64 20 30 2c 73 69 7a 65 3a 30 7d 29 2c 6c 7c 7c 28 74 2e 73 69 7a 65 3d 30 29 2c 6e 75 6c 6c 21 3d 72 26 26 75 28 72 2c 74 5b 73 5d 2c 7b 74 68 61 74 3a 74 2c 41 53 5f 45 4e 54 52 49 45 53 3a 6e 7d 29 7d 29 29 2c 76 3d 66 2e 70 72 6f 74 6f 74 79 70 65 2c 68 3d 79 28 65 29 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 2c 6f 2c 69 3d 68 28 74 29 2c 63 3d 62 28 74 2c 65 29 3b 72 65 74 75 72 6e 20 63 3f 63 2e 76 61 6c 75 65 3d 6e 3a 28 69 2e 6c 61 73 74 3d 63 3d 7b 69 6e 64 65 78 3a 6f 3d 70 28 65 2c 21 30 29 2c 6b 65 79 3a 65 2c Data Ascii: (function(t,r){a(t,v),d(t,{type:e,index:o(null),first:void 0,last:void 0,size:0}),l\|\|(t.size=0),null!=r&&u(r,t[s],{that:t,AS_ENTRIES:n})})),v=f.prototype,h=y(e),g=function(t,e,n){var r,o,i=h(t),c=b(t,e);return c?c.value=n:(i.last=c={index:o=p(e,!0),key:e,
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 22 20 49 74 65 72 61 74 6f 72 22 2c 6f 3d 79 28 65 29 2c 69 3d 79 28 72 29 3b 73 28 74 2c 65 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 64 28 74 68 69 73 2c 7b 74 79 70 65 3a 72 2c 74 61 72 67 65 74 3a 74 2c 73 74 61 74 65 3a 6f 28 74 29 2c 6b 69 6e 64 3a 65 2c 6c 61 73 74 3a 76 6f 69 64 20 30 7d 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 69 28 74 68 69 73 29 2c 65 3d 74 2e 6b 69 6e 64 2c 6e 3d 74 2e 6c 61 73 74 3b 6e 26 26 6e 2e 72 65 6d 6f 76 65 64 3b 29 6e 3d 6e 2e 70 72 65 76 69 6f 75 73 3b 72 65 74 75 72 6e 20 74 2e 74 61 72 67 65 74 26 26 28 74 2e 6c 61 73 74 3d 6e 3d 6e 3f 6e 2e 6e 65 78 74 3a 74 2e 73 74 61 74 65 2e 66 69 72 73 74 29 3f 22 6b 65 79 73 22 3d 3d 65 3f 7b 76 61 6c 75 65 3a 6e 2e 6b 65 79 2c 64 Data Ascii: " Iterator",o=y(e),i=y(r);s(t,e,(function(t,e){d(this,{type:r,target:t,state:o(t),kind:e,last:void 0})}),(function(){for(var t=i(this),e=t.kind,n=t.last;n&&n.removed;)n=n.previous;return t.target&&(t.last=n=n?n.next:t.state.first)?"keys"==e?{value:n.key,d
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 77 20 5f 2c 74 2c 6b 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 73 28 65 2c 6e 5b 6d 5d 2c 7b 74 68 61 74 3a 6e 2c 41 53 5f 45 4e 54 52 49 45 53 3a 67 7d 29 2c 6e 7d 29 29 29 2e 70 72 6f 74 6f 74 79 70 65 3d 78 2c 78 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6b 29 2c 28 45 7c 7c 43 29 26 26 28 77 28 22 64 65 6c 65 74 65 22 29 2c 77 28 22 68 61 73 22 29 2c 67 26 26 77 28 22 67 65 74 22 29 29 2c 28 43 7c 7c 6a 29 26 26 77 28 6d 29 2c 62 26 26 78 2e 63 6c 65 61 72 26 26 64 65 6c 65 74 65 20 78 2e 63 6c 65 61 72 7d 72 65 74 75 72 6e 20 53 5b 74 5d 3d 6b 2c 72 28 7b 67 6c 6f 62 61 6c 3a 21 30 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 21 30 2c 66 6f 72 63 65 64 3a 6b 21 3d 5f 7d 2c 53 29 2c 79 28 6b 2c 74 29 2c 62 7c 7c 6e 2e 73 65 74 53 74 72 6f 6e 67 28 Data Ascii: w _,t,k);return null!=e&&s(e,n[m],{that:n,AS_ENTRIES:g}),n}))).prototype=x,x.constructor=k),(E\|\|C)&&(w("delete"),w("has"),g&&w("get")),(C\|\|j)&&w(m),b&&x.clear&&delete x.clear}return S[t]=k,r({global:!0,constructor:!0,forced:k!=_},S),y(k,t),b\|\|n.setStrong(
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 3f 6f 2e 66 28 74 2c 63 2c 69 28 30 2c 6e 29 29 3a 74 5b 63 5d 3d 6e 7d 7d 2c 38 30 35 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 38 35 34 29 2c 6f 3d 6e 28 36 31 34 29 2c 69 3d 6e 28 38 38 38 30 29 2c 63 3d 6e 28 36 33 33 39 29 2c 61 3d 6e 28 33 35 30 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 75 29 7b 76 61 72 20 73 3d 21 21 75 26 26 21 21 75 2e 75 6e 73 61 66 65 2c 66 3d 21 21 75 26 26 21 21 75 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 6c 3d 21 21 75 26 26 21 21 75 2e 6e 6f 54 61 72 67 65 74 47 65 74 2c 70 3d 75 26 26 76 6f 69 64 20 30 21 3d 3d 75 2e 6e 61 6d 65 3f 75 2e 6e 61 6d 65 3a 65 3b 72 65 74 75 72 6e 20 6f 28 6e 29 26 26 63 28 6e 2c 70 2c 75 29 2c 74 3d 3d 3d 72 3f 28 66 Data Ascii: ?o.f(t,c,i(0,n)):t[c]=n}},8052:function(t,e,n){var r=n(7854),o=n(614),i=n(8880),c=n(6339),a=n(3505);t.exports=function(t,e,n,u){var s=!!u&&!!u.unsafe,f=!!u&&!!u.enumerable,l=!!u&&!!u.noTargetGet,p=u&&void 0!==u.name?u.name:e;return o(n)&&c(n,p,u),t===r?(f
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 69 6e 20 50 29 29 26 26 76 28 50 2c 43 2c 54 5b 43 5d 29 3b 65 6c 73 65 20 72 28 7b 74 61 72 67 65 74 3a 65 2c 70 72 6f 74 6f 3a 21 30 2c 66 6f 72 63 65 64 3a 5f 7c 7c 49 7d 2c 54 29 3b 72 65 74 75 72 6e 20 69 26 26 21 6a 7c 7c 50 5b 78 5d 3d 3d 3d 4e 7c 7c 76 28 50 2c 78 2c 4e 2c 7b 6e 61 6d 65 3a 64 7d 29 2c 79 5b 65 5d 3d 4e 2c 54 7d 7d 2c 37 32 33 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 38 35 37 29 2c 6f 3d 6e 28 32 35 39 37 29 2c 69 3d 6e 28 36 30 36 31 29 2c 63 3d 6e 28 33 30 37 30 29 2e 66 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 72 2e 53 79 6d 62 6f 6c 7c 7c 28 72 2e 53 79 6d 62 6f 6c 3d 7b 7d 29 3b 6f 28 65 2c 74 29 7c 7c 63 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 69 Data Ascii: in P))&&v(P,C,T[C]);else r({target:e,proto:!0,forced:_\|\|I},T);return i&&!j\|\|P[x]===N\|\|v(P,x,N,{name:d}),y[e]=N,T}},7235:function(t,e,n){var r=n(857),o=n(2597),i=n(6061),c=n(3070).f;t.exports=function(t){var e=r.Symbol\|\|(r.Symbol={});o(e,t)\|\|c(e,t,{value:i
2024-04-23 07:42:52 UTC	1369	IN	Data Raw: 3d 6f 2e 50 65 62 62 6c 65 7d 2c 36 38 33 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 38 31 31 33 29 3b 74 2e 65 78 70 6f 72 74 73 3d 2f 28 3f 3a 69 70 61 64 7c 69 70 68 6f 6e 65 7c 69 70 6f 64 29 2e 2a 61 70 70 6c 65 77 65 62 6b 69 74 2f 69 2e 74 65 73 74 28 72 29 7d 2c 35 32 36 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 33 32 36 29 2c 6f 3d 6e 28 37 38 35 34 29 3b 74 2e 65 78 70 6f 72 74 73 3d 22 70 72 6f 63 65 73 73 22 3d 3d 72 28 6f 2e 70 72 6f 63 65 73 73 29 7d 2c 31 30 33 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 38 31 31 33 29 3b 74 2e 65 78 70 6f 72 74 73 3d 2f 77 65 62 30 73 28 3f 21 2e 2a 63 68 72 6f 6d 65 29 2f 69 2e 74 65 73 74 28 72 29 Data Ascii: =o.Pebble},6833:function(t,e,n){var r=n(8113);t.exports=/(?:ipad\|iphone\|ipod).applewebkit/i.test(r)},5268:function(t,e,n){var r=n(4326),o=n(7854);t.exports="process"==r(o.process)},1036:function(t,e,n){var r=n(8113);t.exports=/web0s(?!.chrome)/i.test(r)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49778	199.59.243.50	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:53 UTC	1858	OUT	GET /api/countries HTTP/1.1 Host: www.bodis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / X-XSRF-TOKEN: eyJpdiI6IjczS2xkTjNJTkx5SFl6ZkxsVW1IZXc9PSIsInZhbHVlIjoidmllZUpWL0c2bzNQVDdRZ3JSVTZqTFhpZTZZanhVb24zNk1nOG5RRUpOR3lBV0dnd0lJaWNyTDJodGdZVEJ5NXpQN1I1UDBVMDdVMDJ5d3FqK1lsTWI4NDE3bVFWM0QwKzAzUkN4bnlMREtWZ0prb0w4VU1uWEZMQkZqTm9JTVYiLCJtYWMiOiI1ZmJlYmY0MjUwM2E1Y2IyYzc3ODhkMWFmZjQ3OGUwOWU4MzZhN2MxNDUzNmRjOTJmMDNlZWExOGJkYmQ2MWRmIiwidGFnIjoiIn0= X-CSRF-TOKEN: hdBYEgWRP49Fk5dt7mvrmIcCM7eUDhZ1GYCFFCtD sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.bodis.com/takedown-request Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjczS2xkTjNJTkx5SFl6ZkxsVW1IZXc9PSIsInZhbHVlIjoidmllZUpWL0c2bzNQVDdRZ3JSVTZqTFhpZTZZanhVb24zNk1nOG5RRUpOR3lBV0dnd0lJaWNyTDJodGdZVEJ5NXpQN1I1UDBVMDdVMDJ5d3FqK1lsTWI4NDE3bVFWM0QwKzAzUkN4bnlMREtWZ0prb0w4VU1uWEZMQkZqTm9JTVYiLCJtYWMiOiI1ZmJlYmY0MjUwM2E1Y2IyYzc3ODhkMWFmZjQ3OGUwOWU4MzZhN2MxNDUzNmRjOTJmMDNlZWExOGJkYmQ2MWRmIiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IldDNFA3bVRtenNBZFJKWjFIZG5CNkE9PSIsInZhbHVlIjoiQ3NKTHFIa3VOalkwZkVZbDNseEhyRmpwNmp1SThna1pZMnlDTzF4WjZXZlRlR1B2ZVV0MEkwNGVjbDlwSFVkbThMT0Q5dm9DeGpwUHNQTFlrUytWeEIxRkxvSXozNXYybnJXbzgwZkp2UjJMeTJUWDdzeUdZSFJsd0xkMUZKU0EiLCJtYWMiOiI3YzU4ODZlZWIzYmY0ZTAzODJjZGVmOWNkYmQwZGQwNTNjZTA1YmNhZTlkZGIyOTVkYmE3NGZiM2YwNDU0MmEwIiwidGFnIjoiIn0%3D; cookieyes-consent=consentid:cm56eWZ2UzdsNE51b3dzbFh0Qk1HY1hzOURESVVxUWk,consent:,action:,necessary:,functional:,analytics:,performance:,advertisement:,other:
2024-04-23 07:42:53 UTC	1111	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:53 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Server: nginx Cache-Control: no-cache, private X-Version: 2.118.0 Set-Cookie: XSRF-TOKEN=eyJpdiI6Im9IWlB6V1J0cWZRY09sMG95bHExOXc9PSIsInZhbHVlIjoiZklpcGhxZzlkZy9SK2hvc09VR25HUzBycHpja1F1Z3p4Mk91WHQwVEpFc0dpc3BXRXZkT2VtSlo0WCtGOHBPd2REbjE1a1Rpem8rQVJ0L2w0ZDJTZjA4aEgzN0FUenRJcXo3SjVlT1VsUERDZWVUSXJXbEUyTzdPQjd3Wm5wSEIiLCJtYWMiOiIyYjgyY2ViOGNlOGQ1MmFlM2ZjZGFjNjIxMDBlMTRlOGE3OGI4ZTkyMWQ2NGNhYzVjNjRjYjk1ZTgxYzc1MDI5IiwidGFnIjoiIn0%3D; expires=Tue, 23 Apr 2024 09:42:53 GMT; Max-Age=7200; path=/; domain=.bodis.com Set-Cookie: bodis_session=eyJpdiI6IjRvYU14T3ZXbU5pZjFjd05hZlBKZ0E9PSIsInZhbHVlIjoidmV1QWQzMHB3Rkp1eHFLa1NFZExJN0I4ZkRhUnRJY2ZrWkxaZVEzcVBHTGJ6Y2FxZ3A1MGZPc2pxZE9kZWRaTE5aR21BTGZFOUVCeGM3OHpaeUtWZTliaDRvY2J1czlHU0FxcU52aEZ4dTV2N3NSR1Vsd2J4YndST0lleHJQOVQiLCJtYWMiOiJjMDgwNWM1NzQ0ZGQ4ODJiYTgwN2QyNGM3MmNkNzYwZDI0ZjUxZGQ5YWUyN2ZhMDM4MzdkZGU2Y2VmYWI2YmIzIiwidGFnIjoiIn0%3D; expires=Tue, 23 Apr 2024 09:42:53 GMT; Max-Age=7200; path=/; domain=.bodis.com; httponly
2024-04-23 07:42:53 UTC	15273	IN	Data Raw: 37 62 39 65 0d 0a 5b 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 31 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 61 66 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 41 66 67 68 61 6e 69 73 74 61 6e 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 39 33 2c 22 69 73 5f 73 6d 73 5f 63 6f 76 65 72 61 67 65 22 3a 31 2c 22 69 73 5f 70 68 6f 6e 65 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 73 74 61 72 74 22 3a 34 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 65 6e 64 22 3a 34 2c 22 61 64 64 72 65 73 73 5f 66 6f 72 6d 61 74 22 3a 22 41 7e 43 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 32 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 61 6c 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 41 6c 62 Data Ascii: 7b9e[{"country_id":1,"country_code":"af","country_name":"Afghanistan","calling_code":93,"is_sms_coverage":1,"is_phone_coverage":0,"timezone_gmt_start":4,"timezone_gmt_end":4,"address_format":"A~C"},{"country_id":2,"country_code":"al","country_name":"Alb
2024-04-23 07:42:53 UTC	16381	IN	Data Raw: 70 68 6f 6e 65 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 73 74 61 72 74 22 3a 35 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 65 6e 64 22 3a 35 2c 22 61 64 64 72 65 73 73 5f 66 6f 72 6d 61 74 22 3a 22 41 7e 43 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 37 39 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 66 78 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 46 72 65 6e 63 68 2c 20 4d 65 74 72 6f 70 6f 6c 69 74 61 6e 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 33 33 2c 22 69 73 5f 73 6d 73 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 69 73 5f 70 68 6f 6e 65 5f 63 6f 76 65 72 61 67 65 22 3a 31 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 73 74 61 72 74 22 3a 35 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 Data Ascii: phone_coverage":0,"timezone_gmt_start":5,"timezone_gmt_end":5,"address_format":"A~C"},{"country_id":79,"country_code":"fx","country_name":"French, Metropolitan","calling_code":33,"is_sms_coverage":0,"is_phone_coverage":1,"timezone_gmt_start":5,"timezone_g
2024-04-23 07:42:53 UTC	16384	IN	Data Raw: 34 33 38 36 0d 0a 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 4e 69 75 65 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 36 38 33 2c 22 69 73 5f 73 6d 73 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 69 73 5f 70 68 6f 6e 65 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 73 74 61 72 74 22 3a 2d 31 31 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 65 6e 64 22 3a 2d 31 31 2c 22 61 64 64 72 65 73 73 5f 66 6f 72 6d 61 74 22 3a 22 41 7e 43 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 31 36 33 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 6e 66 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 4e 6f 72 66 6f 6c 6b 20 49 73 6c 61 6e 64 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 36 37 32 2c 22 69 73 5f Data Ascii: 4386,"country_name":"Niue","calling_code":683,"is_sms_coverage":0,"is_phone_coverage":0,"timezone_gmt_start":-11,"timezone_gmt_end":-11,"address_format":"A~C"},{"country_id":163,"country_code":"nf","country_name":"Norfolk Island","calling_code":672,"is_
2024-04-23 07:42:53 UTC	910	IN	Data Raw: 72 6e 20 53 61 68 61 72 61 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 32 31 32 2c 22 69 73 5f 73 6d 73 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 69 73 5f 70 68 6f 6e 65 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 73 74 61 72 74 22 3a 30 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 65 6e 64 22 3a 30 2c 22 61 64 64 72 65 73 73 5f 66 6f 72 6d 61 74 22 3a 22 41 7e 50 20 43 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 32 34 36 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 79 65 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 59 65 6d 65 6e 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 39 36 37 2c 22 69 73 5f 73 6d 73 5f 63 6f 76 65 72 61 67 65 22 3a 31 2c 22 69 73 5f 70 68 6f 6e 65 5f 63 6f 76 Data Ascii: rn Sahara","calling_code":212,"is_sms_coverage":0,"is_phone_coverage":0,"timezone_gmt_start":0,"timezone_gmt_end":0,"address_format":"A~P C"},{"country_id":246,"country_code":"ye","country_name":"Yemen","calling_code":967,"is_sms_coverage":1,"is_phone_cov
2024-04-23 07:42:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49779	64.233.176.94	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:53 UTC	530	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bodis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:53 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Tue, 23 Apr 2024 07:42:53 GMT Date: Tue, 23 Apr 2024 07:42:53 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-23 07:42:53 UTC	727	IN	Data Raw: 36 30 30 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 Data Ascii: 600/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.r
2024-04-23 07:42:53 UTC	816	IN	Data Raw: 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 76 61 72 20 6d 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6d 65 74 61 27 29 3b 6d 2e 68 74 74 70 45 71 75 69 76 3d 27 6f 72 69 67 69 6e 2d 74 72 69 61 6c 27 3b 6d 2e 63 6f 6e 74 65 6e 74 3d 27 33 4e 4e 6a 30 47 58 56 6b 74 4c 4f 6d 56 4b 77 57 55 44 65 6e 64 6b 34 56 71 32 71 67 4d 56 44 42 44 58 2b 53 6e 69 34 38 41 54 4a 6c 39 4a 42 6a 2b 7a 46 2b 39 57 32 48 47 42 33 70 76 74 36 71 6f 77 4f 69 68 54 62 51 67 54 65 42 6d 39 53 4b 62 64 54 Data Ascii: yIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='3NNj0GXVktLOmVKwWUDendk4Vq2qgMVDBDX+Sni48ATJl9JBj+zF+9W2HGB3pvt6qowOihTbQgTeBm9SKbdT
2024-04-23 07:42:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49777	52.209.139.15	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:53 UTC	660	OUT	POST /api/v1/log HTTP/1.1 Host: log.cookieyes.com Connection: keep-alive Content-Length: 556 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundarywLc63wEMS8ZeiyNf Accept: / Origin: https://www.bodis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.bodis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:53 UTC	556	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 77 4c 63 36 33 77 45 4d 53 38 5a 65 69 79 4e 66 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6b 65 79 22 0d 0a 0d 0a 33 31 35 35 66 35 31 63 61 62 39 34 63 66 61 66 65 34 62 32 36 35 61 37 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 77 4c 63 36 33 77 45 4d 53 38 5a 65 69 79 4e 66 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 72 65 71 75 65 73 74 5f 74 79 70 65 22 0d 0a 0d 0a 62 61 6e 6e 65 72 5f 6c 6f 61 64 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 77 4c 63 36 33 77 45 Data Ascii: ------WebKitFormBoundarywLc63wEMS8ZeiyNfContent-Disposition: form-data; name="key"3155f51cab94cfafe4b265a7------WebKitFormBoundarywLc63wEMS8ZeiyNfContent-Disposition: form-data; name="request_type"banner_load------WebKitFormBoundarywLc63wE
2024-04-23 07:42:53 UTC	231	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:53 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
2024-04-23 07:42:53 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49781	216.239.34.181	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:53 UTC	1182	OUT	POST /g/collect?v=2&tid=G-L32F1DFB3K&_ng=1&gtm=45je44h0v9116287315za200&_p=1713858171019&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=1379586991.1713858172&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=1&dt=takedown-request&dp=%2Ftakedown-request&dl=https%3A%2F%2Fwww.bodis.com%2Ftakedown-request&sid=1713858172&sct=1&seg=0&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=3205 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.bodis.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.bodis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:53 UTC	447	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.bodis.com Date: Tue, 23 Apr 2024 07:42:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49780	142.250.105.155	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:53 UTC	791	OUT	POST /g/collect?v=2&_ng=1&tid=G-L32F1DFB3K&cid=1379586991.1713858172&gtm=45je44h0v9116287315za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.bodis.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.bodis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:53 UTC	447	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.bodis.com Date: Tue, 23 Apr 2024 07:42:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49783	104.22.9.8	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:53 UTC	561	OUT	GET /data/brands/bodis/ping HTTP/1.1 Host: cdn.reamaze.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.bodis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.bodis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:54 UTC	898	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:54 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=300, public, must-revalidate vary: Accept,Accept-Encoding access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubDomains access-control-max-age: 1728000 x-request-id: 5029fa4e-e63f-4924-8f80-a9d17a178e74 access-control-allow-methods: POST, GET, OPTIONS, PUT x-runtime: 0.036409 x-content-type-options: nosniff content-security-policy: default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: cid:; connect-src https: wss:; worker-src 'self' blob: ; child-src 'self' https: blob: ; etag: W/"890aeeab109ef3fdb037ff4e14fc3a2f" status: 200 OK CF-Cache-Status: EXPIRED Server: cloudflare CF-RAY: 878c38315f107b9c-ATL
2024-04-23 07:42:54 UTC	471	IN	Data Raw: 33 65 31 63 0d 0a 7b 22 6e 61 6d 65 22 3a 22 42 4f 44 49 53 22 2c 22 70 72 65 66 65 72 65 6e 63 65 73 22 3a 7b 22 6b 62 5f 6d 65 74 61 5f 72 65 64 75 63 65 5f 73 65 6f 22 3a 74 72 75 65 2c 22 6b 62 5f 68 65 61 64 65 72 5f 62 67 5f 63 6f 6c 6f 72 22 3a 22 72 67 62 28 32 33 2c 20 39 39 2c 20 31 34 36 29 22 2c 22 6b 62 5f 68 65 61 64 65 72 5f 66 6f 6e 74 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 6b 62 5f 68 65 61 64 65 72 5f 75 72 6c 22 3a 22 2f 22 2c 22 6b 62 5f 68 65 61 64 65 72 5f 73 68 6f 77 5f 62 72 61 6e 64 5f 6c 6f 67 6f 22 3a 66 61 6c 73 65 2c 22 6b 62 5f 68 65 61 64 65 72 5f 6c 6f 67 6f 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 32 2e 62 6f 64 69 73 2e 63 6f 6d 2f 73 76 67 2f 6c 6f 67 6f 2e 73 76 67 22 2c 22 6b 62 5f 6c 61 Data Ascii: 3e1c{"name":"BODIS","preferences":{"kb_meta_reduce_seo":true,"kb_header_bg_color":"rgb(23, 99, 146)","kb_header_font_color":"#ffffff","kb_header_url":"/","kb_header_show_brand_logo":false,"kb_header_logo_url":"https://www2.bodis.com/svg/logo.svg","kb_la
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 74 6c 65 5f 63 6f 6c 6f 72 22 3a 22 23 35 35 35 35 35 35 22 2c 22 6b 62 5f 74 69 74 6c 65 5f 6c 69 67 68 74 5f 63 6f 6c 6f 72 22 3a 22 23 46 42 46 42 46 42 22 2c 22 6b 62 5f 63 75 73 74 6f 6d 5f 6d 65 74 61 5f 68 74 6d 6c 22 3a 22 22 2c 22 6b 62 5f 63 75 73 74 6f 6d 5f 68 65 61 64 65 72 5f 68 74 6d 6c 22 3a 22 22 2c 22 6b 62 5f 63 75 73 74 6f 6d 5f 66 6f 6f 74 65 72 5f 68 74 6d 6c 22 3a 22 22 2c 22 6b 62 5f 63 75 73 74 6f 6d 5f 63 73 73 5f 73 74 79 6c 65 73 68 65 65 74 22 3a 22 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 3a 34 30 30 2c 35 30 30 2c 37 30 30 2c 34 30 30 69 74 61 6c 69 63 7c 4d 61 74 65 72 69 61 6c 2b 49 63 6f Data Ascii: tle_color":"#555555","kb_title_light_color":"#FBFBFB","kb_custom_meta_html":"","kb_custom_header_html":"","kb_custom_footer_html":"","kb_custom_css_stylesheet":"@import url('https://fonts.googleapis.com/css?family=Roboto:400,500,700,400italic\|Material+Ico
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 72 61 6e 73 5f 61 72 74 69 63 6c 65 5f 63 6f 75 6e 74 22 3a 22 7b 7b 20 63 6f 75 6e 74 20 7c 20 70 6c 75 72 61 6c 69 7a 65 3a 20 27 61 72 74 69 63 6c 65 27 7d 7d 20 69 6e 20 74 68 69 73 20 54 6f 70 69 63 22 2c 22 74 72 61 6e 73 5f 73 65 65 5f 61 6c 6c 5f 61 72 74 69 63 6c 65 73 22 3a 22 53 65 65 20 61 6c 6c 20 61 72 74 69 63 6c 65 73 20 69 6e 20 7b 7b 20 74 6f 70 69 63 20 7d 7d 20 e2 86 92 22 2c 22 74 72 61 6e 73 5f 72 65 6c 61 74 65 64 5f 61 72 74 69 63 6c 65 73 22 3a 22 52 65 6c 61 74 65 64 20 41 72 74 69 63 6c 65 73 22 2c 22 74 72 61 6e 73 5f 63 6f 6e 74 61 63 74 5f 75 73 22 3a 22 4e 6f 74 20 66 69 6e 64 69 6e 67 20 77 68 61 74 20 79 6f 75 27 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 3f 22 2c 22 74 72 61 6e 73 5f 6e 65 78 74 5f 61 72 74 69 63 6c 65 22 Data Ascii: rans_article_count":"{{ count \| pluralize: 'article'}} in this Topic","trans_see_all_articles":"See all articles in {{ topic }} ","trans_related_articles":"Related Articles","trans_contact_us":"Not finding what you're looking for?","trans_next_article"
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 61 69 6c 5f 74 72 61 6e 73 63 72 69 70 74 22 3a 22 45 6d 61 69 6c 20 54 72 61 6e 73 63 72 69 70 74 22 2c 22 74 72 61 6e 73 5f 63 68 61 74 5f 65 6e 64 5f 63 68 61 74 22 3a 22 45 6e 64 20 43 68 61 74 22 2c 22 74 72 61 6e 73 5f 63 68 61 74 5f 65 6e 64 5f 63 68 61 74 5f 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 68 65 61 64 65 72 22 3a 22 45 6e 64 20 54 68 69 73 20 43 68 61 74 3f 22 2c 22 74 72 61 6e 73 5f 63 68 61 74 5f 73 74 61 72 74 65 64 22 3a 22 5c 75 30 30 33 63 70 5c 75 30 30 33 65 54 68 61 6e 6b 73 21 20 59 6f 75 72 20 63 68 61 74 20 6d 65 73 73 61 67 65 20 68 61 73 20 62 65 65 6e 20 73 75 62 6d 69 74 74 65 64 2e 20 53 6f 6d 65 6f 6e 65 20 77 69 6c 6c 20 62 65 20 77 69 74 68 20 79 6f 75 20 73 68 6f 72 74 6c 79 2e 5c 75 30 30 33 63 2f 70 5c 75 30 30 33 65 Data Ascii: ail_transcript":"Email Transcript","trans_chat_end_chat":"End Chat","trans_chat_end_chat_confirmation_header":"End This Chat?","trans_chat_started":"\u003cp\u003eThanks! Your chat message has been submitted. Someone will be with you shortly.\u003c/p\u003e
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 63 68 22 3a 22 59 6f 75 72 20 73 65 61 72 63 68 20 64 69 64 20 6e 6f 74 20 6d 61 74 63 68 20 61 6e 79 20 64 69 73 63 75 73 73 69 6f 6e 73 2e 22 2c 22 74 72 61 6e 73 5f 72 65 6c 61 74 65 64 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 22 3a 22 52 65 6c 61 74 65 64 20 43 6f 6e 76 65 72 73 61 74 69 6f 6e 73 22 2c 22 74 72 61 6e 73 5f 64 69 73 63 75 73 73 69 6f 6e 5f 76 69 65 77 5f 73 74 61 66 66 5f 72 65 73 70 6f 6e 73 65 22 3a 22 56 69 65 77 20 73 74 61 66 66 20 72 65 73 70 6f 6e 73 65 20 62 65 6c 6f 77 2e 22 2c 22 74 72 61 6e 73 5f 64 69 73 63 75 73 73 69 6f 6e 5f 6c 6f 67 69 6e 5f 70 72 6f 6d 70 74 22 3a 22 50 6c 65 61 73 65 20 6c 6f 67 20 69 6e 20 74 6f 20 72 65 70 6c 79 2e 22 2c 22 74 72 61 6e 73 5f 64 69 73 63 75 73 73 69 6f 6e 5f 63 6f 6d 6d 65 6e 74 5f Data Ascii: ch":"Your search did not match any discussions.","trans_related_conversations":"Related Conversations","trans_discussion_view_staff_response":"View staff response below.","trans_discussion_login_prompt":"Please log in to reply.","trans_discussion_comment_
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 6d 69 74 74 65 64 2e 20 59 6f 75 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 61 20 72 65 73 70 6f 6e 73 65 20 68 65 72 65 20 6f 72 20 76 69 61 20 65 6d 61 69 6c 2e 20 59 6f 75 20 6d 61 79 20 6c 65 61 76 65 20 6d 6f 72 65 20 6d 65 73 73 61 67 65 73 20 62 65 6c 6f 77 2e 5c 75 30 30 33 63 2f 70 5c 75 30 30 33 65 5c 6e 22 2c 22 74 72 61 6e 73 5f 70 6f 70 75 70 5f 6d 6f 72 65 5f 64 65 74 61 69 6c 73 5f 6e 65 65 64 65 64 22 3a 22 57 65 20 6a 75 73 74 20 6e 65 65 64 20 73 6f 6d 65 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 79 6f 75 20 74 6f 20 70 72 6f 63 65 65 64 3a 22 2c 22 74 72 61 6e 73 5f 70 6f 70 75 70 5f 6e 65 77 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 70 72 6f 6d 70 74 22 3a 22 53 65 6e 64 20 61 20 4d 65 73 73 61 67 65 22 2c 22 Data Ascii: mitted. You will receive a response here or via email. You may leave more messages below.\u003c/p\u003e\n","trans_popup_more_details_needed":"We just need some more information from you to proceed:","trans_popup_new_conversation_prompt":"Send a Message","
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 6d 70 74 22 3a 22 4e 65 75 74 72 61 6c 22 2c 22 74 72 61 6e 73 5f 72 61 74 69 6e 67 5f 34 5f 70 72 6f 6d 70 74 22 3a 22 53 61 74 69 73 66 69 65 64 22 2c 22 74 72 61 6e 73 5f 72 61 74 69 6e 67 5f 35 5f 70 72 6f 6d 70 74 22 3a 22 56 65 72 79 20 53 61 74 69 73 66 69 65 64 22 2c 22 74 72 61 6e 73 5f 75 6e 73 75 62 73 63 72 69 62 65 5f 6c 69 6e 6b 22 3a 22 55 6e 73 75 62 73 63 72 69 62 65 22 2c 22 74 72 61 6e 73 5f 75 6e 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 70 74 22 3a 22 4e 6f 20 6c 6f 6e 67 65 72 20 77 61 6e 74 20 74 68 65 73 65 20 65 6d 61 69 6c 73 3f 22 2c 22 74 72 61 6e 73 5f 75 6e 73 75 62 73 63 72 69 62 65 5f 74 69 74 6c 65 22 3a 22 55 6e 73 75 62 73 63 72 69 62 65 22 2c 22 74 72 61 6e 73 5f 75 6e 73 75 62 73 63 72 69 62 65 5f 6d 65 73 73 61 67 65 Data Ascii: mpt":"Neutral","trans_rating_4_prompt":"Satisfied","trans_rating_5_prompt":"Very Satisfied","trans_unsubscribe_link":"Unsubscribe","trans_unsubscribe_prompt":"No longer want these emails?","trans_unsubscribe_title":"Unsubscribe","trans_unsubscribe_message
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 69 6e 67 5f 6e 75 6d 62 65 72 22 3a 22 28 4e 6f 20 74 72 61 63 6b 69 6e 67 20 6e 75 6d 62 65 72 29 22 2c 22 74 72 61 6e 73 5f 68 75 62 5f 73 68 6f 70 70 65 72 5f 68 65 61 64 65 72 22 3a 22 53 68 6f 70 70 69 6e 67 20 41 73 73 69 73 74 61 6e 74 22 2c 22 74 72 61 6e 73 5f 68 75 62 5f 73 68 6f 70 70 65 72 5f 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 22 54 65 6c 6c 20 6d 65 20 77 68 61 74 20 79 6f 75 27 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 22 2c 22 74 72 61 6e 73 5f 6e 61 76 69 67 61 74 69 6f 6e 5f 62 61 63 6b 22 3a 22 42 61 63 6b 22 2c 22 74 72 61 6e 73 5f 6e 61 76 69 67 61 74 69 6f 6e 5f 68 6f 6d 65 22 3a 22 48 6f 6d 65 22 2c 22 74 72 61 6e 73 5f 61 72 69 61 5f 73 65 61 72 63 68 5f 72 65 73 75 6c 74 73 22 3a 22 53 65 61 72 63 68 20 52 65 73 75 6c 74 73 22 Data Ascii: ing_number":"(No tracking number)","trans_hub_shopper_header":"Shopping Assistant","trans_hub_shopper_placeholder":"Tell me what you're looking for","trans_navigation_back":"Back","trans_navigation_home":"Home","trans_aria_search_results":"Search Results"
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 70 74 5f 65 6d 61 69 6c 5f 74 65 78 74 22 3a 22 50 6c 65 61 73 65 20 70 72 6f 76 69 64 65 20 6d 65 20 77 69 74 68 20 74 68 65 20 65 6d 61 69 6c 20 6f 72 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 79 6f 75 72 20 6f 72 64 65 72 2e 22 2c 22 74 72 61 6e 73 5f 6f 72 64 65 72 5f 62 6f 74 5f 63 6f 6e 74 69 6e 75 65 5f 74 65 78 74 22 3a 22 47 72 65 61 74 21 20 4c 65 61 76 65 20 61 6e 79 20 6f 74 68 65 72 20 71 75 65 73 74 69 6f 6e 73 20 68 65 72 65 20 69 66 20 79 6f 75 20 68 61 76 65 20 74 68 65 6d 2e 22 2c 22 74 72 61 6e 73 5f 62 6f 74 5f 72 65 6d 69 6e 64 5f 74 65 78 74 22 3a 22 53 69 6e 63 65 20 49 20 68 61 76 65 6e e2 80 99 74 20 68 65 61 72 64 20 62 61 63 6b 2c 20 49 e2 80 99 6c 6c 20 61 73 73 75 6d 65 20 79 6f Data Ascii: pt_email_text":"Please provide me with the email or phone number associated with your order.","trans_order_bot_continue_text":"Great! Leave any other questions here if you have them.","trans_bot_remind_text":"Since I havent heard back, Ill assume yo
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 22 2c 22 74 72 61 6e 73 5f 76 69 64 65 6f 5f 61 6e 73 77 65 72 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 41 6e 73 77 65 72 22 2c 22 74 72 61 6e 73 5f 76 69 64 65 6f 5f 64 65 63 6c 69 6e 65 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 44 65 63 6c 69 6e 65 22 7d 2c 22 69 6e 4f 66 66 69 63 65 22 3a 74 72 75 65 2c 22 64 65 70 61 72 74 6d 65 6e 74 73 41 76 61 69 6c 61 62 6c 65 22 3a 5b 5d 2c 22 6c 69 76 65 53 74 61 66 66 41 76 61 74 61 72 73 22 3a 5b 5d 2c 22 73 74 61 66 66 41 76 61 74 61 72 73 22 3a 5b 7b 22 61 76 61 74 61 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 72 65 61 6d 61 7a 65 2e 63 6f 6d 2f 72 61 69 6c 73 2f 61 63 74 69 76 65 5f 73 74 6f 72 61 67 65 2f 72 65 70 72 65 73 65 6e 74 61 74 69 6f 6e 73 2f 72 65 64 69 72 65 63 74 2f 65 79 Data Ascii: ","trans_video_answer_button_text":"Answer","trans_video_decline_button_text":"Decline"},"inOffice":true,"departmentsAvailable":[],"liveStaffAvatars":[],"staffAvatars":[{"avatarUrl":"https://cdn.reamaze.com/rails/active_storage/representations/redirect/ey

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49787	199.59.243.50	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:53 UTC	1318	OUT	GET /api/countries HTTP/1.1 Host: www.bodis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookieyes-consent=consentid:cm56eWZ2UzdsNE51b3dzbFh0Qk1HY1hzOURESVVxUWk,consent:,action:,necessary:,functional:,analytics:,performance:,advertisement:,other:; _ga_L32F1DFB3K=GS1.1.1713858172.1.0.1713858172.60.0.0; _ga=GA1.1.1379586991.1713858172; XSRF-TOKEN=eyJpdiI6Im9IWlB6V1J0cWZRY09sMG95bHExOXc9PSIsInZhbHVlIjoiZklpcGhxZzlkZy9SK2hvc09VR25HUzBycHpja1F1Z3p4Mk91WHQwVEpFc0dpc3BXRXZkT2VtSlo0WCtGOHBPd2REbjE1a1Rpem8rQVJ0L2w0ZDJTZjA4aEgzN0FUenRJcXo3SjVlT1VsUERDZWVUSXJXbEUyTzdPQjd3Wm5wSEIiLCJtYWMiOiIyYjgyY2ViOGNlOGQ1MmFlM2ZjZGFjNjIxMDBlMTRlOGE3OGI4ZTkyMWQ2NGNhYzVjNjRjYjk1ZTgxYzc1MDI5IiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IjRvYU14T3ZXbU5pZjFjd05hZlBKZ0E9PSIsInZhbHVlIjoidmV1QWQzMHB3Rkp1eHFLa1NFZExJN0I4ZkRhUnRJY2ZrWkxaZVEzcVBHTGJ6Y2FxZ3A1MGZPc2pxZE9kZWRaTE5aR21BTGZFOUVCeGM3OHpaeUtWZTliaDRvY2J1czlHU0FxcU52aEZ4dTV2N3NSR1Vsd2J4YndST0lleHJQOVQiLCJtYWMiOiJjMDgwNWM1NzQ0ZGQ4ODJiYTgwN2QyNGM3MmNkNzYwZDI0ZjUxZGQ5YWUyN2ZhMDM4MzdkZGU2Y2VmYWI2YmIzIiwidGFnIjoiIn0%3D
2024-04-23 07:42:54 UTC	1111	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:54 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Server: nginx Cache-Control: no-cache, private X-Version: 2.118.0 Set-Cookie: XSRF-TOKEN=eyJpdiI6IjdKUmc3MVB5cVFxa2hveWpwMEl0UHc9PSIsInZhbHVlIjoidUI3S3FONUIzVjhIbW93cXI3WVYyL1hmVDZWaXgrb2dZMkEyVDUvZG1OYkF5OUlpeTFjcWUyU3FzajdMa1N5YXQ4STF0U1hMWW9jTGNMKzdQZWJIZis3QVFUQ254UjRmNVB2OHlNeHNEVUdYc2JwR3ptVkpKNHA3NGtCTGpzUEMiLCJtYWMiOiI1ZjM1N2VhYjEwNjM0NDMyY2U2NWFiMjNlMWNlNWVjZmVlOTdmZTc2ZTY5OGZhZjFhMDRkYzJhNjI1OTAxYjY2IiwidGFnIjoiIn0%3D; expires=Tue, 23 Apr 2024 09:42:54 GMT; Max-Age=7200; path=/; domain=.bodis.com Set-Cookie: bodis_session=eyJpdiI6IkQ5QlJqM04yQXV5d1JjSnlMSWNqTHc9PSIsInZhbHVlIjoiL25iYm5aUDJHUnpiMnNNYTExOFZZSUVaeTNmNzQ1UU00d2xrQnhRNlFtTFE1UTNVdE1iQ3ZwUWFYMEF3RVpSSjJaTk5ZL3p2WEJHK0ZxdEhyMTFxcWY4L0dXcFNsNldzSnZqRG02bURDZFdoZDlFSkZ5bG5CV0NEUXIxQlgwUm8iLCJtYWMiOiI3OWY1ZWEyNTE4ODc3M2E4NzM0NmYyYWY4YTRhMWNlY2FmNDdmZDVlOTM1OGM2YjE1NTFhZTdiNGNiNzE4Y2YxIiwidGFnIjoiIn0%3D; expires=Tue, 23 Apr 2024 09:42:54 GMT; Max-Age=7200; path=/; domain=.bodis.com; httponly
2024-04-23 07:42:54 UTC	15273	IN	Data Raw: 37 62 39 65 0d 0a 5b 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 31 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 61 66 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 41 66 67 68 61 6e 69 73 74 61 6e 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 39 33 2c 22 69 73 5f 73 6d 73 5f 63 6f 76 65 72 61 67 65 22 3a 31 2c 22 69 73 5f 70 68 6f 6e 65 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 73 74 61 72 74 22 3a 34 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 65 6e 64 22 3a 34 2c 22 61 64 64 72 65 73 73 5f 66 6f 72 6d 61 74 22 3a 22 41 7e 43 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 32 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 61 6c 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 41 6c 62 Data Ascii: 7b9e[{"country_id":1,"country_code":"af","country_name":"Afghanistan","calling_code":93,"is_sms_coverage":1,"is_phone_coverage":0,"timezone_gmt_start":4,"timezone_gmt_end":4,"address_format":"A~C"},{"country_id":2,"country_code":"al","country_name":"Alb
2024-04-23 07:42:54 UTC	16381	IN	Data Raw: 70 68 6f 6e 65 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 73 74 61 72 74 22 3a 35 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 65 6e 64 22 3a 35 2c 22 61 64 64 72 65 73 73 5f 66 6f 72 6d 61 74 22 3a 22 41 7e 43 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 37 39 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 66 78 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 46 72 65 6e 63 68 2c 20 4d 65 74 72 6f 70 6f 6c 69 74 61 6e 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 33 33 2c 22 69 73 5f 73 6d 73 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 69 73 5f 70 68 6f 6e 65 5f 63 6f 76 65 72 61 67 65 22 3a 31 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 73 74 61 72 74 22 3a 35 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 Data Ascii: phone_coverage":0,"timezone_gmt_start":5,"timezone_gmt_end":5,"address_format":"A~C"},{"country_id":79,"country_code":"fx","country_name":"French, Metropolitan","calling_code":33,"is_sms_coverage":0,"is_phone_coverage":1,"timezone_gmt_start":5,"timezone_g
2024-04-23 07:42:54 UTC	16384	IN	Data Raw: 34 33 38 36 0d 0a 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 4e 69 75 65 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 36 38 33 2c 22 69 73 5f 73 6d 73 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 69 73 5f 70 68 6f 6e 65 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 73 74 61 72 74 22 3a 2d 31 31 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 65 6e 64 22 3a 2d 31 31 2c 22 61 64 64 72 65 73 73 5f 66 6f 72 6d 61 74 22 3a 22 41 7e 43 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 31 36 33 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 6e 66 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 4e 6f 72 66 6f 6c 6b 20 49 73 6c 61 6e 64 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 36 37 32 2c 22 69 73 5f Data Ascii: 4386,"country_name":"Niue","calling_code":683,"is_sms_coverage":0,"is_phone_coverage":0,"timezone_gmt_start":-11,"timezone_gmt_end":-11,"address_format":"A~C"},{"country_id":163,"country_code":"nf","country_name":"Norfolk Island","calling_code":672,"is_
2024-04-23 07:42:54 UTC	910	IN	Data Raw: 72 6e 20 53 61 68 61 72 61 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 32 31 32 2c 22 69 73 5f 73 6d 73 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 69 73 5f 70 68 6f 6e 65 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 73 74 61 72 74 22 3a 30 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 65 6e 64 22 3a 30 2c 22 61 64 64 72 65 73 73 5f 66 6f 72 6d 61 74 22 3a 22 41 7e 50 20 43 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 32 34 36 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 79 65 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 59 65 6d 65 6e 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 39 36 37 2c 22 69 73 5f 73 6d 73 5f 63 6f 76 65 72 61 67 65 22 3a 31 2c 22 69 73 5f 70 68 6f 6e 65 5f 63 6f 76 Data Ascii: rn Sahara","calling_code":212,"is_sms_coverage":0,"is_phone_coverage":0,"timezone_gmt_start":0,"timezone_gmt_end":0,"address_format":"A~P C"},{"country_id":246,"country_code":"ye","country_name":"Yemen","calling_code":967,"is_sms_coverage":1,"is_phone_cov
2024-04-23 07:42:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49785	199.59.243.50	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:53 UTC	1858	OUT	GET /api/countries HTTP/1.1 Host: www.bodis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / X-XSRF-TOKEN: eyJpdiI6IjczS2xkTjNJTkx5SFl6ZkxsVW1IZXc9PSIsInZhbHVlIjoidmllZUpWL0c2bzNQVDdRZ3JSVTZqTFhpZTZZanhVb24zNk1nOG5RRUpOR3lBV0dnd0lJaWNyTDJodGdZVEJ5NXpQN1I1UDBVMDdVMDJ5d3FqK1lsTWI4NDE3bVFWM0QwKzAzUkN4bnlMREtWZ0prb0w4VU1uWEZMQkZqTm9JTVYiLCJtYWMiOiI1ZmJlYmY0MjUwM2E1Y2IyYzc3ODhkMWFmZjQ3OGUwOWU4MzZhN2MxNDUzNmRjOTJmMDNlZWExOGJkYmQ2MWRmIiwidGFnIjoiIn0= X-CSRF-TOKEN: hdBYEgWRP49Fk5dt7mvrmIcCM7eUDhZ1GYCFFCtD sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.bodis.com/takedown-request Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjczS2xkTjNJTkx5SFl6ZkxsVW1IZXc9PSIsInZhbHVlIjoidmllZUpWL0c2bzNQVDdRZ3JSVTZqTFhpZTZZanhVb24zNk1nOG5RRUpOR3lBV0dnd0lJaWNyTDJodGdZVEJ5NXpQN1I1UDBVMDdVMDJ5d3FqK1lsTWI4NDE3bVFWM0QwKzAzUkN4bnlMREtWZ0prb0w4VU1uWEZMQkZqTm9JTVYiLCJtYWMiOiI1ZmJlYmY0MjUwM2E1Y2IyYzc3ODhkMWFmZjQ3OGUwOWU4MzZhN2MxNDUzNmRjOTJmMDNlZWExOGJkYmQ2MWRmIiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IldDNFA3bVRtenNBZFJKWjFIZG5CNkE9PSIsInZhbHVlIjoiQ3NKTHFIa3VOalkwZkVZbDNseEhyRmpwNmp1SThna1pZMnlDTzF4WjZXZlRlR1B2ZVV0MEkwNGVjbDlwSFVkbThMT0Q5dm9DeGpwUHNQTFlrUytWeEIxRkxvSXozNXYybnJXbzgwZkp2UjJMeTJUWDdzeUdZSFJsd0xkMUZKU0EiLCJtYWMiOiI3YzU4ODZlZWIzYmY0ZTAzODJjZGVmOWNkYmQwZGQwNTNjZTA1YmNhZTlkZGIyOTVkYmE3NGZiM2YwNDU0MmEwIiwidGFnIjoiIn0%3D; cookieyes-consent=consentid:cm56eWZ2UzdsNE51b3dzbFh0Qk1HY1hzOURESVVxUWk,consent:,action:,necessary:,functional:,analytics:,performance:,advertisement:,other:
2024-04-23 07:42:54 UTC	1111	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:54 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Server: nginx Cache-Control: no-cache, private X-Version: 2.118.0 Set-Cookie: XSRF-TOKEN=eyJpdiI6InJKTWU3dTJvSVZudE5wdk5uSklsN1E9PSIsInZhbHVlIjoiM1NyVmFMODhmaTJCc1Z4Sno0ZWNxbWd3VzlJelUwQ1hDUWpNZWlheERpREtDYUVSYzQzMGVubEY4eC8yS3NHMGJNQjE5Tmp3TEZQODNWSGc3WGtlUTIrdGtoSFc5ZHI5alpycjhvbzFxcWNVRyt1MmZyYnV4bjhwdVJGdGplRE0iLCJtYWMiOiI4MjhjZDVjNGVkYzliYjBkMmI3MjA2NzU4OWI2ODU3NTcwNmIwOTAzYzE0YWMxZTM3ODFiZjM1NzkzYWVkZTMyIiwidGFnIjoiIn0%3D; expires=Tue, 23 Apr 2024 09:42:54 GMT; Max-Age=7200; path=/; domain=.bodis.com Set-Cookie: bodis_session=eyJpdiI6IitNV1BUVmpueC9mTURxUm13anVCNUE9PSIsInZhbHVlIjoiZC9CVjZEZGJ2dEMrNi9rTWtrWExRRWd6VDFBMXYzYzBCazNZSWwvd2pLSnlhQVJaWit5bXhzOHY3dWdHRW1BbmxrZnU4dXZzVE5MMjVReUhJeWF0ZDRZUWhPY2hOeHRycUkzdjE1R09hOTlRY2dJMmZuOHlaT2NqRVd1enF5RUoiLCJtYWMiOiI2OWYxYTVmMjYyNjJhYjQzMDdhMmEzZTZhNThmMGIxYWExM2VkZDI2ODIzMGNiNTUwMzhhNTQ3YjNlNTE0ZDRmIiwidGFnIjoiIn0%3D; expires=Tue, 23 Apr 2024 09:42:54 GMT; Max-Age=7200; path=/; domain=.bodis.com; httponly
2024-04-23 07:42:54 UTC	15273	IN	Data Raw: 37 62 39 65 0d 0a 5b 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 31 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 61 66 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 41 66 67 68 61 6e 69 73 74 61 6e 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 39 33 2c 22 69 73 5f 73 6d 73 5f 63 6f 76 65 72 61 67 65 22 3a 31 2c 22 69 73 5f 70 68 6f 6e 65 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 73 74 61 72 74 22 3a 34 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 65 6e 64 22 3a 34 2c 22 61 64 64 72 65 73 73 5f 66 6f 72 6d 61 74 22 3a 22 41 7e 43 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 32 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 61 6c 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 41 6c 62 Data Ascii: 7b9e[{"country_id":1,"country_code":"af","country_name":"Afghanistan","calling_code":93,"is_sms_coverage":1,"is_phone_coverage":0,"timezone_gmt_start":4,"timezone_gmt_end":4,"address_format":"A~C"},{"country_id":2,"country_code":"al","country_name":"Alb
2024-04-23 07:42:54 UTC	16381	IN	Data Raw: 70 68 6f 6e 65 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 73 74 61 72 74 22 3a 35 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 65 6e 64 22 3a 35 2c 22 61 64 64 72 65 73 73 5f 66 6f 72 6d 61 74 22 3a 22 41 7e 43 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 37 39 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 66 78 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 46 72 65 6e 63 68 2c 20 4d 65 74 72 6f 70 6f 6c 69 74 61 6e 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 33 33 2c 22 69 73 5f 73 6d 73 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 69 73 5f 70 68 6f 6e 65 5f 63 6f 76 65 72 61 67 65 22 3a 31 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 73 74 61 72 74 22 3a 35 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 Data Ascii: phone_coverage":0,"timezone_gmt_start":5,"timezone_gmt_end":5,"address_format":"A~C"},{"country_id":79,"country_code":"fx","country_name":"French, Metropolitan","calling_code":33,"is_sms_coverage":0,"is_phone_coverage":1,"timezone_gmt_start":5,"timezone_g
2024-04-23 07:42:54 UTC	16384	IN	Data Raw: 34 33 38 36 0d 0a 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 4e 69 75 65 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 36 38 33 2c 22 69 73 5f 73 6d 73 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 69 73 5f 70 68 6f 6e 65 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 73 74 61 72 74 22 3a 2d 31 31 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 65 6e 64 22 3a 2d 31 31 2c 22 61 64 64 72 65 73 73 5f 66 6f 72 6d 61 74 22 3a 22 41 7e 43 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 31 36 33 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 6e 66 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 4e 6f 72 66 6f 6c 6b 20 49 73 6c 61 6e 64 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 36 37 32 2c 22 69 73 5f Data Ascii: 4386,"country_name":"Niue","calling_code":683,"is_sms_coverage":0,"is_phone_coverage":0,"timezone_gmt_start":-11,"timezone_gmt_end":-11,"address_format":"A~C"},{"country_id":163,"country_code":"nf","country_name":"Norfolk Island","calling_code":672,"is_
2024-04-23 07:42:54 UTC	910	IN	Data Raw: 72 6e 20 53 61 68 61 72 61 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 32 31 32 2c 22 69 73 5f 73 6d 73 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 69 73 5f 70 68 6f 6e 65 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 73 74 61 72 74 22 3a 30 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 65 6e 64 22 3a 30 2c 22 61 64 64 72 65 73 73 5f 66 6f 72 6d 61 74 22 3a 22 41 7e 50 20 43 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 32 34 36 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 79 65 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 59 65 6d 65 6e 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 39 36 37 2c 22 69 73 5f 73 6d 73 5f 63 6f 76 65 72 61 67 65 22 3a 31 2c 22 69 73 5f 70 68 6f 6e 65 5f 63 6f 76 Data Ascii: rn Sahara","calling_code":212,"is_sms_coverage":0,"is_phone_coverage":0,"timezone_gmt_start":0,"timezone_gmt_end":0,"address_format":"A~P C"},{"country_id":246,"country_code":"ye","country_name":"Yemen","calling_code":967,"is_sms_coverage":1,"is_phone_cov
2024-04-23 07:42:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49789	104.17.25.14	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:54 UTC	553	OUT	GET /ajax/libs/pusher/7.0.1/pusher.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bodis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:54 UTC	956	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:54 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5fa0e6b5-10195" Last-Modified: Tue, 03 Nov 2020 05:12:21 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 11755 Expires: Sun, 13 Apr 2025 07:42:54 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NkP6NFbK0dFPo880dMRpiVlpPbLQie4XFxoXJPY3oqwgbbnYf3xpaEei2hLl1PW2mgzAEvq4HjFfI6onorBy1potTylU%2F0xjk9k6C1b2QdSDB71OCbTtOG1%2FefXil75ATZG8gsYJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 878c3837480153c6-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 07:42:54 UTC	413	IN	Data Raw: 33 39 39 62 0d 0a 2f 2a 21 0a 20 2a 20 50 75 73 68 65 72 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 37 2e 30 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 70 75 73 68 65 72 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 30 2c 20 50 75 73 68 65 72 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 63 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e Data Ascii: 399b/! Pusher JavaScript Library v7.0.1 * https://pusher.com/ * * Copyright 2020, Pusher * Released under the MIT licence. */!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 70 6f 72 74 73 3b 76 61 72 20 72 3d 65 5b 6f 5d 3d 7b 69 3a 6f 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6f 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6f 7d 29 7d 2c 6e 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e Data Ascii: ports;var r=e[o]={i:o,l:!1,exports:{}};return t[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}return n.m=t,n.c=e,n.d=function(t,e,o){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:o})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStrin
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 2e 65 6e 63 6f 64 65 64 4c 65 6e 67 74 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 70 61 64 64 69 6e 67 43 68 61 72 61 63 74 65 72 3f 28 74 2b 32 29 2f 33 2a 34 7c 30 3a 28 38 2a 74 2b 35 29 2f 36 7c 30 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 22 22 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 2d 32 3b 6e 2b 3d 33 29 7b 76 61 72 20 6f 3d 74 5b 6e 5d 3c 3c 31 36 7c 74 5b 6e 2b 31 5d 3c 3c 38 7c 74 5b 6e 2b 32 5d 3b 65 2b 3d 74 68 69 73 2e 5f 65 6e 63 6f 64 65 42 79 74 65 28 6f 3e 3e 3e 31 38 26 36 33 29 2c 65 2b 3d 74 68 69 73 2e 5f 65 6e 63 6f 64 65 42 79 74 65 28 6f 3e 3e 3e 31 32 26 36 33 29 2c 65 2b 3d 74 68 69 73 2e 5f 65 6e 63 Data Ascii: .encodedLength=function(t){return this._paddingCharacter?(t+2)/34\|0:(8t+5)/6\|0},t.prototype.encode=function(t){for(var e="",n=0;n<t.length-2;n+=3){var o=t[n]<<16\|t[n+1]<<8\|t[n+2];e+=this._encodeByte(o>>>18&63),e+=this._encodeByte(o>>>12&63),e+=this._enc
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 69 73 2e 5f 64 65 63 6f 64 65 43 68 61 72 28 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 2b 33 29 29 2c 6f 5b 72 2b 2b 5d 3d 75 3c 3c 36 7c 68 2c 73 7c 3d 32 35 36 26 68 29 2c 30 21 3d 3d 73 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 61 73 65 36 34 43 6f 64 65 72 3a 20 69 6e 63 6f 72 72 65 63 74 20 63 68 61 72 61 63 74 65 72 73 20 66 6f 72 20 64 65 63 6f 64 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 65 6e 63 6f 64 65 42 79 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 3b 72 65 74 75 72 6e 20 65 2b 3d 36 35 2c 65 2b 3d 32 35 2d 74 3e 3e 3e 38 26 36 2c 65 2b 3d 35 31 2d 74 3e 3e 3e 38 26 2d 37 35 2c 65 2b 3d 36 31 2d 74 3e 3e 3e 38 26 2d 31 35 2c 65 2b 3d 36 32 2d 74 3e 3e 3e 38 26 Data Ascii: is._decodeChar(t.charCodeAt(i+3)),o[r++]=u<<6\|h,s\|=256&h),0!==s)throw new Error("Base64Coder: incorrect characters for decoding");return o},t.prototype._encodeByte=function(t){var e=t;return e+=65,e+=25-t>>>8&6,e+=51-t>>>8&-75,e+=61-t>>>8&-15,e+=62-t>>>8&
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 66 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 61 2e 64 65 63 6f 64 65 28 74 29 7d 2c 65 2e 65 6e 63 6f 64 65 64 4c 65 6e 67 74 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 2e 65 6e 63 6f 64 65 64 4c 65 6e 67 74 68 28 74 29 7d 2c 65 2e 6d 61 78 44 65 63 6f 64 65 64 4c 65 6e 67 74 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 2e 6d 61 78 44 65 63 6f 64 65 64 4c 65 6e 67 74 68 28 74 29 7d 2c 65 2e 64 65 63 6f 64 65 64 4c 65 6e 67 74 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 2e 64 65 63 6f 64 65 64 4c 65 6e 67 74 68 28 74 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 Data Ascii: fe=function(t){return a.decode(t)},e.encodedLength=function(t){return s.encodedLength(t)},e.maxDecodedLength=function(t){return s.maxDecodedLength(t)},e.decodedLength=function(t){return s.decodedLength(t)}},function(t,e,n){"use strict";Object.defineProper
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 77 20 45 72 72 6f 72 28 6f 29 3b 73 3d 74 5b 2b 2b 6e 5d 2c 63 3d 74 5b 2b 2b 6e 5d 3b 76 61 72 20 61 3d 74 5b 2b 2b 6e 5d 3b 69 66 28 31 32 38 21 3d 28 31 39 32 26 73 29 7c 7c 31 32 38 21 3d 28 31 39 32 26 63 29 7c 7c 31 32 38 21 3d 28 31 39 32 26 61 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 6f 29 3b 72 3d 28 31 35 26 72 29 3c 3c 31 38 7c 28 36 33 26 73 29 3c 3c 31 32 7c 28 36 33 26 63 29 3c 3c 36 7c 36 33 26 61 2c 69 3d 36 35 35 33 36 7d 69 66 28 72 3c 69 7c 7c 72 3e 3d 35 35 32 39 36 26 26 72 3c 3d 35 37 33 34 33 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 6f 29 3b 69 66 28 72 3e 3d 36 35 35 33 36 29 7b 69 66 28 72 3e 31 31 31 34 31 31 31 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 6f 29 3b 72 2d 3d 36 35 35 33 36 2c 65 2e 70 Data Ascii: w Error(o);s=t[++n],c=t[++n];var a=t[++n];if(128!=(192&s)\|\|128!=(192&c)\|\|128!=(192&a))throw new Error(o);r=(15&r)<<18\|(63&s)<<12\|(63&c)<<6\|63&a,i=65536}if(r<i\|\|r>=55296&&r<=57343)throw new Error(o);if(r>=65536){if(r>1114111)throw new Error(o);r-=65536,e.p
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 2e 6c 6f 61 64 69 6e 67 5b 74 5d 2e 6c 65 6e 67 74 68 3e 30 29 6f 2e 6c 6f 61 64 69 6e 67 5b 74 5d 2e 70 75 73 68 28 6e 29 3b 65 6c 73 65 7b 6f 2e 6c 6f 61 64 69 6e 67 5b 74 5d 3d 5b 6e 5d 3b 76 61 72 20 72 3d 5f 65 2e 63 72 65 61 74 65 53 63 72 69 70 74 52 65 71 75 65 73 74 28 6f 2e 67 65 74 50 61 74 68 28 74 2c 65 29 29 2c 69 3d 6f 2e 72 65 63 65 69 76 65 72 73 2e 63 72 65 61 74 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6f 2e 72 65 63 65 69 76 65 72 73 2e 72 65 6d 6f 76 65 28 69 29 2c 6f 2e 6c 6f 61 64 69 6e 67 5b 74 5d 29 7b 76 61 72 20 6e 3d 6f 2e 6c 6f 61 64 69 6e 67 5b 74 5d 3b 64 65 6c 65 74 65 20 6f 2e 6c 6f 61 64 69 6e 67 5b 74 5d 3b 66 6f 72 28 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 7c 7c 72 2e 63 6c 65 61 6e 75 70 Data Ascii: .loading[t].length>0)o.loading[t].push(n);else{o.loading[t]=[n];var r=_e.createScriptRequest(o.getPath(t,e)),i=o.receivers.create((function(e){if(o.receivers.remove(i),o.loading[t]){var n=o.loading[t];delete o.loading[t];for(var s=function(t){t\|\|r.cleanup
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 7d 29 28 74 2c 65 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 74 7d 6f 28 74 2c 65 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 29 3a 28 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6e 29 7d 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 Data Ascii: proto__=e}\|\|function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])})(t,e)},function(t,e){function n(){this.constructor=t}o(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}),f=function(t){function e(e){var n=this.construct
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 72 29 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 6f 2c 72 3d 74 68 69 73 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 28 6f 3d 5f 65 2e 63 72 65 61 74 65 58 48 52 28 29 29 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 72 2e 6f 70 74 69 6f 6e 73 2e 61 75 74 68 45 6e 64 70 6f 69 6e 74 2c 21 30 29 2c 6f 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 2c 74 68 69 73 2e 61 75 74 68 4f 70 74 69 6f 6e 73 2e 68 65 61 64 65 72 73 29 6f 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 69 2c 74 68 69 73 2e 61 75 74 68 4f 70 74 69 6f 6e 73 2e 68 65 61 64 65 72 73 5b 69 5d 29 3b 72 65 74 75 72 Data Ascii: r),_=function(t,e,n){var o,r=this;for(var i in(o=_e.createXHR()).open("POST",r.options.authEndpoint,!0),o.setRequestHeader("Content-Type","application/x-www-form-urlencoded"),this.authOptions.headers)o.setRequestHeader(i,this.authOptions.headers[i]);retur
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 5d 2e 6a 6f 69 6e 28 22 22 29 7d 2c 78 3d 77 69 6e 64 6f 77 2e 62 74 6f 61 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 73 5c 53 5d 7b 31 2c 33 7d 2f 67 2c 4c 29 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 2c 6e 2c 6f 29 7b 76 61 72 20 72 3d 74 68 69 73 3b 74 68 69 73 2e 63 6c 65 61 72 3d 65 2c 74 68 69 73 2e 74 69 6d 65 72 3d 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 74 69 6d 65 72 26 26 28 72 2e 74 69 6d 65 72 3d 6f 28 72 2e 74 69 6d 65 72 29 29 7d 29 2c 6e 29 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 52 75 6e 6e 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 74 68 69 73 2e 74 69 6d 65 Data Ascii: ].join("")},x=window.btoa\|\|function(t){return t.replace(/[\s\S]{1,3}/g,L)},A=function(){function t(t,e,n,o){var r=this;this.clear=e,this.timer=t((function(){r.timer&&(r.timer=o(r.timer))}),n)}return t.prototype.isRunning=function(){return null!==this.time

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49788	172.67.28.250	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:54 UTC	535	OUT	GET /assets/reamaze-push.js HTTP/1.1 Host: push.reamaze.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bodis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:54 UTC	315	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:54 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-encoding last-modified: Mon, 22 Apr 2024 22:30:46 GMT etag: W/"45a-616b6fd12f180" CF-Cache-Status: HIT Age: 4016 Server: cloudflare CF-RAY: 878c38374ca153e4-ATL
2024-04-23 07:42:54 UTC	1054	IN	Data Raw: 61 63 31 0d 0a 28 28 29 3d 3e 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 28 7b 69 6e 69 74 69 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 52 65 61 6d 61 7a 65 50 75 73 68 44 61 74 61 26 26 28 74 68 69 73 2e 64 61 74 61 3d 77 69 6e 64 6f 77 2e 52 65 61 6d 61 7a 65 50 75 73 68 44 61 74 61 2c 74 68 69 73 2e 68 61 6e 64 6c 65 53 75 62 73 63 72 69 70 74 69 6f 6e 28 29 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 52 65 61 6d 61 7a 65 50 75 73 68 44 61 74 61 49 6e 69 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 64 61 74 61 3d 77 69 6e 64 6f 77 2e 52 65 61 6d 61 7a 65 50 75 73 68 44 61 74 61 2c 74 68 69 73 2e 68 61 6e 64 6c 65 53 75 62 73 63 72 69 70 74 69 6f 6e 28 29 7d 2e 62 69 6e 64 28 74 Data Ascii: ac1(()=>{(function(){({initialize:function(){window.ReamazePushData&&(this.data=window.ReamazePushData,this.handleSubscription()),window.addEventListener("ReamazePushDataInit",function(){this.data=window.ReamazePushData,this.handleSubscription()}.bind(t
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 39 77 51 76 75 46 37 78 56 73 6b 31 4e 53 67 53 4c 51 6c 77 2d 55 42 2d 4e 76 64 59 76 70 63 36 37 76 78 61 39 47 75 48 4f 4b 43 42 68 58 4d 39 51 79 4a 55 69 61 41 41 74 53 49 4c 56 62 6c 72 75 6e 4c 72 51 65 75 4d 4f 59 49 6d 4a 75 6f 49 38 22 29 7d 2c 72 65 73 65 74 53 75 62 73 63 72 69 70 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 75 73 68 4d 61 6e 61 67 65 72 2e 67 65 74 53 75 62 73 63 72 69 70 74 69 6f 6e 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 61 70 70 6c 69 63 61 74 69 6f 6e 4b 65 79 28 29 2c 6e 3d 65 3f 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 65 2e 6f 70 74 69 6f 6e 73 2e 61 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 4b 65 79 29 3a 5b 5d 3b 65 26 26 74 68 69 73 2e 64 Data Ascii: 9wQvuF7xVsk1NSgSLQlw-UB-NvdYvpc67vxa9GuHOKCBhXM9QyJUiaAAtSILVblrunLrQeuMOYImJuoI8")},resetSubscription:function(t){t.pushManager.getSubscription().then(function(e){var i=this.applicationKey(),n=e?new Uint8Array(e.options.applicationServerKey):[];e&&this.d
2024-04-23 07:42:54 UTC	337	IN	Data Raw: 29 29 7d 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 2c 75 72 6c 42 36 34 54 6f 55 69 6e 74 38 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6c 65 74 20 65 3d 22 3d 22 2e 72 65 70 65 61 74 28 28 34 2d 74 2e 6c 65 6e 67 74 68 25 34 29 25 34 29 2c 69 3d 28 74 2b 65 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2d 2f 67 2c 22 2b 22 29 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2f 22 29 2c 6e 3d 77 69 6e 64 6f 77 2e 61 74 6f 62 28 69 29 2c 73 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 6e 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 6c 65 74 20 61 3d 30 3b 61 3c 6e 2e 6c 65 6e 67 74 68 3b 2b 2b 61 29 73 5b 61 5d 3d 6e 2e 63 68 61 72 43 6f 64 65 41 74 28 61 29 3b 72 65 74 75 72 6e 20 73 7d 2c 5f 6e 6f 6e 52 65 61 6d 61 7a 65 44 6f 6d 61 69 6e 3a 66 75 6e 63 74 69 6f Data Ascii: ))}.bind(this))},urlB64ToUint8Array:function(t){let e="=".repeat((4-t.length%4)%4),i=(t+e).replace(/\-/g,"+").replace(/_/g,"/"),n=window.atob(i),s=new Uint8Array(n.length);for(let a=0;a<n.length;++a)s[a]=n.charCodeAt(a);return s},_nonReamazeDomain:functio
2024-04-23 07:42:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49790	104.22.8.8	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:54 UTC	361	OUT	GET /data/brands/bodis/ping HTTP/1.1 Host: cdn.reamaze.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:54 UTC	898	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:54 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=300, public, must-revalidate vary: Accept,Accept-Encoding access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubDomains access-control-max-age: 1728000 x-request-id: 0770c349-9ca2-4d98-9347-1aaf16048c48 access-control-allow-methods: POST, GET, OPTIONS, PUT x-runtime: 0.053124 x-content-type-options: nosniff content-security-policy: default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: cid:; connect-src https: wss:; worker-src 'self' blob: ; child-src 'self' https: blob: ; etag: W/"812f79385d000c4bcb3c100ac638663e" status: 200 OK CF-Cache-Status: EXPIRED Server: cloudflare CF-RAY: 878c38375d7b1d76-ATL
2024-04-23 07:42:54 UTC	471	IN	Data Raw: 33 65 31 63 0d 0a 7b 22 6e 61 6d 65 22 3a 22 42 4f 44 49 53 22 2c 22 70 72 65 66 65 72 65 6e 63 65 73 22 3a 7b 22 6b 62 5f 6d 65 74 61 5f 72 65 64 75 63 65 5f 73 65 6f 22 3a 74 72 75 65 2c 22 6b 62 5f 68 65 61 64 65 72 5f 62 67 5f 63 6f 6c 6f 72 22 3a 22 72 67 62 28 32 33 2c 20 39 39 2c 20 31 34 36 29 22 2c 22 6b 62 5f 68 65 61 64 65 72 5f 66 6f 6e 74 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 6b 62 5f 68 65 61 64 65 72 5f 75 72 6c 22 3a 22 2f 22 2c 22 6b 62 5f 68 65 61 64 65 72 5f 73 68 6f 77 5f 62 72 61 6e 64 5f 6c 6f 67 6f 22 3a 66 61 6c 73 65 2c 22 6b 62 5f 68 65 61 64 65 72 5f 6c 6f 67 6f 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 32 2e 62 6f 64 69 73 2e 63 6f 6d 2f 73 76 67 2f 6c 6f 67 6f 2e 73 76 67 22 2c 22 6b 62 5f 6c 61 Data Ascii: 3e1c{"name":"BODIS","preferences":{"kb_meta_reduce_seo":true,"kb_header_bg_color":"rgb(23, 99, 146)","kb_header_font_color":"#ffffff","kb_header_url":"/","kb_header_show_brand_logo":false,"kb_header_logo_url":"https://www2.bodis.com/svg/logo.svg","kb_la
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 74 6c 65 5f 63 6f 6c 6f 72 22 3a 22 23 35 35 35 35 35 35 22 2c 22 6b 62 5f 74 69 74 6c 65 5f 6c 69 67 68 74 5f 63 6f 6c 6f 72 22 3a 22 23 46 42 46 42 46 42 22 2c 22 6b 62 5f 63 75 73 74 6f 6d 5f 6d 65 74 61 5f 68 74 6d 6c 22 3a 22 22 2c 22 6b 62 5f 63 75 73 74 6f 6d 5f 68 65 61 64 65 72 5f 68 74 6d 6c 22 3a 22 22 2c 22 6b 62 5f 63 75 73 74 6f 6d 5f 66 6f 6f 74 65 72 5f 68 74 6d 6c 22 3a 22 22 2c 22 6b 62 5f 63 75 73 74 6f 6d 5f 63 73 73 5f 73 74 79 6c 65 73 68 65 65 74 22 3a 22 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 3a 34 30 30 2c 35 30 30 2c 37 30 30 2c 34 30 30 69 74 61 6c 69 63 7c 4d 61 74 65 72 69 61 6c 2b 49 63 6f Data Ascii: tle_color":"#555555","kb_title_light_color":"#FBFBFB","kb_custom_meta_html":"","kb_custom_header_html":"","kb_custom_footer_html":"","kb_custom_css_stylesheet":"@import url('https://fonts.googleapis.com/css?family=Roboto:400,500,700,400italic\|Material+Ico
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 72 61 6e 73 5f 61 72 74 69 63 6c 65 5f 63 6f 75 6e 74 22 3a 22 7b 7b 20 63 6f 75 6e 74 20 7c 20 70 6c 75 72 61 6c 69 7a 65 3a 20 27 61 72 74 69 63 6c 65 27 7d 7d 20 69 6e 20 74 68 69 73 20 54 6f 70 69 63 22 2c 22 74 72 61 6e 73 5f 73 65 65 5f 61 6c 6c 5f 61 72 74 69 63 6c 65 73 22 3a 22 53 65 65 20 61 6c 6c 20 61 72 74 69 63 6c 65 73 20 69 6e 20 7b 7b 20 74 6f 70 69 63 20 7d 7d 20 e2 86 92 22 2c 22 74 72 61 6e 73 5f 72 65 6c 61 74 65 64 5f 61 72 74 69 63 6c 65 73 22 3a 22 52 65 6c 61 74 65 64 20 41 72 74 69 63 6c 65 73 22 2c 22 74 72 61 6e 73 5f 63 6f 6e 74 61 63 74 5f 75 73 22 3a 22 4e 6f 74 20 66 69 6e 64 69 6e 67 20 77 68 61 74 20 79 6f 75 27 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 3f 22 2c 22 74 72 61 6e 73 5f 6e 65 78 74 5f 61 72 74 69 63 6c 65 22 Data Ascii: rans_article_count":"{{ count \| pluralize: 'article'}} in this Topic","trans_see_all_articles":"See all articles in {{ topic }} ","trans_related_articles":"Related Articles","trans_contact_us":"Not finding what you're looking for?","trans_next_article"
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 61 69 6c 5f 74 72 61 6e 73 63 72 69 70 74 22 3a 22 45 6d 61 69 6c 20 54 72 61 6e 73 63 72 69 70 74 22 2c 22 74 72 61 6e 73 5f 63 68 61 74 5f 65 6e 64 5f 63 68 61 74 22 3a 22 45 6e 64 20 43 68 61 74 22 2c 22 74 72 61 6e 73 5f 63 68 61 74 5f 65 6e 64 5f 63 68 61 74 5f 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 68 65 61 64 65 72 22 3a 22 45 6e 64 20 54 68 69 73 20 43 68 61 74 3f 22 2c 22 74 72 61 6e 73 5f 63 68 61 74 5f 73 74 61 72 74 65 64 22 3a 22 5c 75 30 30 33 63 70 5c 75 30 30 33 65 54 68 61 6e 6b 73 21 20 59 6f 75 72 20 63 68 61 74 20 6d 65 73 73 61 67 65 20 68 61 73 20 62 65 65 6e 20 73 75 62 6d 69 74 74 65 64 2e 20 53 6f 6d 65 6f 6e 65 20 77 69 6c 6c 20 62 65 20 77 69 74 68 20 79 6f 75 20 73 68 6f 72 74 6c 79 2e 5c 75 30 30 33 63 2f 70 5c 75 30 30 33 65 Data Ascii: ail_transcript":"Email Transcript","trans_chat_end_chat":"End Chat","trans_chat_end_chat_confirmation_header":"End This Chat?","trans_chat_started":"\u003cp\u003eThanks! Your chat message has been submitted. Someone will be with you shortly.\u003c/p\u003e
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 63 68 22 3a 22 59 6f 75 72 20 73 65 61 72 63 68 20 64 69 64 20 6e 6f 74 20 6d 61 74 63 68 20 61 6e 79 20 64 69 73 63 75 73 73 69 6f 6e 73 2e 22 2c 22 74 72 61 6e 73 5f 72 65 6c 61 74 65 64 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 22 3a 22 52 65 6c 61 74 65 64 20 43 6f 6e 76 65 72 73 61 74 69 6f 6e 73 22 2c 22 74 72 61 6e 73 5f 64 69 73 63 75 73 73 69 6f 6e 5f 76 69 65 77 5f 73 74 61 66 66 5f 72 65 73 70 6f 6e 73 65 22 3a 22 56 69 65 77 20 73 74 61 66 66 20 72 65 73 70 6f 6e 73 65 20 62 65 6c 6f 77 2e 22 2c 22 74 72 61 6e 73 5f 64 69 73 63 75 73 73 69 6f 6e 5f 6c 6f 67 69 6e 5f 70 72 6f 6d 70 74 22 3a 22 50 6c 65 61 73 65 20 6c 6f 67 20 69 6e 20 74 6f 20 72 65 70 6c 79 2e 22 2c 22 74 72 61 6e 73 5f 64 69 73 63 75 73 73 69 6f 6e 5f 63 6f 6d 6d 65 6e 74 5f Data Ascii: ch":"Your search did not match any discussions.","trans_related_conversations":"Related Conversations","trans_discussion_view_staff_response":"View staff response below.","trans_discussion_login_prompt":"Please log in to reply.","trans_discussion_comment_
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 6d 69 74 74 65 64 2e 20 59 6f 75 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 61 20 72 65 73 70 6f 6e 73 65 20 68 65 72 65 20 6f 72 20 76 69 61 20 65 6d 61 69 6c 2e 20 59 6f 75 20 6d 61 79 20 6c 65 61 76 65 20 6d 6f 72 65 20 6d 65 73 73 61 67 65 73 20 62 65 6c 6f 77 2e 5c 75 30 30 33 63 2f 70 5c 75 30 30 33 65 5c 6e 22 2c 22 74 72 61 6e 73 5f 70 6f 70 75 70 5f 6d 6f 72 65 5f 64 65 74 61 69 6c 73 5f 6e 65 65 64 65 64 22 3a 22 57 65 20 6a 75 73 74 20 6e 65 65 64 20 73 6f 6d 65 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 79 6f 75 20 74 6f 20 70 72 6f 63 65 65 64 3a 22 2c 22 74 72 61 6e 73 5f 70 6f 70 75 70 5f 6e 65 77 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 70 72 6f 6d 70 74 22 3a 22 53 65 6e 64 20 61 20 4d 65 73 73 61 67 65 22 2c 22 Data Ascii: mitted. You will receive a response here or via email. You may leave more messages below.\u003c/p\u003e\n","trans_popup_more_details_needed":"We just need some more information from you to proceed:","trans_popup_new_conversation_prompt":"Send a Message","
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 6d 70 74 22 3a 22 4e 65 75 74 72 61 6c 22 2c 22 74 72 61 6e 73 5f 72 61 74 69 6e 67 5f 34 5f 70 72 6f 6d 70 74 22 3a 22 53 61 74 69 73 66 69 65 64 22 2c 22 74 72 61 6e 73 5f 72 61 74 69 6e 67 5f 35 5f 70 72 6f 6d 70 74 22 3a 22 56 65 72 79 20 53 61 74 69 73 66 69 65 64 22 2c 22 74 72 61 6e 73 5f 75 6e 73 75 62 73 63 72 69 62 65 5f 6c 69 6e 6b 22 3a 22 55 6e 73 75 62 73 63 72 69 62 65 22 2c 22 74 72 61 6e 73 5f 75 6e 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 70 74 22 3a 22 4e 6f 20 6c 6f 6e 67 65 72 20 77 61 6e 74 20 74 68 65 73 65 20 65 6d 61 69 6c 73 3f 22 2c 22 74 72 61 6e 73 5f 75 6e 73 75 62 73 63 72 69 62 65 5f 74 69 74 6c 65 22 3a 22 55 6e 73 75 62 73 63 72 69 62 65 22 2c 22 74 72 61 6e 73 5f 75 6e 73 75 62 73 63 72 69 62 65 5f 6d 65 73 73 61 67 65 Data Ascii: mpt":"Neutral","trans_rating_4_prompt":"Satisfied","trans_rating_5_prompt":"Very Satisfied","trans_unsubscribe_link":"Unsubscribe","trans_unsubscribe_prompt":"No longer want these emails?","trans_unsubscribe_title":"Unsubscribe","trans_unsubscribe_message
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 69 6e 67 5f 6e 75 6d 62 65 72 22 3a 22 28 4e 6f 20 74 72 61 63 6b 69 6e 67 20 6e 75 6d 62 65 72 29 22 2c 22 74 72 61 6e 73 5f 68 75 62 5f 73 68 6f 70 70 65 72 5f 68 65 61 64 65 72 22 3a 22 53 68 6f 70 70 69 6e 67 20 41 73 73 69 73 74 61 6e 74 22 2c 22 74 72 61 6e 73 5f 68 75 62 5f 73 68 6f 70 70 65 72 5f 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 22 54 65 6c 6c 20 6d 65 20 77 68 61 74 20 79 6f 75 27 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 22 2c 22 74 72 61 6e 73 5f 6e 61 76 69 67 61 74 69 6f 6e 5f 62 61 63 6b 22 3a 22 42 61 63 6b 22 2c 22 74 72 61 6e 73 5f 6e 61 76 69 67 61 74 69 6f 6e 5f 68 6f 6d 65 22 3a 22 48 6f 6d 65 22 2c 22 74 72 61 6e 73 5f 61 72 69 61 5f 73 65 61 72 63 68 5f 72 65 73 75 6c 74 73 22 3a 22 53 65 61 72 63 68 20 52 65 73 75 6c 74 73 22 Data Ascii: ing_number":"(No tracking number)","trans_hub_shopper_header":"Shopping Assistant","trans_hub_shopper_placeholder":"Tell me what you're looking for","trans_navigation_back":"Back","trans_navigation_home":"Home","trans_aria_search_results":"Search Results"
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 70 74 5f 65 6d 61 69 6c 5f 74 65 78 74 22 3a 22 50 6c 65 61 73 65 20 70 72 6f 76 69 64 65 20 6d 65 20 77 69 74 68 20 74 68 65 20 65 6d 61 69 6c 20 6f 72 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 79 6f 75 72 20 6f 72 64 65 72 2e 22 2c 22 74 72 61 6e 73 5f 6f 72 64 65 72 5f 62 6f 74 5f 63 6f 6e 74 69 6e 75 65 5f 74 65 78 74 22 3a 22 47 72 65 61 74 21 20 4c 65 61 76 65 20 61 6e 79 20 6f 74 68 65 72 20 71 75 65 73 74 69 6f 6e 73 20 68 65 72 65 20 69 66 20 79 6f 75 20 68 61 76 65 20 74 68 65 6d 2e 22 2c 22 74 72 61 6e 73 5f 62 6f 74 5f 72 65 6d 69 6e 64 5f 74 65 78 74 22 3a 22 53 69 6e 63 65 20 49 20 68 61 76 65 6e e2 80 99 74 20 68 65 61 72 64 20 62 61 63 6b 2c 20 49 e2 80 99 6c 6c 20 61 73 73 75 6d 65 20 79 6f Data Ascii: pt_email_text":"Please provide me with the email or phone number associated with your order.","trans_order_bot_continue_text":"Great! Leave any other questions here if you have them.","trans_bot_remind_text":"Since I havent heard back, Ill assume yo
2024-04-23 07:42:54 UTC	1369	IN	Data Raw: 22 2c 22 74 72 61 6e 73 5f 76 69 64 65 6f 5f 61 6e 73 77 65 72 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 41 6e 73 77 65 72 22 2c 22 74 72 61 6e 73 5f 76 69 64 65 6f 5f 64 65 63 6c 69 6e 65 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 44 65 63 6c 69 6e 65 22 7d 2c 22 69 6e 4f 66 66 69 63 65 22 3a 74 72 75 65 2c 22 64 65 70 61 72 74 6d 65 6e 74 73 41 76 61 69 6c 61 62 6c 65 22 3a 5b 5d 2c 22 6c 69 76 65 53 74 61 66 66 41 76 61 74 61 72 73 22 3a 5b 5d 2c 22 73 74 61 66 66 41 76 61 74 61 72 73 22 3a 5b 7b 22 61 76 61 74 61 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 72 65 61 6d 61 7a 65 2e 63 6f 6d 2f 72 61 69 6c 73 2f 61 63 74 69 76 65 5f 73 74 6f 72 61 67 65 2f 72 65 70 72 65 73 65 6e 74 61 74 69 6f 6e 73 2f 72 65 64 69 72 65 63 74 2f 65 79 Data Ascii: ","trans_video_answer_button_text":"Answer","trans_video_decline_button_text":"Decline"},"inOffice":true,"departmentsAvailable":[],"liveStaffAvatars":[],"staffAvatars":[{"avatarUrl":"https://cdn.reamaze.com/rails/active_storage/representations/redirect/ey

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49792	172.67.28.250	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:54 UTC	521	OUT	GET /app/?EIO=3&transport=websocket HTTP/1.1 Host: ws.reamaze.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.bodis.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: 5AcUhEstlNdfnCShnF5j/w== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-23 07:42:54 UTC	259	IN	HTTP/1.1 101 Switching Protocols Date: Tue, 23 Apr 2024 07:42:54 GMT Connection: upgrade Upgrade: websocket Sec-WebSocket-Accept: NzgWw75xKEUhb1ySfLWvhQ5w8hU= uWebSockets: 18 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 878c3837dbae6742-ATL
2024-04-23 07:42:54 UTC	91	IN	Data Raw: 81 55 30 7b 22 73 69 64 22 3a 22 79 53 73 76 36 47 4e 6f 37 42 6e 65 6f 48 55 33 41 69 6c 4a 22 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 35 30 30 30 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 5d 7d 81 02 34 30 Data Ascii: U0{"sid":"ySsv6GNo7BneoHU3AilJ","pingInterval":25000,"pingTimeout":5000,"upgrades":[]}40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49791	199.59.243.50	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:54 UTC	1318	OUT	GET /api/countries HTTP/1.1 Host: www.bodis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookieyes-consent=consentid:cm56eWZ2UzdsNE51b3dzbFh0Qk1HY1hzOURESVVxUWk,consent:,action:,necessary:,functional:,analytics:,performance:,advertisement:,other:; _ga_L32F1DFB3K=GS1.1.1713858172.1.0.1713858172.60.0.0; _ga=GA1.1.1379586991.1713858172; XSRF-TOKEN=eyJpdiI6InJKTWU3dTJvSVZudE5wdk5uSklsN1E9PSIsInZhbHVlIjoiM1NyVmFMODhmaTJCc1Z4Sno0ZWNxbWd3VzlJelUwQ1hDUWpNZWlheERpREtDYUVSYzQzMGVubEY4eC8yS3NHMGJNQjE5Tmp3TEZQODNWSGc3WGtlUTIrdGtoSFc5ZHI5alpycjhvbzFxcWNVRyt1MmZyYnV4bjhwdVJGdGplRE0iLCJtYWMiOiI4MjhjZDVjNGVkYzliYjBkMmI3MjA2NzU4OWI2ODU3NTcwNmIwOTAzYzE0YWMxZTM3ODFiZjM1NzkzYWVkZTMyIiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IitNV1BUVmpueC9mTURxUm13anVCNUE9PSIsInZhbHVlIjoiZC9CVjZEZGJ2dEMrNi9rTWtrWExRRWd6VDFBMXYzYzBCazNZSWwvd2pLSnlhQVJaWit5bXhzOHY3dWdHRW1BbmxrZnU4dXZzVE5MMjVReUhJeWF0ZDRZUWhPY2hOeHRycUkzdjE1R09hOTlRY2dJMmZuOHlaT2NqRVd1enF5RUoiLCJtYWMiOiI2OWYxYTVmMjYyNjJhYjQzMDdhMmEzZTZhNThmMGIxYWExM2VkZDI2ODIzMGNiNTUwMzhhNTQ3YjNlNTE0ZDRmIiwidGFnIjoiIn0%3D
2024-04-23 07:42:54 UTC	1111	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:54 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Server: nginx Cache-Control: no-cache, private X-Version: 2.118.0 Set-Cookie: XSRF-TOKEN=eyJpdiI6IjJ4YTg1aGVzeXpMMnMzeHgxTi9mNlE9PSIsInZhbHVlIjoiRkFPZW1LdUpyQ2NHMnRzVllhOHdUY1NXbEU0WmlGSEs5Y1pOWWZlQzRNaUgyWWdBc2V0YS9WRnZUSnVZQi8rUDFGd3E0RDdmTW9mMEFoU2trV2h0cTRPMlpNRXg2aExMYjNlYmlEM0pqMFdsK09rRmVkVTFLQWdIajdvc25SSGgiLCJtYWMiOiI5OTY4ZDM0MTY1Njk2YjUxOTgzMTMyNmI0YTRmNWM2Nzc0Njk1ZTNlNWEzMDE1YjQxYzJkMmRiMzBkOTdjNGU3IiwidGFnIjoiIn0%3D; expires=Tue, 23 Apr 2024 09:42:54 GMT; Max-Age=7200; path=/; domain=.bodis.com Set-Cookie: bodis_session=eyJpdiI6IlVEckRGSEd0Tk9lNTZHUXZPRjZtZ0E9PSIsInZhbHVlIjoiYWVmdk1Ybjl1cStBV2NsVEpjWmtwMlU4OE4yWktPdnVjcmhTQmU3OEh5SjhyZWIzRUxvUzBuZEpHVnZWa1RpY3Q2a3YwWkplN29kZWk1cXVuSDdDaCtKM3FIL1ZOUHJjV0VkVUpxMWpsZjJFRFN5NkZKOUpPRGRGdzh6R1UrTlkiLCJtYWMiOiI0Mzk3YmRjZmQ5ZmJjZDE1ODA0MTY4NjgzNzNkNjQ5Mzc3NmFlZDY1OTQzMTgyNGNiMzgyY2NlMGYzNzA5MDc2IiwidGFnIjoiIn0%3D; expires=Tue, 23 Apr 2024 09:42:54 GMT; Max-Age=7200; path=/; domain=.bodis.com; httponly
2024-04-23 07:42:54 UTC	15273	IN	Data Raw: 37 62 39 65 0d 0a 5b 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 31 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 61 66 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 41 66 67 68 61 6e 69 73 74 61 6e 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 39 33 2c 22 69 73 5f 73 6d 73 5f 63 6f 76 65 72 61 67 65 22 3a 31 2c 22 69 73 5f 70 68 6f 6e 65 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 73 74 61 72 74 22 3a 34 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 65 6e 64 22 3a 34 2c 22 61 64 64 72 65 73 73 5f 66 6f 72 6d 61 74 22 3a 22 41 7e 43 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 32 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 61 6c 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 41 6c 62 Data Ascii: 7b9e[{"country_id":1,"country_code":"af","country_name":"Afghanistan","calling_code":93,"is_sms_coverage":1,"is_phone_coverage":0,"timezone_gmt_start":4,"timezone_gmt_end":4,"address_format":"A~C"},{"country_id":2,"country_code":"al","country_name":"Alb
2024-04-23 07:42:54 UTC	16381	IN	Data Raw: 70 68 6f 6e 65 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 73 74 61 72 74 22 3a 35 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 65 6e 64 22 3a 35 2c 22 61 64 64 72 65 73 73 5f 66 6f 72 6d 61 74 22 3a 22 41 7e 43 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 37 39 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 66 78 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 46 72 65 6e 63 68 2c 20 4d 65 74 72 6f 70 6f 6c 69 74 61 6e 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 33 33 2c 22 69 73 5f 73 6d 73 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 69 73 5f 70 68 6f 6e 65 5f 63 6f 76 65 72 61 67 65 22 3a 31 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 73 74 61 72 74 22 3a 35 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 Data Ascii: phone_coverage":0,"timezone_gmt_start":5,"timezone_gmt_end":5,"address_format":"A~C"},{"country_id":79,"country_code":"fx","country_name":"French, Metropolitan","calling_code":33,"is_sms_coverage":0,"is_phone_coverage":1,"timezone_gmt_start":5,"timezone_g
2024-04-23 07:42:54 UTC	16384	IN	Data Raw: 34 33 38 36 0d 0a 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 4e 69 75 65 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 36 38 33 2c 22 69 73 5f 73 6d 73 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 69 73 5f 70 68 6f 6e 65 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 73 74 61 72 74 22 3a 2d 31 31 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 65 6e 64 22 3a 2d 31 31 2c 22 61 64 64 72 65 73 73 5f 66 6f 72 6d 61 74 22 3a 22 41 7e 43 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 31 36 33 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 6e 66 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 4e 6f 72 66 6f 6c 6b 20 49 73 6c 61 6e 64 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 36 37 32 2c 22 69 73 5f Data Ascii: 4386,"country_name":"Niue","calling_code":683,"is_sms_coverage":0,"is_phone_coverage":0,"timezone_gmt_start":-11,"timezone_gmt_end":-11,"address_format":"A~C"},{"country_id":163,"country_code":"nf","country_name":"Norfolk Island","calling_code":672,"is_
2024-04-23 07:42:54 UTC	910	IN	Data Raw: 72 6e 20 53 61 68 61 72 61 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 32 31 32 2c 22 69 73 5f 73 6d 73 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 69 73 5f 70 68 6f 6e 65 5f 63 6f 76 65 72 61 67 65 22 3a 30 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 73 74 61 72 74 22 3a 30 2c 22 74 69 6d 65 7a 6f 6e 65 5f 67 6d 74 5f 65 6e 64 22 3a 30 2c 22 61 64 64 72 65 73 73 5f 66 6f 72 6d 61 74 22 3a 22 41 7e 50 20 43 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 32 34 36 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 79 65 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 59 65 6d 65 6e 22 2c 22 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 39 36 37 2c 22 69 73 5f 73 6d 73 5f 63 6f 76 65 72 61 67 65 22 3a 31 2c 22 69 73 5f 70 68 6f 6e 65 5f 63 6f 76 Data Ascii: rn Sahara","calling_code":212,"is_sms_coverage":0,"is_phone_coverage":0,"timezone_gmt_start":0,"timezone_gmt_end":0,"address_format":"A~P C"},{"country_id":246,"country_code":"ye","country_name":"Yemen","calling_code":967,"is_sms_coverage":1,"is_phone_cov
2024-04-23 07:42:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49794	172.253.124.94	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:55 UTC	867	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfzTxMTAAAAAAHIvRILb-jIu7t-RzWErSMfee74&co=aHR0cHM6Ly93d3cuYm9kaXMuY29tOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&cb=c5eivrwj482n HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.bodis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:55 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 23 Apr 2024 07:42:55 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-M7SLugIrgN5krxRP0R4S3w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-23 07:42:55 UTC	364	IN	Data Raw: 32 62 30 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2b0d<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-23 07:42:55 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-23 07:42:55 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-23 07:42:55 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-23 07:42:55 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-23 07:42:55 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-23 07:42:55 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4d 37 53 4c 75 67 49 72 67 4e 35 6b 72 78 52 50 30 52 34 53 33 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 61 70 74 63 68 61 2e Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="M7SLugIrgN5krxRP0R4S3w" type="text/javascript">window['__recaptcha_api'] = 'https://www.recaptcha.
2024-04-23 07:42:55 UTC	1255	IN	Data Raw: 5a 46 63 55 53 57 65 5a 59 56 6d 68 64 54 6f 65 4b 46 71 48 32 62 6a 69 58 6a 47 4f 6d 49 31 55 63 33 52 2d 4c 48 72 72 7a 58 65 4c 6f 6c 35 7a 73 68 79 70 4d 6b 37 4a 36 54 79 30 72 6d 66 42 37 43 2d 38 66 49 55 71 79 6a 32 6b 39 4f 73 65 76 43 69 63 42 51 6a 37 35 55 77 4a 6e 6b 4b 34 48 34 38 64 54 50 76 71 69 63 7a 74 78 7a 31 73 41 65 68 5f 74 77 59 6f 4d 59 38 34 44 56 72 2d 5f 64 6b 5a 74 38 72 72 54 33 37 46 70 34 5a 4d 43 34 6c 53 45 59 42 71 61 44 79 5a 74 4b 58 45 47 6f 31 74 52 6d 71 64 50 6b 6b 57 37 4e 64 36 31 72 59 33 43 52 6d 77 55 73 78 58 50 58 6e 55 35 7a 63 71 4e 53 61 46 62 52 65 70 69 6e 4f 4b 4f 55 41 67 69 5f 58 66 33 46 69 45 66 5a 71 36 4a 4a 44 64 53 6e 54 67 37 6c 41 36 55 53 6c 75 75 30 53 4a 33 79 6b 65 6a 4b 74 6a 70 49 72 Data Ascii: ZFcUSWeZYVmhdToeKFqH2bjiXjGOmI1Uc3R-LHrrzXeLol5zshypMk7J6Ty0rmfB7C-8fIUqyj2k9OsevCicBQj75UwJnkK4H48dTPvqicztxz1sAeh_twYoMY84DVr-_dkZt8rrT37Fp4ZMC4lSEYBqaDyZtKXEGo1tRmqdPkkW7Nd61rY3CRmwUsxXPXnU5zcqNSaFbRepinOKOUAgi_Xf3FiEfZq6JJDdSnTg7lA6USluu0SJ3ykejKtjpIr
2024-04-23 07:42:55 UTC	1255	IN	Data Raw: 4e 41 2d 72 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 4d 37 53 4c 75 67 49 72 67 4e 35 6b 72 78 52 50 30 52 34 53 33 77 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 47 4d 33 51 79 63 6b 35 36 4e 32 4a 6e 62 44 5a 49 51 6b 56 50 61 32 4a 77 62 6d 45 79 51 57 39 54 4e 47 64 6b 62 47 70 36 4d 57 4a 6a 51 55 39 4f 57 57 78 59 63 6d 35 46 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 63 33 64 4a 56 Data Ascii: NA-r"><script type="text/javascript" nonce="M7SLugIrgN5krxRP0R4S3w"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9GM3Qyck56N2JnbDZIQkVPa2JwbmEyQW9TNGdkbGp6MWJjQU9OWWxYcm5FLmpz\x22,\x22\x22,\x22c3dJV
2024-04-23 07:42:55 UTC	625	IN	Data Raw: 32 6c 53 54 6e 52 4f 56 33 46 73 4d 30 55 34 55 31 56 53 63 55 73 33 62 7a 56 6c 5a 55 70 34 64 47 70 6e 57 46 49 35 52 48 4e 32 54 46 42 6d 4d 30 4e 6e 53 47 30 30 52 44 6c 6d 4f 55 5a 52 62 55 78 69 59 30 52 54 55 54 5a 48 64 33 46 6d 4f 56 46 57 55 32 67 35 51 6e 56 61 53 57 68 44 52 57 78 72 62 31 52 54 56 30 35 4d 54 45 78 75 4d 44 64 32 54 7a 4a 6d 64 7a 46 50 61 6c 6c 6c 65 6b 4a 71 51 7a 42 68 4d 7a 64 4b 63 46 63 35 62 7a 4e 52 57 45 78 5a 4d 55 46 35 52 6c 64 77 57 45 52 47 52 6a 5a 47 56 33 56 43 53 47 35 53 51 6b 39 6d 5a 47 31 6e 52 45 64 69 63 45 77 34 4e 46 6c 6a 62 30 31 5a 57 57 52 30 56 33 4e 73 4e 55 35 57 52 6c 6c 69 63 55 4e 6e 54 57 56 70 53 6a 64 59 63 33 52 31 63 6d 64 55 52 6b 68 6f 59 54 64 56 65 6e 4e 79 5a 46 67 77 54 6c 46 49 Data Ascii: 2lSTnROV3FsM0U4U1VScUs3bzVlZUp4dGpnWFI5RHN2TFBmM0NnSG00RDlmOUZRbUxiY0RTUTZHd3FmOVFWU2g5QnVaSWhDRWxrb1RTV05MTExuMDd2TzJmdzFPalllekJqQzBhMzdKcFc5bzNRWExZMUF5RldwWERGRjZGV3VCSG5SQk9mZG1nREdicEw4NFljb01ZWWR0V3NsNU5WRllicUNnTWVpSjdYc3R1cmdURkhoYTdVenNyZFgwTlFI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49799	172.253.124.94	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:56 UTC	753	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LfzTxMTAAAAAAHIvRILb-jIu7t-RzWErSMfee74&co=aHR0cHM6Ly93d3cuYm9kaXMuY29tOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&cb=c5eivrwj482n Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:57 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Tue, 23 Apr 2024 07:42:57 GMT Date: Tue, 23 Apr 2024 07:42:57 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-23 07:42:57 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js');
2024-04-23 07:42:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49800	142.250.9.147	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:56 UTC	664	OUT	GET /js/bg/F3t2rNz7bgl6HBEOkbpna2AoS4gdljz1bcAONYlXrnE.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.recaptcha.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:57 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18282 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 22 Apr 2024 20:48:38 GMT Expires: Tue, 22 Apr 2025 20:48:38 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 13:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 39259 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 07:42:57 UTC	444	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 79 29 7b 69 66 28 28 61 3d 28 79 3d 44 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 21 79 29 7c 7c 21 79 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 61 3b 74 72 79 7b 61 3d 79 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 50 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 50 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 50 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var b=function(a,y){if((a=(y=D.trustedTypes,null),!y)\|\|!y.createPolicy)return a;try{a=y.createPolicy("bg",{createHTML:P,createScript:P,createScriptURL:P}
2024-04-23 07:42:57 UTC	1255	IN	Data Raw: 65 61 74 65 53 63 72 69 70 74 28 52 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 52 29 7b 72 65 74 75 72 6e 22 22 2b 52 7d 7d 28 44 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 61 79 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 29 7b 72 65 74 75 72 6e 20 43 5b 79 5d 28 43 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 70 61 72 65 6e 74 3a 61 2c 6c 65 6e 67 74 68 3a 61 2c 70 72 6f 74 6f 74 79 70 65 3a 61 2c 73 70 6c 69 63 65 3a 61 2c 63 61 6c 6c 3a 61 2c 63 6f 6e 73 6f 6c 65 3a 61 2c 66 Data Ascii: eateScript(R)}:function(R){return""+R}}(D)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var ay=function(y,a){return C[y](C.prototype,{parent:a,length:a,prototype:a,splice:a,call:a,console:a,f
2024-04-23 07:42:57 UTC	1255	IN	Data Raw: 6b 4c 3d 52 2c 52 29 3c 3c 33 29 2d 34 2c 32 5d 5d 3b 74 72 79 7b 70 2e 55 5f 3d 70 42 28 52 2c 7a 24 28 70 2c 28 62 7c 30 29 2b 34 29 2c 7a 24 28 70 2c 62 29 29 7d 63 61 74 63 68 28 7a 29 7b 74 68 72 6f 77 20 7a 3b 7d 7d 70 2e 70 75 73 68 28 70 2e 55 5f 5b 4d 26 37 5d 5e 4b 29 7d 2c 42 3d 68 28 61 2c 33 30 31 29 29 3a 79 3d 66 75 6e 63 74 69 6f 6e 28 4b 29 7b 70 2e 70 75 73 68 28 4b 29 7d 2c 50 26 26 79 28 50 26 32 35 35 29 2c 61 3d 44 2e 6c 65 6e 67 74 68 2c 50 3d 30 3b 50 3c 61 3b 50 2b 2b 29 79 28 44 5b 50 5d 29 7d 2c 64 2c 43 42 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 29 7b 31 30 34 3c 79 2e 76 2e 6c 65 6e 67 74 68 3f 66 28 5b 63 2c 33 36 5d 2c 30 2c 79 29 3a 28 79 2e 76 2e 70 75 73 68 28 79 2e 48 2e 73 6c 69 63 65 28 29 29 2c 79 2e 48 5b 34 31 35 5d Data Ascii: kL=R,R)<<3)-4,2]];try{p.U_=pB(R,z$(p,(b\|0)+4),z$(p,b))}catch(z){throw z;}}p.push(p.U_[M&7]^K)},B=h(a,301)):y=function(K){p.push(K)},P&&y(P&255),a=D.length,P=0;P<a;P++)y(D[P])},d,CB=function(y,a){104<y.v.length?f([c,36],0,y):(y.v.push(y.H.slice()),y.H[415]
2024-04-23 07:42:57 UTC	1255	IN	Data Raw: 68 28 28 4f 28 44 2c 28 57 72 28 28 50 3d 68 28 44 2c 34 31 35 29 2c 44 2e 58 26 26 50 3c 44 2e 44 3f 28 4f 28 44 2c 34 31 35 2c 44 2e 44 29 2c 43 42 28 44 2c 61 29 29 3a 4f 28 44 2c 34 31 35 2c 61 29 2c 44 29 2c 79 29 2c 34 31 35 29 2c 50 29 2c 44 29 2c 33 33 34 29 7d 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 2c 44 29 7b 69 66 28 34 31 35 3d 3d 61 7c 7c 34 30 35 3d 3d 61 29 79 2e 48 5b 61 5d 3f 79 2e 48 5b 61 5d 2e 63 6f 6e 63 61 74 28 44 29 3a 79 2e 48 5b 61 5d 3d 55 30 28 44 2c 79 29 3b 65 6c 73 65 7b 69 66 28 79 2e 78 4c 26 26 33 36 30 21 3d 61 29 72 65 74 75 72 6e 3b 34 34 36 3d 3d 61 7c 7c 34 39 38 3d 3d 61 7c 7c 33 34 35 3d 3d 61 7c 7c 31 36 35 3d 3d 61 7c 7c 33 35 31 3d 3d 61 7c 7c 33 34 39 3d 3d 61 7c 7c 33 30 31 3d 3d 61 7c 7c 32 38 36 3d 3d Data Ascii: h((O(D,(Wr((P=h(D,415),D.X&&P<D.D?(O(D,415,D.D),CB(D,a)):O(D,415,a),D),y),415),P),D),334)},O=function(y,a,D){if(415==a\|\|405==a)y.H[a]?y.H[a].concat(D):y.H[a]=U0(D,y);else{if(y.xL&&360!=a)return;446==a\|\|498==a\|\|345==a\|\|165==a\|\|351==a\|\|349==a\|\|301==a\|\|286==
2024-04-23 07:42:57 UTC	1255	IN	Data Raw: 7c 44 3e 3e 3e 32 39 2c 79 3d 79 3e 3e 3e 38 7c 79 3c 3c 32 34 2c 61 5e 3d 50 2b 36 34 31 2c 44 5e 3d 61 2c 79 2b 3d 50 7c 30 2c 50 3d 50 3c 3c 33 7c 50 3e 3e 3e 32 39 2c 79 5e 3d 42 2b 36 34 31 2c 50 5e 3d 79 3b 72 65 74 75 72 6e 5b 44 3e 3e 3e 32 34 26 32 35 35 2c 44 3e 3e 3e 31 36 26 32 35 35 2c 44 3e 3e 3e 38 26 32 35 35 2c 44 3e 3e 3e 30 26 32 35 35 2c 61 3e 3e 3e 32 34 26 32 35 35 2c 61 3e 3e 3e 31 36 26 32 35 35 2c 61 3e 3e 3e 38 26 32 35 35 2c 61 3e 3e 3e 30 26 32 35 35 5d 7d 2c 72 68 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 2c 44 2c 50 2c 42 29 7b 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 7d 72 65 74 75 72 6e 20 50 3d 28 44 3d 28 42 3d 76 6f 69 64 20 30 2c 79 3d 49 79 28 79 2c 66 75 6e 63 74 69 6f 6e 28 4b 29 7b 70 26 26 28 61 26 26 47 24 28 61 29 2c Data Ascii: \|D>>>29,y=y>>>8\|y<<24,a^=P+641,D^=a,y+=P\|0,P=P<<3\|P>>>29,y^=B+641,P^=y;return[D>>>24&255,D>>>16&255,D>>>8&255,D>>>0&255,a>>>24&255,a>>>16&255,a>>>8&255,a>>>0&255]},rh=function(y,a,D,P,B){function p(){}return P=(D=(B=void 0,y=Iy(y,function(K){p&&(a&&G$(a),
2024-04-23 07:42:57 UTC	1255	IN	Data Raw: 30 29 2c 57 2b 3d 48 2c 7a 2d 3d 48 3b 72 65 74 75 72 6e 20 4f 28 61 2c 34 31 35 2c 28 79 3d 52 2c 28 4b 7c 30 29 2b 28 44 7c 30 29 29 29 2c 79 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 2c 44 2c 50 2c 42 29 7b 42 3d 74 68 69 73 3b 74 72 79 7b 56 42 28 44 2c 74 68 69 73 2c 79 2c 61 2c 50 29 7d 63 61 74 63 68 28 70 29 7b 78 28 74 68 69 73 2c 70 29 2c 61 28 66 75 6e 63 74 69 6f 6e 28 4b 29 7b 4b 28 42 2e 52 29 7d 29 7d 7d 2c 58 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 2c 44 2c 50 29 7b 66 6f 72 28 50 3d 28 44 3d 5b 5d 2c 28 79 7c 30 29 2d 31 29 3b 30 3c 3d 50 3b 50 2d 2d 29 44 5b 28 79 7c 30 29 2d 31 2d 28 50 7c 30 29 5d 3d 61 3e 3e 38 2a 50 26 32 35 35 3b 72 65 74 75 72 6e 20 44 7d 2c 57 72 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 2c 44 2c 50 2c 42 2c 70 Data Ascii: 0),W+=H,z-=H;return O(a,415,(y=R,(K\|0)+(D\|0))),y},l=function(y,a,D,P,B){B=this;try{VB(D,this,y,a,P)}catch(p){x(this,p),a(function(K){K(B.R)})}},X=function(y,a,D,P){for(P=(D=[],(y\|0)-1);0<=P;P--)D[(y\|0)-1-(P\|0)]=a>>8*P&255;return D},Wr=function(y,a,D,P,B,p
2024-04-23 07:42:57 UTC	1255	IN	Data Raw: 63 6f 6e 63 61 74 28 79 2e 73 5f 28 29 29 2c 44 29 2c 50 7d 29 5d 7d 2c 68 69 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 2c 44 2c 50 2c 42 2c 70 29 7b 66 75 6e 63 74 69 6f 6e 20 4b 28 29 7b 69 66 28 50 2e 4a 3d 3d 50 29 7b 69 66 28 50 2e 48 29 7b 76 61 72 20 52 3d 5b 62 7a 2c 44 2c 79 2c 76 6f 69 64 20 30 2c 42 2c 70 2c 61 72 67 75 6d 65 6e 74 73 5d 3b 69 66 28 32 3d 3d 61 29 76 61 72 20 62 3d 4e 28 50 2c 66 61 6c 73 65 2c 28 75 28 52 2c 50 29 2c 66 61 6c 73 65 29 29 3b 65 6c 73 65 20 69 66 28 31 3d 3d 61 29 7b 76 61 72 20 4d 3d 21 50 2e 68 2e 6c 65 6e 67 74 68 3b 28 75 28 52 2c 50 29 2c 4d 29 26 26 4e 28 50 2c 66 61 6c 73 65 2c 66 61 6c 73 65 29 7d 65 6c 73 65 20 62 3d 42 72 28 50 2c 52 29 3b 72 65 74 75 72 6e 20 62 7d 42 26 26 70 26 26 42 2e 72 65 6d 6f 76 Data Ascii: concat(y.s_()),D),P})]},hi=function(y,a,D,P,B,p){function K(){if(P.J==P){if(P.H){var R=[bz,D,y,void 0,B,p,arguments];if(2==a)var b=N(P,false,(u(R,P),false));else if(1==a){var M=!P.h.length;(u(R,P),M)&&N(P,false,false)}else b=Br(P,R);return b}B&&p&&B.remov
2024-04-23 07:42:57 UTC	1255	IN	Data Raw: 6a 3d 28 51 28 61 2c 31 35 39 2c 28 51 28 61 2c 35 30 36 2c 28 51 28 61 2c 28 51 28 61 2c 28 61 2e 56 52 3d 28 4f 28 28 4f 28 61 2c 33 30 31 2c 5b 30 2c 30 2c 28 51 28 61 2c 34 36 33 2c 28 4f 28 61 2c 28 51 28 61 2c 31 34 33 2c 28 51 28 61 2c 28 51 28 61 2c 28 51 28 61 2c 28 4f 28 61 2c 33 34 39 2c 28 28 51 28 61 2c 28 51 28 61 2c 33 34 32 2c 28 4f 28 61 2c 28 61 2e 57 59 3d 28 61 2e 4c 3d 76 6f 69 64 20 30 2c 28 61 2e 48 3d 28 61 2e 79 52 3d 30 2c 44 3d 28 61 2e 56 3d 28 61 2e 6f 31 3d 42 2c 61 2e 5a 3d 76 6f 69 64 20 30 2c 61 2e 76 3d 5b 5d 2c 61 2e 4a 33 3d 28 61 2e 41 3d 6e 75 6c 6c 2c 5b 5d 29 2c 61 2e 68 3d 5b 5d 2c 61 2e 43 3d 30 2c 28 61 2e 59 4c 3d 28 61 2e 4f 3d 5b 5d 2c 66 61 6c 73 65 29 2c 61 29 2e 49 3d 76 6f 69 64 20 30 2c 61 2e 46 3d 30 2c Data Ascii: j=(Q(a,159,(Q(a,506,(Q(a,(Q(a,(a.VR=(O((O(a,301,[0,0,(Q(a,463,(O(a,(Q(a,143,(Q(a,(Q(a,(Q(a,(O(a,349,((Q(a,(Q(a,342,(O(a,(a.WY=(a.L=void 0,(a.H=(a.yR=0,D=(a.V=(a.o1=B,a.Z=void 0,a.v=[],a.J3=(a.A=null,[]),a.h=[],a.C=0,(a.YL=(a.O=[],false),a).I=void 0,a.F=0,
2024-04-23 07:42:57 UTC	1255	IN	Data Raw: 5d 2c 62 5b 33 5d 29 3a 32 28 29 2c 4f 28 52 2c 7a 2c 62 29 29 7d 29 2c 39 34 29 2c 66 75 6e 63 74 69 6f 6e 28 52 2c 62 2c 4d 2c 7a 2c 6b 29 7b 66 6f 72 28 7a 3d 28 6b 3d 28 4d 3d 6d 28 52 29 2c 76 72 28 52 29 29 2c 62 3d 30 2c 5b 5d 29 3b 62 3c 6b 3b 62 2b 2b 29 7a 2e 70 75 73 68 28 41 28 52 29 29 3b 4f 28 52 2c 4d 2c 7a 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 52 29 7b 77 68 28 34 2c 52 29 7d 29 29 2c 39 39 29 2c 5b 5d 29 2c 66 75 6e 63 74 69 6f 6e 28 52 2c 62 2c 4d 2c 7a 2c 6b 29 7b 4f 28 52 2c 28 6b 3d 68 28 28 4d 3d 28 4d 3d 28 7a 3d 28 6b 3d 28 62 3d 6d 28 52 29 2c 6d 28 52 29 29 2c 6d 28 52 29 29 2c 6d 29 28 52 29 2c 68 28 52 2c 4d 29 29 2c 7a 3d 68 28 52 2c 7a 29 2c 52 29 2c 6b 29 2c 62 29 2c 68 69 28 7a 2c 4d 2c 6b 2c 52 29 29 7d 29 29 2c 30 29 5d Data Ascii: ],b[3]):2(),O(R,z,b))}),94),function(R,b,M,z,k){for(z=(k=(M=m(R),vr(R)),b=0,[]);b<k;b++)z.push(A(R));O(R,M,z)}),function(R){wh(4,R)})),99),[]),function(R,b,M,z,k){O(R,(k=h((M=(M=(z=(k=(b=m(R),m(R)),m(R)),m)(R),h(R,M)),z=h(R,z),R),k),b),hi(z,M,k,R))})),0)]
2024-04-23 07:42:57 UTC	1255	IN	Data Raw: 3d 28 6b 3d 28 28 6b 7c 30 29 2d 31 29 2e 74 6f 53 74 72 69 6e 67 28 32 29 2e 6c 65 6e 67 74 68 2c 5b 5d 29 2c 30 29 3b 54 3c 49 3b 54 2b 2b 29 56 5b 54 5d 7c 7c 28 4d 5b 54 5d 3d 55 28 6b 29 29 3b 66 6f 72 28 6b 3d 30 3b 6b 3c 49 3b 6b 2b 2b 29 56 5b 6b 5d 26 26 28 4d 5b 6b 5d 3d 6d 28 52 29 29 3b 66 6f 72 28 7a 3d 5b 5d 3b 62 2d 2d 3b 29 7a 2e 70 75 73 68 28 68 28 52 2c 6d 28 52 29 29 29 3b 51 28 52 2c 77 2c 66 75 6e 63 74 69 6f 6e 28 5a 2c 47 2c 59 2c 45 2c 4a 29 7b 66 6f 72 28 59 3d 28 47 3d 28 45 3d 5b 5d 2c 5b 5d 29 2c 30 29 3b 59 3c 49 3b 59 2b 2b 29 7b 69 66 28 21 28 4a 3d 4d 5b 59 5d 2c 56 5b 59 5d 29 29 7b 66 6f 72 28 3b 4a 3e 3d 45 2e 6c 65 6e 67 74 68 3b 29 45 2e 70 75 73 68 28 6d 28 5a 29 29 3b 4a 3d 45 5b 4a 5d 7d 47 2e 70 75 73 68 28 4a 29 Data Ascii: =(k=((k\|0)-1).toString(2).length,[]),0);T<I;T++)V[T]\|\|(M[T]=U(k));for(k=0;k<I;k++)V[k]&&(M[k]=m(R));for(z=[];b--;)z.push(h(R,m(R)));Q(R,w,function(Z,G,Y,E,J){for(Y=(G=(E=[],[]),0);Y<I;Y++){if(!(J=M[Y],V[Y])){for(;J>=E.length;)E.push(m(Z));J=E[J]}G.push(J)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49803	104.22.58.91	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:57 UTC	591	OUT	GET /client_data/3155f51cab94cfafe4b265a7/gZm2ypof.json HTTP/1.1 Host: cdn-cookieyes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.bodis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.bodis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:57 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:57 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 17 Apr 2024 21:35:02 GMT etag: W/"3a-61651a093ffee" access-control-allow-origin: * access-control-allow-methods: GET, OPTIONS Cache-Control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate CF-Cache-Status: HIT Age: 466864 Server: cloudflare CF-RAY: 878c384aa96844ea-ATL
2024-04-23 07:42:57 UTC	64	IN	Data Raw: 33 61 0d 0a 5b 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 36 39 35 33 38 39 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 45 55 27 22 7d 5d 0d 0a Data Ascii: 3a[{"targetBanner":695389,"condition":"regionName IS 'EU'"}]
2024-04-23 07:42:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49805	172.253.124.94	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:57 UTC	794	OUT	GET /recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfzTxMTAAAAAAHIvRILb-jIu7t-RzWErSMfee74 HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.bodis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:57 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 23 Apr 2024 07:42:57 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-eavwpl6iU-XXbNJ6kiNDQA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-23 07:42:57 UTC	364	IN	Data Raw: 31 64 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-23 07:42:57 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-23 07:42:57 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-23 07:42:57 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-23 07:42:57 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-23 07:42:57 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-23 07:42:57 UTC	813	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 65 61 76 77 70 6c 36 69 55 2d 58 58 62 4e 4a 36 6b 69 4e 44 51 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 61 70 74 63 68 61 Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="eavwpl6iU-XXbNJ6kiNDQA" type="text/javascript">window['__recaptcha_api'] = 'https://www.recaptcha
2024-04-23 07:42:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49804	199.59.243.50	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:57 UTC	1572	OUT	GET /favicon-32x32.png HTTP/1.1 Host: www.bodis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bodis.com/takedown-request Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookieyes-consent=consentid:cm56eWZ2UzdsNE51b3dzbFh0Qk1HY1hzOURESVVxUWk,consent:,action:,necessary:,functional:,analytics:,performance:,advertisement:,other:; _ga_L32F1DFB3K=GS1.1.1713858172.1.0.1713858172.60.0.0; _ga=GA1.1.1379586991.1713858172; XSRF-TOKEN=eyJpdiI6IjJ4YTg1aGVzeXpMMnMzeHgxTi9mNlE9PSIsInZhbHVlIjoiRkFPZW1LdUpyQ2NHMnRzVllhOHdUY1NXbEU0WmlGSEs5Y1pOWWZlQzRNaUgyWWdBc2V0YS9WRnZUSnVZQi8rUDFGd3E0RDdmTW9mMEFoU2trV2h0cTRPMlpNRXg2aExMYjNlYmlEM0pqMFdsK09rRmVkVTFLQWdIajdvc25SSGgiLCJtYWMiOiI5OTY4ZDM0MTY1Njk2YjUxOTgzMTMyNmI0YTRmNWM2Nzc0Njk1ZTNlNWEzMDE1YjQxYzJkMmRiMzBkOTdjNGU3IiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IlVEckRGSEd0Tk9lNTZHUXZPRjZtZ0E9PSIsInZhbHVlIjoiYWVmdk1Ybjl1cStBV2NsVEpjWmtwMlU4OE4yWktPdnVjcmhTQmU3OEh5SjhyZWIzRUxvUzBuZEpHVnZWa1RpY3Q2a3YwWkplN29kZWk1cXVuSDdDaCtKM3FIL1ZOUHJjV0VkVUpxMWpsZjJFRFN5NkZKOUpPRGRGdzh6R1UrTlkiLCJtYWMiOiI0Mzk3YmRjZmQ5ZmJjZDE1ODA0MTY4NjgzNzNkNjQ5Mzc3NmFlZDY1OTQzMTgyNGNiMzgyY2NlMGYzNzA5MDc2IiwidGFnIjoiIn0%3D
2024-04-23 07:42:57 UTC	225	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:57 GMT Content-Type: image/png Content-Length: 171 Connection: close Server: nginx Last-Modified: Tue, 18 Jul 2023 14:57:39 GMT ETag: "64b6a863-ab" Accept-Ranges: bytes
2024-04-23 07:42:57 UTC	171	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 4d 49 44 41 54 78 da 62 60 18 05 23 1d 30 c2 18 52 99 53 fe d3 d3 e2 67 d3 73 c0 76 33 0d 74 08 8c 3a 60 d4 01 a3 0e 18 75 c0 28 18 05 8c a4 6a 70 dd f9 92 2a b5 e6 6e 77 f1 d1 da 70 d4 01 a3 0e 18 75 c0 68 6d 38 0a 06 07 00 08 30 00 da b7 08 27 a3 a1 be f3 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR szztEXtSoftwareAdobe ImageReadyqe<MIDATxb`#0RSgsv3t:`u(jp*nwpuhm80'IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49807	104.22.58.91	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:58 UTC	391	OUT	GET /client_data/3155f51cab94cfafe4b265a7/gZm2ypof.json HTTP/1.1 Host: cdn-cookieyes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:58 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 17 Apr 2024 21:35:02 GMT etag: W/"3a-61651a093ffee" access-control-allow-origin: * access-control-allow-methods: GET, OPTIONS Cache-Control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate CF-Cache-Status: HIT Age: 11755 Server: cloudflare CF-RAY: 878c384e5ec66772-ATL
2024-04-23 07:42:58 UTC	64	IN	Data Raw: 33 61 0d 0a 5b 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 36 39 35 33 38 39 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 45 55 27 22 7d 5d 0d 0a Data Ascii: 3a[{"targetBanner":695389,"condition":"regionName IS 'EU'"}]
2024-04-23 07:42:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49808	199.59.243.50	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:58 UTC	1322	OUT	GET /favicon-32x32.png HTTP/1.1 Host: www.bodis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookieyes-consent=consentid:cm56eWZ2UzdsNE51b3dzbFh0Qk1HY1hzOURESVVxUWk,consent:,action:,necessary:,functional:,analytics:,performance:,advertisement:,other:; _ga_L32F1DFB3K=GS1.1.1713858172.1.0.1713858172.60.0.0; _ga=GA1.1.1379586991.1713858172; XSRF-TOKEN=eyJpdiI6IjJ4YTg1aGVzeXpMMnMzeHgxTi9mNlE9PSIsInZhbHVlIjoiRkFPZW1LdUpyQ2NHMnRzVllhOHdUY1NXbEU0WmlGSEs5Y1pOWWZlQzRNaUgyWWdBc2V0YS9WRnZUSnVZQi8rUDFGd3E0RDdmTW9mMEFoU2trV2h0cTRPMlpNRXg2aExMYjNlYmlEM0pqMFdsK09rRmVkVTFLQWdIajdvc25SSGgiLCJtYWMiOiI5OTY4ZDM0MTY1Njk2YjUxOTgzMTMyNmI0YTRmNWM2Nzc0Njk1ZTNlNWEzMDE1YjQxYzJkMmRiMzBkOTdjNGU3IiwidGFnIjoiIn0%3D; bodis_session=eyJpdiI6IlVEckRGSEd0Tk9lNTZHUXZPRjZtZ0E9PSIsInZhbHVlIjoiYWVmdk1Ybjl1cStBV2NsVEpjWmtwMlU4OE4yWktPdnVjcmhTQmU3OEh5SjhyZWIzRUxvUzBuZEpHVnZWa1RpY3Q2a3YwWkplN29kZWk1cXVuSDdDaCtKM3FIL1ZOUHJjV0VkVUpxMWpsZjJFRFN5NkZKOUpPRGRGdzh6R1UrTlkiLCJtYWMiOiI0Mzk3YmRjZmQ5ZmJjZDE1ODA0MTY4NjgzNzNkNjQ5Mzc3NmFlZDY1OTQzMTgyNGNiMzgyY2NlMGYzNzA5MDc2IiwidGFnIjoiIn0%3D
2024-04-23 07:42:58 UTC	225	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:58 GMT Content-Type: image/png Content-Length: 171 Connection: close Server: nginx Last-Modified: Tue, 18 Jul 2023 14:57:39 GMT ETag: "64b6a863-ab" Accept-Ranges: bytes
2024-04-23 07:42:58 UTC	171	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 4d 49 44 41 54 78 da 62 60 18 05 23 1d 30 c2 18 52 99 53 fe d3 d3 e2 67 d3 73 c0 76 33 0d 74 08 8c 3a 60 d4 01 a3 0e 18 75 c0 28 18 05 8c a4 6a 70 dd f9 92 2a b5 e6 6e 77 f1 d1 da 70 d4 01 a3 0e 18 75 c0 68 6d 38 0a 06 07 00 08 30 00 da b7 08 27 a3 a1 be f3 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR szztEXtSoftwareAdobe ImageReadyqe<MIDATxb`#0RSgsv3t:`u(jp*nwpuhm80'IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49806	52.209.139.15	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:58 UTC	556	OUT	GET /api/v1/ip HTTP/1.1 Host: directory.cookieyes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.bodis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.bodis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:58 UTC	233	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:58 GMT Content-Type: text/html; charset=utf-8 Content-Length: 119 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"77-vFhCP4jLghtKsTtVtzLeq43kw90"
2024-04-23 07:42:58 UTC	119	IN	Data Raw: 7b 22 69 70 22 3a 22 38 39 2e 31 38 37 2e 31 37 31 2e 31 33 32 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 72 65 67 69 6f 6e 5f 63 6f 64 65 22 3a 22 47 41 22 2c 22 69 6e 5f 65 75 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"ip":"89.187.171.132","country":"US","country_name":"United States","region_code":"GA","in_eu":false,"continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49810	104.22.58.91	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:58 UTC	603	OUT	GET /client_data/3155f51cab94cfafe4b265a7/audit-table/jYoNmHK1.json HTTP/1.1 Host: cdn-cookieyes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.bodis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.bodis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:59 UTC	473	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:59 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 17 Apr 2024 21:35:02 GMT etag: W/"1590-61651a093ffee" access-control-allow-origin: * access-control-allow-methods: GET, OPTIONS Cache-Control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate CF-Cache-Status: HIT Age: 466861 Server: cloudflare CF-RAY: 878c3853cd9e6742-ATL
2024-04-23 07:42:59 UTC	896	IN	Data Raw: 31 35 39 30 0d 0a 7b 22 63 6f 6f 6b 69 65 73 22 3a 7b 22 58 53 52 46 2d 54 4f 4b 45 4e 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 58 53 52 46 2d 54 4f 4b 45 4e 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 32 20 68 6f 75 72 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 57 69 78 20 73 65 74 20 74 68 69 73 20 63 6f 6f 6b 69 65 20 66 6f 72 20 73 65 63 75 72 69 74 79 20 70 75 72 70 6f 73 65 73 2e 22 7d 2c 22 5f 67 61 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 5f 67 61 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 31 20 79 65 61 72 20 31 20 6d 6f 6e 74 68 20 34 20 64 61 79 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 73 65 74 73 20 74 68 69 73 20 63 6f 6f 6b 69 65 20 74 6f 20 63 61 6c 63 75 Data Ascii: 1590{"cookies":{"XSRF-TOKEN":{"cookie_id":"XSRF-TOKEN","duration":"2 hours","description":"Wix set this cookie for security purposes."},"_ga":{"cookie_id":"_ga","duration":"1 year 1 month 4 days","description":"Google Analytics sets this cookie to calcu
2024-04-23 07:42:59 UTC	1369	IN	Data Raw: 74 73 20 74 68 69 73 20 63 6f 6f 6b 69 65 20 74 6f 20 73 74 6f 72 65 20 61 20 75 6e 69 71 75 65 20 75 73 65 72 20 49 44 2e 22 7d 2c 22 5f 67 63 6c 5f 61 75 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 5f 67 63 6c 5f 61 75 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 33 20 6d 6f 6e 74 68 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 73 65 74 73 20 74 68 65 20 63 6f 6f 6b 69 65 20 74 6f 20 65 78 70 65 72 69 6d 65 6e 74 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 65 66 66 69 63 69 65 6e 63 79 20 6f 66 20 77 65 62 73 69 74 65 73 20 75 73 69 6e 67 20 74 68 65 69 72 20 73 65 72 76 69 63 65 73 2e 22 7d 2c 22 43 4f 4e 53 45 4e 54 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 43 4f 4e 53 45 4e 54 Data Ascii: ts this cookie to store a unique user ID."},"_gcl_au":{"cookie_id":"_gcl_au","duration":"3 months","description":"Google Tag Manager sets the cookie to experiment advertisement efficiency of websites using their services."},"CONSENT":{"cookie_id":"CONSENT
2024-04-23 07:42:59 UTC	1369	IN	Data Raw: 72 27 73 20 76 69 64 65 6f 20 70 72 65 66 65 72 65 6e 63 65 73 20 75 73 69 6e 67 20 65 6d 62 65 64 64 65 64 20 59 6f 75 54 75 62 65 20 76 69 64 65 6f 73 2e 22 7d 2c 22 62 6f 64 69 73 5f 73 65 73 73 69 6f 6e 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 62 6f 64 69 73 5f 73 65 73 73 69 6f 6e 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 32 20 68 6f 75 72 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 65 73 63 72 69 70 74 69 6f 6e 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 2e 22 7d 2c 22 66 62 5f 73 65 73 73 69 6f 6e 74 72 61 66 66 69 63 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 66 62 5f 73 65 73 73 69 6f 6e 74 72 61 66 66 69 63 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 32 30 20 6d 69 6e 75 74 65 73 22 2c Data Ascii: r's video preferences using embedded YouTube videos."},"bodis_session":{"cookie_id":"bodis_session","duration":"2 hours","description":"Description is currently not available."},"fb_sessiontraffic":{"cookie_id":"fb_sessiontraffic","duration":"20 minutes",
2024-04-23 07:42:59 UTC	1369	IN	Data Raw: 65 73 73 69 6f 6e 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 31 35 20 6d 69 6e 75 74 65 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 65 73 63 72 69 70 74 69 6f 6e 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 2e 22 7d 7d 2c 22 63 6b 79 5f 61 75 64 69 74 5f 74 61 62 6c 65 5f 65 6d 70 74 79 5f 74 65 78 74 22 3a 22 4e 6f 20 63 6f 6f 6b 69 65 73 20 74 6f 20 64 69 73 70 6c 61 79 2e 22 2c 22 63 6b 79 5f 61 75 64 69 74 5f 74 61 62 6c 65 5f 68 65 61 64 65 72 5f 69 64 22 3a 22 43 6f 6f 6b 69 65 22 2c 22 63 6b 79 5f 61 75 64 69 74 5f 74 61 62 6c 65 5f 68 65 61 64 65 72 5f 64 75 72 61 74 69 6f 6e 22 3a 22 44 75 72 61 74 69 6f 6e 22 2c 22 63 6b 79 5f 61 75 64 69 74 5f 74 61 62 6c 65 5f 68 65 61 64 65 72 5f 64 65 73 63 72 Data Ascii: ession","duration":"15 minutes","description":"Description is currently not available."}},"cky_audit_table_empty_text":"No cookies to display.","cky_audit_table_header_id":"Cookie","cky_audit_table_header_duration":"Duration","cky_audit_table_header_descr
2024-04-23 07:42:59 UTC	525	IN	Data Raw: 72 20 65 78 70 65 72 69 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 73 69 74 6f 72 73 2e 3c 2f 70 3e 22 2c 22 63 6b 79 5f 70 72 65 66 65 72 65 6e 63 65 5f 61 64 76 65 72 74 69 73 65 6d 65 6e 74 5f 74 69 74 6c 65 22 3a 22 41 64 76 65 72 74 69 73 65 6d 65 6e 74 22 2c 22 63 6b 79 5f 70 72 65 66 65 72 65 6e 63 65 5f 61 64 76 65 72 74 69 73 65 6d 65 6e 74 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 3c 70 3e 41 64 76 65 72 74 69 73 65 6d 65 6e 74 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 70 72 6f 76 69 64 65 20 76 69 73 69 74 6f 72 73 20 77 69 74 68 20 63 75 73 74 6f 6d 69 7a 65 64 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 70 61 67 65 73 20 79 6f 75 20 76 69 73 69 74 65 64 20 70 72 65 76 69 6f Data Ascii: r experience for the visitors.</p>","cky_preference_advertisement_title":"Advertisement","cky_preference_advertisement_description":"<p>Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previo
2024-04-23 07:42:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49811	52.209.139.15	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:59 UTC	356	OUT	GET /api/v1/ip HTTP/1.1 Host: directory.cookieyes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:59 UTC	233	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:59 GMT Content-Type: text/html; charset=utf-8 Content-Length: 119 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"77-vFhCP4jLghtKsTtVtzLeq43kw90"
2024-04-23 07:42:59 UTC	119	IN	Data Raw: 7b 22 69 70 22 3a 22 38 39 2e 31 38 37 2e 31 37 31 2e 31 33 32 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 72 65 67 69 6f 6e 5f 63 6f 64 65 22 3a 22 47 41 22 2c 22 69 6e 5f 65 75 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"ip":"89.187.171.132","country":"US","country_name":"United States","region_code":"GA","in_eu":false,"continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49813	104.22.58.91	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:59 UTC	403	OUT	GET /client_data/3155f51cab94cfafe4b265a7/audit-table/jYoNmHK1.json HTTP/1.1 Host: cdn-cookieyes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:59 UTC	472	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:42:59 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 17 Apr 2024 21:35:02 GMT etag: W/"1590-61651a093ffee" access-control-allow-origin: * access-control-allow-methods: GET, OPTIONS Cache-Control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate CF-Cache-Status: HIT Age: 11753 Server: cloudflare CF-RAY: 878c38570a554569-ATL
2024-04-23 07:42:59 UTC	897	IN	Data Raw: 31 35 39 30 0d 0a 7b 22 63 6f 6f 6b 69 65 73 22 3a 7b 22 58 53 52 46 2d 54 4f 4b 45 4e 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 58 53 52 46 2d 54 4f 4b 45 4e 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 32 20 68 6f 75 72 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 57 69 78 20 73 65 74 20 74 68 69 73 20 63 6f 6f 6b 69 65 20 66 6f 72 20 73 65 63 75 72 69 74 79 20 70 75 72 70 6f 73 65 73 2e 22 7d 2c 22 5f 67 61 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 5f 67 61 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 31 20 79 65 61 72 20 31 20 6d 6f 6e 74 68 20 34 20 64 61 79 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 73 65 74 73 20 74 68 69 73 20 63 6f 6f 6b 69 65 20 74 6f 20 63 61 6c 63 75 Data Ascii: 1590{"cookies":{"XSRF-TOKEN":{"cookie_id":"XSRF-TOKEN","duration":"2 hours","description":"Wix set this cookie for security purposes."},"_ga":{"cookie_id":"_ga","duration":"1 year 1 month 4 days","description":"Google Analytics sets this cookie to calcu
2024-04-23 07:42:59 UTC	1369	IN	Data Raw: 73 20 74 68 69 73 20 63 6f 6f 6b 69 65 20 74 6f 20 73 74 6f 72 65 20 61 20 75 6e 69 71 75 65 20 75 73 65 72 20 49 44 2e 22 7d 2c 22 5f 67 63 6c 5f 61 75 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 5f 67 63 6c 5f 61 75 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 33 20 6d 6f 6e 74 68 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 73 65 74 73 20 74 68 65 20 63 6f 6f 6b 69 65 20 74 6f 20 65 78 70 65 72 69 6d 65 6e 74 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 65 66 66 69 63 69 65 6e 63 79 20 6f 66 20 77 65 62 73 69 74 65 73 20 75 73 69 6e 67 20 74 68 65 69 72 20 73 65 72 76 69 63 65 73 2e 22 7d 2c 22 43 4f 4e 53 45 4e 54 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 43 4f 4e 53 45 4e 54 22 Data Ascii: s this cookie to store a unique user ID."},"_gcl_au":{"cookie_id":"_gcl_au","duration":"3 months","description":"Google Tag Manager sets the cookie to experiment advertisement efficiency of websites using their services."},"CONSENT":{"cookie_id":"CONSENT"
2024-04-23 07:42:59 UTC	1369	IN	Data Raw: 27 73 20 76 69 64 65 6f 20 70 72 65 66 65 72 65 6e 63 65 73 20 75 73 69 6e 67 20 65 6d 62 65 64 64 65 64 20 59 6f 75 54 75 62 65 20 76 69 64 65 6f 73 2e 22 7d 2c 22 62 6f 64 69 73 5f 73 65 73 73 69 6f 6e 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 62 6f 64 69 73 5f 73 65 73 73 69 6f 6e 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 32 20 68 6f 75 72 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 65 73 63 72 69 70 74 69 6f 6e 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 2e 22 7d 2c 22 66 62 5f 73 65 73 73 69 6f 6e 74 72 61 66 66 69 63 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 66 62 5f 73 65 73 73 69 6f 6e 74 72 61 66 66 69 63 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 32 30 20 6d 69 6e 75 74 65 73 22 2c 22 Data Ascii: 's video preferences using embedded YouTube videos."},"bodis_session":{"cookie_id":"bodis_session","duration":"2 hours","description":"Description is currently not available."},"fb_sessiontraffic":{"cookie_id":"fb_sessiontraffic","duration":"20 minutes","
2024-04-23 07:42:59 UTC	1369	IN	Data Raw: 73 73 69 6f 6e 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 31 35 20 6d 69 6e 75 74 65 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 65 73 63 72 69 70 74 69 6f 6e 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 2e 22 7d 7d 2c 22 63 6b 79 5f 61 75 64 69 74 5f 74 61 62 6c 65 5f 65 6d 70 74 79 5f 74 65 78 74 22 3a 22 4e 6f 20 63 6f 6f 6b 69 65 73 20 74 6f 20 64 69 73 70 6c 61 79 2e 22 2c 22 63 6b 79 5f 61 75 64 69 74 5f 74 61 62 6c 65 5f 68 65 61 64 65 72 5f 69 64 22 3a 22 43 6f 6f 6b 69 65 22 2c 22 63 6b 79 5f 61 75 64 69 74 5f 74 61 62 6c 65 5f 68 65 61 64 65 72 5f 64 75 72 61 74 69 6f 6e 22 3a 22 44 75 72 61 74 69 6f 6e 22 2c 22 63 6b 79 5f 61 75 64 69 74 5f 74 61 62 6c 65 5f 68 65 61 64 65 72 5f 64 65 73 63 72 69 Data Ascii: ssion","duration":"15 minutes","description":"Description is currently not available."}},"cky_audit_table_empty_text":"No cookies to display.","cky_audit_table_header_id":"Cookie","cky_audit_table_header_duration":"Duration","cky_audit_table_header_descri
2024-04-23 07:42:59 UTC	524	IN	Data Raw: 20 65 78 70 65 72 69 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 73 69 74 6f 72 73 2e 3c 2f 70 3e 22 2c 22 63 6b 79 5f 70 72 65 66 65 72 65 6e 63 65 5f 61 64 76 65 72 74 69 73 65 6d 65 6e 74 5f 74 69 74 6c 65 22 3a 22 41 64 76 65 72 74 69 73 65 6d 65 6e 74 22 2c 22 63 6b 79 5f 70 72 65 66 65 72 65 6e 63 65 5f 61 64 76 65 72 74 69 73 65 6d 65 6e 74 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 3c 70 3e 41 64 76 65 72 74 69 73 65 6d 65 6e 74 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 70 72 6f 76 69 64 65 20 76 69 73 69 74 6f 72 73 20 77 69 74 68 20 63 75 73 74 6f 6d 69 7a 65 64 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 70 61 67 65 73 20 79 6f 75 20 76 69 73 69 74 65 64 20 70 72 65 76 69 6f 75 Data Ascii: experience for the visitors.</p>","cky_preference_advertisement_title":"Advertisement","cky_preference_advertisement_description":"<p>Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previou
2024-04-23 07:42:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49812	52.209.139.15	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:42:59 UTC	660	OUT	POST /api/v1/log HTTP/1.1 Host: log.cookieyes.com Connection: keep-alive Content-Length: 556 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryA0OdiBMPY7iyQJfI Accept: / Origin: https://www.bodis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.bodis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 07:42:59 UTC	556	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 30 4f 64 69 42 4d 50 59 37 69 79 51 4a 66 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6b 65 79 22 0d 0a 0d 0a 33 31 35 35 66 35 31 63 61 62 39 34 63 66 61 66 65 34 62 32 36 35 61 37 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 30 4f 64 69 42 4d 50 59 37 69 79 51 4a 66 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 72 65 71 75 65 73 74 5f 74 79 70 65 22 0d 0a 0d 0a 62 61 6e 6e 65 72 5f 68 69 64 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 30 4f 64 69 42 4d Data Ascii: ------WebKitFormBoundaryA0OdiBMPY7iyQJfIContent-Disposition: form-data; name="key"3155f51cab94cfafe4b265a7------WebKitFormBoundaryA0OdiBMPY7iyQJfIContent-Disposition: form-data; name="request_type"banner_hide------WebKitFormBoundaryA0OdiBM
2024-04-23 07:43:00 UTC	231	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 07:43:00 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
2024-04-23 07:43:00 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49814	172.67.28.250	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:43:00 UTC	521	OUT	GET /app/?EIO=3&transport=websocket HTTP/1.1 Host: ws.reamaze.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.bodis.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: fuTMJHA487kH4drMJvnxPw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-23 07:43:00 UTC	259	IN	HTTP/1.1 101 Switching Protocols Date: Tue, 23 Apr 2024 07:43:00 GMT Connection: upgrade Upgrade: websocket Sec-WebSocket-Accept: rV8xTKBLh69w/Gq313nTl9TM6FQ= uWebSockets: 18 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 878c385a6e3153da-ATL
2024-04-23 07:43:00 UTC	91	IN	Data Raw: 81 55 30 7b 22 73 69 64 22 3a 22 59 77 6c 6b 41 66 54 59 4b 65 49 31 79 46 5f 63 41 73 39 49 22 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 35 30 30 30 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 5d 7d 81 02 34 30 Data Ascii: U0{"sid":"YwlkAfTYKeI1yF_cAs9I","pingInterval":25000,"pingTimeout":5000,"upgrades":[]}40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49816	172.67.28.250	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:43:05 UTC	521	OUT	GET /app/?EIO=3&transport=websocket HTTP/1.1 Host: ws.reamaze.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.bodis.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: RdbYPB6O+YLTC1YuIxJkOA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-23 07:43:05 UTC	259	IN	HTTP/1.1 101 Switching Protocols Date: Tue, 23 Apr 2024 07:43:05 GMT Connection: upgrade Upgrade: websocket Sec-WebSocket-Accept: NaI28rRm5GE/9fYnY1DUWzaMM9w= uWebSockets: 18 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 878c387cfbf3674b-ATL
2024-04-23 07:43:05 UTC	91	IN	Data Raw: 81 55 30 7b 22 73 69 64 22 3a 22 73 4d 63 6b 49 79 33 48 5f 48 5f 35 4f 4d 41 52 41 73 6a 6f 22 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 35 30 30 30 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 5d 7d 81 02 34 30 Data Ascii: U0{"sid":"sMckIy3H_H_5OMARAsjo","pingInterval":25000,"pingTimeout":5000,"upgrades":[]}40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49819	172.67.28.250	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 07:43:11 UTC	521	OUT	GET /app/?EIO=3&transport=websocket HTTP/1.1 Host: ws.reamaze.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.bodis.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: qnwR31AaRQBEwNBX7dMnMw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-23 07:43:12 UTC	259	IN	HTTP/1.1 101 Switching Protocols Date: Tue, 23 Apr 2024 07:43:11 GMT Connection: upgrade Upgrade: websocket Sec-WebSocket-Accept: dMUiyCcgVOT6jikBjPrRZ5XjfVg= uWebSockets: 18 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 878c38a38d1cad8f-ATL
2024-04-23 07:43:12 UTC	91	IN	Data Raw: 81 55 30 7b 22 73 69 64 22 3a 22 4f 6c 39 4c 35 74 79 51 78 42 56 61 44 6e 56 41 41 75 74 5f 22 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 35 30 30 30 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 5d 7d 81 02 34 30 Data Ascii: U0{"sid":"Ol9L5tyQxBVaDnVAAut_","pingInterval":25000,"pingTimeout":5000,"upgrades":[]}40

Target ID:	0
Start time:	09:41:54
Start date:	23/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	09:41:57
Start date:	23/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2272,i,11281871909517473848,17655367729308081419,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:42:02
Start date:	23/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://icartservice.com"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.bodis.com/takedown-request	HTTP Parser: Iframe src: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LfzTxMTAAAAAAHIvRILb-jIu7t-RzWErSMfee74&co=aHR0cHM6Ly93d3cuYm9kaXMuY29tOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&cb=c5eivrwj482n
Source: https://www.bodis.com/takedown-request	HTTP Parser: Iframe src: https://www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfzTxMTAAAAAAHIvRILb-jIu7t-RzWErSMfee74

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://icartservice.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Windows Analysis Report
http://icartservice.com