Edit tour

Windows Analysis Report
DNCREGCONF.pdf

Overview

General Information

Sample name:	DNCREGCONF.pdf
Analysis ID:	1430581
MD5:	4a6d9fb8596f837cb35ed914327738c4
SHA1:	4190bfda8800e53bef0bc9c5a03f3d8dfa7820bc
SHA256:	9ecb8f7f10a9126329195e55192126f20cab5beeafbd29d046beadca721c7ee0
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body with high number of embedded SVGs detected

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 6816 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\DNCREGCONF.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 7120 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7212 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2088 --field-trial-handle=1552,i,16758632931669318689,2895981579886307693,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 7272 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://www.donotcall.gov/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7808 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1996,i,8102230674122585108,12077789046849465771,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.ftc.gov/	HTTP Parser: Total embedded SVG size: 895104
Source: https://www.ftc.gov/es	HTTP Parser: Total embedded SVG size: 856879
Source: https://www.ftc.gov/#main-content	HTTP Parser: Total embedded SVG size: 895104

Source: unknown	HTTPS traffic detected: 23.36.68.63:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.36.68.63:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:49988 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 172.67.39.148 172.67.39.148
Source: Joe Sandbox View	IP Address: 104.22.71.197 104.22.71.197
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 151.101.14.109 151.101.14.109

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.42.0
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.42.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=LLG371WrZXc8zOU&MD=REaeMeof HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Universal-Federated-Analytics-Min.js?agency=FTC&pua=UA-36365578-3 HTTP/1.1Host: dap.digitalgov.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/styles.css HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/masthead.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/FTC_DNC_masthead.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/gafourprod.js HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/lib/jquery-3.5.0.js HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/background-s.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.donotcall.gov/css/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/mobile_dnc_masthead_sm_3.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/btn_enespanol.png HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/lib/CLDRPluralRuleParser/CLDRPluralRuleParser.js HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/lib/jquery.i18n/jquery.i18n.js HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/FTC_DNC_masthead.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/masthead.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/lib/jquery.i18n/jquery.i18n.messagestore.js HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/lib/jquery.i18n/jquery.i18n.fallbacks.js HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904326.0.0.0; _ga=GA1.1.1560218031.1713904326
Source: global traffic	HTTP traffic detected: GET /images/mobile_dnc_masthead_sm_3.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904326.0.0.0; _ga=GA1.1.1560218031.1713904326
Source: global traffic	HTTP traffic detected: GET /js/lib/jquery.i18n/jquery.i18n.language.js HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904326.0.0.0; _ga=GA1.1.1560218031.1713904326
Source: global traffic	HTTP traffic detected: GET /js/lib/jquery.i18n/jquery.i18n.parser.js HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904326.0.0.0; _ga=GA1.1.1560218031.1713904326
Source: global traffic	HTTP traffic detected: GET /images/btn_enespanol.png HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904326.0.0.0; _ga=GA1.1.1560218031.1713904326
Source: global traffic	HTTP traffic detected: GET /js/lib/jquery.i18n/jquery.i18n.emitter.js HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904326.0.0.0; _ga=GA1.2.1560218031.1713904326; _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1
Source: global traffic	HTTP traffic detected: GET /js/lib/jquery.i18n/jquery.i18n.emitter.bidi.js HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904326.0.0.0; _ga=GA1.2.1560218031.1713904326; _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1
Source: global traffic	HTTP traffic detected: GET /images/background-s.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /js/menu.js HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /js/global.js HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/foooter_background_gr.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.donotcall.gov/css/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /js/i18n/en-US.json HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /js/i18n/es-MX.json HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/foooter_background_gr.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon-32x32.png HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/favicon-32x32.png HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /js/i18n/en-US.json HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/DNC-masthead.svg HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /js/i18n/es-MX.json HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/FTC_DNC_main1_2_verify.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/FTC_DNC_main1_3_submit.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/FTC_DNC_main1_1_register.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/submit_gr_sm.gif HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/verify_bl_sm.gif HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/register_or_sm.gif HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/submit_gr_sm.gif HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/verify_bl_sm.gif HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/FTC_DNC_main1_3_submit.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/FTC_DNC_main1_2_verify.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/FTC_DNC_main1_1_register.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/DNC-masthead.svg HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/register_or_sm.gif HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /menu/page.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Universal-Federated-Analytics-Min.js?agency=FTC HTTP/1.1Host: dap.digitalgov.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /menu/modules/core.BRQnzO8v.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.ftc.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /menu/sm.25.html HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javascripts/remote.loader.js HTTP/1.1Host: search.usa.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ga/98318866.js HTTP/1.1Host: extend.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/sayt_loader.js HTTP/1.1Host: search.usa.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/sayt.css HTTP/1.1Host: search.usa.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/sayt_loader_libs.js HTTP/1.1Host: search.usa.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Universal-Federated-Analytics-Min.js?agency=FTC HTTP/1.1Host: dap.digitalgov.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "26433217e805a89cf41adac58221316e"If-Modified-Since: Thu, 18 Apr 2024 15:08:41 GMT
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=LLG371WrZXc8zOU&MD=REaeMeof HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ga/98318866.js HTTP/1.1Host: extend.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "421e-61630054652c0"If-Modified-Since: Tue, 16 Apr 2024 05:29:23 GMT
Source: global traffic	HTTP traffic detected: GET /faq.html HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /css/faq.css HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.donotcall.gov/faq.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/Header_generic_moreinfo.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.donotcall.gov/faq.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904361.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904361.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/Header_generic_moreinfo.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904361.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904361.0.0.0
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904361.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904361.0.0.0
Source: global traffic	HTTP traffic detected: GET /ga/98318866.js HTTP/1.1Host: extend.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "421e-61630054652c0"If-Modified-Since: Tue, 16 Apr 2024 05:29:23 GMT
Source: global traffic	HTTP traffic detected: GET /ga/98318866.js HTTP/1.1Host: extend.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "421e-61630054652c0"If-Modified-Since: Tue, 16 Apr 2024 05:29:23 GMT
Source: global traffic	HTTP traffic detected: GET /report.html HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904385.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904385.0.0.0
Source: global traffic	HTTP traffic detected: GET /css/report.css HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.donotcall.gov/report.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904385.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904385.0.0.0
Source: global traffic	HTTP traffic detected: GET /css/jquery-ui.css HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.donotcall.gov/report.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904385.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904385.0.0.0
Source: global traffic	HTTP traffic detected: GET /js/report.js HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.donotcall.gov/report.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904385.0.0.0; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904387.0.0.0
Source: global traffic	HTTP traffic detected: GET /js/json/areaCodeStateMappings.json HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.donotcall.gov/report.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904387.0.0.0; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904388.0.0.0
Source: global traffic	HTTP traffic detected: GET /js/json/canadianAreaCodes.json HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.donotcall.gov/report.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904387.0.0.0; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904388.0.0.0
Source: global traffic	HTTP traffic detected: GET /js/lib/jquery-ui.js HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.donotcall.gov/report.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904385.0.0.0; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904387.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/FTC_subpg_header3_submit.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.donotcall.gov/report.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904387.0.0.0; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904388.0.0.0
Source: global traffic	HTTP traffic detected: GET /js/json/areaCodeStateMappings.json HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904387.0.0.0; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904388.0.0.0
Source: global traffic	HTTP traffic detected: GET /js/json/canadianAreaCodes.json HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904387.0.0.0; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904388.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/FTC_subpg_header3_submit.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904387.0.0.0; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904388.0.0.0
Source: global traffic	HTTP traffic detected: GET /verify.html HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904387.0.0.0; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904388.0.0.0
Source: global traffic	HTTP traffic detected: GET /css/verify.css HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.donotcall.gov/verify.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904387.0.0.0; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904388.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/FTC_subpg_header2_ismyphone.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.donotcall.gov/verify.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904391.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904391.0.0.0
Source: global traffic	HTTP traffic detected: GET /js/verify.js HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.donotcall.gov/verify.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904388.0.0.0; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904391.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/FTC_subpg_header2_ismyphone.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904391.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904391.0.0.0
Source: global traffic	HTTP traffic detected: GET /partials/verify/step1.html HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.donotcall.gov/verify.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904391.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904391.0.0.0
Source: global traffic	HTTP traffic detected: GET /partials/verify/step1.html HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904391.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904391.0.0.0
Source: global traffic	HTTP traffic detected: GET /register.html HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904391.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904391.0.0.0
Source: global traffic	HTTP traffic detected: GET /css/register.css HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.donotcall.gov/register.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904391.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904391.0.0.0
Source: global traffic	HTTP traffic detected: GET /js/register.js HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.donotcall.gov/register.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904391.0.0.0; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904395.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/FTC_subpg_header1_register.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.donotcall.gov/register.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904395.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904396.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/FTC_subpg_header1_register.jpg HTTP/1.1Host: www.donotcall.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904395.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904396.0.0.0
Source: global traffic	HTTP traffic detected: GET /ga/98318866.js HTTP/1.1Host: extend.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "421e-61630054652c0"If-Modified-Since: Tue, 16 Apr 2024 05:29:23 GMT
Source: global traffic	HTTP traffic detected: GET /ga/98318866.js HTTP/1.1Host: extend.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "421e-61630054652c0"If-Modified-Since: Tue, 16 Apr 2024 05:29:23 GMT
Source: global traffic	HTTP traffic detected: GET /ga/98318866.js HTTP/1.1Host: extend.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "421e-61630054652c0"If-Modified-Since: Tue, 16 Apr 2024 05:29:23 GMT
Source: global traffic	HTTP traffic detected: GET /ga/98318866.js HTTP/1.1Host: extend.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "421e-61630054652c0"If-Modified-Since: Tue, 16 Apr 2024 05:29:23 GMT
Source: global traffic	HTTP traffic detected: GET /ga/98318866.js HTTP/1.1Host: extend.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "421e-61630054652c0"If-Modified-Since: Tue, 16 Apr 2024 05:29:23 GMT
Source: global traffic	HTTP traffic detected: GET /ga/98318866.js HTTP/1.1Host: extend.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "421e-61630054652c0"If-Modified-Since: Tue, 16 Apr 2024 05:29:23 GMT
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _gat_GSA_ENOR0=1; _ga=GA1.1.1455269847.1713904340; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904455.0.0.0; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/RF-Hero-1200x467-v3.svg HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _gat_GSA_ENOR0=1; _ga=GA1.1.1455269847.1713904340; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904455.0.0.0; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/fonts/proximanova_regular/ProximaNova-Reg-webfont.woff HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://reportfraud.ftc.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _gat_GSA_ENOR0=1; _ga=GA1.1.1455269847.1713904340; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904455.0.0.0; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0
Source: global traffic	HTTP traffic detected: GET /runtime.4facd336c6fc7187.js HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://reportfraud.ftc.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _gat_GSA_ENOR0=1; _ga=GA1.1.1455269847.1713904340; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904455.0.0.0; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0
Source: global traffic	HTTP traffic detected: GET /polyfills.289c63289f8f9520.js HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://reportfraud.ftc.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _gat_GSA_ENOR0=1; _ga=GA1.1.1455269847.1713904340; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904455.0.0.0; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0
Source: global traffic	HTTP traffic detected: GET /main.cba37e78289a564b.js HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://reportfraud.ftc.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _gat_GSA_ENOR0=1; _ga=GA1.1.1455269847.1713904340; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904455.0.0.0; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0
Source: global traffic	HTTP traffic detected: GET /scripts.6df1642d06080470.js HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _gat_GSA_ENOR0=1; _ga=GA1.1.1455269847.1713904340; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904455.0.0.0; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0
Source: global traffic	HTTP traffic detected: GET /inContact/ChatClient/js/embed.min.js HTTP/1.1Host: home-c72.niceincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles.e8c5964d39f13771.css HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _gat_GSA_ENOR0=1; _ga=GA1.1.1455269847.1713904340; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904455.0.0.0; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/RF-Hero-1200x467-v3.svg HTTP/1.1Host: reportfraud.ftc.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _gat_GSA_ENOR0=1; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0
Source: global traffic	HTTP traffic detected: GET /config/config.json HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0
Source: global traffic	HTTP traffic detected: GET /config/config.json HTTP/1.1Host: reportfraud.ftc.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0
Source: global traffic	HTTP traffic detected: GET /836.3a84870d141ed8eb.js HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://reportfraud.ftc.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z
Source: global traffic	HTTP traffic detected: GET /assets/fonts/proximanova_semibold/ProximaNova-Sbold-webfont.woff HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://reportfraud.ftc.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://reportfraud.ftc.gov/styles.e8c5964d39f13771.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z
Source: global traffic	HTTP traffic detected: GET /assets/images/search-solid.svg HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reportfraud.ftc.gov/styles.e8c5964d39f13771.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z
Source: global traffic	HTTP traffic detected: GET /assets/images/topSplashButtonArrow-white.png HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: reportfraud.ftc.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z
Source: global traffic	HTTP traffic detected: GET /assets/images/USFlag-Icon-2x.png HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z
Source: global traffic	HTTP traffic detected: GET /foresee_assets/qualtricsScript.js HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z
Source: global traffic	HTTP traffic detected: GET /assets/images/wh-icon.png HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z
Source: global traffic	HTTP traffic detected: GET /assets/images/lock-icon.png HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z
Source: global traffic	HTTP traffic detected: GET /515.93f17397f92c22a2.js HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://reportfraud.ftc.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
Source: global traffic	HTTP traffic detected: GET /885.e4c25f8965e3c3f1.js HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://reportfraud.ftc.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
Source: global traffic	HTTP traffic detected: GET /999.eb89264becfdfe17.js HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://reportfraud.ftc.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
Source: global traffic	HTTP traffic detected: GET /640.b1edbf4b35c3951b.js HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://reportfraud.ftc.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
Source: global traffic	HTTP traffic detected: GET /265.dae6f19b57ed9aa7.js HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://reportfraud.ftc.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
Source: global traffic	HTTP traffic detected: GET /510.30c87c878b76878e.js HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://reportfraud.ftc.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
Source: global traffic	HTTP traffic detected: GET /551.2647647041282ed3.js HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://reportfraud.ftc.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
Source: global traffic	HTTP traffic detected: GET /556.ad6a057fee24becb.js HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://reportfraud.ftc.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
Source: global traffic	HTTP traffic detected: GET /common.86b9d51e0bdd16a1.js HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://reportfraud.ftc.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
Source: global traffic	HTTP traffic detected: GET /667.87de367fb3b518c9.js HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://reportfraud.ftc.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
Source: global traffic	HTTP traffic detected: GET /assets/images/search-solid.svg HTTP/1.1Host: reportfraud.ftc.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/topSplashButtonArrow-white.png HTTP/1.1Host: reportfraud.ftc.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
Source: global traffic	HTTP traffic detected: GET /106.f9ef06dce04acc21.js HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://reportfraud.ftc.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
Source: global traffic	HTTP traffic detected: GET /assets/images/USFlag-Icon-2x.png HTTP/1.1Host: reportfraud.ftc.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
Source: global traffic	HTTP traffic detected: GET /189.55854287e34e0293.js HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://reportfraud.ftc.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
Source: global traffic	HTTP traffic detected: GET /assets/images/wh-icon.png HTTP/1.1Host: reportfraud.ftc.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/lock-icon.png HTTP/1.1Host: reportfraud.ftc.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
Source: global traffic	HTTP traffic detected: GET /225.0130806582458f70.js HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://reportfraud.ftc.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
Source: global traffic	HTTP traffic detected: GET /assets/images/ftc-dnc-logo.jpg HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
Source: global traffic	HTTP traffic detected: GET /assets/images/idt-logo.png HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
Source: global traffic	HTTP traffic detected: GET /assets/images/exclamation-triangle-solid.svg HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
Source: global traffic	HTTP traffic detected: GET /assets/images/RF-Logo-Seal-NEW-01.svg HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z
Source: global traffic	HTTP traffic detected: GET /assets/images/arrow-11-64.png HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/To-Do.svg HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/helpStopFraud.svg HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/tellUsWhatHappenedNoDots.svg HTTP/1.1Host: reportfraud.ftc.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reportfraud.ftc.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/ftc-dnc-logo.jpg HTTP/1.1Host: reportfraud.ftc.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/exclamation-triangle-solid.svg HTTP/1.1Host: reportfraud.ftc.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/arrow-11-64.png HTTP/1.1Host: reportfraud.ftc.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/idt-logo.png HTTP/1.1Host: reportfraud.ftc.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/To-Do.svg HTTP/1.1Host: reportfraud.ftc.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/RF-Logo-Seal-NEW-01.svg HTTP/1.1Host: reportfraud.ftc.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/helpStopFraud.svg HTTP/1.1Host: reportfraud.ftc.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/tellUsWhatHappenedNoDots.svg HTTP/1.1Host: reportfraud.ftc.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ftc.govConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_423.10.dr, chromecache_652.10.dr	String found in binary or memory: <a class="" href="https://www.facebook.com/federaltradecommission" aria-label="Facebook"> equals www.facebook.com (Facebook)
Source: chromecache_423.10.dr, chromecache_652.10.dr	String found in binary or memory: <a class="" href="https://www.youtube.com/ftcvideos" aria-label="YouTube"> equals www.youtube.com (Youtube)
Source: chromecache_423.10.dr, chromecache_652.10.dr	String found in binary or memory: <a class="" href="https://www.linkedin.com/company/163780/" aria-label="LinkedIn"> equals www.linkedin.com (Linkedin)
Source: chromecache_652.10.dr	String found in binary or memory: <div class="field__item"><a href="https://www.youtube.com/playlist?list=PL2D75B6D9AB41667F"> <img loading="lazy" src="/sites/default/files/styles/wide_standard_sm/public/ftc_gov/images/feature-videos_1.jpg?h=c74750f6&itok=dWLWdEpB" width="640" height="360" alt="Videos" typeof="foaf:Image" style="aspect-ratio: 640/360" /> equals www.youtube.com (Youtube)
Source: chromecache_652.10.dr	String found in binary or memory: <div class="field__item"><a href="https://www.youtube.com/user/FTCvideos/playlists?view=50&sort=dd&shelf_id=5"> <img loading="lazy" src="/sites/default/files/styles/wide_standard_sm/public/ftc_gov/images/feature-small-bus_0.jpg?h=10d202d3&itok=3FMXaU3a" width="640" height="360" alt="Videos Small Business" typeof="foaf:Image" style="aspect-ratio: 640/360" /> equals www.youtube.com (Youtube)
Source: chromecache_652.10.dr	String found in binary or memory: <h3 class="field__item"><a href="https://www.youtube.com/playlist?list=PL2D75B6D9AB41667F">Videos con consejos pr equals www.youtube.com (Youtube)
Source: chromecache_652.10.dr	String found in binary or memory: <h3 class="field__item"><a href="https://www.youtube.com/user/FTCvideos/playlists?view=50&sort=dd&shelf_id=5">Videos para peque equals www.youtube.com (Youtube)
Source: chromecache_423.10.dr	String found in binary or memory: <div class="field__item"><h2>Sign up to get e-mail updates.</h2><p><a class="usa-button" href="/news-events/stay-connected" title="Stay connected">Stay connected</a></p><div class="social-menu grid-row grid-gap-3"><div class="grid-col-auto"><a href="https://www.facebook.com/federaltradecommission" aria-label="Facebook" rel="noreferrer"><span class="fontawesome-icon-inline"><svg class="svg-inline--fa fa-facebook fa-w-16" aria-hidden="true" data-fa-i2svg="" data-icon="facebook" data-prefix="fab" focusable="false" role="img" viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="M504 256C504 119 393 8 256 8S8 119 8 256c0 123.78 90.69 226.38 209.25 245V327.69h-63V256h63v-54.64c0-62.15 37-96.48 93.67-96.48 27.14 0 55.52 4.84 55.52 4.84v61h-31.28c-30.8 0-40.41 19.12-40.41 38.73V256h68.78l-11 71.69h-57.78V501C413.31 482.38 504 379.78 504 256z" fill="currentColor"></path></svg></span></a></div><div class="grid-col-auto"><a href="https://twitter.com/FTC" aria-label="Twitter" rel="noreferrer"><span class="fontawesome-icon-inline"><svg class="svg-inline--fa fa-twitter fa-w-16" aria-hidden="true" data-fa-i2svg="" data-icon="twitter" data-prefix="fab" focusable="false" role="img" viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="M459.37 151.716c.325 4.548.325 9.097.325 13.645 0 138.72-105.583 298.558-298.558 298.558-59.452 0-114.68-17.219-161.137-47.106 8.447.974 16.568 1.299 25.34 1.299 49.055 0 94.213-16.568 130.274-44.832-46.132-.975-84.792-31.188-98.112-72.772 6.498.974 12.995 1.624 19.818 1.624 9.421 0 18.843-1.3 27.614-3.573-48.081-9.747-84.143-51.98-84.143-102.985v-1.299c13.969 7.797 30.214 12.67 47.431 13.319-28.264-18.843-46.781-51.005-46.781-87.391 0-19.492 5.197-37.36 14.294-52.954 51.655 63.675 129.3 105.258 216.365 109.807-1.624-7.797-2.599-15.918-2.599-24.04 0-57.828 46.782-104.934 104.934-104.934 30.213 0 57.502 12.67 76.67 33.137 23.715-4.548 46.456-13.32 66.599-25.34-7.798 24.366-24.366 44.833-46.132 57.827 21.117-2.273 41.584-8.122 60.426-16.243-14.292 20.791-32.161 39.308-52.628 54.253z" fill="currentColor"></path></svg></span></a></div><div class="grid-col-auto"><a href="https://www.linkedin.com/company/163780/" aria-label="Linkedin" rel="noreferrer"><span class="fontawesome-icon-inline"><svg class="svg-inline--fa fa-linkedin fa-w-14" aria-hidden="true" data-fa-i2svg="" data-icon="linkedin" data-prefix="fab" focusable="false" role="img" viewBox="0 0 448 512" xmlns="http://www.w3.org/2000/svg"><path d="M416 32H31.9C14.3 32 0 46.5 0 64.3v383.4C0 465.5 14.3 480 31.9 480H416c17.6 0 32-14.5 32-32.3V64.3c0-17.8-14.4-32.3-32-32.3zM135.4 416H69V202.2h66.5V416zm-33.2-243c-21.3 0-38.5-17.3-38.5-38.5S80.9 96 102.2 96c21.2 0 38.5 17.3 38.5 38.5 0 21.3-17.2 38.5-38.5 38.5zm282.1 243h-66.4V312c0-24.8-.5-56.7-34.5-56.7-34.6 0-39.9 27-39.9 54.9V416h-66.4V202.2h63.7v29.2h.9c8.9-16.8 30.6-34.5 62.9-34.5 67.2 0 79.7 44.3 79.7 101.9V416z" fill="currentColor"></path></svg></span></a></div><div class="grid-col-auto"><a href=
Source: chromecache_423.10.dr	String found in binary or memory: <div class="field__item"><h2>Sign up to get e-mail updates.</h2><p><a class="usa-button" href="/news-events/stay-connected" title="Stay connected">Stay connected</a></p><div class="social-menu grid-row grid-gap-3"><div class="grid-col-auto"><a href="https://www.facebook.com/federaltradecommission" aria-label="Facebook" rel="noreferrer"><span class="fontawesome-icon-inline"><svg class="svg-inline--fa fa-facebook fa-w-16" aria-hidden="true" data-fa-i2svg="" data-icon="facebook" data-prefix="fab" focusable="false" role="img" viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="M504 256C504 119 393 8 256 8S8 119 8 256c0 123.78 90.69 226.38 209.25 245V327.69h-63V256h63v-54.64c0-62.15 37-96.48 93.67-96.48 27.14 0 55.52 4.84 55.52 4.84v61h-31.28c-30.8 0-40.41 19.12-40.41 38.73V256h68.78l-11 71.69h-57.78V501C413.31 482.38 504 379.78 504 256z" fill="currentColor"></path></svg></span></a></div><div class="grid-col-auto"><a href="https://twitter.com/FTC" aria-label="Twitter" rel="noreferrer"><span class="fontawesome-icon-inline"><svg class="svg-inline--fa fa-twitter fa-w-16" aria-hidden="true" data-fa-i2svg="" data-icon="twitter" data-prefix="fab" focusable="false" role="img" viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="M459.37 151.716c.325 4.548.325 9.097.325 13.645 0 138.72-105.583 298.558-298.558 298.558-59.452 0-114.68-17.219-161.137-47.106 8.447.974 16.568 1.299 25.34 1.299 49.055 0 94.213-16.568 130.274-44.832-46.132-.975-84.792-31.188-98.112-72.772 6.498.974 12.995 1.624 19.818 1.624 9.421 0 18.843-1.3 27.614-3.573-48.081-9.747-84.143-51.98-84.143-102.985v-1.299c13.969 7.797 30.214 12.67 47.431 13.319-28.264-18.843-46.781-51.005-46.781-87.391 0-19.492 5.197-37.36 14.294-52.954 51.655 63.675 129.3 105.258 216.365 109.807-1.624-7.797-2.599-15.918-2.599-24.04 0-57.828 46.782-104.934 104.934-104.934 30.213 0 57.502 12.67 76.67 33.137 23.715-4.548 46.456-13.32 66.599-25.34-7.798 24.366-24.366 44.833-46.132 57.827 21.117-2.273 41.584-8.122 60.426-16.243-14.292 20.791-32.161 39.308-52.628 54.253z" fill="currentColor"></path></svg></span></a></div><div class="grid-col-auto"><a href="https://www.linkedin.com/company/163780/" aria-label="Linkedin" rel="noreferrer"><span class="fontawesome-icon-inline"><svg class="svg-inline--fa fa-linkedin fa-w-14" aria-hidden="true" data-fa-i2svg="" data-icon="linkedin" data-prefix="fab" focusable="false" role="img" viewBox="0 0 448 512" xmlns="http://www.w3.org/2000/svg"><path d="M416 32H31.9C14.3 32 0 46.5 0 64.3v383.4C0 465.5 14.3 480 31.9 480H416c17.6 0 32-14.5 32-32.3V64.3c0-17.8-14.4-32.3-32-32.3zM135.4 416H69V202.2h66.5V416zm-33.2-243c-21.3 0-38.5-17.3-38.5-38.5S80.9 96 102.2 96c21.2 0 38.5 17.3 38.5 38.5 0 21.3-17.2 38.5-38.5 38.5zm282.1 243h-66.4V312c0-24.8-.5-56.7-34.5-56.7-34.6 0-39.9 27-39.9 54.9V416h-66.4V202.2h63.7v29.2h.9c8.9-16.8 30.6-34.5 62.9-34.5 67.2 0 79.7 44.3 79.7 101.9V416z" fill="currentColor"></path></svg></span></a></div><div class="grid-col-auto"><a href=
Source: chromecache_423.10.dr	String found in binary or memory: <div class="field__item"><h2>Sign up to get e-mail updates.</h2><p><a class="usa-button" href="/news-events/stay-connected" title="Stay connected">Stay connected</a></p><div class="social-menu grid-row grid-gap-3"><div class="grid-col-auto"><a href="https://www.facebook.com/federaltradecommission" aria-label="Facebook" rel="noreferrer"><span class="fontawesome-icon-inline"><svg class="svg-inline--fa fa-facebook fa-w-16" aria-hidden="true" data-fa-i2svg="" data-icon="facebook" data-prefix="fab" focusable="false" role="img" viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="M504 256C504 119 393 8 256 8S8 119 8 256c0 123.78 90.69 226.38 209.25 245V327.69h-63V256h63v-54.64c0-62.15 37-96.48 93.67-96.48 27.14 0 55.52 4.84 55.52 4.84v61h-31.28c-30.8 0-40.41 19.12-40.41 38.73V256h68.78l-11 71.69h-57.78V501C413.31 482.38 504 379.78 504 256z" fill="currentColor"></path></svg></span></a></div><div class="grid-col-auto"><a href="https://twitter.com/FTC" aria-label="Twitter" rel="noreferrer"><span class="fontawesome-icon-inline"><svg class="svg-inline--fa fa-twitter fa-w-16" aria-hidden="true" data-fa-i2svg="" data-icon="twitter" data-prefix="fab" focusable="false" role="img" viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="M459.37 151.716c.325 4.548.325 9.097.325 13.645 0 138.72-105.583 298.558-298.558 298.558-59.452 0-114.68-17.219-161.137-47.106 8.447.974 16.568 1.299 25.34 1.299 49.055 0 94.213-16.568 130.274-44.832-46.132-.975-84.792-31.188-98.112-72.772 6.498.974 12.995 1.624 19.818 1.624 9.421 0 18.843-1.3 27.614-3.573-48.081-9.747-84.143-51.98-84.143-102.985v-1.299c13.969 7.797 30.214 12.67 47.431 13.319-28.264-18.843-46.781-51.005-46.781-87.391 0-19.492 5.197-37.36 14.294-52.954 51.655 63.675 129.3 105.258 216.365 109.807-1.624-7.797-2.599-15.918-2.599-24.04 0-57.828 46.782-104.934 104.934-104.934 30.213 0 57.502 12.67 76.67 33.137 23.715-4.548 46.456-13.32 66.599-25.34-7.798 24.366-24.366 44.833-46.132 57.827 21.117-2.273 41.584-8.122 60.426-16.243-14.292 20.791-32.161 39.308-52.628 54.253z" fill="currentColor"></path></svg></span></a></div><div class="grid-col-auto"><a href="https://www.linkedin.com/company/163780/" aria-label="Linkedin" rel="noreferrer"><span class="fontawesome-icon-inline"><svg class="svg-inline--fa fa-linkedin fa-w-14" aria-hidden="true" data-fa-i2svg="" data-icon="linkedin" data-prefix="fab" focusable="false" role="img" viewBox="0 0 448 512" xmlns="http://www.w3.org/2000/svg"><path d="M416 32H31.9C14.3 32 0 46.5 0 64.3v383.4C0 465.5 14.3 480 31.9 480H416c17.6 0 32-14.5 32-32.3V64.3c0-17.8-14.4-32.3-32-32.3zM135.4 416H69V202.2h66.5V416zm-33.2-243c-21.3 0-38.5-17.3-38.5-38.5S80.9 96 102.2 96c21.2 0 38.5 17.3 38.5 38.5 0 21.3-17.2 38.5-38.5 38.5zm282.1 243h-66.4V312c0-24.8-.5-56.7-34.5-56.7-34.6 0-39.9 27-39.9 54.9V416h-66.4V202.2h63.7v29.2h.9c8.9-16.8 30.6-34.5 62.9-34.5 67.2 0 79.7 44.3 79.7 101.9V416z" fill="currentColor"></path></svg></span></a></div><div class="grid-col-auto"><a href=
Source: chromecache_423.10.dr	String found in binary or memory: <div class="field__item"><h2>Sign up to get e-mail updates.</h2><p><a class="usa-button" href="/news-events/stay-connected" title="Stay connected">Stay connected</a></p><div class="social-menu grid-row grid-gap-3"><div class="grid-col-auto"><a href="https://www.facebook.com/federaltradecommission" aria-label="Facebook" rel="noreferrer"><span class="fontawesome-icon-inline"><svg class="svg-inline--fa fa-facebook fa-w-16" aria-hidden="true" data-fa-i2svg="" data-icon="facebook" data-prefix="fab" focusable="false" role="img" viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="M504 256C504 119 393 8 256 8S8 119 8 256c0 123.78 90.69 226.38 209.25 245V327.69h-63V256h63v-54.64c0-62.15 37-96.48 93.67-96.48 27.14 0 55.52 4.84 55.52 4.84v61h-31.28c-30.8 0-40.41 19.12-40.41 38.73V256h68.78l-11 71.69h-57.78V501C413.31 482.38 504 379.78 504 256z" fill="currentColor"></path></svg></span></a></div><div class="grid-col-auto"><a href="https://twitter.com/FTC" aria-label="Twitter" rel="noreferrer"><span class="fontawesome-icon-inline"><svg class="svg-inline--fa fa-twitter fa-w-16" aria-hidden="true" data-fa-i2svg="" data-icon="twitter" data-prefix="fab" focusable="false" role="img" viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="M459.37 151.716c.325 4.548.325 9.097.325 13.645 0 138.72-105.583 298.558-298.558 298.558-59.452 0-114.68-17.219-161.137-47.106 8.447.974 16.568 1.299 25.34 1.299 49.055 0 94.213-16.568 130.274-44.832-46.132-.975-84.792-31.188-98.112-72.772 6.498.974 12.995 1.624 19.818 1.624 9.421 0 18.843-1.3 27.614-3.573-48.081-9.747-84.143-51.98-84.143-102.985v-1.299c13.969 7.797 30.214 12.67 47.431 13.319-28.264-18.843-46.781-51.005-46.781-87.391 0-19.492 5.197-37.36 14.294-52.954 51.655 63.675 129.3 105.258 216.365 109.807-1.624-7.797-2.599-15.918-2.599-24.04 0-57.828 46.782-104.934 104.934-104.934 30.213 0 57.502 12.67 76.67 33.137 23.715-4.548 46.456-13.32 66.599-25.34-7.798 24.366-24.366 44.833-46.132 57.827 21.117-2.273 41.584-8.122 60.426-16.243-14.292 20.791-32.161 39.308-52.628 54.253z" fill="currentColor"></path></svg></span></a></div><div class="grid-col-auto"><a href="https://www.linkedin.com/company/163780/" aria-label="Linkedin" rel="noreferrer"><span class="fontawesome-icon-inline"><svg class="svg-inline--fa fa-linkedin fa-w-14" aria-hidden="true" data-fa-i2svg="" data-icon="linkedin" data-prefix="fab" focusable="false" role="img" viewBox="0 0 448 512" xmlns="http://www.w3.org/2000/svg"><path d="M416 32H31.9C14.3 32 0 46.5 0 64.3v383.4C0 465.5 14.3 480 31.9 480H416c17.6 0 32-14.5 32-32.3V64.3c0-17.8-14.4-32.3-32-32.3zM135.4 416H69V202.2h66.5V416zm-33.2-243c-21.3 0-38.5-17.3-38.5-38.5S80.9 96 102.2 96c21.2 0 38.5 17.3 38.5 38.5 0 21.3-17.2 38.5-38.5 38.5zm282.1 243h-66.4V312c0-24.8-.5-56.7-34.5-56.7-34.6 0-39.9 27-39.9 54.9V416h-66.4V202.2h63.7v29.2h.9c8.9-16.8 30.6-34.5 62.9-34.5 67.2 0 79.7 44.3 79.7 101.9V416z" fill="currentColor"></path></svg></span></a></div><div class="grid-col-auto"><a href=
Source: chromecache_423.10.dr	String found in binary or memory: <p><span class="fontawesome-icon-inline"><a href="https://www.facebook.com/federaltradecommission" aria-label="Facebook"><svg aria-hidden="true" class="svg-inline--fa fa-facebook fa-w-16" data-fa-i2svg="" data-icon="facebook" data-prefix="fab" focusable="false" role="img" viewbox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="M504 256C504 119 393 8 256 8S8 119 8 256c0 123.78 90.69 226.38 209.25 245V327.69h-63V256h63v-54.64c0-62.15 37-96.48 93.67-96.48 27.14 0 55.52 4.84 55.52 4.84v61h-31.28c-30.8 0-40.41 19.12-40.41 38.73V256h68.78l-11 71.69h-57.78V501C413.31 482.38 504 379.78 504 256z" fill="currentColor"></path></svg><!-- <i class="fab fa-facebook"></i> --></a> </span> <span class="fontawesome-icon-inline"><a href="https://twitter.com/FTC" aria-label="Twitter"><svg aria-hidden="true" class="svg-inline--fa fa-twitter fa-w-16" data-fa-i2svg="" data-icon="twitter" data-prefix="fab" focusable="false" role="img" viewbox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="M459.37 151.716c.325 4.548.325 9.097.325 13.645 0 138.72-105.583 298.558-298.558 298.558-59.452 0-114.68-17.219-161.137-47.106 8.447.974 16.568 1.299 25.34 1.299 49.055 0 94.213-16.568 130.274-44.832-46.132-.975-84.792-31.188-98.112-72.772 6.498.974 12.995 1.624 19.818 1.624 9.421 0 18.843-1.3 27.614-3.573-48.081-9.747-84.143-51.98-84.143-102.985v-1.299c13.969 7.797 30.214 12.67 47.431 13.319-28.264-18.843-46.781-51.005-46.781-87.391 0-19.492 5.197-37.36 14.294-52.954 51.655 63.675 129.3 105.258 216.365 109.807-1.624-7.797-2.599-15.918-2.599-24.04 0-57.828 46.782-104.934 104.934-104.934 30.213 0 57.502 12.67 76.67 33.137 23.715-4.548 46.456-13.32 66.599-25.34-7.798 24.366-24.366 44.833-46.132 57.827 21.117-2.273 41.584-8.122 60.426-16.243-14.292 20.791-32.161 39.308-52.628 54.253z" fill="currentColor"></path></svg><!-- <i class="fab fa-twitter"></i> --></a> </span> <span class="fontawesome-icon-inline"><a href="https://www.linkedin.com/company/163780/" aria-label="LinkedIn"><svg aria-hidden="true" class="svg-inline--fa fa-linkedin-in fa-w-14" data-fa-i2svg="" data-icon="linkedin-in" data-prefix="fab" focusable="false" role="img" viewbox="0 0 448 512" xmlns="http://www.w3.org/2000/svg"><path d="M100.28 448H7.4V148.9h92.88zM53.79 108.1C24.09 108.1 0 83.5 0 53.8a53.79 53.79 0 0 1 107.58 0c0 29.7-24.1 54.3-53.79 54.3zM447.9 448h-92.68V302.4c0-34.7-.7-79.2-48.29-79.2-48.29 0-55.69 37.7-55.69 76.7V448h-92.78V148.9h89.08v40.8h1.3c12.4-23.5 42.69-48.3 87.88-48.3 94 0 111.28 61.9 111.28 142.3V448z" fill="currentColor"></path></svg><!-- <i class="fab fa-linkedin-in"></i> --></a> </span> <span class="fontawesome-icon-inline"><a href="https://www.youtube.com/ftcvideos" aria-label="YouTube"><svg aria-hidden="true" class="svg-inline--fa fa-youtube fa-w-18" data-fa-i2svg="" data-icon="youtube" data-prefix="fab" focusable="false" role="img" viewbox="0 0 576 512" xmlns="http://www.w3.org/2000/svg"><path d="M549.655 124.083c-6.281-23.65-24.787-42.276-48.284-48.597C458.
Source: chromecache_423.10.dr	String found in binary or memory: <p><span class="fontawesome-icon-inline"><a href="https://www.facebook.com/federaltradecommission" aria-label="Facebook"><svg aria-hidden="true" class="svg-inline--fa fa-facebook fa-w-16" data-fa-i2svg="" data-icon="facebook" data-prefix="fab" focusable="false" role="img" viewbox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="M504 256C504 119 393 8 256 8S8 119 8 256c0 123.78 90.69 226.38 209.25 245V327.69h-63V256h63v-54.64c0-62.15 37-96.48 93.67-96.48 27.14 0 55.52 4.84 55.52 4.84v61h-31.28c-30.8 0-40.41 19.12-40.41 38.73V256h68.78l-11 71.69h-57.78V501C413.31 482.38 504 379.78 504 256z" fill="currentColor"></path></svg><!-- <i class="fab fa-facebook"></i> --></a> </span> <span class="fontawesome-icon-inline"><a href="https://twitter.com/FTC" aria-label="Twitter"><svg aria-hidden="true" class="svg-inline--fa fa-twitter fa-w-16" data-fa-i2svg="" data-icon="twitter" data-prefix="fab" focusable="false" role="img" viewbox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="M459.37 151.716c.325 4.548.325 9.097.325 13.645 0 138.72-105.583 298.558-298.558 298.558-59.452 0-114.68-17.219-161.137-47.106 8.447.974 16.568 1.299 25.34 1.299 49.055 0 94.213-16.568 130.274-44.832-46.132-.975-84.792-31.188-98.112-72.772 6.498.974 12.995 1.624 19.818 1.624 9.421 0 18.843-1.3 27.614-3.573-48.081-9.747-84.143-51.98-84.143-102.985v-1.299c13.969 7.797 30.214 12.67 47.431 13.319-28.264-18.843-46.781-51.005-46.781-87.391 0-19.492 5.197-37.36 14.294-52.954 51.655 63.675 129.3 105.258 216.365 109.807-1.624-7.797-2.599-15.918-2.599-24.04 0-57.828 46.782-104.934 104.934-104.934 30.213 0 57.502 12.67 76.67 33.137 23.715-4.548 46.456-13.32 66.599-25.34-7.798 24.366-24.366 44.833-46.132 57.827 21.117-2.273 41.584-8.122 60.426-16.243-14.292 20.791-32.161 39.308-52.628 54.253z" fill="currentColor"></path></svg><!-- <i class="fab fa-twitter"></i> --></a> </span> <span class="fontawesome-icon-inline"><a href="https://www.linkedin.com/company/163780/" aria-label="LinkedIn"><svg aria-hidden="true" class="svg-inline--fa fa-linkedin-in fa-w-14" data-fa-i2svg="" data-icon="linkedin-in" data-prefix="fab" focusable="false" role="img" viewbox="0 0 448 512" xmlns="http://www.w3.org/2000/svg"><path d="M100.28 448H7.4V148.9h92.88zM53.79 108.1C24.09 108.1 0 83.5 0 53.8a53.79 53.79 0 0 1 107.58 0c0 29.7-24.1 54.3-53.79 54.3zM447.9 448h-92.68V302.4c0-34.7-.7-79.2-48.29-79.2-48.29 0-55.69 37.7-55.69 76.7V448h-92.78V148.9h89.08v40.8h1.3c12.4-23.5 42.69-48.3 87.88-48.3 94 0 111.28 61.9 111.28 142.3V448z" fill="currentColor"></path></svg><!-- <i class="fab fa-linkedin-in"></i> --></a> </span> <span class="fontawesome-icon-inline"><a href="https://www.youtube.com/ftcvideos" aria-label="YouTube"><svg aria-hidden="true" class="svg-inline--fa fa-youtube fa-w-18" data-fa-i2svg="" data-icon="youtube" data-prefix="fab" focusable="false" role="img" viewbox="0 0 576 512" xmlns="http://www.w3.org/2000/svg"><path d="M549.655 124.083c-6.281-23.65-24.787-42.276-48.284-48.597C458.
Source: chromecache_423.10.dr	String found in binary or memory: <p><span class="fontawesome-icon-inline"><a href="https://www.facebook.com/federaltradecommission" aria-label="Facebook"><svg aria-hidden="true" class="svg-inline--fa fa-facebook fa-w-16" data-fa-i2svg="" data-icon="facebook" data-prefix="fab" focusable="false" role="img" viewbox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="M504 256C504 119 393 8 256 8S8 119 8 256c0 123.78 90.69 226.38 209.25 245V327.69h-63V256h63v-54.64c0-62.15 37-96.48 93.67-96.48 27.14 0 55.52 4.84 55.52 4.84v61h-31.28c-30.8 0-40.41 19.12-40.41 38.73V256h68.78l-11 71.69h-57.78V501C413.31 482.38 504 379.78 504 256z" fill="currentColor"></path></svg><!-- <i class="fab fa-facebook"></i> --></a> </span> <span class="fontawesome-icon-inline"><a href="https://twitter.com/FTC" aria-label="Twitter"><svg aria-hidden="true" class="svg-inline--fa fa-twitter fa-w-16" data-fa-i2svg="" data-icon="twitter" data-prefix="fab" focusable="false" role="img" viewbox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="M459.37 151.716c.325 4.548.325 9.097.325 13.645 0 138.72-105.583 298.558-298.558 298.558-59.452 0-114.68-17.219-161.137-47.106 8.447.974 16.568 1.299 25.34 1.299 49.055 0 94.213-16.568 130.274-44.832-46.132-.975-84.792-31.188-98.112-72.772 6.498.974 12.995 1.624 19.818 1.624 9.421 0 18.843-1.3 27.614-3.573-48.081-9.747-84.143-51.98-84.143-102.985v-1.299c13.969 7.797 30.214 12.67 47.431 13.319-28.264-18.843-46.781-51.005-46.781-87.391 0-19.492 5.197-37.36 14.294-52.954 51.655 63.675 129.3 105.258 216.365 109.807-1.624-7.797-2.599-15.918-2.599-24.04 0-57.828 46.782-104.934 104.934-104.934 30.213 0 57.502 12.67 76.67 33.137 23.715-4.548 46.456-13.32 66.599-25.34-7.798 24.366-24.366 44.833-46.132 57.827 21.117-2.273 41.584-8.122 60.426-16.243-14.292 20.791-32.161 39.308-52.628 54.253z" fill="currentColor"></path></svg><!-- <i class="fab fa-twitter"></i> --></a> </span> <span class="fontawesome-icon-inline"><a href="https://www.linkedin.com/company/163780/" aria-label="LinkedIn"><svg aria-hidden="true" class="svg-inline--fa fa-linkedin-in fa-w-14" data-fa-i2svg="" data-icon="linkedin-in" data-prefix="fab" focusable="false" role="img" viewbox="0 0 448 512" xmlns="http://www.w3.org/2000/svg"><path d="M100.28 448H7.4V148.9h92.88zM53.79 108.1C24.09 108.1 0 83.5 0 53.8a53.79 53.79 0 0 1 107.58 0c0 29.7-24.1 54.3-53.79 54.3zM447.9 448h-92.68V302.4c0-34.7-.7-79.2-48.29-79.2-48.29 0-55.69 37.7-55.69 76.7V448h-92.78V148.9h89.08v40.8h1.3c12.4-23.5 42.69-48.3 87.88-48.3 94 0 111.28 61.9 111.28 142.3V448z" fill="currentColor"></path></svg><!-- <i class="fab fa-linkedin-in"></i> --></a> </span> <span class="fontawesome-icon-inline"><a href="https://www.youtube.com/ftcvideos" aria-label="YouTube"><svg aria-hidden="true" class="svg-inline--fa fa-youtube fa-w-18" data-fa-i2svg="" data-icon="youtube" data-prefix="fab" focusable="false" role="img" viewbox="0 0 576 512" xmlns="http://www.w3.org/2000/svg"><path d="M549.655 124.083c-6.281-23.65-24.787-42.276-48.284-48.597C458.
Source: chromecache_423.10.dr	String found in binary or memory: <p><span class="fontawesome-icon-inline"><a href="https://www.facebook.com/federaltradecommission" aria-label="Facebook"><svg aria-hidden="true" class="svg-inline--fa fa-facebook fa-w-16" data-fa-i2svg="" data-icon="facebook" data-prefix="fab" focusable="false" role="img" viewbox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="M504 256C504 119 393 8 256 8S8 119 8 256c0 123.78 90.69 226.38 209.25 245V327.69h-63V256h63v-54.64c0-62.15 37-96.48 93.67-96.48 27.14 0 55.52 4.84 55.52 4.84v61h-31.28c-30.8 0-40.41 19.12-40.41 38.73V256h68.78l-11 71.69h-57.78V501C413.31 482.38 504 379.78 504 256z" fill="currentColor"></path></svg><!-- <i class="fab fa-facebook"></i> --></a> </span> <span class="fontawesome-icon-inline"><a href="https://twitter.com/FTC" aria-label="Twitter"><svg aria-hidden="true" class="svg-inline--fa fa-twitter fa-w-16" data-fa-i2svg="" data-icon="twitter" data-prefix="fab" focusable="false" role="img" viewbox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="M459.37 151.716c.325 4.548.325 9.097.325 13.645 0 138.72-105.583 298.558-298.558 298.558-59.452 0-114.68-17.219-161.137-47.106 8.447.974 16.568 1.299 25.34 1.299 49.055 0 94.213-16.568 130.274-44.832-46.132-.975-84.792-31.188-98.112-72.772 6.498.974 12.995 1.624 19.818 1.624 9.421 0 18.843-1.3 27.614-3.573-48.081-9.747-84.143-51.98-84.143-102.985v-1.299c13.969 7.797 30.214 12.67 47.431 13.319-28.264-18.843-46.781-51.005-46.781-87.391 0-19.492 5.197-37.36 14.294-52.954 51.655 63.675 129.3 105.258 216.365 109.807-1.624-7.797-2.599-15.918-2.599-24.04 0-57.828 46.782-104.934 104.934-104.934 30.213 0 57.502 12.67 76.67 33.137 23.715-4.548 46.456-13.32 66.599-25.34-7.798 24.366-24.366 44.833-46.132 57.827 21.117-2.273 41.584-8.122 60.426-16.243-14.292 20.791-32.161 39.308-52.628 54.253z" fill="currentColor"></path></svg><!-- <i class="fab fa-twitter"></i> --></a> </span> <span class="fontawesome-icon-inline"><a href="https://www.linkedin.com/company/163780/" aria-label="LinkedIn"><svg aria-hidden="true" class="svg-inline--fa fa-linkedin-in fa-w-14" data-fa-i2svg="" data-icon="linkedin-in" data-prefix="fab" focusable="false" role="img" viewbox="0 0 448 512" xmlns="http://www.w3.org/2000/svg"><path d="M100.28 448H7.4V148.9h92.88zM53.79 108.1C24.09 108.1 0 83.5 0 53.8a53.79 53.79 0 0 1 107.58 0c0 29.7-24.1 54.3-53.79 54.3zM447.9 448h-92.68V302.4c0-34.7-.7-79.2-48.29-79.2-48.29 0-55.69 37.7-55.69 76.7V448h-92.78V148.9h89.08v40.8h1.3c12.4-23.5 42.69-48.3 87.88-48.3 94 0 111.28 61.9 111.28 142.3V448z" fill="currentColor"></path></svg><!-- <i class="fab fa-linkedin-in"></i> --></a> </span> <span class="fontawesome-icon-inline"><a href="https://www.youtube.com/ftcvideos" aria-label="YouTube"><svg aria-hidden="true" class="svg-inline--fa fa-youtube fa-w-18" data-fa-i2svg="" data-icon="youtube" data-prefix="fab" focusable="false" role="img" viewbox="0 0 576 512" xmlns="http://www.w3.org/2000/svg"><path d="M549.655 124.083c-6.281-23.65-24.787-42.276-48.284-48.597C458.
Source: chromecache_675.10.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Ij:function(){e=zb()},pd:function(){d()}}};var dc=ia(["data-gtm-yt-inspected-"]),xC=["www.youtube.com","www.youtube-nocookie.com"],yC,zC=!1; equals www.youtube.com (Youtube)
Source: chromecache_537.10.dr, chromecache_665.10.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Pj:function(){e=zb()},sd:function(){d()}}};var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_675.10.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Tg:d,Rg:e,Sg:f,Dh:g,Eh:h,xe:m,zb:b},p=D.YT,q=function(){FC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(IC(w,"iframe_api")\|\|IC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!zC&&GC(x[A],n.xe))return Ic("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_537.10.dr, chromecache_665.10.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Yg:d,Wg:e,Xg:f,Ih:g,Jh:h,ye:m,Ab:b},p=D.YT,q=function(){IC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(LC(w,"iframe_api")\|\|LC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!CC&&JC(x[B],n.ye))return Ic("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_645.10.dr, chromecache_448.10.dr	String found in binary or memory: if(oCONFIG.YOUTUBE){var tag=document.createElement("script");tag.src=document.location.protocol+"//www.youtube.com/iframe_api";var firstScriptTag=document.getElementsByTagName("script")[0];firstScriptTag.parentNode.insertBefore(tag,firstScriptTag);var videoArray=[],playerArray=[],_buckets=[],_milestoneController=oCONFIG.YT_MILESTONE,ytUtils=[];onYouTubeIframeAPIReady=function(){for(var a=0;a<videoArray.length;a++)playerArray[a]=new YT.Player(videoArray[a],{events:{onReady:onPlayerReady,onStateChange:onPlayerStateChange, equals www.youtube.com (Youtube)
Source: chromecache_669.10.dr, chromecache_476.10.dr, chromecache_584.10.dr, chromecache_432.10.dr, chromecache_660.10.dr	String found in binary or memory: return b}vC.H="internal.enableAutoEventOnTimer";var dc=ia(["data-gtm-yt-inspected-"]),xC=["www.youtube.com","www.youtube-nocookie.com"],yC,zC=!1; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: www.donotcall.gov

Source: unknown

HTTP traffic detected: POST /api/contentsecuritypolicy HTTP/1.1Host: telemetry.consumersentinel.govConnection: keep-aliveContent-Length: 983sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/csp-reportAccept: */*Origin: https://www.donotcall.govSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: reportReferer: https://www.donotcall.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_536.10.dr, chromecache_438.10.dr, chromecache_677.10.dr	String found in binary or memory: http://api.jqueryui.com/button/#theming
Source: chromecache_441.10.dr, chromecache_707.10.dr, chromecache_453.10.dr, chromecache_422.10.dr, chromecache_403.10.dr, chromecache_696.10.dr	String found in binary or memory: http://api.jqueryui.com/category/theming/
Source: chromecache_624.10.dr, chromecache_551.10.dr, chromecache_426.10.dr	String found in binary or memory: http://api.jqueryui.com/checkboxradio/#theming
Source: chromecache_500.10.dr, chromecache_455.10.dr, chromecache_687.10.dr	String found in binary or memory: http://api.jqueryui.com/controlgroup/#theming
Source: chromecache_560.10.dr, chromecache_672.10.dr, chromecache_627.10.dr	String found in binary or memory: http://api.jqueryui.com/dialog/#theming
Source: chromecache_454.10.dr	String found in binary or memory: http://api.jqueryui.com/theming/stacking-elements/.
Source: chromecache_615.10.dr, chromecache_511.10.dr	String found in binary or memory: http://business.ftc.gov/documents/alt129-qa-telemarketers-sellers-about-dnc-provisions-tsr
Source: chromecache_517.10.dr	String found in binary or memory: http://code.google.com/p/getelementsbyclassname/
Source: chromecache_423.10.dr	String found in binary or memory: http://consumer.ftc.gov/
Source: chromecache_449.10.dr, chromecache_555.10.dr, chromecache_615.10.dr, chromecache_511.10.dr	String found in binary or memory: http://consumercomplaints.fcc.gov
Source: chromecache_458.10.dr	String found in binary or memory: http://docs.jquery.com/UI/Theming/API
Source: chromecache_446.10.dr, chromecache_491.10.dr, chromecache_575.10.dr	String found in binary or memory: http://drupal.org/node/1715520
Source: chromecache_657.10.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-object.prototype.tostring)
Source: chromecache_657.10.dr	String found in binary or memory: http://eligrey.com
Source: chromecache_511.10.dr	String found in binary or memory: http://ftc.gov
Source: chromecache_615.10.dr, chromecache_511.10.dr	String found in binary or memory: http://ftc.gov/ftc/privacy.shtm
Source: chromecache_487.10.dr	String found in binary or memory: http://jquery.malsup.com/form/#file-upload.
Source: chromecache_500.10.dr, chromecache_546.10.dr, chromecache_629.10.dr, chromecache_401.10.dr, chromecache_637.10.dr, chromecache_560.10.dr, chromecache_441.10.dr, chromecache_522.10.dr, chromecache_634.10.dr, chromecache_633.10.dr, chromecache_536.10.dr, chromecache_530.10.dr, chromecache_531.10.dr, chromecache_438.10.dr, chromecache_672.10.dr, chromecache_594.10.dr, chromecache_707.10.dr, chromecache_695.10.dr, chromecache_411.10.dr, chromecache_453.10.dr, chromecache_624.10.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_500.10.dr, chromecache_546.10.dr, chromecache_629.10.dr, chromecache_401.10.dr, chromecache_637.10.dr, chromecache_560.10.dr, chromecache_441.10.dr, chromecache_522.10.dr, chromecache_480.10.dr, chromecache_646.10.dr, chromecache_634.10.dr, chromecache_633.10.dr, chromecache_536.10.dr, chromecache_530.10.dr, chromecache_531.10.dr, chromecache_438.10.dr, chromecache_672.10.dr, chromecache_594.10.dr, chromecache_707.10.dr, chromecache_695.10.dr, chromecache_411.10.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_458.10.dr	String found in binary or memory: http://jqueryui.com/about)
Source: chromecache_441.10.dr, chromecache_422.10.dr, chromecache_403.10.dr	String found in binary or memory: http://jqueryui.com/themeroller/
Source: chromecache_480.10.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Arial%2CHelvetica%2Csans-serif&fsDefault=1em&fwDefault=no
Source: chromecache_657.10.dr	String found in binary or memory: http://purl.eligrey.com/github/classList.js/blob/master/classList.js
Source: chromecache_657.10.dr	String found in binary or memory: http://stackoverflow.com/a/9039885/177710
Source: chromecache_657.10.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_615.10.dr, chromecache_511.10.dr	String found in binary or memory: http://www.consumer.ftc.gov/articles/0108-national-do-not-call-registry
Source: chromecache_615.10.dr, chromecache_511.10.dr	String found in binary or memory: http://www.consumer.ftc.gov/articles/0108-national-do-not-call-registry#calls
Source: chromecache_511.10.dr	String found in binary or memory: http://www.consumer.ftc.gov/articles/0108-national-do-not-call-registry#email
Source: chromecache_615.10.dr, chromecache_511.10.dr	String found in binary or memory: http://www.consumer.ftc.gov/articles/0149-debt-collection
Source: chromecache_615.10.dr, chromecache_511.10.dr	String found in binary or memory: http://www.consumer.ftc.gov/articles/0259-robocalls
Source: chromecache_511.10.dr	String found in binary or memory: http://www.consumer.ftc.gov/features/feature-0025-robocalls
Source: chromecache_615.10.dr, chromecache_511.10.dr	String found in binary or memory: http://www.consumer.ftc.gov/topics/limiting-unwanted-calls-emails
Source: chromecache_555.10.dr	String found in binary or memory: http://www.consumidor.ftc.gov/articulos/s0108-registro-nacional-no-llame
Source: chromecache_449.10.dr, chromecache_555.10.dr	String found in binary or memory: http://www.consumidor.ftc.gov/articulos/s0108-registro-nacional-no-llame#calls
Source: chromecache_555.10.dr	String found in binary or memory: http://www.consumidor.ftc.gov/articulos/s0108-registro-nacional-no-llame#email
Source: chromecache_555.10.dr	String found in binary or memory: http://www.consumidor.ftc.gov/articulos/s0149-cobranza-de-deudas
Source: chromecache_449.10.dr, chromecache_555.10.dr	String found in binary or memory: http://www.consumidor.ftc.gov/articulos/s0259-robocalls-llamadas-automaticas-pregrabadas
Source: chromecache_555.10.dr	String found in binary or memory: http://www.consumidor.ftc.gov/destacado/destacado-s0025-llamadas-automaticas-pre-grabadas-o-robocall
Source: chromecache_449.10.dr, chromecache_555.10.dr	String found in binary or memory: http://www.consumidor.ftc.gov/temas/limitar-llamadas-e-emails-no-deseados
Source: chromecache_657.10.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-ecmascript-language-types)
Source: chromecache_511.10.dr	String found in binary or memory: http://www.ftc.gov/
Source: chromecache_615.10.dr, chromecache_511.10.dr	String found in binary or memory: http://www.ftc.gov/bcp/conline/pubs/alerts/dncalrt.htm#5Year
Source: chromecache_511.10.dr	String found in binary or memory: http://www.ftc.gov/bcp/edu/pubs/consumer/alerts/alt107.shtm
Source: chromecache_555.10.dr	String found in binary or memory: http://www.ftc.gov/bcp/edu/pubs/consumer/alerts/salt107.shtm
Source: chromecache_555.10.dr, chromecache_715.10.dr, chromecache_666.10.dr, chromecache_650.10.dr, chromecache_525.10.dr, chromecache_570.10.dr, chromecache_615.10.dr, chromecache_511.10.dr	String found in binary or memory: http://www.ftc.gov/es
Source: chromecache_555.10.dr	String found in binary or memory: http://www.ftc.gov/es/informaci%C3%B3n-sobre-el-sitio/pol%C3%ADtica-de-privacidad
Source: chromecache_615.10.dr, chromecache_511.10.dr	String found in binary or memory: http://www.ftc.gov/ftc/privacy.htm
Source: chromecache_511.10.dr	String found in binary or memory: http://www.ftc.gov/ftc/privacy.shtm
Source: chromecache_449.10.dr, chromecache_555.10.dr	String found in binary or memory: http://www.ftc.gov/tips-advice/business-center/qa-telemarketers-sellers-about-dnc-provisions-tsr
Source: chromecache_423.10.dr	String found in binary or memory: http://www.identitytheft.gov
Source: chromecache_462.10.dr	String found in binary or memory: http://www.imagemagick.org
Source: chromecache_517.10.dr	String found in binary or memory: http://www.robertnyman.com
Source: chromecache_598.10.dr	String found in binary or memory: http://www.whatwg.org/specs/web-apps/current-work/multipage/commands.html#the-dialog-element
Source: chromecache_537.10.dr, chromecache_476.10.dr, chromecache_584.10.dr, chromecache_432.10.dr, chromecache_660.10.dr, chromecache_675.10.dr, chromecache_665.10.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_537.10.dr, chromecache_476.10.dr, chromecache_584.10.dr, chromecache_432.10.dr, chromecache_660.10.dr, chromecache_675.10.dr, chromecache_665.10.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_533.10.dr, chromecache_610.10.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_592.10.dr	String found in binary or memory: https://api.jqueryui.com/dialog/#method-_allowInteraction
Source: chromecache_404.10.dr	String found in binary or memory: https://api.jqueryui.com/position/
Source: chromecache_657.10.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3056
Source: chromecache_657.10.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=4118
Source: chromecache_423.10.dr	String found in binary or memory: https://bulkorder.ftc.gov/
Source: chromecache_537.10.dr, chromecache_669.10.dr, chromecache_476.10.dr, chromecache_584.10.dr, chromecache_432.10.dr, chromecache_660.10.dr, chromecache_675.10.dr, chromecache_665.10.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_550.10.dr, chromecache_501.10.dr	String found in binary or memory: https://cdn.botframework.com/botframework-webchat/latest/webchat-es5.js
Source: chromecache_615.10.dr, chromecache_511.10.dr	String found in binary or memory: https://complaints.donotcall.gov/complaint/complaintcheck.aspx
Source: chromecache_423.10.dr	String found in binary or memory: https://consumer.ftc.gov/consumer-alerts/2024/03/financial-literacy-month-focus-money-matters
Source: chromecache_423.10.dr	String found in binary or memory: https://consumer.ftc.gov/features/how-avoid-imposter-scams
Source: chromecache_423.10.dr	String found in binary or memory: https://consumer.ftc.gov/node/85163
Source: chromecache_423.10.dr	String found in binary or memory: https://consumer.ftc.gov/node/85169
Source: chromecache_423.10.dr	String found in binary or memory: https://consumer.ftc.gov/node/85176
Source: chromecache_423.10.dr	String found in binary or memory: https://consumer.gov
Source: chromecache_423.10.dr	String found in binary or memory: https://consumer.gov/
Source: chromecache_652.10.dr	String found in binary or memory: https://consumidor.ftc.gov
Source: chromecache_652.10.dr	String found in binary or memory: https://consumidor.ftc.gov/
Source: chromecache_652.10.dr	String found in binary or memory: https://consumidor.ftc.gov/articulos/informes-de-credito-gratuitos
Source: chromecache_652.10.dr	String found in binary or memory: https://consumidor.gov
Source: chromecache_657.10.dr	String found in binary or memory: https://css-tricks.com/debouncing-throttling-explained-examples/)
Source: chromecache_617.10.dr	String found in binary or memory: https://dap.digitalgov.gov/Universal-Federated-Analytics-Min.js?agency=FTC
Source: chromecache_587.10.dr, chromecache_715.10.dr, chromecache_666.10.dr, chromecache_650.10.dr, chromecache_525.10.dr, chromecache_570.10.dr	String found in binary or memory: https://dap.digitalgov.gov/Universal-Federated-Analytics-Min.js?agency=FTC&pua=UA-36365578-3
Source: chromecache_471.10.dr, chromecache_640.10.dr, chromecache_445.10.dr	String found in binary or memory: https://designsystem.digital.gov/design-tokens
Source: chromecache_471.10.dr, chromecache_640.10.dr, chromecache_445.10.dr	String found in binary or memory: https://designsystem.digital.gov/design-tokens/color
Source: chromecache_471.10.dr, chromecache_640.10.dr, chromecache_445.10.dr	String found in binary or memory: https://designsystem.digital.gov/design-tokens/spacing-units
Source: chromecache_471.10.dr, chromecache_640.10.dr, chromecache_445.10.dr	String found in binary or memory: https://designsystem.digital.gov/design-tokens/typesetting/overview/
Source: chromecache_471.10.dr, chromecache_640.10.dr, chromecache_445.10.dr	String found in binary or memory: https://designsystem.digital.gov/utilities
Source: chromecache_657.10.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/getModifierState
Source: chromecache_566.10.dr, chromecache_664.10.dr, chromecache_625.10.dr, chromecache_686.10.dr	String found in binary or memory: https://developers.cloudflare.com/r2/data-access/public-buckets/
Source: chromecache_550.10.dr, chromecache_501.10.dr	String found in binary or memory: https://expressentry.melissadata.net/web/GlobalExpressFreeForm
Source: chromecache_658.10.dr, chromecache_706.10.dr, chromecache_557.10.dr, chromecache_396.10.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_658.10.dr, chromecache_706.10.dr, chromecache_557.10.dr, chromecache_396.10.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_423.10.dr, chromecache_652.10.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Cormorant:ital
Source: chromecache_495.10.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorant/v21/H4cjBXOCl9bbnla_nHIq6qu7oqOOag.woff2)
Source: chromecache_495.10.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorant/v21/H4cjBXOCl9bbnla_nHIq6qu_oqM.woff2)
Source: chromecache_495.10.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorant/v21/H4cjBXOCl9bbnla_nHIq6quwoqOOag.woff2)
Source: chromecache_495.10.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorant/v21/H4cjBXOCl9bbnla_nHIq6quxoqOOag.woff2)
Source: chromecache_495.10.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorant/v21/H4cjBXOCl9bbnla_nHIq6quyoqOOag.woff2)
Source: chromecache_495.10.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorant/v21/H4clBXOCl9bbnla_nHIq4Ju9uqc.woff2)
Source: chromecache_495.10.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorant/v21/H4clBXOCl9bbnla_nHIq4Zu9uqc.woff2)
Source: chromecache_495.10.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorant/v21/H4clBXOCl9bbnla_nHIq4pu9uqc.woff2)
Source: chromecache_495.10.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorant/v21/H4clBXOCl9bbnla_nHIq65u9uqc.woff2)
Source: chromecache_495.10.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorant/v21/H4clBXOCl9bbnla_nHIq75u9.woff2)
Source: chromecache_495.10.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa0ZL7SUc.woff2)
Source: chromecache_495.10.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2)
Source: chromecache_495.10.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1pL7SUc.woff2)
Source: chromecache_495.10.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa25L7SUc.woff2)
Source: chromecache_495.10.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2JL7SUc.woff2)
Source: chromecache_495.10.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2ZL7SUc.woff2)
Source: chromecache_495.10.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2pL7SUc.woff2)
Source: chromecache_471.10.dr, chromecache_640.10.dr, chromecache_445.10.dr	String found in binary or memory: https://gist.github.com/bigglesrocks/d75091700f8f2be5abfe
Source: chromecache_524.10.dr	String found in binary or memory: https://github.com/angular/angular.js/blob/v1.4.4/src/ng/urlUtils.js
Source: chromecache_657.10.dr	String found in binary or memory: https://github.com/eligrey/classList.js/blob/master/LICENSE.md
Source: chromecache_657.10.dr	String found in binary or memory: https://github.com/eligrey/classList.js/issues/36
Source: chromecache_674.10.dr	String found in binary or memory: https://github.com/focus-trap/tabbable/blob/master/LICENSE
Source: chromecache_524.10.dr	String found in binary or memory: https://github.com/jquery/jquery-ui/blob/1.11.4/ui/tabs.js#L53
Source: chromecache_524.10.dr	String found in binary or memory: https://github.com/jquery/jquery-ui/blob/1.11.4/ui/tabs.js#L58
Source: chromecache_404.10.dr	String found in binary or memory: https://github.com/jquery/jquery-ui/blob/1.12.1/LICENSE.txt
Source: chromecache_543.10.dr, chromecache_430.10.dr	String found in binary or memory: https://gov1.qualtrics.com/jam
Source: chromecache_543.10.dr, chromecache_430.10.dr	String found in binary or memory: https://gov1.siteintercept.qualtrics.com
Source: chromecache_543.10.dr, chromecache_430.10.dr	String found in binary or memory: https://gov1.siteintercept.qualtrics.com/dxjsmodule/
Source: chromecache_524.10.dr	String found in binary or memory: https://grack.com/blog/2009/11/17/absolutizing-url-in-javascript
Source: chromecache_617.10.dr	String found in binary or memory: https://home-c72.niceincontact.com/inContact/ChatClient/js/embed.min.js
Source: chromecache_657.10.dr	String found in binary or memory: https://jquery.org/
Source: chromecache_449.10.dr, chromecache_555.10.dr, chromecache_615.10.dr, chromecache_511.10.dr	String found in binary or memory: https://lnnte-dncl.gc.ca/en#forConsumers
Source: chromecache_657.10.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_657.10.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_423.10.dr	String found in binary or memory: https://militaryconsumer.gov
Source: chromecache_423.10.dr	String found in binary or memory: https://militaryconsumer.gov/
Source: chromecache_665.10.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_537.10.dr, chromecache_669.10.dr, chromecache_476.10.dr, chromecache_584.10.dr, chromecache_432.10.dr, chromecache_660.10.dr, chromecache_675.10.dr, chromecache_665.10.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_423.10.dr	String found in binary or memory: https://public.govdelivery.com/accounts/USFTCBUSINESS/subscriber/new?category_id=USFTCBUSINESS_C1
Source: chromecache_423.10.dr	String found in binary or memory: https://public.govdelivery.com/accounts/USFTCCONSUMER/subscriber/new?topic_id=USFTCCONSUMER_8
Source: chromecache_423.10.dr	String found in binary or memory: https://public.tableau.com/app/profile/federal.trade.commission/viz/Refunds_15797958402020/Refundsby
Source: chromecache_404.10.dr	String found in binary or memory: https://raw.githubusercontent.com/jquery/jquery-ui/1.12.1/ui/position.js
Source: chromecache_652.10.dr	String found in binary or memory: https://reportefraude.ftc.gov
Source: chromecache_652.10.dr	String found in binary or memory: https://reportefraude.ftc.gov/
Source: chromecache_617.10.dr, chromecache_423.10.dr	String found in binary or memory: https://reportfraud.ftc.gov
Source: chromecache_423.10.dr, chromecache_550.10.dr, chromecache_501.10.dr	String found in binary or memory: https://reportfraud.ftc.gov/
Source: chromecache_617.10.dr	String found in binary or memory: https://reportfraud.ftc.gov/assets/images/RF-SocMed-1200x630-1.png
Source: chromecache_550.10.dr, chromecache_501.10.dr	String found in binary or memory: https://rfkb.azurewebsites.net/qnamaker/knowledgebases/5a1d1b1e-1f22-4e75-8226-de6542c72bca/generate
Source: chromecache_550.10.dr, chromecache_501.10.dr	String found in binary or memory: https://rfml.consumersentinel.gov/ca/predict/api/v1.1/toptwo
Source: chromecache_423.10.dr	String found in binary or memory: https://search.ftc.gov/search
Source: chromecache_652.10.dr	String found in binary or memory: https://search.ftc.gov/search?affiliate=ftc_es_prod
Source: chromecache_445.10.dr	String found in binary or memory: https://search.usa.gov/search
Source: chromecache_423.10.dr	String found in binary or memory: https://search.usa.gov/search?affiliate=ftc_prod
Source: chromecache_657.10.dr	String found in binary or memory: https://stackoverflow.com/a/7557433
Source: chromecache_515.10.dr	String found in binary or memory: https://static.addtoany.com/menu/
Source: chromecache_423.10.dr, chromecache_652.10.dr	String found in binary or memory: https://static.addtoany.com/menu/page.js
Source: chromecache_515.10.dr	String found in binary or memory: https://static.addtoany.com/menu/sm.25.html#type=core&event=load
Source: chromecache_537.10.dr, chromecache_476.10.dr, chromecache_584.10.dr, chromecache_432.10.dr, chromecache_660.10.dr, chromecache_675.10.dr, chromecache_665.10.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_537.10.dr, chromecache_476.10.dr, chromecache_584.10.dr, chromecache_432.10.dr, chromecache_660.10.dr, chromecache_675.10.dr, chromecache_665.10.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_610.10.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_533.10.dr, chromecache_610.10.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_537.10.dr, chromecache_669.10.dr, chromecache_476.10.dr, chromecache_584.10.dr, chromecache_432.10.dr, chromecache_660.10.dr, chromecache_675.10.dr, chromecache_665.10.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_511.10.dr	String found in binary or memory: https://telemarketing.donotcall.gov
Source: chromecache_423.10.dr, chromecache_652.10.dr	String found in binary or memory: https://twitter.com/FTC
Source: chromecache_423.10.dr, chromecache_652.10.dr	String found in binary or memory: https://use.fontawesome.com/releases/v5.13.1/js/brands.js
Source: chromecache_423.10.dr, chromecache_652.10.dr	String found in binary or memory: https://use.fontawesome.com/releases/v5.13.1/js/custom-icons.js
Source: chromecache_423.10.dr, chromecache_652.10.dr	String found in binary or memory: https://use.fontawesome.com/releases/v5.13.1/js/fontawesome.js
Source: chromecache_423.10.dr, chromecache_652.10.dr	String found in binary or memory: https://use.fontawesome.com/releases/v5.13.1/js/regular.js
Source: chromecache_423.10.dr, chromecache_652.10.dr	String found in binary or memory: https://use.fontawesome.com/releases/v5.13.1/js/sharp-light.js
Source: chromecache_423.10.dr, chromecache_652.10.dr	String found in binary or memory: https://use.fontawesome.com/releases/v5.13.1/js/sharp-regular.js
Source: chromecache_423.10.dr, chromecache_652.10.dr	String found in binary or memory: https://use.fontawesome.com/releases/v5.13.1/js/sharp-solid.js
Source: chromecache_423.10.dr, chromecache_652.10.dr	String found in binary or memory: https://use.fontawesome.com/releases/v5.13.1/js/solid.js
Source: chromecache_620.10.dr	String found in binary or memory: https://vimeo.com/
Source: chromecache_620.10.dr	String found in binary or memory: https://vimeo.com/api/oembed.json?url=
Source: chromecache_423.10.dr	String found in binary or memory: https://www.bulkorder.ftc.gov/
Source: chromecache_652.10.dr	String found in binary or memory: https://www.bulkorder.ftc.gov/es
Source: chromecache_566.10.dr, chromecache_664.10.dr, chromecache_625.10.dr, chromecache_686.10.dr	String found in binary or memory: https://www.cloudflare.com/favicon.ico
Source: chromecache_423.10.dr	String found in binary or memory: https://www.consumer.ftc.gov/
Source: chromecache_449.10.dr, chromecache_555.10.dr, chromecache_615.10.dr, chromecache_511.10.dr	String found in binary or memory: https://www.consumer.ftc.gov/articles/0108-national-do-not-call-registry#email
Source: chromecache_615.10.dr, chromecache_511.10.dr	String found in binary or memory: https://www.consumer.ftc.gov/articles/0149-debt-collection
Source: chromecache_423.10.dr	String found in binary or memory: https://www.consumer.ftc.gov/articles/free-credit-reports
Source: chromecache_423.10.dr	String found in binary or memory: https://www.consumer.ftc.gov/credit-loans-and-debt
Source: chromecache_423.10.dr	String found in binary or memory: https://www.consumer.ftc.gov/identity-theft-and-online-security
Source: chromecache_423.10.dr	String found in binary or memory: https://www.consumer.ftc.gov/jobs-and-making-money
Source: chromecache_423.10.dr	String found in binary or memory: https://www.consumer.ftc.gov/scams
Source: chromecache_423.10.dr	String found in binary or memory: https://www.consumer.ftc.gov/shopping-and-donating
Source: chromecache_423.10.dr	String found in binary or memory: https://www.consumer.ftc.gov/unwanted-calls-emails-and-texts
Source: chromecache_511.10.dr	String found in binary or memory: https://www.consumerfinance.gov/complaint/
Source: chromecache_555.10.dr	String found in binary or memory: https://www.consumerfinance.gov/es/presentar-una-queja/
Source: chromecache_423.10.dr	String found in binary or memory: https://www.donotcall.gov
Source: chromecache_423.10.dr, chromecache_615.10.dr, chromecache_511.10.dr	String found in binary or memory: https://www.donotcall.gov/
Source: DNCREGCONF.pdf	String found in binary or memory: https://www.donotcall.gov/)
Source: chromecache_449.10.dr, chromecache_555.10.dr, chromecache_615.10.dr, chromecache_511.10.dr	String found in binary or memory: https://www.donotcall.gov/faq/faqbusiness.aspx
Source: chromecache_449.10.dr, chromecache_555.10.dr, chromecache_652.10.dr	String found in binary or memory: https://www.donotcall.gov/index.html?lang=es-MX
Source: chromecache_449.10.dr, chromecache_555.10.dr, chromecache_615.10.dr, chromecache_511.10.dr	String found in binary or memory: https://www.donotcall.gov/register/reg.aspx?panel=de
Source: chromecache_449.10.dr, chromecache_555.10.dr	String found in binary or memory: https://www.donotcall.gov/report.html?lang=es-MX
Source: chromecache_423.10.dr, chromecache_652.10.dr	String found in binary or memory: https://www.drupal.org)
Source: chromecache_524.10.dr	String found in binary or memory: https://www.drupal.org/core/deprecation#javascript
Source: chromecache_487.10.dr	String found in binary or memory: https://www.drupal.org/node/2940704
Source: chromecache_487.10.dr	String found in binary or memory: https://www.drupal.org/node/3154948.
Source: chromecache_415.10.dr	String found in binary or memory: https://www.drupal.org/node/3183730
Source: chromecache_487.10.dr	String found in binary or memory: https://www.drupal.org/project/drupal/issues/2973400
Source: chromecache_592.10.dr	String found in binary or memory: https://www.drupal.org/project/drupal/issues/3351600
Source: chromecache_423.10.dr	String found in binary or memory: https://www.ftc.gov/
Source: chromecache_652.10.dr	String found in binary or memory: https://www.ftc.gov/es
Source: chromecache_449.10.dr, chromecache_555.10.dr	String found in binary or memory: https://www.ftc.gov/es/informacion-sobre-el-sitio/politica-de-privacidad
Source: chromecache_511.10.dr	String found in binary or memory: https://www.ftc.gov/news-events/media-resources/do-not-call-registry/enforcement
Source: chromecache_423.10.dr	String found in binary or memory: https://www.ftc.gov/office-inspector-general
Source: chromecache_423.10.dr	String found in binary or memory: https://www.ftc.gov/sites/default/files/ftc_gov/images/ftc_social_share_default_en.jpg
Source: chromecache_652.10.dr	String found in binary or memory: https://www.ftc.gov/sites/default/files/ftc_gov/images/ftc_social_share_default_es.jpg
Source: chromecache_617.10.dr	String found in binary or memory: https://www.google-analytics.com
Source: chromecache_587.10.dr, chromecache_645.10.dr, chromecache_715.10.dr, chromecache_666.10.dr, chromecache_650.10.dr, chromecache_525.10.dr, chromecache_570.10.dr, chromecache_448.10.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_533.10.dr, chromecache_610.10.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_533.10.dr, chromecache_610.10.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_533.10.dr, chromecache_610.10.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_665.10.dr	String found in binary or memory: https://www.google.com
Source: chromecache_533.10.dr, chromecache_610.10.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_537.10.dr, chromecache_669.10.dr, chromecache_476.10.dr, chromecache_584.10.dr, chromecache_432.10.dr, chromecache_660.10.dr, chromecache_675.10.dr, chromecache_665.10.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_660.10.dr, chromecache_675.10.dr, chromecache_665.10.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_533.10.dr, chromecache_645.10.dr, chromecache_448.10.dr, chromecache_610.10.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_587.10.dr, chromecache_715.10.dr, chromecache_666.10.dr, chromecache_650.10.dr, chromecache_525.10.dr, chromecache_570.10.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-X2KH68RJRQ
Source: chromecache_423.10.dr, chromecache_652.10.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_423.10.dr, chromecache_652.10.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-KFKRFZQ
Source: chromecache_423.10.dr	String found in binary or memory: https://www.identitytheft.gov/
Source: chromecache_423.10.dr, chromecache_652.10.dr	String found in binary or memory: https://www.linkedin.com/company/163780/
Source: chromecache_537.10.dr, chromecache_476.10.dr, chromecache_584.10.dr, chromecache_432.10.dr, chromecache_660.10.dr, chromecache_675.10.dr, chromecache_665.10.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_652.10.dr	String found in binary or memory: https://www.robodeidentidad.gov
Source: chromecache_423.10.dr	String found in binary or memory: https://www.usa.gov/
Source: chromecache_423.10.dr, chromecache_652.10.dr	String found in binary or memory: https://www.youtube.com/ftcvideos
Source: chromecache_537.10.dr, chromecache_675.10.dr, chromecache_665.10.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_652.10.dr	String found in binary or memory: https://www.youtube.com/playlist?list=PL2D75B6D9AB41667F
Source: chromecache_652.10.dr	String found in binary or memory: https://www.youtube.com/user/FTCvideos/playlists?view=50&sort=dd&shelf_id=5
Source: chromecache_503.10.dr	String found in binary or memory: https://www2.donotcall.gov
Source: chromecache_550.10.dr, chromecache_501.10.dr	String found in binary or memory: https://www2.reportfraud.ftc.gov/PROD_EAST
Source: chromecache_508.10.dr	String found in binary or memory: https://zn9fzsuvvwkc6nzfq-fedtradecommission.gov1.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_9FZSuvvW

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 50319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50189
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 50275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50332 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 50326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50297 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50330 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50342 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 50336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50159
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50167
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 50302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50287 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 50334 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50239
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 50312 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 50167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 50285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 50304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 50316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 50333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50344 -> 443

Source: unknown	HTTPS traffic detected: 23.36.68.63:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.36.68.63:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:49988 version: TLS 1.2

Source: classification engine

Classification label: clean1.winPDF@73/623@80/18

Source: DNCREGCONF.pdf

Initial sample: https://www.donotcall.gov/

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-04-23 22-31-41-784.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\DNCREGCONF.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2088 --field-trial-handle=1552,i,16758632931669318689,2895981579886307693,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://www.donotcall.gov/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1996,i,8102230674122585108,12077789046849465771,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2088 --field-trial-handle=1552,i,16758632931669318689,2895981579886307693,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1996,i,8102230674122585108,12077789046849465771,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: DNCREGCONF.pdf	Initial sample: PDF keyword /JS count = 0
Source: DNCREGCONF.pdf	Initial sample: PDF keyword /JavaScript count = 0
Source: A91tifsqt_ivi92v_5hc.tmp.0.dr	Initial sample: PDF keyword /JS count = 0
Source: A91tifsqt_ivi92v_5hc.tmp.0.dr	Initial sample: PDF keyword /JavaScript count = 0

Source: DNCREGCONF.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://raw.githubusercontent.com/jquery/jquery-ui/1.12.1/ui/position.js	0%	Avira URL Cloud	safe
https://rfkb.azurewebsites.net/qnamaker/knowledgebases/5a1d1b1e-1f22-4e75-8226-de6542c72bca/generate	0%	Avira URL Cloud	safe
https://rfml.consumersentinel.gov/ca/predict/api/v1.1/toptwo	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cluster-alb-1630272095.us-east-1.elb.amazonaws.com	3.222.198.52	true	false	high
ftc.gov	104.101.144.188	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
reportfraud.ftc.gov	107.21.11.164	true	false	high
search.usa.gov	54.230.253.105	true	false	high
d27f3qgc9anoq2.cloudfront.net	3.161.136.81	true	false	high
telemetry.consumersentinel.gov	3.217.69.59	true	false	unknown
static.addtoany.com	104.22.71.197	true	false	high
www.google.com	142.250.105.103	true	false	high
www.donotcall.gov	52.23.29.251	true	false	high
vimeo-video.map.fastly.net	151.101.14.109	true	false	unknown
dap.digitalgov.gov	unknown	unknown	false	high
home-c72.niceincontact.com	unknown	unknown	false	high
extend.vimeocdn.com	unknown	unknown	false	high
gov1.siteintercept.qualtrics.com	unknown	unknown	false	high
use.fontawesome.com	unknown	unknown	false	high
zn9ypt3vnzbt6rvcy-fedtradecommission.gov1.siteintercept.qualtrics.com	unknown	unknown	false	high
www.ftc.gov	unknown	unknown	false	high
dc.services.visualstudio.com	unknown	unknown	false	high
zn9fzsuvvwkc6nzfq-fedtradecommission.gov1.siteintercept.qualtrics.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://www.donotcall.gov/images/Header_generic_moreinfo.jpg	false	high
https://www.donotcall.gov/images/FTC_subpg_header3_submit.jpg	false	high
https://reportfraud.ftc.gov/	false	high
https://reportfraud.ftc.gov/assets/images/ftc-dnc-logo.jpg	false	high
http://ftc.gov/	false	high
https://reportfraud.ftc.gov/assets/images/helpStopFraud.svg	false	high
https://www.ftc.gov/#main-content	false	high
https://reportfraud.ftc.gov/265.dae6f19b57ed9aa7.js	false	high
https://www.ftc.gov/	false	high
https://reportfraud.ftc.gov/667.87de367fb3b518c9.js	false	high
https://reportfraud.ftc.gov/main.cba37e78289a564b.js	false	high
https://reportfraud.ftc.gov/assets/images/RF-Hero-1200x467-v3.svg	false	high
https://reportfraud.ftc.gov/assets/images/RF-Logo-Seal-NEW-01.svg	false	high
https://search.usa.gov/assets/sayt_loader.js	false	high
https://home-c72.niceincontact.com/inContact/ChatClient/js/embed.min.js	false	high
https://reportfraud.ftc.gov/assets/images/To-Do.svg	false	high
https://www.donotcall.gov/manifest.json	false	high
https://www.donotcall.gov/css/styles.css	false	high
https://reportfraud.ftc.gov/assets/images/lock-icon.png	false	high
https://www.donotcall.gov/js/global.js	false	high
https://dap.digitalgov.gov/Universal-Federated-Analytics-Min.js?agency=FTC	false	high
https://www.donotcall.gov/images/FTC_DNC_main1_2_verify.jpg	false	high
https://reportfraud.ftc.gov/189.55854287e34e0293.js	false	high
https://www.donotcall.gov/js/lib/jquery.i18n/jquery.i18n.fallbacks.js	false	high
https://www.donotcall.gov/js/lib/jquery.i18n/jquery.i18n.js	false	high
https://www.donotcall.gov/js/menu.js	false	high
https://www.donotcall.gov/images/verify_bl_sm.gif	false	high
https://www.donotcall.gov/images/DNC-masthead.svg	false	high
https://reportfraud.ftc.gov/styles.e8c5964d39f13771.css	false	high
https://www.donotcall.gov/images/FTC_subpg_header1_register.jpg	false	high
https://www.donotcall.gov/js/lib/jquery.i18n/jquery.i18n.emitter.js	false	high
https://reportfraud.ftc.gov/510.30c87c878b76878e.js	false	high
https://www.donotcall.gov/register.html	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.drupal.org/node/3183730	chromecache_415.10.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_537.10.dr, chromecache_476.10.dr, chromecache_584.10.dr, chromecache_432.10.dr, chromecache_660.10.dr, chromecache_675.10.dr, chromecache_665.10.dr	false		high
https://www.donotcall.gov/)	DNCREGCONF.pdf	false		high
http://www.consumidor.ftc.gov/articulos/s0108-registro-nacional-no-llame#email	chromecache_555.10.dr	false		high
http://api.jqueryui.com/dialog/#theming	chromecache_560.10.dr, chromecache_672.10.dr, chromecache_627.10.dr	false		high
https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/getModifierState	chromecache_657.10.dr	false		high
https://www.consumer.ftc.gov/articles/free-credit-reports	chromecache_423.10.dr	false		high
https://consumer.ftc.gov/node/85169	chromecache_423.10.dr	false		high
https://use.fontawesome.com/releases/v5.13.1/js/solid.js	chromecache_423.10.dr, chromecache_652.10.dr	false		high
https://www.consumer.ftc.gov/articles/0108-national-do-not-call-registry#email	chromecache_449.10.dr, chromecache_555.10.dr, chromecache_615.10.dr, chromecache_511.10.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_533.10.dr, chromecache_610.10.dr	false		high
https://consumidor.ftc.gov/articulos/informes-de-credito-gratuitos	chromecache_652.10.dr	false		high
https://consumer.ftc.gov/node/85163	chromecache_423.10.dr	false		high
https://fontawesome.com	chromecache_658.10.dr, chromecache_706.10.dr, chromecache_557.10.dr, chromecache_396.10.dr	false		high
https://search.usa.gov/search	chromecache_445.10.dr	false		high
http://www.consumer.ftc.gov/articles/0108-national-do-not-call-registry#calls	chromecache_615.10.dr, chromecache_511.10.dr	false		high
https://api.jqueryui.com/dialog/#method-_allowInteraction	chromecache_592.10.dr	false		high
https://gov1.siteintercept.qualtrics.com	chromecache_543.10.dr, chromecache_430.10.dr	false		high
https://consumidor.ftc.gov	chromecache_652.10.dr	false		high
https://complaints.donotcall.gov/complaint/complaintcheck.aspx	chromecache_615.10.dr, chromecache_511.10.dr	false		high
https://search.ftc.gov/search?affiliate=ftc_es_prod	chromecache_652.10.dr	false		high
https://use.fontawesome.com/releases/v5.13.1/js/custom-icons.js	chromecache_423.10.dr, chromecache_652.10.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_610.10.dr	false		high
https://www.donotcall.gov	chromecache_423.10.dr	false		high
http://www.ftc.gov/bcp/edu/pubs/consumer/alerts/alt107.shtm	chromecache_511.10.dr	false		high
https://bugs.chromium.org/p/v8/issues/detail?id=4118	chromecache_657.10.dr	false		high
https://designsystem.digital.gov/design-tokens	chromecache_471.10.dr, chromecache_640.10.dr, chromecache_445.10.dr	false		high
https://use.fontawesome.com/releases/v5.13.1/js/brands.js	chromecache_423.10.dr, chromecache_652.10.dr	false		high
https://www.youtube.com/playlist?list=PL2D75B6D9AB41667F	chromecache_652.10.dr	false		high
http://api.jqueryui.com/checkboxradio/#theming	chromecache_624.10.dr, chromecache_551.10.dr, chromecache_426.10.dr	false		high
http://stackoverflow.com/a/9039885/177710	chromecache_657.10.dr	false		high
https://twitter.com/FTC	chromecache_423.10.dr, chromecache_652.10.dr	false		high
https://bulkorder.ftc.gov/	chromecache_423.10.dr	false		high
https://vimeo.com/	chromecache_620.10.dr	false		high
http://www.consumer.ftc.gov/articles/0108-national-do-not-call-registry#email	chromecache_511.10.dr	false		high
https://rfkb.azurewebsites.net/qnamaker/knowledgebases/5a1d1b1e-1f22-4e75-8226-de6542c72bca/generate	chromecache_550.10.dr, chromecache_501.10.dr	false	Avira URL Cloud: safe	unknown
http://www.consumidor.ftc.gov/destacado/destacado-s0025-llamadas-automaticas-pre-grabadas-o-robocall	chromecache_555.10.dr	false		high
https://www.consumer.ftc.gov/scams	chromecache_423.10.dr	false		high
https://www.drupal.org/project/drupal/issues/2973400	chromecache_487.10.dr	false		high
http://www.ftc.gov/es	chromecache_555.10.dr, chromecache_715.10.dr, chromecache_666.10.dr, chromecache_650.10.dr, chromecache_525.10.dr, chromecache_570.10.dr, chromecache_615.10.dr, chromecache_511.10.dr	false		high
http://business.ftc.gov/documents/alt129-qa-telemarketers-sellers-about-dnc-provisions-tsr	chromecache_615.10.dr, chromecache_511.10.dr	false		high
https://www.donotcall.gov/register/reg.aspx?panel=de	chromecache_449.10.dr, chromecache_555.10.dr, chromecache_615.10.dr, chromecache_511.10.dr	false		high
http://underscorejs.org/LICENSE	chromecache_657.10.dr	false		high
http://www.consumidor.ftc.gov/temas/limitar-llamadas-e-emails-no-deseados	chromecache_449.10.dr, chromecache_555.10.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_537.10.dr, chromecache_476.10.dr, chromecache_584.10.dr, chromecache_432.10.dr, chromecache_660.10.dr, chromecache_675.10.dr, chromecache_665.10.dr	false		high
https://www.ftc.gov/office-inspector-general	chromecache_423.10.dr	false		high
https://reportfraud.ftc.gov	chromecache_617.10.dr, chromecache_423.10.dr	false		high
https://raw.githubusercontent.com/jquery/jquery-ui/1.12.1/ui/position.js	chromecache_404.10.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/controlgroup/#theming	chromecache_500.10.dr, chromecache_455.10.dr, chromecache_687.10.dr	false		high
http://www.ftc.gov/	chromecache_511.10.dr	false		high
http://www.imagemagick.org	chromecache_462.10.dr	false		high
http://www.consumidor.ftc.gov/articulos/s0108-registro-nacional-no-llame	chromecache_555.10.dr	false		high
https://www.ftc.gov/news-events/media-resources/do-not-call-registry/enforcement	chromecache_511.10.dr	false		high
https://designsystem.digital.gov/design-tokens/spacing-units	chromecache_471.10.dr, chromecache_640.10.dr, chromecache_445.10.dr	false		high
https://www.drupal.org/core/deprecation#javascript	chromecache_524.10.dr	false		high
https://rfml.consumersentinel.gov/ca/predict/api/v1.1/toptwo	chromecache_550.10.dr, chromecache_501.10.dr	false	Avira URL Cloud: safe	unknown
http://www.ftc.gov/bcp/edu/pubs/consumer/alerts/salt107.shtm	chromecache_555.10.dr	false		high
https://fontawesome.com/license/free	chromecache_658.10.dr, chromecache_706.10.dr, chromecache_557.10.dr, chromecache_396.10.dr	false		high
https://www.ftc.gov/es/informacion-sobre-el-sitio/politica-de-privacidad	chromecache_449.10.dr, chromecache_555.10.dr	false		high
https://github.com/eligrey/classList.js/blob/master/LICENSE.md	chromecache_657.10.dr	false		high
https://designsystem.digital.gov/design-tokens/color	chromecache_471.10.dr, chromecache_640.10.dr, chromecache_445.10.dr	false		high
https://public.tableau.com/app/profile/federal.trade.commission/viz/Refunds_15797958402020/Refundsby	chromecache_423.10.dr	false		high
https://github.com/jquery/jquery-ui/blob/1.12.1/LICENSE.txt	chromecache_404.10.dr	false		high
http://www.consumidor.ftc.gov/articulos/s0149-cobranza-de-deudas	chromecache_555.10.dr	false		high
https://designsystem.digital.gov/utilities	chromecache_471.10.dr, chromecache_640.10.dr, chromecache_445.10.dr	false		high
https://public.govdelivery.com/accounts/USFTCCONSUMER/subscriber/new?topic_id=USFTCCONSUMER_8	chromecache_423.10.dr	false		high
https://www.consumerfinance.gov/es/presentar-una-queja/	chromecache_555.10.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.161.136.81	d27f3qgc9anoq2.cloudfront.net	United States	16509	AMAZON-02US	false
104.101.144.188	ftc.gov	United States	16625	AKAMAI-ASUS	false
107.21.11.164	reportfraud.ftc.gov	United States	14618	AMAZON-AESUS	false
172.67.39.148	unknown	United States	13335	CLOUDFLARENETUS	false
104.22.71.197	static.addtoany.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
54.230.253.13	unknown	United States	16509	AMAZON-02US	false
74.125.136.103	unknown	United States	15169	GOOGLEUS	false
3.217.69.59	telemetry.consumersentinel.gov	United States	14618	AMAZON-AESUS	false
52.23.29.251	www.donotcall.gov	United States	14618	AMAZON-AESUS	false
142.250.105.103	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.14.109	vimeo-video.map.fastly.net	United States	54113	FASTLYUS	false
3.222.198.52	cluster-alb-1630272095.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
104.22.70.197	unknown	United States	13335	CLOUDFLARENETUS	false
3.161.136.111	unknown	United States	16509	AMAZON-02US	false
54.230.253.105	search.usa.gov	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1430581
Start date and time:	2024-04-23 22:30:42 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	DNCREGCONF.pdf
Detection:	CLEAN
Classification:	clean1.winPDF@73/623@80/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Browse: http://ftc.gov/ Browse: http://www.ftc.gov/es Browse: https://www.donotcall.gov/faq.html Browse: https://www.donotcall.gov/index.html Browse: http://ftc.gov/ Browse: http://www.ftc.gov/es Browse: https://www.donotcall.gov/faq.html Browse: https://www.donotcall.gov/index.html Browse: https://www.donotcall.gov/report.html Browse: https://www.donotcall.gov/verify.html Browse: https://www.donotcall.gov/register.html Close Viewer Browse: http://ftc.gov/ Browse: http://www.ftc.gov/es Browse: https://www.donotcall.gov/faq.html Browse: https://www.donotcall.gov/index.html Browse: http://ftc.gov/ Browse: http://www.ftc.gov/es Browse: https://www.donotcall.gov/faq.html Browse: https://www.donotcall.gov/index.html Browse: https://www.donotcall.gov/report.html Browse: https://www.donotcall.gov/verify.html Browse: https://www.donotcall.gov/register.html Browse: https://www.ftc.gov/#main-content Browse: https://www.ftc.gov/es Browse: https://reportfraud.ftc.gov/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.36.68.10, 54.144.73.197, 18.207.85.246, 107.22.247.231, 34.193.227.236, 23.6.117.26, 23.6.117.24, 162.159.61.3, 172.64.41.3, 23.47.204.8, 23.47.204.33, 23.45.13.137, 192.229.211.108, 172.217.215.94, 64.233.177.113, 64.233.177.139, 64.233.177.102, 64.233.177.100, 64.233.177.138, 64.233.177.101, 142.250.105.84, 34.104.35.123, 142.250.105.97, 74.125.136.113, 74.125.136.138, 74.125.136.139, 74.125.136.100, 74.125.136.101, 74.125.136.102, 64.233.176.95, 142.251.15.95, 74.125.136.95, 64.233.185.95, 173.194.219.95, 74.125.138.95, 172.217.215.95, 142.250.9.95, 172.253.124.95, 142.250.105.95, 64.233.177.95, 108.177.122.95, 23.7.50.71, 172.67.142.245, 104.21.27.152, 142.251.15.94, 104.67.210.224, 184.25.164.140, 142.250.105.94, 142.250.9.100, 142.250.9.102, 142.250.9.138, 142.250.9.139, 142.250.9.113, 142.250.9.101, 173.194.219.94, 64.233.176.100, 64.233.176.138, 64.233.176.139, 64.233.176.101, 64.233.176.102, 64.233.176.113, 172.253.124.97, 173.194.219.113, 173.194.219.100,
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, wildcard.qualtrics.new.edgekey.net, slscr.update.microsoft.com, clientservices.googleapis.com, www.ftc.gov.edgekey.net, use.fontawesome.com.cdn.cloudflare.net, acroipm2.adobe.com, clients2.google.com, ocsp.digicert.com, ssl-delivery.adobe.com.edgekey.net, www.googletagmanager.com, a122.dscd.akamai.net, update.googleapis.com, gig-ai-prod-eastus-global.trafficmanager.net, www.google-analytics.com, optimizationguide-pa.googleapis.com, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, e12398.b.akamaiedge.net, content-autofill.googleapis.com, acroipm2.adobe.com.edgesuite.net, fonts.gstatic.com, ctldl.windowsupdate.com, p13n.adobe.io, gig-ai-g-prod-eastus-7-app-v4-tag.eastus.cloudapp.azure.com, gig-ai-g-prod-eastus-10-app-v4-tag.eastus.cloudapp.azure.com, fe3cr.delivery.mp.microsoft.com, e8241.dscb.akamaiedge.net, edgedl.me.gvt1.com, translate.googleapis.com, dc.trafficmanager.net, dc.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
VT rate limit hit for: DNCREGCONF.pdf

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
172.67.39.148	https://docxservice110365.com/	Get hash	malicious	Unknown	Browse
	https://cpanel12wh.bkk1.cloud.z.com/~cp318430/app/browser/account.php	Get hash	malicious	HTMLPhisher	Browse
	http://charmrecruit.co.za/php/Arosales//////////////////////uvlvnbirgvoxjjfkzkrngcuxwagnndbtyatygizbuqotvyjcvq/tjubiutbyaYXJvc2FsZXNAb2Zzb3B0aWNzLmNvbQ==~lg=pricepaidonsweat919	Get hash	malicious	Unknown	Browse
	http://track.redrebelnews.com/?xtl=1vds7g1b0kkc3nlynp6ntp65642kf41zo415tjwk7c0fme2j06ieygrbuj0aw1elwycducyqfym9ytp8zi53yta3neno981l7wup11q0rzjhglbza6xsgdzs8v8fob99z0vuq1oj7d06vcof84ubmaa3k5nx8252bj2t3sbzcrj6scibc8slwu5i2qt50uungi5up2ccfcezn3e09zti7dkhd81bgrpq4tn9n1rpkvatrwdk6wbjcfqe17rj2epyuzteuio89r3k9qiughu2dte4cgitnco9zowrnyrowg3uo7fxiaougtjgzk8kp9rqfu7swnlqjqp2nzgdgx6geh8pv5pg32zuto61t1d6z0qbxkn6kxo605mclx5ywxjho7hbajc8og9ybfa8xnn846xwsuhd7bhbrvc9lhvg77q2on5cnrhwykm52zhsn6m8y3v7y8h4vcljt&eih=1wlita4m575llogpx0ojzus55azhlcj&__stmp=s9yj6a	Get hash	malicious	Unknown	Browse
	https://cloudflare-ipfs.com/ipfs/QmTEwApZ8Hy5hsoP9ENwFsUpfJSGsu2kF7zKH663Njqfpv/index2riz2102.html#test.test@kghm.com	Get hash	malicious	HTMLPhisher	Browse
	https://gateway.lighthouse.storage/ipfs/QmVoqV78DWGUQGiMRedyCc2tfAc1gwG9W9Qhu9jpe7h49R?filename=self.html#test@kghm.com	Get hash	malicious	HTMLPhisher	Browse
	https://u3475401.ct.sendgrid.net/ls/click?upn=u001.0-2BOjl-2BZg3Rqumxt-2BL7adNSm8oShdqLcKfe3phwTJM2sm2GgvhjDlDlifxUG2C9lGvkFx_BS-2FCGvsXme-2BolZM92Eoni-2FdtdMvSpGU1Lrwe4I6quydUxKPtzR8lyAmi7xMrMCMMIUNSXrpDIpqh-2FqvvAK2cGe6q-2B2YQnbfa5DfcPXKwHcqBYWlQBKyEBmOUvcM-2FV3SpgQ5DT8vuunLHHFJrV-2FlE1zhEvTw1NYwEfo-2BAUWZzvVzZdMJNITwE9aVRolXPoIqnd0gkznPM82I8tZ5vY6VQTwyoQURRvJM7Ykq6CcNXqibCj6vfSW1-2Ffbuta9t-2BFMxK	Get hash	malicious	Unknown	Browse
	ManyToOneMailMerge Ver 18.8.dotm	Get hash	malicious	Unknown	Browse
	https://ja.cat/adq	Get hash	malicious	Unknown	Browse
	http://mylovelybluesky.com	Get hash	malicious	Unknown	Browse
104.22.71.197	http://hlbco.ca	Get hash	malicious	Unknown	Browse
	http://fidellty-ps.com	Get hash	malicious	Unknown	Browse
	https://cpanel12wh.bkk1.cloud.z.com/~cp318430/app/browser/account.php	Get hash	malicious	HTMLPhisher	Browse
	http://track.redrebelnews.com/?xtl=1vds7g1b0kkc3nlynp6ntp65642kf41zo415tjwk7c0fme2j06ieygrbuj0aw1elwycducyqfym9ytp8zi53yta3neno981l7wup11q0rzjhglbza6xsgdzs8v8fob99z0vuq1oj7d06vcof84ubmaa3k5nx8252bj2t3sbzcrj6scibc8slwu5i2qt50uungi5up2ccfcezn3e09zti7dkhd81bgrpq4tn9n1rpkvatrwdk6wbjcfqe17rj2epyuzteuio89r3k9qiughu2dte4cgitnco9zowrnyrowg3uo7fxiaougtjgzk8kp9rqfu7swnlqjqp2nzgdgx6geh8pv5pg32zuto61t1d6z0qbxkn6kxo605mclx5ywxjho7hbajc8og9ybfa8xnn846xwsuhd7bhbrvc9lhvg77q2on5cnrhwykm52zhsn6m8y3v7y8h4vcljt&eih=1wlita4m575llogpx0ojzus55azhlcj&__stmp=s9yj6a	Get hash	malicious	Unknown	Browse
	https://alu-met.com/downloads	Get hash	malicious	Unknown	Browse
	https://cloudflare-ipfs.com/ipfs/QmTEwApZ8Hy5hsoP9ENwFsUpfJSGsu2kF7zKH663Njqfpv/index2riz2102.html#test.test@kghm.com	Get hash	malicious	HTMLPhisher	Browse
	https://gateway.lighthouse.storage/ipfs/QmVoqV78DWGUQGiMRedyCc2tfAc1gwG9W9Qhu9jpe7h49R?filename=self.html#test@kghm.com	Get hash	malicious	HTMLPhisher	Browse
	ManyToOneMailMerge Ver 18.8.dotm	Get hash	malicious	Unknown	Browse
	http://lawyertestsite.com/filings	Get hash	malicious	Phisher	Browse
	https://lisa@yoghurtco.com.au	Get hash	malicious	Unknown	Browse
239.255.255.250	http://improvingpayments.com	Get hash	malicious	Unknown	Browse
	https://forms.osi.office365.us/r/sWNQn6JMmp	Get hash	malicious	Unknown	Browse
	https://lithiuimvalley.com/ssd	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse
	https://www.canva.com/design/DAGDQX9C1RA/ikoShuUWpLZHCz9c3cYitg/view?utm_content=DAGDQX9C1RA&utm_campaign=designshare&utm_medium=link&utm_source=editor__;!!CyJlM5U!9gbXWj2ch6yN1Y5XKwfOUHQShQIbTlzYRSO4Um3mFsV2g5g0oW-nJ8MZWZtDhmirJBaPx4ZvIj53wB9NG9AkzdEZQzUOutWiQQ$	Get hash	malicious	Unknown	Browse
	https://proofpoint.onelogin.sso-signon.com/	Get hash	malicious	Unknown	Browse
	https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DlLb9_7VBE-2BPKrWdDFE8TeQU0FNoYmRNt3BbsAfHCQfpyMVcUv91cWM1GbR6tMnpfVZqwoeCii1Z-2FHB6Wp4CGi-2FJ4Nq2flvhbRyRKwbWUqyssDslf87wBQZbBQ0EZsTXlvzjuj1ZnarL4QCJJlvUup-2FiM-2F9GPG6X3nhhKKp6sQ0v-2BBs5Jrrpzc3e5B2aUKKEJUx1Hjrx3xc16wmpK1HmM2sLiNIweMaJlJ9frDis7-2BK565mLw-3D	Get hash	malicious	HTMLPhisher	Browse
	https://www.jottacloud.com/s/359ee8b110b8ca8464998842a5d227ed979	Get hash	malicious	HTMLPhisher	Browse
	https://webmail.cmxserver.com/authsecure/index.php?email=kaylen@virtualintelligencebriefing.com	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Amadey, PureLog Stealer, RedLine, RisePro Stealer, zgRAT	Browse
	https://assets-usa.mkt.dynamics.com/6f8aa86c-81f8-ee11-a1fa-0022482e8338/digitalassets/standaloneforms/4b367e61-8601-ef11-a1fd-0022482f3701	Get hash	malicious	HTMLPhisher	Browse
151.101.14.109	https://www.joesandbox.com/login	Get hash	malicious	Unknown	Browse
	https://dinamicconsultores.app.questorpublico.com.br/	Get hash	malicious	HTMLPhisher	Browse
	https://bits.zynbit.com/link?guid=3fad1cfe-ee34-41d3-abdf-882b9f9a87bc&url=http://www.cygnetise.com/	Get hash	malicious	Unknown	Browse
	http://www.musicgateway.com/transfer/9gDHJ3FV2emdZR7n	Get hash	malicious	HTMLPhisher	Browse
	https://xwb1g7jd.paperform.co/	Get hash	malicious	Unknown	Browse
	https://www.transferbigfiles.com/e7f083a7-15bd-4099-b9e1-3d3fbc84e6a2/oY-ShKgb3-M2GRSPnDCoiA2	Get hash	malicious	HTMLPhisher	Browse
	https://www.transferbigfiles.com/543db29a-897b-4fbb-bdc7-538e77aef216/NrEXoiFz--TaqW2sUV0pCA2	Get hash	malicious	HTMLPhisher	Browse
	https://service-noreply.info/e4a337ff2ad671d883042fe1d81d1fc130c94daa	Get hash	malicious	HTMLPhisher	Browse
	STH-remittance-overdue.htm	Get hash	malicious	Unknown	Browse
	https://thegetx.com/a-9afernandes-e8marin-9anl	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
static.addtoany.com	https://docxservice110365.com/	Get hash	malicious	Unknown	Browse	104.22.70.197
	http://hlbco.ca	Get hash	malicious	Unknown	Browse	104.22.71.197
	http://fidellty-ps.com	Get hash	malicious	Unknown	Browse	104.22.70.197
	https://cpanel12wh.bkk1.cloud.z.com/~cp318430/app/browser/account.php	Get hash	malicious	HTMLPhisher	Browse	172.67.39.148
	http://charmrecruit.co.za/php/Arosales//////////////////////uvlvnbirgvoxjjfkzkrngcuxwagnndbtyatygizbuqotvyjcvq/tjubiutbyaYXJvc2FsZXNAb2Zzb3B0aWNzLmNvbQ==~lg=pricepaidonsweat919	Get hash	malicious	Unknown	Browse	172.67.39.148
	http://track.redrebelnews.com/?xtl=1vds7g1b0kkc3nlynp6ntp65642kf41zo415tjwk7c0fme2j06ieygrbuj0aw1elwycducyqfym9ytp8zi53yta3neno981l7wup11q0rzjhglbza6xsgdzs8v8fob99z0vuq1oj7d06vcof84ubmaa3k5nx8252bj2t3sbzcrj6scibc8slwu5i2qt50uungi5up2ccfcezn3e09zti7dkhd81bgrpq4tn9n1rpkvatrwdk6wbjcfqe17rj2epyuzteuio89r3k9qiughu2dte4cgitnco9zowrnyrowg3uo7fxiaougtjgzk8kp9rqfu7swnlqjqp2nzgdgx6geh8pv5pg32zuto61t1d6z0qbxkn6kxo605mclx5ywxjho7hbajc8og9ybfa8xnn846xwsuhd7bhbrvc9lhvg77q2on5cnrhwykm52zhsn6m8y3v7y8h4vcljt&eih=1wlita4m575llogpx0ojzus55azhlcj&__stmp=s9yj6a	Get hash	malicious	Unknown	Browse	104.22.71.197
	https://alu-met.com/downloads	Get hash	malicious	Unknown	Browse	104.22.70.197
	https://cloudflare-ipfs.com/ipfs/QmTEwApZ8Hy5hsoP9ENwFsUpfJSGsu2kF7zKH663Njqfpv/index2riz2102.html#test.test@kghm.com	Get hash	malicious	HTMLPhisher	Browse	172.67.39.148
	https://www.theviolenceproject.org/mass-shooter-database/	Get hash	malicious	Unknown	Browse	104.22.70.197
	https://gateway.lighthouse.storage/ipfs/QmVoqV78DWGUQGiMRedyCc2tfAc1gwG9W9Qhu9jpe7h49R?filename=self.html#test@kghm.com	Get hash	malicious	HTMLPhisher	Browse	104.22.71.197
d27f3qgc9anoq2.cloudfront.net	https://www.epa.gov/climateleadership/simplified-ghg-emissions-calculator	Get hash	malicious	Unknown	Browse	3.161.136.111
	http://usps-pr.helprtu.top/	Get hash	malicious	Unknown	Browse	18.67.76.119
	https://veryfy3gnl.com/session/login.php?e21d9e71246cfcdef8fb7084fa13c488	Get hash	malicious	Unknown	Browse	99.84.252.82
	US Vendor Self Certification 2024.docx	Get hash	malicious	Unknown	Browse	18.239.225.43
	https://usps.ddmylar.top	Get hash	malicious	Unknown	Browse	13.35.93.73
	https://ousps88.cc/	Get hash	malicious	Unknown	Browse	18.164.154.79
	https://usps-chentya.165-227-15-167.cprapid.com/	Get hash	malicious	Unknown	Browse	99.86.229.24
	FW DOE-GSA Procurement Notice For Newton Crouch Company - IW8637892.msg	Get hash	malicious	Unknown	Browse	3.161.136.111
	https://usnpsl.top	Get hash	malicious	Unknown	Browse	3.161.136.28
	http://zpr.io/YhnsXsPMktKB	Get hash	malicious	Unknown	Browse	3.161.136.111
vimeo-video.map.fastly.net	https://www.sigtn.com/utils/emt.cfm?client_id=9195153&campaign_id=73466&link=aHR0cHM6Ly9saW5rLm1haWwuYmVlaGlpdi5jb20vbHMvY2xpY2s/dXBuPXUwMDEuejBtZmZPQjFDc0hRa1dFS1BUa2pmNGhNM3k4S1RjcXFzY1h5Ty0yQk5ReDVsc2xZTDljZng5OWJnTk5wUnQyOUFVQkFwdEYwdE1Sb3dBcW0tMkZOQW55a1dsWXNJOU1Jb3NPNVJkLTJCRFplWFVYRGdFanM4NjBvY0dZSDUxRDItMkZKWXNZZlFHVldGaHRRNFYyVzBGT0NGYm9nQ0FORnpjNzdXZ0JTcGUtMkZwdXNzUHBkSXNFTG02bVBSYm5YU1pQZ29kdDJXNU9QMFpfZm1TRy0yRkI0S1JGdHUxTXZ1eTR1bG10c2Y1YTRFZm8tMkZYNE95eEZEZ3NFS2JnYkxnaUtEaUtZNk1iSUdNZXJVM3JXdFI5TUVlUXNiMVR6VzZoSkkzQkxyOXpKOG1WRzlDenlwaHFKeHBXc1pGMk85aEhNLTJGMFlFQ29LV09ELTJGRGpWOXNPdlFybWFFOUFQQ3FYcGJBenpvMGEyenh1T3hOV3pjYmo3NC0yRi0yRlp5SFU2dFdmbER4YUo2aUxzTS0yQnVtYWMyZlVNTTkwYzdtZE9kLTJGRjlkVno3YXl3U2ZDUmNsSHh2cTlCakxmYlM5YnZpRlJJbDBPSlpUSmJRVDFzSjNEbWFzTm45OGdQLTJCcjlIZmNOZktnZ1lXSXZMZi0yQlZlTHRVLTJCNVc0ZGkwaTZ5TnFLZmZjd29qbUpJV0twRmd5RGlBRDRxcUhnQmlCZWVVT0s1UXdUTVhXck9LLTJGZzBVaEZKb01ac3pIbE05cGs0aWJySmc4dHQzZUdWaGZ6T08yT3NvWS0yRktsYlZGdklTT3EzZzd6Um1pTWNVc0NpdHVsRE9ucklqaWlGNFFTRGpUaERidXdpU0xBMUJWWkRqZ3E4NlhsODRzbVZZI3BldGVyQGh1Ym9vLmNvLnVr	Get hash	malicious	Unknown	Browse	151.101.54.109
	https://www.sigtn.com/utils/emt.cfm?client_id=9195153&campaign_id=73466&link=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	Get hash	malicious	Unknown	Browse	151.101.54.109
	https://www.sigtn.com/utils/emt.cfm?client_id=9195153&campaign_id=73466&link=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	Get hash	malicious	Unknown	Browse	151.101.54.109
	https://www.sigtn.com/utils/emt.cfm?client_id=9195153&campaign_id=73466&link=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	Get hash	malicious	Unknown	Browse	151.101.54.109
	https://www.sigtn.com/utils/emt.cfm?client_id=9195153&campaign_id=73466&link=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	Get hash	malicious	Unknown	Browse	151.101.54.109
	https://www.sigtn.com/utils/emt.cfm?client_id=9195153&campaign_id=73466&link=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	Get hash	malicious	Unknown	Browse	151.101.54.109
	https://www.joesandbox.com/login	Get hash	malicious	Unknown	Browse	151.101.14.109
	https://dinamicconsultores.app.questorpublico.com.br/	Get hash	malicious	HTMLPhisher	Browse	151.101.14.109
	http://kunnskapsfilm.no	Get hash	malicious	Unknown	Browse	146.75.82.109
	https://scripts.mediavine.com	Get hash	malicious	Unknown	Browse	146.75.94.109
search.usa.gov	https://www.eia.gov/opendata/excel/	Get hash	malicious	Unknown	Browse	108.139.29.91
	http://doftgov-us.com	Get hash	malicious	Unknown	Browse	13.224.103.62
	http://us-dotbids.com	Get hash	malicious	Unknown	Browse	13.224.103.36
	http://www.agcc-project.com	Get hash	malicious	Unknown	Browse	143.204.231.127
	https://teal-anorak-f62.notion.site/Wichita-Gaming-Commission-a34eeeffb05e4819aef4474abf06896c	Get hash	malicious	Unknown	Browse	54.82.81.92

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	https://lithiuimvalley.com/ssd	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	35.163.144.222
	https://www.canva.com/design/DAGDQX9C1RA/ikoShuUWpLZHCz9c3cYitg/view?utm_content=DAGDQX9C1RA&utm_campaign=designshare&utm_medium=link&utm_source=editor__;!!CyJlM5U!9gbXWj2ch6yN1Y5XKwfOUHQShQIbTlzYRSO4Um3mFsV2g5g0oW-nJ8MZWZtDhmirJBaPx4ZvIj53wB9NG9AkzdEZQzUOutWiQQ$	Get hash	malicious	Unknown	Browse	108.156.152.63
	https://proofpoint.onelogin.sso-signon.com/	Get hash	malicious	Unknown	Browse	3.144.141.109
	https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DlLb9_7VBE-2BPKrWdDFE8TeQU0FNoYmRNt3BbsAfHCQfpyMVcUv91cWM1GbR6tMnpfVZqwoeCii1Z-2FHB6Wp4CGi-2FJ4Nq2flvhbRyRKwbWUqyssDslf87wBQZbBQ0EZsTXlvzjuj1ZnarL4QCJJlvUup-2FiM-2F9GPG6X3nhhKKp6sQ0v-2BBs5Jrrpzc3e5B2aUKKEJUx1Hjrx3xc16wmpK1HmM2sLiNIweMaJlJ9frDis7-2BK565mLw-3D	Get hash	malicious	HTMLPhisher	Browse	99.84.108.67
	https://go.gkrtmc.com/aff_f?h=0L0Tat&aff_sub4=bustynina&aff_sub5=other&source=t0mb@s	Get hash	malicious	Unknown	Browse	108.138.64.122
	http://divbracket.com	Get hash	malicious	Unknown	Browse	13.32.230.13
	http://browser-intake-foxbusiness.com	Get hash	malicious	Unknown	Browse	13.248.148.254
	http://opportunity.therecruitpro.net/pixel_44aee49e8e.gif	Get hash	malicious	Unknown	Browse	34.248.78.201
	https://acrobat.adobe.com/id/urn:aaid:sc:AP:c47bd847-0028-43f6-8564-6c8445af0ecc	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	99.86.229.14
	_file____C__Users_hp_Downloads_C__Users_moodyt_AppData_Local_Temp_2_RemittanceAdvice17-Apr-2024.html	Get hash	malicious	Unknown	Browse	3.161.193.119
AMAZON-AESUS	https://lithiuimvalley.com/ssd	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	34.234.52.18
	http://divbracket.com	Get hash	malicious	Unknown	Browse	54.144.144.142
	https://acrobat.adobe.com/id/urn:aaid:sc:AP:c47bd847-0028-43f6-8564-6c8445af0ecc	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	52.71.63.232
	_file____C__Users_hp_Downloads_C__Users_moodyt_AppData_Local_Temp_2_RemittanceAdvice17-Apr-2024.html	Get hash	malicious	Unknown	Browse	34.204.127.115
	Remittance. #U0440df.html	Get hash	malicious	HTMLPhisher	Browse	23.23.219.186
	http://geoguesser.com/seterra/en-an/vpg/3811?C=K44CT	Get hash	malicious	Unknown	Browse	23.20.165.17
	23xCOZerXg.exe	Get hash	malicious	PureLog Stealer, Xmrig, zgRAT	Browse	54.209.244.119
	https://go-g3t-msg.com/clk/a_OsB_gBHRWO62vTWAvzpOfGhlvCmgnqQuB_nVFpwp0KsQNH4MVSSKRIuzJYdR_BaVVJ5ZUVsLA7nr4fsUb6_LUiF6WGpw3bjwuz5vIgSMwTtrE34sfAdm_UkarEQxhut5pfRW1RXCEHttsR2H4S_hK5eTdM2QP7CpynnqXHAbBrQcsZM-9kqSh5d_nLiZhEZPZ8-fFHjtAo-IjMx8qNxpwUaG3dVXhIP_Sup8raijFjXrg2qZL33tH_5PvkpDXJwZtdK-fqRvdTEjPP1v26xG4zHKIduU5irbL6N1Be1W_4vpi6D3s8twjJ8VAELgUZErAiigzfRVU0knOdQpcprkwW48npT3pYYpFqQU_lE9JBwESVd70JOVQuZWj_0cT7YVVRRta1y8F8vjFBDtNL73BXlqjP5sWlGZtuOnQDJ-iEKMXGy1W4uSrGBn5j07qBR3I1glqsVkAz7msz4iUFsVZ76hS_yvRcDNZBMYnXgKJRgA1A2nVJ9rwv5a55G82GhCYmOQvkUs0eG7vFHjr8gNQtxUn0q5LeVhTPJbym_uRj-gxiLJDjsLnSJXJ4eGtDvxVqhkaqM2P03jYs6BzR_fyd4ak2ZNKBm4FiGWKP44e6keEO2eNlfhZPBYG9OMlI3UM7jaU5YayqoO3Z	Get hash	malicious	Unknown	Browse	54.157.24.8
	SOA.pdf.exe	Get hash	malicious	FormBook	Browse	44.219.53.183
	https://www.msn.com/en-us/autos/enthusiasts/what-s-the-difference-between-a-shelby-mustang-and-a-regular-mustang/ar-AA1ntM5Z?ocid=entnewsntp&pc=U531&cvid=8b8aa9e3e14d4164a6a2181020104694&ei=36	Get hash	malicious	Unknown	Browse	34.193.26.160
CLOUDFLARENETUS	JfOWsh7v0r.exe	Get hash	malicious	Babuk, Clipboard Hijacker, Djvu, Vidar	Browse	172.67.139.220
	http://improvingpayments.com	Get hash	malicious	Unknown	Browse	172.67.152.194
	https://forms.osi.office365.us/r/sWNQn6JMmp	Get hash	malicious	Unknown	Browse	1.1.1.1
	AaIo4VGgvO.exe	Get hash	malicious	Babuk, Clipboard Hijacker, Djvu, Vidar	Browse	172.67.139.220
	https://lithiuimvalley.com/ssd	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.17.31.174
	https://www.canva.com/design/DAGDQX9C1RA/ikoShuUWpLZHCz9c3cYitg/view?utm_content=DAGDQX9C1RA&utm_campaign=designshare&utm_medium=link&utm_source=editor__;!!CyJlM5U!9gbXWj2ch6yN1Y5XKwfOUHQShQIbTlzYRSO4Um3mFsV2g5g0oW-nJ8MZWZtDhmirJBaPx4ZvIj53wB9NG9AkzdEZQzUOutWiQQ$	Get hash	malicious	Unknown	Browse	104.16.103.112
	https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DlLb9_7VBE-2BPKrWdDFE8TeQU0FNoYmRNt3BbsAfHCQfpyMVcUv91cWM1GbR6tMnpfVZqwoeCii1Z-2FHB6Wp4CGi-2FJ4Nq2flvhbRyRKwbWUqyssDslf87wBQZbBQ0EZsTXlvzjuj1ZnarL4QCJJlvUup-2FiM-2F9GPG6X3nhhKKp6sQ0v-2BBs5Jrrpzc3e5B2aUKKEJUx1Hjrx3xc16wmpK1HmM2sLiNIweMaJlJ9frDis7-2BK565mLw-3D	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	file.exe	Get hash	malicious	Glupteba, Mars Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse	104.21.4.208
	file.exe	Get hash	malicious	Glupteba, Mars Stealer, PureLog Stealer, Vidar, zgRAT	Browse	172.67.162.121
	https://www.jottacloud.com/s/359ee8b110b8ca8464998842a5d227ed979	Get hash	malicious	HTMLPhisher	Browse	104.21.27.152
AKAMAI-ASUS	https://lithiuimvalley.com/ssd	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	96.17.33.186
	file.exe	Get hash	malicious	Vidar	Browse	23.47.27.74
	https://sunhos-my.sharepoint.com/:b:/g/personal/mcaffrey_suncrestcare_com/EVEm8VhV9TBDp7AQUrliImYB4Kt7rXcd_m6-8qNUjxBhTA?e=P3XNTL&xsdata=MDV8MDJ8cHJpY2hhcmRzb25AY2FsdG9uLmNvbXxkM2U5ZTc1MTlkNDA0NmI2OWMzODA4ZGM2M2JhOTA4Y3w3YjU1NzU2YTg5NTg0ZWNlODFkYzVkYTZhYmRiNmE5N3wwfDB8NjM4NDk0OTAwMTUyMzMwMjUxfFVua25vd258VFdGcGJHWnNiM2Q4ZXlKV0lqb2lNQzR3TGpBd01EQWlMQ0pRSWpvaVYybHVNeklpTENKQlRpSTZJazFoYVd3aUxDSlhWQ0k2TW4wPXwwfHx8&sdata=TldIbEg2OTJiSkRUS29RRElmU3dYbTBRQUlqUTBBMXZPcGlIaTlzNnlOQT0%3d	Get hash	malicious	HTMLPhisher	Browse	23.50.113.17
	file.exe	Get hash	malicious	Vidar	Browse	23.65.246.108
	Remittance. #U0440df.html	Get hash	malicious	HTMLPhisher	Browse	23.193.106.150
	https://netorgft12232017-my.sharepoint.com:443/:f:/g/personal/lisa_imjts_com/EsnpAMoHQfhBluK8Y5tDE68BaHrT-12huxTJR_ZqVWR4tA?e=5%3aZZh3dZ&at=9	Get hash	malicious	Unknown	Browse	23.210.240.138
	https://www.msn.com/en-us/autos/enthusiasts/what-s-the-difference-between-a-shelby-mustang-and-a-regular-mustang/ar-AA1ntM5Z?ocid=entnewsntp&pc=U531&cvid=8b8aa9e3e14d4164a6a2181020104694&ei=36	Get hash	malicious	Unknown	Browse	23.54.44.246
	1mHUcsxKG6.elf	Get hash	malicious	Mirai	Browse	23.61.238.0
	file.exe	Get hash	malicious	Vidar	Browse	184.27.10.105
	sora.arm.elf	Get hash	malicious	Mirai	Browse	172.226.192.139

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://lithiuimvalley.com/ssd	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	23.36.68.63 20.114.59.183
	https://www.canva.com/design/DAGDQX9C1RA/ikoShuUWpLZHCz9c3cYitg/view?utm_content=DAGDQX9C1RA&utm_campaign=designshare&utm_medium=link&utm_source=editor__;!!CyJlM5U!9gbXWj2ch6yN1Y5XKwfOUHQShQIbTlzYRSO4Um3mFsV2g5g0oW-nJ8MZWZtDhmirJBaPx4ZvIj53wB9NG9AkzdEZQzUOutWiQQ$	Get hash	malicious	Unknown	Browse	23.36.68.63 20.114.59.183
	https://proofpoint.onelogin.sso-signon.com/	Get hash	malicious	Unknown	Browse	23.36.68.63 20.114.59.183
	https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DlLb9_7VBE-2BPKrWdDFE8TeQU0FNoYmRNt3BbsAfHCQfpyMVcUv91cWM1GbR6tMnpfVZqwoeCii1Z-2FHB6Wp4CGi-2FJ4Nq2flvhbRyRKwbWUqyssDslf87wBQZbBQ0EZsTXlvzjuj1ZnarL4QCJJlvUup-2FiM-2F9GPG6X3nhhKKp6sQ0v-2BBs5Jrrpzc3e5B2aUKKEJUx1Hjrx3xc16wmpK1HmM2sLiNIweMaJlJ9frDis7-2BK565mLw-3D	Get hash	malicious	HTMLPhisher	Browse	23.36.68.63 20.114.59.183
	https://webmail.cmxserver.com/authsecure/index.php?email=kaylen@virtualintelligencebriefing.com	Get hash	malicious	Unknown	Browse	23.36.68.63 20.114.59.183
	MBSetup.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	23.36.68.63 20.114.59.183
	https://assets-usa.mkt.dynamics.com/6f8aa86c-81f8-ee11-a1fa-0022482e8338/digitalassets/standaloneforms/4b367e61-8601-ef11-a1fd-0022482f3701	Get hash	malicious	HTMLPhisher	Browse	23.36.68.63 20.114.59.183
	https://share.hsforms.com/1PL2qy4o7QVa5ApT9dgY2igrct2w	Get hash	malicious	Unknown	Browse	23.36.68.63 20.114.59.183
	https://go.gkrtmc.com/aff_f?h=0L0Tat&aff_sub4=bustynina&aff_sub5=other&source=t0mb@s	Get hash	malicious	Unknown	Browse	23.36.68.63 20.114.59.183
	http://browser-intake-foxbusiness.com	Get hash	malicious	Unknown	Browse	23.36.68.63 20.114.59.183

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.251999013358298
Encrypted:	false
SSDEEP:	6:VT7sADM+q2Pwkn2nKuAl9OmbnIFUt8qTcLWAgZmw+qTHUlADMVkwOwkn2nKuAl91:VsADM+vYfHAahFUt8iAg/+qsADMV5JfC
MD5:	562BE7C87C3597FD1C9D37D7AE773FA6
SHA1:	3AF6920A8BBA409433DB856482562A49D9E54CC6
SHA-256:	AD5F220044C015BD70C2E9817FCF2B4EA10CE557F78D3689B872266081DF77E7
SHA-512:	D272D2942CC67CC46EE936B360FF7E1AA99EA15045ADD0B61AC910B54799F9851F4082ED917CD617E2B3FE5C70376D6D10ED3E3BD9A69D47D06B61545BEF1932
Malicious:	false
Reputation:	low
Preview:	2024/04/23-22:31:39.563 1a8c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/04/23-22:31:39.566 1a8c Recovering log #3.2024/04/23-22:31:39.567 1a8c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.251999013358298
Encrypted:	false
SSDEEP:	6:VT7sADM+q2Pwkn2nKuAl9OmbnIFUt8qTcLWAgZmw+qTHUlADMVkwOwkn2nKuAl91:VsADM+vYfHAahFUt8iAg/+qsADMV5JfC
MD5:	562BE7C87C3597FD1C9D37D7AE773FA6
SHA1:	3AF6920A8BBA409433DB856482562A49D9E54CC6
SHA-256:	AD5F220044C015BD70C2E9817FCF2B4EA10CE557F78D3689B872266081DF77E7
SHA-512:	D272D2942CC67CC46EE936B360FF7E1AA99EA15045ADD0B61AC910B54799F9851F4082ED917CD617E2B3FE5C70376D6D10ED3E3BD9A69D47D06B61545BEF1932
Malicious:	false
Reputation:	low
Preview:	2024/04/23-22:31:39.563 1a8c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/04/23-22:31:39.566 1a8c Recovering log #3.2024/04/23-22:31:39.567 1a8c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.158436979568652
Encrypted:	false
SSDEEP:	6:VTylyq2Pwkn2nKuAl9Ombzo2jMGIFUt8qTUz1Zmw+qTUlRkwOwkn2nKuAl9Ombzz:kyvYfHAa8uFUt8Z/+lR5JfHAa8RJ
MD5:	BA64269F142F5F5465D4F4D8161342DB
SHA1:	CC16DBE43F20FEF33894FCE2A5B069F29BFC3FDF
SHA-256:	E800ED90670F9B2C115FCE07C117CF469F2FD48123FB8ADAF5C6E3BFAFBA2C2F
SHA-512:	6DAC86105F466529871ECA19B99142F58C75BB0B8778EDCF660C0ACDAA300B1CEBCABE13BEC25C7F5680E7D9B0593F6CA57D3F65244986DDC71241AA23ECE545
Malicious:	false
Reputation:	low
Preview:	2024/04/23-22:31:39.880 1cc4 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/04/23-22:31:39.882 1cc4 Recovering log #3.2024/04/23-22:31:39.882 1cc4 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.158436979568652
Encrypted:	false
SSDEEP:	6:VTylyq2Pwkn2nKuAl9Ombzo2jMGIFUt8qTUz1Zmw+qTUlRkwOwkn2nKuAl9Ombzz:kyvYfHAa8uFUt8Z/+lR5JfHAa8RJ
MD5:	BA64269F142F5F5465D4F4D8161342DB
SHA1:	CC16DBE43F20FEF33894FCE2A5B069F29BFC3FDF
SHA-256:	E800ED90670F9B2C115FCE07C117CF469F2FD48123FB8ADAF5C6E3BFAFBA2C2F
SHA-512:	6DAC86105F466529871ECA19B99142F58C75BB0B8778EDCF660C0ACDAA300B1CEBCABE13BEC25C7F5680E7D9B0593F6CA57D3F65244986DDC71241AA23ECE545
Malicious:	false
Reputation:	low
Preview:	2024/04/23-22:31:39.880 1cc4 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/04/23-22:31:39.882 1cc4 Recovering log #3.2024/04/23-22:31:39.882 1cc4 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\345a725b-c5e4-4f0a-b5ef-da148dec2269.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.9643961401432035
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqZIXhsBdOg2HoAcaq3QYiubInP7E4T3y:Y2sRdsTXydMHS3QYhbG7nby
MD5:	6FAE56EC8CFBCC07C96D148BB4F0A56F
SHA1:	1F4BB2EFD71BA51B8F94802BCB9210EBB5FCE18C
SHA-256:	35DE2E25ACBAA73C444F9B6ACA80E32F7F7C911B8C20FBE05EB2E33BF8845C84
SHA-512:	01CA82C4DB636AAE1B5BBFF3CB82178F6F73BA3186336FF715ECA256D351B9E6AF3B65AD5CBE4BA9C7FACCFA4158D86A73DDBB12A41341D498FF5D22DF61A9FF
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13358464311527036","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":108321},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.9643961401432035
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqZIXhsBdOg2HoAcaq3QYiubInP7E4T3y:Y2sRdsTXydMHS3QYhbG7nby
MD5:	6FAE56EC8CFBCC07C96D148BB4F0A56F
SHA1:	1F4BB2EFD71BA51B8F94802BCB9210EBB5FCE18C
SHA-256:	35DE2E25ACBAA73C444F9B6ACA80E32F7F7C911B8C20FBE05EB2E33BF8845C84
SHA-512:	01CA82C4DB636AAE1B5BBFF3CB82178F6F73BA3186336FF715ECA256D351B9E6AF3B65AD5CBE4BA9C7FACCFA4158D86A73DDBB12A41341D498FF5D22DF61A9FF
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13358464311527036","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":108321},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4730
Entropy (8bit):	5.264664214951461
Encrypted:	false
SSDEEP:	96:etJCV4FAsszrNamjTN/2rjYMta02fDtehgO7BtTgo73VRwgSoZ:etJCV4FiN/jTN/2r8Mta02fEhgO73goR
MD5:	CDF283EB1AD8055DDD9619898A14E249
SHA1:	75BCADC11979C941567B7EF266B3BE3659A1D6D3
SHA-256:	470325E8F36DB7546BD886DB450B86F701B3DCCCCF3BAD79423761EE7F6BE00F
SHA-512:	72042330F4A75B84A3581D16E42037E80C9A66A3E5C8970529B9AC65A86415DF3F89FE1FA15E0EAD5275526D2A84BAE7A6575EA39B0EBE070B8E803EB94EE33B
Malicious:	false
Reputation:	low
Preview:	*...#................version.1..namespace-['O.o................next-map-id.1.Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/.0>...r................next-map-id.2.Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/.1O..r................next-map-id.3.Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/.2.\.o................next-map-id.4.Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/.3....^...............Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/..\|.^...............Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/n..Fa...............Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/DQ..a...............Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/i.`do................next-map-id.5.Pnamespace-de635bf2_6773_4d83_ad16_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.1128350235475315
Encrypted:	false
SSDEEP:	6:VTnVwzyq2Pwkn2nKuAl9OmbzNMxIFUt8qTnVoSz1Zmw+qTnVIRkwOwkn2nKuAl9c:XwzyvYfHAa8jFUt8mPZ/+mIR5JfHAa8E
MD5:	855AD2CC85B2C0EFB820EAFF5C6CA7E3
SHA1:	6B28CD400BD9C48CC465D3FA95A3AE9EA4C76E7E
SHA-256:	A4E1061D6330D6BD92D1EE91CB679F46266997FD76B0FB70CE33E9D2F4AC4493
SHA-512:	38A4813D366EA6EF488EC768C87F90A77E15600A3EA2473121D6C1578E7B4E1B40DE5A6AF8380A6453FA73F1FB941F7CF7B5715282DBE87B905E035B5AF33865
Malicious:	false
Reputation:	low
Preview:	2024/04/23-22:31:40.006 1cc4 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/04/23-22:31:40.007 1cc4 Recovering log #3.2024/04/23-22:31:40.008 1cc4 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.1128350235475315
Encrypted:	false
SSDEEP:	6:VTnVwzyq2Pwkn2nKuAl9OmbzNMxIFUt8qTnVoSz1Zmw+qTnVIRkwOwkn2nKuAl9c:XwzyvYfHAa8jFUt8mPZ/+mIR5JfHAa8E
MD5:	855AD2CC85B2C0EFB820EAFF5C6CA7E3
SHA1:	6B28CD400BD9C48CC465D3FA95A3AE9EA4C76E7E
SHA-256:	A4E1061D6330D6BD92D1EE91CB679F46266997FD76B0FB70CE33E9D2F4AC4493
SHA-512:	38A4813D366EA6EF488EC768C87F90A77E15600A3EA2473121D6C1578E7B4E1B40DE5A6AF8380A6453FA73F1FB941F7CF7B5715282DBE87B905E035B5AF33865
Malicious:	false
Reputation:	low
Preview:	2024/04/23-22:31:40.006 1cc4 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/04/23-22:31:40.007 1cc4 Recovering log #3.2024/04/23-22:31:40.008 1cc4 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240423203143Z-160.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54
Category:	dropped
Size (bytes):	71190
Entropy (8bit):	1.5861418359904453
Encrypted:	false
SSDEEP:	96:2cxbHPG3eYQa+fFGdMuwMMMTMR3ChOUTMxM8Gdh8CEFayzMXl6QhbMY3iadLO6sz:dvieYQbRowR2vnQ5GiCDDlpa1Kbj32
MD5:	7E466A0D4A5FA1E500DC29DF621E4E1C
SHA1:	34BD3762F7AC03C7E87E58797773E2182080A59E
SHA-256:	AAB29FF4331B55376EDC44042B0C01712B2F08EA1E569AA907CBB37580D70CC1
SHA-512:	F19C293F2160081F277216A7B45B2AFEA665DC7F3B0F234E15C9C0C4FD32AF0C3DC5D277EB6FC7AA4A1F5E1A9F5F6C42485BA5162F88ED87E96F7F9354E539C7
Malicious:	false
Preview:	BM........6...(...u...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 15
Category:	dropped
Size (bytes):	86016
Entropy (8bit):	4.445166361055403
Encrypted:	false
SSDEEP:	384:yezci5tGiBA7aDQPsknQ0UNCFOa14ocOUw6zyFzqFkdZ+EUTTcdUZ5yDQhJL:rJs3OazzU89UTTgUL
MD5:	1889E05DF619D741699767278AFF964C
SHA1:	41E726B16A4B3E10564C4814B166133953CB7CB6
SHA-256:	48DD3AD921CF9844C72A4FDE8A8A895B237263758464E2B6ED1DD103D559B75F
SHA-512:	2A80E55FCCB55E9FAC2A19E7603BFF0131CBE9BF22298AEE493B4276382D48ACE0D1AA0764BAE44B3B6F2EE98632275272C1FEF853A6F05419380831C50E5AAA
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	3.771556658145223
Encrypted:	false
SSDEEP:	48:7MAp/E2ioyVVioy9oWoy1Cwoy15KOioy1noy1AYoy1Wioy1hioybioy5oy1noy1d:7PpjuVFYXKQcovb9IVXEBodRBkU
MD5:	6DCAE5A8529C1CC2D1E2C6B7A038B4C5
SHA1:	8D3FE4CE68CFB9F5C27427A01CA897E5BEAD347D
SHA-256:	3B449D0B8DE8120CDB121A6D841893B9947430CF59BC954B7F38B33C41574B43
SHA-512:	2A2FEDEDEE9099FABA2CD0D09C259419D22BD640B6F07FFD5224E02628C304055E85C238040A56FC0E95B8AF4898FE6570E17B99199638C6ED3A6CA04EFAA20D
Malicious:	false
Preview:	.... .c.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................T...[...b...r...t...}.....L..............................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.7104

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	185099
Entropy (8bit):	5.182478651346149
Encrypted:	false
SSDEEP:	1536:JsVoWFMWQNk1KUQII5J5lZRT95tFiQibVJDS+Stu/3IVQBrp3Mv9df0CXLhNHqTM:bViyFXE07ZmandGCyN2mM7IgOP0gC
MD5:	94185C5850C26B3C6FC24ABC385CDA58
SHA1:	42F042285037B0C35BC4226D387F88C770AB5CAA
SHA-256:	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
SHA-512:	652657C00DD6AED1A132E1DFD0B97B8DF233CDC257DA8F75AC9F2428F2F7715186EA8B3B24F8350D409CC3D49AFDD36E904B077E28B4AD3E4D08B4DBD5714344
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Reg.FamilyName:Agency FB.StyleName:Regular.MenuName:Agency FB.StyleBits:0.WeightClass:400.WidthClass:3.AngleClass:0.FullName:Agency FB.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB.FileLength:58920.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Bold.FamilyName:Agency FB.StyleName:Bold.MenuName:Agency FB.StyleBits:2.WeightClass:700.WidthClass:3.AngleClass:0.FullName:Agency FB Bold.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB Bold.FileLength:60656.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB Bold.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:Algerian.FamilyName:Algerian.StyleName:Regular.MenuName:Algerian.StyleBits:0.We

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	185099
Entropy (8bit):	5.182478651346149
Encrypted:	false
SSDEEP:	1536:JsVoWFMWQNk1KUQII5J5lZRT95tFiQibVJDS+Stu/3IVQBrp3Mv9df0CXLhNHqTM:bViyFXE07ZmandGCyN2mM7IgOP0gC
MD5:	94185C5850C26B3C6FC24ABC385CDA58
SHA1:	42F042285037B0C35BC4226D387F88C770AB5CAA
SHA-256:	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
SHA-512:	652657C00DD6AED1A132E1DFD0B97B8DF233CDC257DA8F75AC9F2428F2F7715186EA8B3B24F8350D409CC3D49AFDD36E904B077E28B4AD3E4D08B4DBD5714344
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Reg.FamilyName:Agency FB.StyleName:Regular.MenuName:Agency FB.StyleBits:0.WeightClass:400.WidthClass:3.AngleClass:0.FullName:Agency FB.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB.FileLength:58920.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Bold.FamilyName:Agency FB.StyleName:Bold.MenuName:Agency FB.StyleBits:2.WeightClass:700.WidthClass:3.AngleClass:0.FullName:Agency FB Bold.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB Bold.FileLength:60656.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB Bold.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:Algerian.FamilyName:Algerian.StyleName:Regular.MenuName:Algerian.StyleBits:0.We

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	243196
Entropy (8bit):	3.3450692389394283
Encrypted:	false
SSDEEP:	1536:vKPCPiyzDtrh1cK3XEivK7VK/3AYvYwgqErRo+RQn:yPClJ/3AYvYwghFo+RQn
MD5:	F5567C4FF4AB049B696D3BE0DD72A793
SHA1:	EBEADDE9FF0AF2C201A5F7CC747C9EA61CFA6916
SHA-256:	D8DBFE71873929825A420F73821F3FF0254D51984FAAA82E1B89D31188F77C04
SHA-512:	E769735991E5B1331E259608854D00CDA4F3E92285FDC500158CBD09CBCCEAD8A387F78256A43919B13EBE70C995D19242377C315B0CCBBD4F813251608C1D56
Malicious:	false
Preview:	Adobe Acrobat Reader (64-bit) 23.6.20320....?A12_AV2_Search_18px.............................................................................................................KKK KKK.KKK.KKK.KKK.KKK.KKK@........................................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.............................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.........................KKK.KKK.KKK.KKK0....................KKK.KKK.KKK.KKK`....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK.KKK.....................................KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK.KKK@....................KKK.KKK.KKK.KKK`........................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.KKK.............................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.353154892427396
Encrypted:	false
SSDEEP:	6:YEQXJ2HXjGHClHVoZcg1vRcR0Y9cpJKoAvJM3g98kUwPeUkwRe9:YvXKX6HCMZc0v2snGMbLUkee9
MD5:	B16E077EE989851C6F9C89645503D88F
SHA1:	3EA9FE1BCAC5E5F6C841FF1EF84D3C44DB5E920E
SHA-256:	21B79AF0E7065B60F9B6C46C0036352FFEEB2089DDE153DA7E6C899B8004A73B
SHA-512:	C1C5AF57C9C22F6089A17585057E5F7C4038CE4E6D6841B8987C509A29216905A836652813CE3B83DA5B1753D2F4CA033806EB066E27E5BE269C6D967A641BB7
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"59515de6-3fca-4c9d-817d-b1ce9b945551","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1714078694056,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.302668968487611
Encrypted:	false
SSDEEP:	6:YEQXJ2HXjGHClHVoZcg1vRcR0Y9cpJKoAvJfBoTfXpnrPeUkwRe9:YvXKX6HCMZc0v2snGWTfXcUkee9
MD5:	6218D347DD1724B3D536C775EA79829C
SHA1:	71970323B31F2B16A59B486B737C176E25C0EED1
SHA-256:	6EF9F6F7A34880862F6181561913E6579010B448DBA50CE819369C2962F470AC
SHA-512:	E274088E7AEFF844B8E2AB86E7D8E167176819B6F295FFDF95E9DF53A07F2C4EFC31F8B672DB1BDE19C286375F2451268722C4B06B2ED9072330EC32CCCFFA77
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"59515de6-3fca-4c9d-817d-b1ce9b945551","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1714078694056,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.280807883232878
Encrypted:	false
SSDEEP:	6:YEQXJ2HXjGHClHVoZcg1vRcR0Y9cpJKoAvJfBD2G6UpnrPeUkwRe9:YvXKX6HCMZc0v2snGR22cUkee9
MD5:	B823FE2D1D1A5FF4C0CC246C1BF159A0
SHA1:	1335CCD11E2C98E4AC0436652B4618D39ABA2FFB
SHA-256:	8DD65ED213578421F50581FC4B15C6D36C8172A4014353730AAB59038471F4B9
SHA-512:	0D64848973E3E7B12DC0EC9AA3E96BDC136288221937A464DAF3CF912C70F8659351CB364DECC6BE9CA1B0A3FD92855AB63D8DA6CA7B797C89AF952DEBC05D4D
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"59515de6-3fca-4c9d-817d-b1ce9b945551","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1714078694056,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.339807205854492
Encrypted:	false
SSDEEP:	6:YEQXJ2HXjGHClHVoZcg1vRcR0Y9cpJKoAvJfPmwrPeUkwRe9:YvXKX6HCMZc0v2snGH56Ukee9
MD5:	F06EFBEFBED9AA9BDB284076A40FDA30
SHA1:	4773230423D3C6F6984BC3075D1AABC0DC2201C1
SHA-256:	6567CCFF2857628F194E1C188CD84B9206CE55761267ADD58D6B3521D3A1BEDC
SHA-512:	0FEF78F90A7352D6DE38AC8A85183F6048404D554B6076E4526D665270732A2D15214E643DAB95338C1E1F8CA78DE45FC9B571CA49997F5A9E308860BFF516A4
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"59515de6-3fca-4c9d-817d-b1ce9b945551","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1714078694056,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.298573109243923
Encrypted:	false
SSDEEP:	6:YEQXJ2HXjGHClHVoZcg1vRcR0Y9cpJKoAvJfJWCtMdPeUkwRe9:YvXKX6HCMZc0v2snGBS8Ukee9
MD5:	F976EF1531E7EBA0C283C59D0313A27D
SHA1:	5CBC306C5469D6E7AF65A8FB398BA86AA556BFAC
SHA-256:	51E48916EB7FB4866AA232FBA01D065FEFFFC6EB8FD9FAAA08F8A645C0CDB045
SHA-512:	E8919F8508C10D0D7A1FFA2F7366C6CF2649CF4CE6AEDEE7A254AA52C4921C1B253BD81A0BB497B30502435197708964151501295E5104C27B92373FC1D3ED4A
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"59515de6-3fca-4c9d-817d-b1ce9b945551","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1714078694056,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.2848864677247605
Encrypted:	false
SSDEEP:	6:YEQXJ2HXjGHClHVoZcg1vRcR0Y9cpJKoAvJf8dPeUkwRe9:YvXKX6HCMZc0v2snGU8Ukee9
MD5:	4F18E008B2CFE924FB7287165C4A497A
SHA1:	262124DA036F2D3B290867A42ADDB0CAEA3FA526
SHA-256:	8ADD5CD676CB04A116FC35CF3FAEA51E468832D30597DA8997D391C9AA072A8B
SHA-512:	AB1D95D961B4877D54D02F691C1B9FAF91AC4501DD0D1BD27F28CD4C0428B455E4620800155E90ED0DB66506077A12D1D2B7A85A6DB212F459EA34B0BC0FB751
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"59515de6-3fca-4c9d-817d-b1ce9b945551","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1714078694056,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.288633381984173
Encrypted:	false
SSDEEP:	6:YEQXJ2HXjGHClHVoZcg1vRcR0Y9cpJKoAvJfQ1rPeUkwRe9:YvXKX6HCMZc0v2snGY16Ukee9
MD5:	8E69078B1BED318C63D39D29EC3B2196
SHA1:	D735BC6F0D04FC3AD946A3E9A2742BC377E2E11C
SHA-256:	44BF7A63BE6B7F6E22A7131CA8066B24B8111291EE29061CE627A27A95AF5FC5
SHA-512:	CE99570635882CBD16CFDF44561B216386CA03C8A594489239F153B8263CFA3053A076ED728CF931C0F491C92B08EBCDD164392DB11CA2AB96DF56D8D99B1135
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"59515de6-3fca-4c9d-817d-b1ce9b945551","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1714078694056,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.293808099973592
Encrypted:	false
SSDEEP:	6:YEQXJ2HXjGHClHVoZcg1vRcR0Y9cpJKoAvJfFldPeUkwRe9:YvXKX6HCMZc0v2snGz8Ukee9
MD5:	F53F2A1221B99675904A002BEA3872D9
SHA1:	F2717D17DC181CF58C86F5EB6D1E4271DCDE86E8
SHA-256:	B2959E482ED06D836577C8DD0C6C6FF2269954951498C29C34729D8A0D273894
SHA-512:	5FB925B0A0268CEC445DE2EA0EFEB24930903DAD6FC32C33D01C732C7726D753525D99A2311CDC795211178601E0218A9CC9BF06CEC55F9054F93910D59F8AAC
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"59515de6-3fca-4c9d-817d-b1ce9b945551","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1714078694056,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1372
Entropy (8bit):	5.737073765878925
Encrypted:	false
SSDEEP:	24:Yv6X6HCMzvBKLgENRcbrZbq00iCCBrwJo++ns8ct4mFJN5:Yv5C0ZEgigrNt0wSJn+ns8cvFJ/
MD5:	0A0A4F0807BCB1F27CC4FBCF84A8F9EC
SHA1:	267A0C5E41F6BDFFD1E25403367972319B087C00
SHA-256:	A7C3AC52DC136FC27FAF4D1457CFCB6705B12089F9E99FE22214DF5D3E316024
SHA-512:	6A618CB0C4A3E837D784FEE0C58DF615EC4D016069A7D47B2B58623040BBD861EE148B3DBD2E3EBDF2CA07DE6E8AF566DF67ADE20BDF50AFCF8D5E96335FB0AE
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"59515de6-3fca-4c9d-817d-b1ce9b945551","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1714078694056,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Home_LHP_Trial_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"79887_247329ActionBlock_0","campaignId":79887,"containerId":"1","controlGroupId":"","treatmentId":"acc56846-d570-4500-a26e-7f8cf2b4acad","variationId":"247329"},"containerId":1,"containerLabel":"JSON for DC_Reader_Home_LHP_Trial_Banner","content":{"data":"eyJjdGEiOnsidHlwZSI6ImJ1dHRvbiIsInRleHQiOiJUcnkgQWNyb2JhdCBQcm8ifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNSIsImZvbnRfc3R5bGUiOiIwIn0sImRlc2NyaXB0aW9uX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTMiLCJmb250X3N0eWxlIjoiLTEifSwidGl0bGUiOiJGcmVlIDctZGF5IHRyaWFsIiwiZGVzY3JpcHRpb24iOiJHZXQgdW5saW1pdGVkIGFjY2VzcyB0byBwcmVtaXVtIFBERiBhbmQgZS1zaWduaW5nIHRvb2xzLiIsImJ

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.291631596167858
Encrypted:	false
SSDEEP:	6:YEQXJ2HXjGHClHVoZcg1vRcR0Y9cpJKoAvJfYdPeUkwRe9:YvXKX6HCMZc0v2snGg8Ukee9
MD5:	9A75AEFEC6210B0D880EDB0ACFE46781
SHA1:	2CB235B1DAC41C99E2184C93D7C1F7D2EADB8809
SHA-256:	D7E2E6466C6AA94D98EBE2F3716E2877A8FBFB7BD29CB1FCE860DC6273E5B853
SHA-512:	EFA6EC254F682053CE6736D16F6B97AF7EFD8D4A4549A6EFFD0AD182DC3D4913506AAD24794A356956A1272824F44850F20979F26526F98ED85009890E069707
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"59515de6-3fca-4c9d-817d-b1ce9b945551","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1714078694056,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1395
Entropy (8bit):	5.773100922433193
Encrypted:	false
SSDEEP:	24:Yv6X6HCMzvMrLgEGOc93W2JeFmaR7CQzttgBcu141CjrWpHfRzVCV9FJNx:Yv5C00HgDv3W2aYQfgB5OUupHrQ9FJD
MD5:	3254C9114E89140216FBAAF42CF52619
SHA1:	C4FF999D620A60E02A5F0F13878A8C66F01BE697
SHA-256:	A6999EE498CFF5F0DDED02104F38AB3C4DD4603807C43450CA3001036C4E1B82
SHA-512:	4873F9E2B86D0FC8E949DF00A50D541DE103C37C9E7C25E23B2495509DA37C6ABEB2A7D18951F5CF652CC78EDDD352114F80451D733CD81642FC43AEDEF80A6B
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"59515de6-3fca-4c9d-817d-b1ce9b945551","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1714078694056,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_RHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"57802_176003ActionBlock_0","campaignId":57802,"containerId":"1","controlGroupId":"","treatmentId":"d0374f2d-08b2-49b9-9500-3392758c9e2e","variationId":"176003"},"containerId":1,"containerLabel":"JSON for Reader DC RHP Banner","content":{"data":"eyJjdGEiOnsidHlwZSI6ImJ1dHRvbiIsInRleHQiOiJGcmVlIDctRGF5IFRyaWFsIiwiZ29fdXJsIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9wcm94eS9wcmljaW5nL3VzL2VuL3NpZ24tZnJlZS10cmlhbC5odG1sP3RyYWNraW5naWQ9UEMxUFFMUVQmbXY9aW4tcHJvZHVjdCZtdjI9cmVhZGVyIn0sInVpIjp7InRpdGxlX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTQiLCJmb250X3N0eWxlIjoiMyJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEyIiwiZm9udF9zdHlsZSI6IjMifSwidGl0

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.275236208644693
Encrypted:	false
SSDEEP:	6:YEQXJ2HXjGHClHVoZcg1vRcR0Y9cpJKoAvJfbPtdPeUkwRe9:YvXKX6HCMZc0v2snGDV8Ukee9
MD5:	61931FF49341145BCBC6E9572CF2BF0E
SHA1:	394AC9AD555B09F8EE313FBC5DA8470A0C489C2E
SHA-256:	CB456763C03C3A1D1BF889A49C2F23ECD13B4FCF3A2787632305811E9B64BD3B
SHA-512:	86EA7BB497226C4FE0FE0E5844881CBE3B649BA9F37F2658E5B6F6FEB81326C55F078BFEC36DF460EEA624E719064A13D4FE208A94102A62B527552586CA5DCB
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"59515de6-3fca-4c9d-817d-b1ce9b945551","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1714078694056,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.279457449463843
Encrypted:	false
SSDEEP:	6:YEQXJ2HXjGHClHVoZcg1vRcR0Y9cpJKoAvJf21rPeUkwRe9:YvXKX6HCMZc0v2snG+16Ukee9
MD5:	97CFFBBF8F9F4F1B2755EF4042D673CA
SHA1:	4049261CD0FFD570039425A8B769D4E9ED43EF2A
SHA-256:	149A8F807F370BBB4482496DAEA8906F53434D8F7C384AA38AA6B3CE25ADD55D
SHA-512:	71C4A8B1FF985B10A0C483E5539B4576F208732A13AE9872A162145BC594DBD7C8E89E8A351C1DA8ED5A9E7631BBB7F59EBFE84F97DD9517EB29FADED0DFD188
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"59515de6-3fca-4c9d-817d-b1ce9b945551","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1714078694056,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.298466724926007
Encrypted:	false
SSDEEP:	6:YEQXJ2HXjGHClHVoZcg1vRcR0Y9cpJKoAvJfbpatdPeUkwRe9:YvXKX6HCMZc0v2snGVat8Ukee9
MD5:	90EC5455FDA7AB1156CBE580DAF27FAE
SHA1:	09AD3A5EBEF39231218DAE8A83D8387762EF00FE
SHA-256:	709E61085ADA144B0AD61990EF153F496845CA1A8681DC00AECEDA3889A1030D
SHA-512:	66C7EE09A167E588C8AE6281A861C3B6F146060FB482CF5E86883F0EF4068B257B9D84094F4A4BA5D0024B723AB05AA33B380AAA71E05F9B7AAF26693333025C
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"59515de6-3fca-4c9d-817d-b1ce9b945551","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1714078694056,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.254539044445596
Encrypted:	false
SSDEEP:	6:YEQXJ2HXjGHClHVoZcg1vRcR0Y9cpJKoAvJfshHHrPeUkwRe9:YvXKX6HCMZc0v2snGUUUkee9
MD5:	37C4291FA1CB43F495D2FD810B759B57
SHA1:	666206C0D191510A2B45DC6CA31623C650E49F71
SHA-256:	A1BA0FBE99EBF7008F5A462807BC0F3663980EB27E2ECF4249FCD16987E3BA0D
SHA-512:	32C1555A9F7848B4725C807E1144DA320C6476570FEF269169C966A1B38910923E100F5DD24F218E45A11D703CCA752A84830BF633734A410BD7D89B9090C06C
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"59515de6-3fca-4c9d-817d-b1ce9b945551","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1714078694056,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	782
Entropy (8bit):	5.364197986818533
Encrypted:	false
SSDEEP:	12:YvXKX6HCMZc0v2snGTq16Ukee1+3CEJ1KXd15kcyKMQo7P70c0WM6ZB/uhWf+S:Yv6X6HCMzvx168CgEXX5kcIfANhE
MD5:	157EFE730F2F83503B579E13D2EDE1AC
SHA1:	E5C48ECB7C189D0FB29ACAACCCD6EFFEE089FCDA
SHA-256:	B167F85E16599E622ADB3B5A5CE5F720D3152F5D9AF9EC7C4895199BB2BBBFDD
SHA-512:	559B5ADDA2145467EF76D08B68DBC530E37F13F2C543B3FB42AA9700FC33B6022A56E892164556B46DC189BC8E3DA943D159BF04E6E784D5584AC553CAB7F682
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"59515de6-3fca-4c9d-817d-b1ce9b945551","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1714078694056,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"Edit_InApp_Aug2020"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"20360_57769ActionBlock_0","campaignId":20360,"containerId":"1","controlGroupId":"","treatmentId":"3c07988a-9c54-409d-9d06-53885c9f21ec","variationId":"57769"},"containerId":1,"containerLabel":"JSON for switching in-app test","content":{"data":"eyJ1cHNlbGxleHBlcmltZW50Ijp7InRlc3RpZCI6IjEiLCJjb2hvcnQiOiJicm93c2VyIn19","dataType":"application\/json","encodingScheme":true},"endDTS":1735804679000,"startDTS":1713904304105}}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2814
Entropy (8bit):	5.134790982156389
Encrypted:	false
SSDEEP:	24:YjbTW8Iy4OCJTXcBtlZAqnr6Lr89aXay8jTTQeigW8CPujXj0Sh8stYp21J2LShp:YDWTXckqr60wgnT6OJafBH9Xi13
MD5:	D05549CD590BAB47CA37725EAC8B6141
SHA1:	07D521CC80563C58DA1D4541DF6F6BFEFF6ABCA3
SHA-256:	C598326AB20D709B5EFD7714FC4F2CBCA203F0BB69157FFC6A6037CFC59BC0D8
SHA-512:	DA031CB0898F40BA44D47D3962432A95E8CECBF2841E61F9A70EC65DF7D4AFA8F9A495C4CF8F4A4975E408A9E4E07FCE2E984D08F855B8AA08F9E7CDC8E2F954
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"f1a75c3e8c42aba96ffcb0dcfbb82afb","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":289,"ts":1713904303000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"b5e45e6275894c8288a4e30e87186577","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":1372,"ts":1713904303000},{"id":"Edit_InApp_Aug2020","info":{"dg":"4f98e3ae28ccd66ae88e11869b47c1be","sid":"Edit_InApp_Aug2020"},"mimeType":"file","size":782,"ts":1713904303000},{"id":"DC_Reader_RHP_Banner","info":{"dg":"2e242043a18b3b260b15462b9c0732e7","sid":"DC_Reader_RHP_Banner"},"mimeType":"file","size":1395,"ts":1713904303000},{"id":"DC_Reader_Disc_LHP_Retention","info":{"dg":"e51cc26887e15d82504a6d246db2c592","sid":"DC_Reader_Disc_LHP_Retention"},"mimeType":"file","size":292,"ts":1713904303000},{"id":"DC_Reader_More_LHP_Banner","info":{"dg":"57a17c53a74f2569526402eebfc8704c","sid":"DC_Reader_More_LHP_Banner"},"mimeType":"file","size":289,"ts":1713904303000},

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 25, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 25
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	1.1894570290694233
Encrypted:	false
SSDEEP:	48:TGufl2GL7msEHUUUUUUUU47SvR9H9vxFGiDIAEkGVvp0z:lNVmswUUUUUUUU8+FGSItC
MD5:	F0D8DE727D6C52246C67633CE1F9525E
SHA1:	030B09BD2639073271B2C08A2DFD9BD171890F8F
SHA-256:	1BF17698DB2FDF3E6CBD794ADF2049AECDCB51F9953A45E0C64BECBFEB26EC86
SHA-512:	6A7CD5DBB7BCE47D9C87FA5AFB8CB6FB1076102CFD2DD062DD861A806BF896228BC3626D9BC34C910D7274E6F3B8ED730ED36F19F3E89DE6D72C6D186912349B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.6091656938536063
Encrypted:	false
SSDEEP:	48:7MxKUUUUUUUUUU4vvR9H9vxFGiDIAEkGVvAqFl2GL7msZ:7TUUUUUUUUUUSFGSItKKVmsZ
MD5:	F344F51958CEA16A5F71127A234F1A6F
SHA1:	99C3B9A4A883BFE07A88D4780A5A389F04503E79
SHA-256:	CFEFCB6F482AD391EC3B4805EC2B8DCDF8A3C681F36A0849C4D052B85B8CF9FD
SHA-512:	B438D4A630EB3DBB9AF7CF4E602C9758F72DE361376D8D694A553163E33F1EF1B9B47F9764FCA02BA17CB7FF818352A979F71B7273A55986D857388331CCE84B
Malicious:	false
Preview:	.... .c..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................f.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSIada01.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.505475641302283
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8rkKlUU:Qw946cPbiOxDlbYnuRKUOU
MD5:	C13CBB76BC5847E93FF9621516CBE489
SHA1:	42F443D9EF3294372057676C511EA859401866F8
SHA-256:	FD59CF36C0F0DDFBBB91E5B8D188509D09AE1F423B8C1F5A5DD52641ECD64278
SHA-512:	B8510C6D1927FB01E14161C0F6C7DE7B7BC90C588BC9E940CB080E909DC12CDD6FEA80E89A599FB41953F58F05424383FD7867062A3481EC1307E1F908BB3784
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .2.3./.0.4./.2.0.2.4. . .2.2.:.3.1.:.4.7. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\A91tifsqt_ivi92v_5hc.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PDF document, version 1.6, 0 pages
Category:	dropped
Size (bytes):	358
Entropy (8bit):	5.076682707724636
Encrypted:	false
SSDEEP:	6:IngVMrexJzJT0y9VEQIFVmb/eu2g/86S1kxROOjIcA0XbIcA0XSCSyAAO:IngVMre9T0HQIDmy9g06JXzW0Xq0XSlX
MD5:	BE4EDCAF13092CA30F368769B5FA9561
SHA1:	5BC613F4367B72FF11D317A970EDE026C5BB19C8
SHA-256:	EE0BF189856D0D6E415D91974C80B657FA6B0AB2CB2C7C1ABF62AABED3AAE31F
SHA-512:	DB851F9320240D5D4C9E71BA523C3D9002E7BC48B0E35210F882311402F4BC062D374089455219E5D48925559749B74A538676349CFAB0FC447707063FBBD73B
Malicious:	false
Preview:	%PDF-1.6.%......1 0 obj.<</Pages 2 0 R/Type/Catalog>>.endobj.2 0 obj.<</Count 0/Kids[]/Type/Pages>>.endobj.3 0 obj.<<>>.endobj.xref..0 4..0000000000 65535 f..0000000016 00000 n..0000000061 00000 n..0000000107 00000 n..trailer..<</Size 4/Root 1 0 R/Info 3 0 R/ID[<C9E3E66E9ABF8447AAA57CD66747C970><C9E3E66E9ABF8447AAA57CD66747C970>]>>..startxref..127..%%EOF..

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-04-23 22-31-41-784.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.345946398610936
Encrypted:	false
SSDEEP:	384:zHIq8qrq0qoq/qUILImCIrImI9IWdFdDdoPtPTPtP7ygyAydy0yGV///X/J/VokV:nNW
MD5:	8947C10F5AB6CFFFAE64BCA79B5A0BE3
SHA1:	70F87EEB71BA1BE43D2ABAB7563F94C73AB5F778
SHA-256:	4F3449101521DA7DF6B58A2C856592E1359BA8BD1ACD0688ECF4292BA5388485
SHA-512:	B76DB9EF3AE758F00CAF0C1705105C875838C7801F7265B17396466EECDA4BCD915DA4611155C5F2AD1C82A800C1BEC855E52E2203421815F915B77AA7331CA0
Malicious:	false
Preview:	SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:088+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	16599
Entropy (8bit):	5.379217981698344
Encrypted:	false
SSDEEP:	384:fDvKK2j6XI488pNsf7AWgGeeFI2Xm6N7IYMK+KzW71OQqb2u1FjkfkI9fteNm2aM:qLJ
MD5:	E7D02021D88084A8A19862E2D3DA606F
SHA1:	D6DA6F62B62BFB549FBC5BBB9FFFFAE06E1B01B6
SHA-256:	EECFD70B4A9A45B02190F9CB285824B6EC7CFBEBFE48A810408ABCE1B676F0D1
SHA-512:	D62277DA93B419AE092F9E60915829907A51CE574033296B1DA0B30B63323BF320AFA98EE59D94837DD3FD936BF686C44F5DDE718772116F4C0172D21F652BC2
Malicious:	false
Preview:	SessionID=a2fcf2b4-4f42-4155-bd59-97537b46ecf1.1713904301794 Timestamp=2024-04-23T22:31:41:794+0200 ThreadID=7080 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=a2fcf2b4-4f42-4155-bd59-97537b46ecf1.1713904301794 Timestamp=2024-04-23T22:31:41:794+0200 ThreadID=7080 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=a2fcf2b4-4f42-4155-bd59-97537b46ecf1.1713904301794 Timestamp=2024-04-23T22:31:41:794+0200 ThreadID=7080 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=a2fcf2b4-4f42-4155-bd59-97537b46ecf1.1713904301794 Timestamp=2024-04-23T22:31:41:794+0200 ThreadID=7080 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=a2fcf2b4-4f42-4155-bd59-97537b46ecf1.1713904301794 Timestamp=2024-04-23T22:31:41:795+0200 ThreadID=7080 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29845
Entropy (8bit):	5.384111030042735
Encrypted:	false
SSDEEP:	768:anddBuBYZwcfCnwZCnR8Bu5hx18HoCnLlAY+iCBuzhLCnx1CnPrRRFS10l8gT2r+:i
MD5:	D40905F30E90DCEB00ACE968A8C8B5DC
SHA1:	9F392EDC839E2DC7FB0160BECFE96D8BAAA9EA95
SHA-256:	A6AB6C6DF028703E39AC62FE297652692E3910AA89F2C54F4712F64245569F05
SHA-512:	83D095B27930A97F51717CD3AD8264740138DD095A9274AC21807F5D92F7CBB111FBA64E3FDD3C1A6EAD06497AE17866999C0FB6BCBF9C1639B338FDE2EA90B4
Malicious:	false
Preview:	03-10-2023 12:50:40:.---2---..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : *************************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : ***********************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Starting NGL..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..03-10-2023 12:50:40:.Closing File..03-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\2cc973fa-1da0-4da3-9741-be3cc4917e44.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\6eac6e37-175c-4f54-957b-575cc0f5d39c.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\993afac5-b9b1-48e8-9af6-8f6800c3ebd5.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/xA7owWLaGZDwYIGNPJodpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:JVwWLaGZDwZGk3mlind9i4ufFXpAXkru
MD5:	18E3D04537AF72FDBEB3760B2D10C80E
SHA1:	B313CD0B25E41E5CF0DFB83B33AB3E3C7678D5CC
SHA-256:	BBEF113A2057EE7EAC911DC960D36D4A62C262DAE5B1379257908228243BD6F4
SHA-512:	2A5B9B0A5DC98151AD2346055DF2F7BFDE62F6069A4A6A9AB3377B644D61AE31609B9FC73BEE4A0E929F84BF30DA4C1CDE628915AC37C7542FD170D12DE41298
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\eb6c28b4-e61f-490e-8f01-b808e77b5167.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/xA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07/WLaGZDwYIGNPJe:JVB3mlind9i4ufFXpAXkrfUs0jWLaGZo
MD5:	A0CFC77914D9BFBDD8BC1B1154A7B364
SHA1:	54962BFDF3797C95DC2A4C8B29E873743811AD30
SHA-256:	81E45F94FE27B1D7D61DBC0DAFC005A1816D238D594B443BF4F0EE3241FB9685
SHA-512:	74A8F6D96E004B8AFB4B635C0150355CEF5D7127972EA90683900B60560AA9C7F8DE780D1D5A4A944AF92B63C69F80DCDE09249AB99696932F1955F9EED443BE
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65350)
Category:	downloaded
Size (bytes):	438090
Entropy (8bit):	4.008192146996227
Encrypted:	false
SSDEEP:	3072:4kiifW9oUFW8zDYZesb2s04zK/uAXwe9ajSa9P4qUWjDVqR14xUmCYxgIHVPcv0L:4domTD5gQsjS2rDVm4xscbv
MD5:	C7850DEF89662BB64E56A648F149D8A6
SHA1:	4740A4AA3350BD056EE8FFC27FCF5BF89476EFE2
SHA-256:	DC103AC566B515E0DC484C26428341C826E112C5471970940ACF1266DCBDB583
SHA-512:	9FE2C990AB6BF7ADE227008FEE88A54637749BE8FF4E4706E744B90D574311691DB99A30E32736EBB2DC70EBAD514A0D6DFDB7F9CF86CBA3A3D9DDA5F6B513D1
Malicious:	false
URL:	https://use.fontawesome.com/releases/v5.13.1/js/brands.js
Preview:	/!. Font Awesome Free 5.13.1 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.!function(){"use strict";var c={},l={};try{"undefined"!=typeof window&&(c=window),"undefined"!=typeof document&&(l=document)}catch(c){}var z=(c.navigator\|\|{}).userAgent,h=void 0===z?"":z,m=c,v=l,a=(m.document,!!v.documentElement&&!!v.head&&"function"==typeof v.addEventListener&&v.createElement,~h.indexOf("MSIE")\|\|h.indexOf("Trident/"),"___FONT_AWESOME___"),M=function(){try{return!0}catch(c){return!1}}();var s=m\|\|{};s[a]\|\|(s[a]={}),s[a].styles\|\|(s[a].styles={}),s[a].hooks\|\|(s[a].hooks={}),s[a].shims\|\|(s[a].shims=[]);var H=s[a];function f(c,h){var l=(2<arguments.length&&void 0!==arguments[2]?arguments[2]:{}).skipHooks,z=void 0!==l&&l,m=Object.keys(h).reduce(function(c,l){var z=h[l];return!!z.icon?c[z.iconName]=z.icon:c[l]=z,c},{});"function"!=typeof H.hooks.addPack\|\|z?H.styles[c]=function(m){for(var c=1;c

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	544
Entropy (8bit):	4.782437501738733
Encrypted:	false
SSDEEP:	12:TMHdidlfAOIRfrPuZ0S5J+sEfETOX40WGKGMPTLXAEZi:2diddAnRfrP6ZEG0o3Pm
MD5:	8E2C629646F50923104112E15E349DCC
SHA1:	B3B53C120C1001757B603352230EE9FF96D36D42
SHA-256:	695AAB3878B03409B5303D2FB25B42F2BD85779085A52695C8A407935D3E0A00
SHA-512:	A4BA2EA81F3CAD65A2939BD34E3ECABCD8D057E31F5CA44ED735D7CEF077F9AD1183817D371AE9E6EB038E13D331FE96D62A5B064FB64554EB8E0B2CCCDD88E4
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="64" height="39" viewBox="0 0 64 39"><title>angle-arrow-down</title><path fill="#565C65" d="M63.36 4.004L60.155.741c-.427-.436-.919-.654-1.475-.654-.555 0-1.047.218-1.475.654L32 26.4 6.798.74C6.37.306 5.878.088 5.323.088c-.556 0-1.048.218-1.476.654L.642 4.005C.213 4.44 0 4.941 0 5.507c0 .565.214 1.066.642 1.501l29.883 30.427c.427.435.92.652 1.475.652.556 0 1.047-.217 1.474-.652L63.361 7.008c.427-.435.639-.936.639-1.501 0-.566-.212-1.067-.64-1.503z"/></svg>

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2024
Entropy (8bit):	7.612067015905756
Encrypted:	false
SSDEEP:	48:taooankLGhgR8htgHoGRvzONQxjBDhEC7D4FNAnJlYi:nDkU687VdNujBn7kw
MD5:	EE6B09A2EE531F6B1993EB7460B333C5
SHA1:	67345A8C0C273DE485FD6FFC7742269391B8FFAB
SHA-256:	4EF043B04BDF3067AB4F49EBBCD1783EC36F85A64C32AC04C82DDAEE087CE067
SHA-512:	F3429C34134FCE398D7EECA2380B8EED2EFD99E40098FDDFA1EA8EEDAF43C13F81F887D8315CEB76046113F30241CACA676DAC623C6CD820147F5938D0A2AE6B
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs...H...H.F.k>...[IDATX..[o........\|..x..r.c..(..mT@. .U..\p......B.J.%w.H..Z..BI..-......c...xlO..\|.os.m.D1B(.....{?z.z..BJ)......o.._.h.......H.HA............`..<hz.}.\.Zi...\...Q.+s....Lb[..0...H.pn.ev~..'?....W..f...(....l.v.....)#;.$...`.........hN.s.Rd.`/.{..j.......>]?d.P?/>..........<.,w.$9C\|..l../........w...../..)..GGy...q...3...Fi]..b-395......d.ED..9..&...Fp...oK&js.0'x.........N.g/...bw...( ..>'..3_....9r.=.#.Z!ESpGJ..m.H.nG.t._......;..!rh..\|%{....!.@@.......s.y...t..f2..F\v".... q....8...dn......z.+....O.r....1..^Y.n5H..`&.(.J..C A...EH..a..!$.m(......"e..Bh:.~....}.....@.._`fz..j.....U.x..@J..j........%V.n..?v?....($..G}f.`.(O..../~F&..u.N.:..3L\|p........sR.....70.^.I.\|.f..Z,.Y.V.......'xr. ..k;......*9]..O.....w~E...B($T...C.&...bD..%R..8.5...6..y...};..,.....N..qH.R.T..Z.#.A..%C.7..S.i.........

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	89260
Entropy (8bit):	5.28547332178098
Encrypted:	false
SSDEEP:	1536:OaRLi9g5GEoL4mzb4bx60BWYOkW1k5lym2P3Gv5EGq0sKBIAnOjORgkuLzESKWLA:Hc2lym2+DPOjqgDKWLA
MD5:	EC47ED9181A2290638282388EA05857D
SHA1:	742DE8728831C19636137987640A8D3BBB1F240A
SHA-256:	02C51DD9F36B39FF1C2F13965B38843A09687A78F1E0B810E88B4696D1B3E5E6
SHA-512:	8737FE15C8C38A15417F1D287A85CDAFBAE21E93D7463E3655072108418BDA2EF02A433D82768FDD133485D15F6919249FA69FA6B27E1EBEEF5FC62F7B900973
Malicious:	false
URL:	https://www.donotcall.gov/js/lib/jquery-3.5.0.js
Preview:	!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){"use strict";var n=[],r=Object.getPrototypeOf,i=n.slice,o=n.flat?function(e){return n.flat.call(e)}:function(e){return n.concat.apply([],e)},a=n.push,s=n.indexOf,u={},l=u.toString,c=u.hasOwnProperty,f=c.toString,p=f.call(Object),d={},h=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},g=function(e){return null!=e&&e===e.window},v=e.document,y={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|v).createElement("script");if(o.text=e,t)for(r in y)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?u[l.call(e)]\|\|"object":typeof e}var b=function

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5168
Entropy (8bit):	4.439618104158611
Encrypted:	false
SSDEEP:	96:OzzbKQDL14oTtGexteCF+cSyzpgaarKvZ+6c6cvEG0Z:SzbK+L14ynxteCF+crzpJa2B+6cFvEJZ
MD5:	3EBDEA12D8E12870CDFD8462AB3F4A44
SHA1:	036A4E90A45FA76673BFEDC899193406BD737A7D
SHA-256:	57A9D7D481D4059DC77F3C0C215B9BC4997DB154D4A1BDB8E17B39FB44E16B95
SHA-512:	C75D70EF227793D3EBA81E5180840B4A04009CF3CCC7711DD1719AA31AF1A78917A24BE5A5D1966CD59846B889D7F23CD7C34A83D90F36FE6DB8E9D9D4DA5D1C
Malicious:	false
URL:	https://www.ftc.gov/core/misc/progress.js?v=10.1.8
Preview:	/*. @file. * Progress bar.. /..(function ($, Drupal) {. /. Theme function for the progress bar.. . @param {string} id. * The id for the progress bar.. . @return {string}. * The HTML for the progress bar.. /. Drupal.theme.progressBar = function (id) {. return (. `<div id="${id}" class="progress" aria-live="polite">` +. '<div class="progress__label"> </div>' +. '<div class="progress__track"><div class="progress__bar"></div></div>' +. '<div class="progress__percentage"></div>' +. '<div class="progress__description"> </div>' +. '</div>'. );. };.. /. A progressbar object. Initialized with the given id. Must be inserted into. * the DOM afterwards through progressBar.element.. . Method is the function which will perform the HTTP request to get the. * progress bar state. Either "GET" or "POST".. . @example. * pb = new Drupal.ProgressBar('myProgressBar');. * some_element.appendChild(

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1198
Entropy (8bit):	4.988546801404346
Encrypted:	false
SSDEEP:	24:N+kzhb89r+QivhRTYL1t4vK12bBcl+c5MPK2+5NSWlvZlt:Npz+9rvohJYX4vldb8Mn+Jlhlt
MD5:	DC99B95399BA62F36606B5FC6FFCF847
SHA1:	CFB345B16F90679AFFB7C4EEE43D897A215E8F89
SHA-256:	3B2465A6276A826E023962C086D403D674349EA7EC8CBA16339A7F8292BC85B7
SHA-512:	17C56BC3AFA4688EC0A94E9599D4AFE76DFF4DD443E80514915DAB492CE737632346C8F4721E4A8B7DD7AAEF821D42F9B3D213826D37A88A50F527512F9133E2
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/resizable.css?sbs84s
Preview:	/!. jQuery UI Resizable 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */..ui-resizable {..position: relative;.}..ui-resizable-handle {..position: absolute;..font-size: 0.1px;..display: block;..-ms-touch-action: none;..touch-action: none;.}..ui-resizable-disabled .ui-resizable-handle,..ui-resizable-autohide .ui-resizable-handle {..display: none;.}..ui-resizable-n {..cursor: n-resize;..height: 7px;..width: 100%;..top: -5px;..left: 0;.}..ui-resizable-s {..cursor: s-resize;..height: 7px;..width: 100%;..bottom: -5px;..left: 0;.}..ui-resizable-e {..cursor: e-resize;..width: 7px;..right: -5px;..top: 0;..height: 100%;.}..ui-resizable-w {..cursor: w-resize;..width: 7px;..left: -5px;..top: 0;..height: 100%;.}..ui-resizable-se {..cursor: se-resize;..width: 12px;..height: 12px;..right: 1px;..bottom: 1px;.}..ui-resizable-sw {..cursor: sw-resize;..width: 9px;..height: 9px;..left: -5px;..botto

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 640x360, components 3
Category:	downloaded
Size (bytes):	41342
Entropy (8bit):	7.965735077214734
Encrypted:	false
SSDEEP:	768:OJBKovxOQD3dF64aya+ZNO+AS5lXISjkF+Uq76+9h3cwJTmbwmiOsmE:OnK1Qzi4aHMo9S4S4QvrJTFmiN1
MD5:	4CF9898C32F8840BE8887CF887E53B42
SHA1:	F466CA418CA8B130CEA1A8993E843F73132863DC
SHA-256:	AB4FA10C5A233E8CAED2591819504B148CEC748381353C942A344BE527B6B7CE
SHA-512:	F7390BFB542372F5DB58995143CB3DAF80E4C0262A7212879E6D49E58B0C6127BF50B3864472B1C24606A6B8E1E5B67A681DF2D7BDC93598ACEF1729FE3B5B16
Malicious:	false
URL:	https://www.ftc.gov/system/files/styles/wide_standard_sm/private/ftc_gov/images/cybersecurity-lockssm-istock-1182226451.jpg?h=73545cb6&itok=7TqnDbJr
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....dV......I.G.2._a9]...n.ri...A.Mf$.v...a....nh..vR...r..\.....KCYS.C...`.qR.X....H.;...bP;.W3`..t.{.Dc...nz....L....\|..:.:5'.:c..v6....k&.R.?5e=..2....j.[.......";.A.88.@...kI...Vu.F._....E....9.i.\.....U..Me...G.}G. _S]n.d./..i....u.X...dyY..!dmA.A.TWr.......%aj..;3....g...H......J....

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	18128
Entropy (8bit):	5.086424697022946
Encrypted:	false
SSDEEP:	192:p2qjV+6xpF5fyEiXsQt8MoW5Y2VKeggmB0iBfT9RhS2wV53skuMaaSQhQz0iIhiM:pTF5fy6QtwDS25xM
MD5:	6C2DF3669C46774AF4082150EBA7259F
SHA1:	62F234596479484E811A98FD239F1C79630AA748
SHA-256:	BDCA1344DC6182760ECD899F3A5FDF620EAEA2667753B450B4FA04537EFFC2DF
SHA-512:	A17FA0CCFBE8BB1C7DB84CF508182D95D319DD79FD333361CE3C112DB0ABD2296BD866B3818761D1D64AD27C02A055E3BD8A5CA413D9BE2C0D3BA88F82A9AD5E
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/theme.css?sbs84s
Preview:	/!. jQuery UI CSS Framework 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/category/theming/. . To view and modify this theme, visit http://jqueryui.com/themeroller/. /.../ Component containers.----------------------------------/..ui-widget {..font-family: Arial,Helvetica,sans-serif/{ffDefault}/;..font-size: 1em/{fsDefault}/;.}..ui-widget .ui-widget {..font-size: 1em;.}..ui-widget input,..ui-widget select,..ui-widget textarea,..ui-widget button {..font-family: Arial,Helvetica,sans-serif/{ffDefault}/;..font-size: 1em;.}..ui-widget.ui-widget-content {..border: 1px solid #c5c5c5/{borderColorDefault}/;.}..ui-widget-content {..border: 1px solid #dddddd/{borderColorContent}/;..background: #ffffff/{bgColorContent}/ /{bgImgUrlContent}/ /{bgContentXPos}/ /{bgContentYPos}/ /{bgContentRepeat}/;..color: #333333/{fcContent}*/;.}..ui-widg

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	22297
Entropy (8bit):	4.504647428937476
Encrypted:	false
SSDEEP:	192:TOVDafJeDqwRik84Q6h59XxQ+7TiyH34u8QyMNU41qpCY62aS4JzMhuUMGtLjkA7:TaafJ+qwUKT/nW6TS4Ncusx1CTKCJy
MD5:	9E2918274CEF2BBF2E307EEE524ACDE9
SHA1:	8E80FA812CA9D6C13DA260EB766DF05FDB5C84BB
SHA-256:	0C03A5A188E9B82DF976E64EE096AF23BCBA6B16875931C21AE221696DB47AD2
SHA-512:	F5F014EFFBD8D8F4A56F5C1452D1A3054BE184972103AF82C7129386FB5A18AF631968509919DA9402666FF4443579FCC2B274F40E7CE894558DB701BD9690FF
Malicious:	false
URL:	https://www.ftc.gov/core/misc/position.js?v=10.1.8
Preview:	/*. @file. * A modified version of jQuery UI position.. . Per jQuery UI's public domain license, it is permissible to run modified. * versions of their code. This file offers the same functionality as what is. * provided by jQuery UI position, but refactored to meet Drupal coding. * standards, and restructured so it extends jQuery core instead of jQuery UI.. . This is provided to support pre-existing code that expects the jQuery. * position API.. . @see https://github.com/jquery/jquery-ui/blob/1.12.1/LICENSE.txt. * @see https://raw.githubusercontent.com/jquery/jquery-ui/1.12.1/ui/position.js. /../. This provides ported version of jQuery UI position, refactored to not depend. * on jQuery UI and to meet Drupal JavaScript coding standards. Functionality. * and usage is identical. It positions an element relative to another. The. * `position()` function can be called by any jQuery object. Additional details. * on using `position()` are provided in this file in the docblock

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	9258
Entropy (8bit):	7.978156509474897
Encrypted:	false
SSDEEP:	192:uGL0pKMdhbaA8a0UwrHrqYD5TSweT1DKH/SLZ2aXBUdjOHZQED:uGL0pfaAG5TrQFLZbX6e
MD5:	5E2902783385E8BDC9C742BD316365B7
SHA1:	7B5CD777A713F6E292EAB6DBEBE5F1120785A268
SHA-256:	DE5B5F2E4B11B5EF63AA2BF0DBB58430543E13F76FD6BE5E8BE9CE3D44AFC4D1
SHA-512:	20B4687389597E981DC4C5C82FEBCF63465043A22890523370DB5EFD5FA8FF9BD6EAE440D222477B14F758135F11167288CBFAC8C7175DE87BB41F64CDB6B606
Malicious:	false
URL:	https://reportfraud.ftc.gov/510.30c87c878b76878e.js
Preview:	[.A1..........H.0..R).z;n...U.p..&.".+.V..D.hm.h...0......]y.?...b..-..O...3.....}...Ip.....'..M....R....(ut)\z.MFkw .y.>1.VE)....d!..`..TK0OA~...6.....[;.DL7>.0..'.e...A...h....k@....._.s.l2....Y.....u......VV-..J.c...H./~).T.]R......Ac...Bk..'...;..B.L4>o..m..&..1.u..3E........s....m..2...1#...{r.....J{.X.......L....Z.R.Q.$..R..UB.....A.o..2.m..j!....m..U..YN6<...^. ..IxAv.....m!..e'.Y.,5..n.f.e.Y....{^...S.b......PI..E(....8.B...C...Lg..!.67i.8_.m.!..z....1.\|...Kbr. .T..w.mqp6.0$..",8.,.M...K~..i..^.$...W.....Bc7...(.........JM.t..e..XF.U..6^~.2x.>.s...O'.....8..Y.X...[4...>..n.^.PZ..K..(K.]..vB...g..d:...4.^;....}.V...]o..'9Y.0.CU.&yN.k^.....J.-..@c.m.a..@..C..6...I..20...$.d.yWg.&O.b.?.o..e.'...o]N2=.E..k..m=.....I.......2.q....."....n..K.S....'+.:tN....A.,.Iwa.RUz......$..=.u2.:.$4....(.q\..8S0.sI .a.V.3:.".<...g...(.N....%..l.^.7;.Z.B...&@&.$.! Z...&i..E...[...eR.E=;I.[F"...........&D..8l..d.y8Z..yb2.z.?......JP..s).qD.

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1490
Entropy (8bit):	4.853073083409658
Encrypted:	false
SSDEEP:	24:tuLxN2h4tYP/dlhPWC/Oqsy9EUvdGELPHdJ/bCzdGeTB4Lk5IFLbS6NXHQF9gZC0:sxjqPFGqsyGnE3ad/2LC2nS6RoOC0
MD5:	2223B58D213AFC2A08E8C2F62A739FD4
SHA1:	647309084A74C02960BDEF19FA1661144ABAE4D2
SHA-256:	B6062EE316BBFEE293633D2DA1B1BE391ED06EAE27303D3F7743245AC82C9DEF
SHA-512:	C3470A30214AF462347AD45419FF74AD4DCFD65BD9CD0C0EB2B5F52FB6108DF219A5A31BA099164EE80763A2095D66314CDBA53E3FECAF8F37440F2F0CDE996B
Malicious:	false
URL:	https://reportfraud.ftc.gov/assets/images/helpStopFraud.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 1080 938"><defs><style>.cls-1{fill:none;}.cls-2{clip-path:url(#clip-path);}.cls-3{fill:#244a73;}.cls-4{fill:#f5a800;}.cls-5{fill:#7ed3f3;}</style><clipPath id="clip-path"><rect class="cls-1" x="214.13" y="191.02" width="651.74" height="555.95"/></clipPath></defs><title>Report-Fraud-Illos</title><g class="cls-2"><path class="cls-3" d="M699.52,263.13A139.82,139.82,0,0,1,552.9,196.06a13,13,0,0,0-18.18-2.33,12.59,12.59,0,0,0-2.34,2.33A140.33,140.33,0,0,1,385.8,263.15a12.49,12.49,0,0,0-15.53,8.41,12.66,12.66,0,0,0-.51,3.56V392.73c0,164.15,167.88,211.83,169.59,212.28a12.62,12.62,0,0,0,6.57,0c1.71-.46,169.59-48.14,169.59-212.28V275.13a12.52,12.52,0,0,0-12.59-12.48,13,13,0,0,0-3.4.48"/><path class="cls-4" d="M857.91,409.44a69.63,69.63,0,0,1-73-33.39,6.45,6.45,0,0,0-10.22,0,69.87,69.87,0,0,1-73,33.4,6.22,6.22,0,0,0-7.73,4.19,6,6,0,0,0-.25,1.77V474c0,81.73,83.59,105.48

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87462
Entropy (8bit):	5.262148110388299
Encrypted:	false
SSDEEP:	1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKV:/u1zNwcv9qBy1HOg8SMpQ47GKV
MD5:	E6C2415C0ACE414E5153670314CE99A9
SHA1:	5A9EEAC34D86E92E5660E0F4F87204F1ED0C8FF6
SHA-256:	D8F9AFBF492E4C139E9D2BCB9BA6EF7C14921EB509FB703BC7A3F911B774EFF8
SHA-512:	DE027062931EDD07B01842EFF24FC15FDBDCAA1AF245DCD133155FABA9E0C965F0A34DC6144CE3B149BC43B4597073C792CB6DABBFC6168C63095523923BCF77
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery/jquery.min.js?v=3.7.0
Preview:	/! jQuery v3.7.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	272
Entropy (8bit):	5.00660555769498
Encrypted:	false
SSDEEP:	6:qQ2b9ebME4xFHMVGuifAdDfrbvWxDyRFLiBckB2HQe2F7DKq:AUMbHxu/HmoiqkB2B20q
MD5:	B42CA97CF72C2F577CC378565888BD4D
SHA1:	1D5167475EBC67E7A692A7295ED0AF382E8E8502
SHA-256:	60CC9A3D9CBC5F742300905F3A1F18CE65179840C0D4C004599F8D23692A7CAD
SHA-512:	2B87B2B8A37D40CEB8BF7EE4EE72F53B9F9568ECFF50217A31FAA8070F48F1C6573CE658A5F6C35C6CECD9BBD500D18774CFE560B733E836C853DE6A4AF57B91
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/safe-blur-min.js?v=10.1.8
Preview:	!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","./version"],e):e(jQuery)}((function(e){"use strict";return e.ui.safeBlur=function(n){n&&"body"!==n.nodeName.toLowerCase()&&e(n).trigger("blur")}}));.//# sourceMappingURL=safe-blur-min.js.map

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 640x360, components 3
Category:	downloaded
Size (bytes):	22272
Entropy (8bit):	7.948751633239579
Encrypted:	false
SSDEEP:	384:Oi4sNGo08gmy5UPm0hs1TU5yomPGzTCOaCbqG59CYUFIFD:Oi3svmPmv1TU5ydPGzuOaCb59SqD
MD5:	38FEE93850640C4F6BD42569A54E6128
SHA1:	B751007940B7B98D32B6C4D89E373FCE569FD5F9
SHA-256:	11B0B7A541D20DBD7AC104C6CB43794232E9B2146282670B577D1802756FFF91
SHA-512:	9E522E04B40A0100F76FA8646FA2B260B7B9B6309B93AA48BB8CF96CC66A82FA169BF138FB2269436A93B82CC3A7D1913287A98328154E5E89BEFC21D7E3B9D3
Malicious:	false
URL:	https://www.ftc.gov/system/files/styles/wide_standard_sm/private/ftc_gov/images/fake-text-cell-smaller-istock-1367617040.jpg?h=6822bf2b&itok=lzGLsckw
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..{@A.....b3Z..Tyse{..X.p..w.k...mH...+......Z.ma.u.e.q.b..Gok&@..n+....<U.O.r.b.Z.."U.O..G..]..LQ.u%1.GVW.W......o.MT....i..m...)h...%-."......Z........I.'....T..[...E.f...+^...~...Vl.-._.R.J.~.Tw..K1.b.X.}.k.x....C@..H..D...w..S.\|.iaP.i.CHD..#%F\..4...M.*:..<.......+.nM&).h.E....T.)BQp#.J...OH.

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14632), with no line terminators
Category:	downloaded
Size (bytes):	14632
Entropy (8bit):	4.833822848285575
Encrypted:	false
SSDEEP:	384:Fl2vH77K5FN+vkhO1Y1C/JMIQSaR/nnsBg:HkbGvcCb1qm/
MD5:	3470A1C378DD87CD00E3F6C75B532F68
SHA1:	1ED1E28973E02079A3345633E29B16D11AD5764B
SHA-256:	8B77F20B2264375B07A261D2F2AAB6AE8C42BBA144996D67444408FCD864F799
SHA-512:	2F88A2F25EDDC1FBD5A4E58CC7F1FA9F8F46E8E168A2F016831F7DBF89DC37351D1072F2005703390F6B5B74720022B3C940032BC2BE369AEBE3F2789F79B2C1
Malicious:	false
URL:	https://www.ftc.gov/sites/default/files/languages/es_i3fyCyJkN1sHomHS8qq2roxCu6FEmW1nREQI_Nhk95k.js?scewfd
Preview:	window.drupalTranslations = {"strings":{"":{"An AJAX HTTP error occurred.":"Hubo un error HTTP AJAX.","HTTP Result Code: !status":"C\u00f3digo de Resultado HTTP: !status","An AJAX HTTP request terminated abnormally.":"Una solicitud HTTP de AJAX termin\u00f3 de manera anormal.","Debugging information follows.":"A continuaci\u00f3n se detalla la informaci\u00f3n de depuraci\u00f3n.","Path: !uri":"Ruta: !uri","StatusText: !statusText":"StatusText: !statusText","ResponseText: !responseText":"ResponseText: !responseText","ReadyState: !readyState":"ReadyState: !readyState","CustomMessage: !customMessage":"CustomMessage: !customMessage","Please wait...":"Espere, por favor...","The response failed verification so will not be processed.":"La respuesta de verificaci\u00f3n fall\u00f3, por lo que no se procesar\u00e1.","The callback URL is not local and not trusted: !url":"La URL de callback (llamada) no es local y no es confiable: !url","Changed":"Modificado","Open":"Abierta","Close":"Cerrar","@

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1198
Entropy (8bit):	4.988546801404346
Encrypted:	false
SSDEEP:	24:N+kzhb89r+QivhRTYL1t4vK12bBcl+c5MPK2+5NSWlvZlt:Npz+9rvohJYX4vldb8Mn+Jlhlt
MD5:	DC99B95399BA62F36606B5FC6FFCF847
SHA1:	CFB345B16F90679AFFB7C4EEE43D897A215E8F89
SHA-256:	3B2465A6276A826E023962C086D403D674349EA7EC8CBA16339A7F8292BC85B7
SHA-512:	17C56BC3AFA4688EC0A94E9599D4AFE76DFF4DD443E80514915DAB492CE737632346C8F4721E4A8B7DD7AAEF821D42F9B3D213826D37A88A50F527512F9133E2
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/resizable.css?sbdm6u
Preview:	/!. jQuery UI Resizable 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */..ui-resizable {..position: relative;.}..ui-resizable-handle {..position: absolute;..font-size: 0.1px;..display: block;..-ms-touch-action: none;..touch-action: none;.}..ui-resizable-disabled .ui-resizable-handle,..ui-resizable-autohide .ui-resizable-handle {..display: none;.}..ui-resizable-n {..cursor: n-resize;..height: 7px;..width: 100%;..top: -5px;..left: 0;.}..ui-resizable-s {..cursor: s-resize;..height: 7px;..width: 100%;..bottom: -5px;..left: 0;.}..ui-resizable-e {..cursor: e-resize;..width: 7px;..right: -5px;..top: 0;..height: 100%;.}..ui-resizable-w {..cursor: w-resize;..width: 7px;..left: -5px;..top: 0;..height: 100%;.}..ui-resizable-se {..cursor: se-resize;..width: 12px;..height: 12px;..right: 1px;..bottom: 1px;.}..ui-resizable-sw {..cursor: sw-resize;..width: 9px;..height: 9px;..left: -5px;..botto

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	95804
Entropy (8bit):	7.997546596428393
Encrypted:	true
SSDEEP:	1536:jNCL0zYMz2LcBlhRyPLYH1NeL5TYw8qAEsn/4qLdw/M0cgUG4Pyp51z:5jJ26lhRfvgFYAsnDLU+gUjPyp51z
MD5:	06010B1B4C1FFBFD3CD14AF73E4BDF10
SHA1:	B92FA28CD93D547C5F957CC5DC44ECF7DDDA883E
SHA-256:	BF104946C017645EDF80ED6B9AEF6DDDC35FFF4D2050054A18A8EFCEC834D795
SHA-512:	59EDD8B312D15E0486C9CBA30FE03A60177516821F938099A88B70D2CCA466522B8F93D9ACA169884185C38BF45A1A14AE509E122C52FB62DAC190B1A44386B9
Malicious:	false
URL:	https://reportfraud.ftc.gov/556.ad6a057fee24becb.js
Preview:	[e.x.7w....,I.O.....2.i.....o.$.{..5..K....../xA..TU..c.7.......R5.0/T+[@..i..c.ZQ...b..,........L.w....B.:.......^..f/1..6.....^..e..#......[..x.E...t3.E..&...g.@....U......E+...p....Vd.MaQN..n....3.C..@.4._.xP..~.\|..-.AO.......\..@..>fppc..3........d....". ..Y..........OS...67.'./.......Og".x5\|.......N..CQ.....eWp.. t.2n..K/?.c..Xq...l..X..k.....GrO...b.....+....?......W...P.o.S..Rv..1x_nF...h..+.M.(?.N..5.c.!..:..f.7...s.!.RY...._5......z.u.. V...f.+../...s....uHU.V .Y....~.D=.E......((.K...Bd.%. ...o.]....i.o.E....-.{D>.W..]&.@.S..v..I..7...^_.......i..C.9..)h.......j..D..I..+:I.C.~T...Q...G.r..&..P\|..&...._.Z.......t.....I.Z.O7.S....b......?.-......-u..N.$h.(=.z.Z...?e?...p.D...J..\<_...a.K...U..q..k....7.:.U.....h...l.h..1.$1q.B.2b..PW..D.....,.r.....}..U,.. ..l.i..c]4I..X.m....7.l..h..l..L......e\..\|vA.$T...]..0.H..3.......H..vO3..g@.c.sA")......J...ej_.....)A.b..8....H%.,c..{f-.w.........#..9r.....?./2"22.....d.J.;....

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 961x166, components 3
Category:	dropped
Size (bytes):	17047
Entropy (8bit):	7.5385822199063295
Encrypted:	false
SSDEEP:	192:MPuR3f26TQWHM4IT06r2hYsxkor6iRzw34tY1hySOyJSwAH1n4ibK2Hw:bvLTQWHM4INsxk0hzwS8hLlAH1n48w
MD5:	EDD6466A094E486843AA7413F81E1248
SHA1:	82EDE7CAA627A48705A2DEA76669ED3527570DAD
SHA-256:	460F85A772798963B34F810166CC2501016D136F2C0348CCE7A774306AF3117B
SHA-512:	DB943D40263427338A901D543C35EED1867D063C83896A2FBEAA0F2893AC3D644A33D8DA6391B4703905FC44A02862E040AF3D8B12FEDE5F332F941CC04D2F11
Malicious:	false
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:EDC34F79AB2268118E19F96045951970" xmpMM:DocumentID="xmp.did:01AEDD34D36211E686C7B191F1381FA3" xmpMM:InstanceID="xmp.iid:01AEDD33D36211E686C7B191F1381FA3" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3E54BF0FEC2068118083D94D1A840615" stRef:documentID="xmp.did:EDC34F79AB2268118E19F96045951970"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 113 x 79
Category:	dropped
Size (bytes):	3972
Entropy (8bit):	7.706820515830212
Encrypted:	false
SSDEEP:	96:oenZQwxEUmuPkWjZyB7KVyaWAed5dWPOGimWCqNAm9/2auy/:ouZ5EUVsMw7KkHZ1Cq//sy/
MD5:	46B5CBBBC288F09FF58A6453DE4D53F4
SHA1:	9F244B011B488AA44BAA3FFAB6830BD41E712269
SHA-256:	85D73AB6DC0299C55421AAECE106EE8902ACE18B8D1AB898180F95F3C119AB2D
SHA-512:	D9D06CDF67070BDD299A6377905D95A10A258597D3A03ACC505F5435FEBD861F3E2F449621BC8A2B58F55187D30325CF3436C62BF31C9D36E5F0946AB4E91154
Malicious:	false
Preview:	GIF89aq.O....P5..............ccc..a..........i..q....u...{{{.....l..c..............T..~D,......\........QQQ.y;........e.......mmm.............V.....X......wi........\\\....l5999.............X......M.......^fD!...........EEE.....z....................tJ..................f...+,,.....i4.....333.....V..T###..T...x.D........s.q7......XXX....%..P..y...LLL........v.....+.......S....x................Z..Vqqq....F....Z..UrL%................R.I.d1....E............\|R(....Y..U..........T........ ........A..n..T#&.....R.....S.......S.....{..R....h..o..............T..x.....Q..R...........R..........?..._>......rYQK.........c...].RC4..c...???....R.......N..._..[..t........?....U...................(((........S......!.......,....q.O........H......\....#J.H....3j..Q .. C..Irb.O..MYR..../.......%s&.e...)E.=....GY.X.4K.C....#.....tj%...'.NdAD ..Q.la.&.[6[....%..DY8Q.r....$}..b......m9.C.....\.@.....(..%.....q....?..'...i0...

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	506
Entropy (8bit):	4.8275583569128955
Encrypted:	false
SSDEEP:	12:Ud79Z7toQmSMVTSFQZzIKevHMXriHHb6RLhXiuw+yWxk3lxiv:kBvoQmJVCQqhyrinm3XYQxalO
MD5:	E659C4F62F1A3C2830C1F6D754B3B40F
SHA1:	76D9C14FDE45CED4601A75A37BCE8F1B3582FB80
SHA-256:	4A4AF425CE4650A79F73EA5D66F084A3DDF6636A2B2013B86B9B874F37ABED83
SHA-512:	7BDED57C7144D07DD42B6015170B867587F8AFFFB511EC92DE0B28C89EBE1AFEF5FDDD987717EC363CF9BC0B366435E438758EFF85BC59915EA8051BEBACF6C4
Malicious:	false
URL:	https://www.ftc.gov/core/misc/jquery.tabbable.shim.js?v=10.1.8
Preview:	/*. @file. * Defines a backwards-compatible shim for the jQuery UI :tabbable selector.. */..(($, Drupal, { isTabbable }) => {. $.extend($.expr[':'], {. tabbable(element) {. Drupal.deprecationError({. message:. 'The :tabbable selector is deprecated in Drupal 9.2.0 and will be removed in Drupal 11.0.0. Use the core/tabbable library instead. See https://www.drupal.org/node/3183730',. });.. return isTabbable(element);. },. });.})(jQuery, Drupal, window.tabbable);.

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 113 x 79
Category:	downloaded
Size (bytes):	4059
Entropy (8bit):	7.729859282656998
Encrypted:	false
SSDEEP:	96:quMPEfAwZhNvJx3y27SN/T3cP5slHkUBsCQzlNavWTu5TJ8ufGcUDlq+L:jMPIZ7Js0zP5slHkasCqi5KYwDL
MD5:	0DB3B046B6B3A3A25DDF67FD0D7466D6
SHA1:	8F5201543D7B9E25B3C461319BCD27D147D3C78B
SHA-256:	B8F56EC49861EA442C03F0536FA84DB1DD00A91615B9B9426AF6CA1A7A564D4C
SHA-512:	BD3ACA17B1450267676E8117A0EA46D58E0DE3A8A7C6047139A4E16A0BF713070583F539987556327AACC0FD749CE23EC71A9CB8ACB411E314FBB0E4CF75117E
Malicious:	false
URL:	https://www.donotcall.gov/images/verify_bl_sm.gif
Preview:	GIF89aq.O....677.........'0...........................l............................F............................................+HW......EEEccc......{{{[[[RRR.....................s.....\|..;l....9f~............x........III.............................~..k......p..t..,,,.........iii.........\..H...................................z.....5\p...q.....r..sssK\d...}........s.....x.....!""....7B...q..nnny..f...Ndp...x..v................z.....v..R.....e..}..............x.....w.....t..m..t........MMM.........u........??@O..v..v..x................$H.....v..Cy.@u....s...........z..r..r........t.....k.......s.............................s.......................@GKGGGHHH......p....ggg.........s...........Dl....h...........t.................................r.....r........!.......,....q.O........H......*\....#J.H....3j....].C.$.+....BH.p.eK.!P.I.k.M..H......)Fd ..... @ .aD...H$DXR.....Cb.PX1j...#G.E....f....4b.A`..;....yU$.%!<h.....O...s.T....@.....0..<...m..e...../...m .S..3..

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 113 x 79
Category:	dropped
Size (bytes):	4059
Entropy (8bit):	7.729859282656998
Encrypted:	false
SSDEEP:	96:quMPEfAwZhNvJx3y27SN/T3cP5slHkUBsCQzlNavWTu5TJ8ufGcUDlq+L:jMPIZ7Js0zP5slHkasCqi5KYwDL
MD5:	0DB3B046B6B3A3A25DDF67FD0D7466D6
SHA1:	8F5201543D7B9E25B3C461319BCD27D147D3C78B
SHA-256:	B8F56EC49861EA442C03F0536FA84DB1DD00A91615B9B9426AF6CA1A7A564D4C
SHA-512:	BD3ACA17B1450267676E8117A0EA46D58E0DE3A8A7C6047139A4E16A0BF713070583F539987556327AACC0FD749CE23EC71A9CB8ACB411E314FBB0E4CF75117E
Malicious:	false
Preview:	GIF89aq.O....677.........'0...........................l............................F............................................+HW......EEEccc......{{{[[[RRR.....................s.....\|..;l....9f~............x........III.............................~..k......p..t..,,,.........iii.........\..H...................................z.....5\p...q.....r..sssK\d...}........s.....x.....!""....7B...q..nnny..f...Ndp...x..v................z.....v..R.....e..}..............x.....w.....t..m..t........MMM.........u........??@O..v..v..x................$H.....v..Cy.@u....s...........z..r..r........t.....k.......s.............................s.......................@GKGGGHHH......p....ggg.........s...........Dl....h...........t.................................r.....r........!.......,....q.O........H......*\....#J.H....3j....].C.$.+....BH.p.eK.!P.I.k.M..H......)Fd ..... @ .aD...H$DXR.....Cb.PX1j...#G.E....f....4b.A`..;....yU$.%!<h.....O...s.T....@.....0..<...m..e...../...m .S..3..

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 275x214, components 3
Category:	downloaded
Size (bytes):	21936
Entropy (8bit):	7.956471364090721
Encrypted:	false
SSDEEP:	384:iQUHBSb/gxxT/z/wjCiPWwf3tUXolLaQ3pKDLw8ZlulnBNIpCz1ujGBZ1a7uEWFQ:iFBSTgxhzmC4rhaQ3p8ulngpC0yEOY3z
MD5:	594DA8EB52473C61D277F3D382A6DB6E
SHA1:	BEE6B9BA961C530AF479B8BA50FFC6FAB27F6B57
SHA-256:	E8D2E791FFDC22A20E68BA3475EE44913B8EA48D125C00BB88D159374D8BCB14
SHA-512:	D234E50C671C852546C09E37B89D3399792DB2F26A12E85E513F8D4853FBAB42BD21C4CF6BD5FC1BE34E6D19B660AEEC0C4DE90F96C85815E33583C2C5C4FB24
Malicious:	false
URL:	https://www.donotcall.gov/images/FTC_DNC_main1_1_register.jpg
Preview:	......Exif..II*.................Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:EDC34F79AB2268118E19F96045951970" xmpMM:DocumentID="xmp.did:AA348DFDD36511E6BAD1E44963D3DC87" xmpMM:InstanceID="xmp.iid:AA348DFCD36511E6BAD1E44963D3DC87" xmp:CreatorTool="Adobe Fireworks CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8a233a02-ad80-4a5d-b4b8-042af2a82e3b" stRef:documentID="xmp.did:EDC34F79AB2268118E19F96045951970"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpac

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	130
Entropy (8bit):	5.01085206807049
Encrypted:	false
SSDEEP:	3:TMQXiqcYVCLzHfcLDifcBbvA5FSmMJMHp+b0/n:A2ftU/0aqvWFweHpL/n
MD5:	B3A8D72B94304C5D3EDB9EBDB0A1F92B
SHA1:	FFCBD0B77B7F1BE7EC29B489CBEA49B478D84F9D
SHA-256:	C8C122E450DB51051306196602B55861B43609A189B9E1AFABE8D965D717D822
SHA-512:	73ACE02BA3C3B604B451C3459DD134C50261ABEFC6939609296064159D281EE2EA7142EE28D882FCBBAC108D445EBA47450A31FFD4B1CFB9B787A17805C29F1C
Malicious:	false
URL:	https://www.donotcall.gov/js/gafourprod.js
Preview:	function gtag(){dataLayer.push(arguments)}window.dataLayer=window.dataLayer\|\|[],gtag("js",new Date),gtag("config","G-X2KH68RJRQ");

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8053
Entropy (8bit):	4.620397556005737
Encrypted:	false
SSDEEP:	192:/trZxcZhZwYzB4GgV90MRquMRq6Ihv9QNEDSQ0/rHdZm/p80+mp+4QGfaxP3:/tra9B4zV91+zWSQ0n0ExP3
MD5:	AB27D9D3687E28DF9803FB5603976570
SHA1:	A3793518582431EDD69A9C4F5DEC24A793F1B077
SHA-256:	CA7BBF03A8F65B377507A570E814D0F2ACA872CB5D6EB11AD3806560B71B1E21
SHA-512:	79BA9FB44C862954DD8AD9A19E0E520563FA056ABA2D804FEA080EF724ED04E8C5FC699B5D0C8EE99E79F346286F0818A7E3018E4C47F2B1DCEB156BCEFE47C7
Malicious:	false
URL:	https://www.ftc.gov/core/misc/displace.js?v=10.1.8
Preview:	/*. @file. * Manages elements that can offset the size of the viewport.. . Measures and reports viewport offset dimensions from elements like the. * toolbar that can potentially displace the positioning of other elements.. /../. @typedef {object} Drupal~displaceOffset. . @prop {number} top. * @prop {number} left. * @prop {number} right. * @prop {number} bottom. /../. Triggers when layout of the page changes.. . This is used to position fixed element on the page during page resize and. * Toolbar toggling.. . @event drupalViewportOffsetChange. /.(function ($, Drupal, debounce) {. /. . * @type {Drupal~displaceOffset}. /. const cache = {. right: 0,. left: 0,. bottom: 0,. top: 0,. };. /. The prefix used for the css custom variable name.. . @type {string}. /. const cssVarPrefix = '--drupal-displace-offset';. const documentStyle = document.documentElement.style;. const offsetKeys = Object.keys(cache);. /. The object

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 363x49, components 3
Category:	downloaded
Size (bytes):	2485
Entropy (8bit):	7.462830568745297
Encrypted:	false
SSDEEP:	48:qKytKy0znXWhWn36S3NLx2pR9zQ6z2WYJRr8ZZrZAFlkwWBsLWb:6jMXDnqa8pHU6CWYHEeIBsLWb
MD5:	7CF1136441AD08A8A847E5B6F74063BF
SHA1:	686C1719DC7FCA6A4DD88556B7D36FC3265AFE29
SHA-256:	B2628BD5186A452AEB6D62A6D5E5D2D952C1CC6D07C91EB42E289EA84A8DC2EC
SHA-512:	68B522D9059260C0DD62093620F6F08D387A9A573413DF747D543F10B89F6F7AEB7A9170D3C2BE34562495F3BF043CA416DAE912BC617A28C724D24186E259E1
Malicious:	false
URL:	https://www.donotcall.gov/images/mobile_dnc_masthead_sm_3.jpg
Preview:	......JFIF..............................................%.".....".%.8.(.+.(.+.(.8.U.5.>.5.5.>.5.U.K.[.J.E.J.[.K...j.^.^.j.......\|...................7.7..................................%.".....".%.8.(.+.(.+.(.8.U.5.>.5.5.>.5.U.K.[.J.E.J.[.K...j.^.^.j.......\|...................7.7........1.k.."................................................@.*^........1.t.............kMe.......s[g.........xL...e..`.7.....i0o"D..l..#L..u.V.3;..V.........9Z.x.y_....X..y..n...7...y..y....................................................c....M..]r.....h.......................................Y...........y;w\|y:....h......@.........................!.1..."2AQq. #$35PRat...&46.`bcdrs...........?..<..g'..6.>...._..4..c:.h.T'..O....N..?T.0.q....,.E.....g..t.L<.t.....k.......A8.b..2.dA.Z...Nq.d..~...u......n....9i...Co)(.:...,FP.....=......B...I.s.G..... .......l..."...T>.....D..........+...c.c..?'...Z.mC3...,..e....$.x..W.....z ..%Cs...3....9c.)<.AQ...:.....E..-..u..tN..\|..k.f..HWh...

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	18128
Entropy (8bit):	5.086424697022946
Encrypted:	false
SSDEEP:	192:p2qjV+6xpF5fyEiXsQt8MoW5Y2VKeggmB0iBfT9RhS2wV53skuMaaSQhQz0iIhiM:pTF5fy6QtwDS25xM
MD5:	6C2DF3669C46774AF4082150EBA7259F
SHA1:	62F234596479484E811A98FD239F1C79630AA748
SHA-256:	BDCA1344DC6182760ECD899F3A5FDF620EAEA2667753B450B4FA04537EFFC2DF
SHA-512:	A17FA0CCFBE8BB1C7DB84CF508182D95D319DD79FD333361CE3C112DB0ABD2296BD866B3818761D1D64AD27C02A055E3BD8A5CA413D9BE2C0D3BA88F82A9AD5E
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/theme.css?sbdm6u
Preview:	/!. jQuery UI CSS Framework 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/category/theming/. . To view and modify this theme, visit http://jqueryui.com/themeroller/. /.../ Component containers.----------------------------------/..ui-widget {..font-family: Arial,Helvetica,sans-serif/{ffDefault}/;..font-size: 1em/{fsDefault}/;.}..ui-widget .ui-widget {..font-size: 1em;.}..ui-widget input,..ui-widget select,..ui-widget textarea,..ui-widget button {..font-family: Arial,Helvetica,sans-serif/{ffDefault}/;..font-size: 1em;.}..ui-widget.ui-widget-content {..border: 1px solid #c5c5c5/{borderColorDefault}/;.}..ui-widget-content {..border: 1px solid #dddddd/{borderColorContent}/;..background: #ffffff/{bgColorContent}/ /{bgImgUrlContent}/ /{bgContentXPos}/ /{bgContentYPos}/ /{bgContentRepeat}/;..color: #333333/{fcContent}*/;.}..ui-widg

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (49541)
Category:	downloaded
Size (bytes):	1006749
Entropy (8bit):	4.306175087515258
Encrypted:	false
SSDEEP:	3072:uzgI1NOgeWDRvwCp40mpjXYq5+nrfE7ziJ2rOXrNCJS9eWDRvwCp40mpjXYI58/M:3WDeFZp7ziJMO7NCJSsWDeFZS/Kn
MD5:	12D96F71C138FA78106A3FD87D75519B
SHA1:	188115E2B53793EA69909B7BD18B0331E46896A4
SHA-256:	383E5BF5517856CF6E31D116811FFE28E8E9E0C1CF0CA710A095A739FC47BBAC
SHA-512:	59164DE733D90AAB50596B484C33AC8177AA7EB6F3BF09501B8777BE623A4570D89E6AA41003F727700BF0CE4108CEBEF8BC530DBDC0B6E298E364FE772FD008
Malicious:	false
URL:	https://www.ftc.gov/
Preview:	.<!DOCTYPE html>.<html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# ">.<head>. Google Tag Manager -->. <script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':. new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],. j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=. 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);. })(window,document,'script','dataLayer','GTM-KFKRFZQ');</script>. End Google Tag Manager -->. <meta charset="utf-8" />.<meta name="description" content="The official website of the Federal Trade Commission, protecting A

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 360, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	238299
Entropy (8bit):	7.990520645781686
Encrypted:	true
SSDEEP:	6144:Y8u3JsWke1/R/SarVgJ0fZyQEI15vk+/3JVxMe3eGB:O35zR/S5WfZwYvb/JztL
MD5:	781E6E55D581FAB3A0D9908F45084848
SHA1:	F702AD1F44F3BECC017D259E8EFD6700E2CD1643
SHA-256:	8C0BC92EF15B78478EA279600D14569E51187890865E1D8664C7BB9B31EB97B1
SHA-512:	AA738F6311B3BBE120BB7B7D4DD8D14C6C34119B119EFDC7DD03E6B3ACFCB925101D7123788C7239C69BF291521EEC0439D535B9A35B30B9F1A5B85BE56A33D5
Malicious:	false
URL:	https://www.ftc.gov/sites/default/files/styles/wide_standard_sm/public/ftc_gov/images/feature-novela2.png?h=80918bfd&itok=jFFgEKSu
Preview:	.PNG........IHDR.......h......2JQ....pHYs..........+.... .IDATx....$..'..I3s......z.....}.}.y.y..ig4-.Ku..........=.R..5..f<@..@...........<!3.f...`fL{....sBf.;...1f.....F..~@...83.. B.....og8..at....`.9'.A ...<..c...9,......%....@.d......... .,9...7G.6.....v#....w...!....w..q...6.#.... N....Z..6.D....L3.>....r\...r.....YH.e<s.H)!....j....i......@. ........^........,@..c0\|..a...."G... '.P.H....s.pl....@BO. ......,.#......+.../...L.^V..U....j...+.J..f...3R.........q9..h%...w...8G..9....U.<.E..O3......1....i...K..M...X.O`b.._.9.....Y................/.Aa....}..s.>.\30.;......p..vd.J...l.-..........x....W.@..R.-~...)]syO..R[.....F.8..K..{8.@.W9..Ae...V.....i.?...Z...9#..9%dMo...)&Df.bBfFf...i..w .*?...b .=._.Fdf...~......9pf8.......S......Bh..o\|......"..j..G....g<.R...=..................?...'......w.Z.<.}.....1N.~..F...z....V.Q..o.....v.Ev.3~..\|..O...a.f..................Z.g...........+_YL......O.+..Pa.)3...>.......<..!FF..C...X..)%...dR....

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 123 x 28, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3986
Entropy (8bit):	7.913926400206518
Encrypted:	false
SSDEEP:	96:gSDZ/I09Da01l+gmkyTt6Hk8nTF4VNHc2BnzT4Ud:gSDS0tKg9E05TIHc2Bnw8
MD5:	11D6193C4EF59D5C88D205B3C767A8DE
SHA1:	4FFEDF770690D1255EFD567137F09DAB91184E1A
SHA-256:	10AA04A7120AE5D75BFAE6C6DF8247CF697D9F3A8FB818416A7723C9D32CED74
SHA-512:	D4D04AF64714AFAE69BE877BCBACA65418D0524B68D6089030D74A355FCA8C9FBE854F8D2AA8D25107936623C59E345B7D0BAF9E80A6C0559C636BD2CB2DF910
Malicious:	false
URL:	https://www.donotcall.gov/images/btn_enespanol.png
Preview:	.PNG........IHDR...{.........A6......pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	789
Entropy (8bit):	4.974834590139333
Encrypted:	false
SSDEEP:	24:NVkzhbkUQ1zeFjAZTWrdVWZXWrXKxrXKI5Sdfm2eYYX:NCz2UjkMI5uJeL
MD5:	3E9A19B76A55085EA818FEE8983F1E76
SHA1:	276A5A43F00C75E82E8914C57489A1B8AD3CF61E
SHA-256:	11EBDC8EC2AA61DC61415643E98671EB3D9DB88F1626D43054E81E0235AD480F
SHA-512:	9987EDFCCC6778CA9D16BA7902EACE2AAC008219A6F4BB4E618E6D61618E9961722C18EEA19BCA65D0D73DF363005ADD8B9323182FE9AE44CB25088E74A520AB
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/checkboxradio.css?scewfd
Preview:	/!. jQuery UI Checkboxradio 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/checkboxradio/#theming. */...ui-checkboxradio-label .ui-icon-background {..box-shadow: inset 1px 1px 1px #ccc;..border-radius: .12em;..border: none;.}..ui-checkboxradio-radio-label .ui-icon-background {..width: 16px;..height: 16px;..border-radius: 1em;..overflow: visible;..border: none;.}..ui-checkboxradio-radio-label.ui-checkboxradio-checked .ui-icon,..ui-checkboxradio-radio-label.ui-checkboxradio-checked:hover .ui-icon {..background-image: none;..width: 8px;..height: 8px;..border-width: 4px;..border-style: solid;.}..ui-checkboxradio-disabled {..pointer-events: none;.}.

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 113 x 79
Category:	dropped
Size (bytes):	3374
Entropy (8bit):	7.7720887236241865
Encrypted:	false
SSDEEP:	96:o+wXmXAP/IhxX62+XnWtUsmAVOsIuqgWUz:o+8216hqU5UOiqNw
MD5:	22AA9BB3EB477C9B74F786E05A2B1C17
SHA1:	58A4CEF425D1ECBADA26F2DBD2024F73CC3FD683
SHA-256:	A23DE10656FAACF7ACC5E8BEBB44956117681EE71CD5A054A45651AE4B517579
SHA-512:	2BCE8587490F4303C73D63EC88EA2683ED173DBC492A9CE8B3CE81F3577DD4F2D25B13A6ED529FD91D3CD6DC6566EB941599CE6BD66DDDA51BF4FF3ACE8ACE5C
Malicious:	false
Preview:	GIF89aq.O....kkk..v.............[.......z..rG]2...~..............t.....f............y....................Ri<xxx...................@@A...)5..........t333......[w?.....................}.W..q..}....x............n.........>L.........q3D$s.R///...\\\..................y..................v..............y........bm.Lh.HTTT....u.......v .<<<.....m............{{.[...MMM............HHG....................t......&&&.....w............................}u.R.......o.....g.......... ............vf.H..................{..sm.K........c.E1?#......................................~.......................g.....\|.....DCD.....`}A.....8H(o.T..b..............102...........q.P.......x/?!..............rrr.....................u?P......p......!.......,....q.O........H......\....#J.H....3j.... C...#..%z.%..e.<y.M..dM..8#..3.....(.(P...Ga..T G-.c. 1w.f..c(.I...`.p..L.P'.]{%..[....V)..Ly...r..$.j...!L......q....$BH..........e..JO.8...D.(U.!.?.

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (463)
Category:	downloaded
Size (bytes):	502
Entropy (8bit):	5.05394366415113
Encrypted:	false
SSDEEP:	12:AUMbHxu/HkoNcEKs48kadPRuFIYEYfnsK385Lrm:FSHxu/EoNjKs7k5zfsgsm
MD5:	25CA97A294A9D6EBF2821E28084B7D4F
SHA1:	C3E5EB928860FB1A3B81315392A35EBEBC1C389B
SHA-256:	A2E38CD10E6860F7D4055F254D1DDC0B2246E7A0D0370453395822F0815706B0
SHA-512:	D417D23720C6BEA548C21F77FECC03AF644D3B2CA775F7976182B36A4F8F721832BFB09FDEA78D30D243D662A9D689994620897D20C763F588276A9476D16AB4
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/plugin-min.js?v=10.1.8
Preview:	!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","./version"],e):e(jQuery)}((function(e){"use strict";return e.ui.plugin={add:function(n,i,t){var u,o=e.ui[n].prototype;for(u in t)o.plugins[u]=o.plugins[u]\|\|[],o.plugins[u].push([i,t[u]])},call:function(e,n,i,t){var u,o=e.plugins[n];if(o&&(t\|\|e.element[0].parentNode&&11!==e.element[0].parentNode.nodeType))for(u=0;u<o.length;u++)e.options[o[u][0]]&&o[u][1].apply(e.element,i)}}}));.//# sourceMappingURL=plugin-min.js.map

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	720
Entropy (8bit):	4.569092186365795
Encrypted:	false
SSDEEP:	12:Kt80BxG0LtWtM0BxGRdgtLtWcM0BxGIxLtWk0BxGGd1LtWO0BxGxe3RLtWF0BxGe:zOkutdg5kcMcNkkCbkOI3tkFleRk8
MD5:	B58FCFA7628C9205CB11A1B2C3E8F99A
SHA1:	D11FEBF9E708A9E11BAEE37ED7DC5E99902580BE
SHA-256:	27ECA3E8297EB7FF340DEB3849B210185A459B3845456AA4D0036F6D966B3518
SHA-512:	66ED2703C1AE9A94DE01DD47707F9ED6CF3E2A035A3359793A06AFAE682A7DD4ABF06FF05109905841FE85747802C94708CE4A9EE56C7FBB8CC578EC556BF6D3
Malicious:	false
URL:	https://www.donotcall.gov/manifest.json
Preview:	{. "name": "App",. "icons": [. {. "src": "\/android-icon-36x36.png",. "sizes": "36x36",. "type": "image\/png",. "density": "0.75". },. {. "src": "\/android-icon-48x48.png",. "sizes": "48x48",. "type": "image\/png",. "density": "1.0". },. {. "src": "\/android-icon-72x72.png",. "sizes": "72x72",. "type": "image\/png",. "density": "1.5". },. {. "src": "\/android-icon-96x96.png",. "sizes": "96x96",. "type": "image\/png",. "density": "2.0". },. {. "src": "\/android-icon-144x144.png",. "sizes": "144x144",. "type": "image\/png",. "density": "3.0". },. {. "src": "\/android-icon-192x192.png",. "sizes": "192x192",. "type": "image\/png",. "density": "4.0". }. ].}

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8035)
Category:	downloaded
Size (bytes):	9843
Entropy (8bit):	5.486638650446368
Encrypted:	false
SSDEEP:	192:pINupNRxauPT2Gh6N+rHfGWTddZBobKTPsGD6u0IMmu/RLl7s:dRxHc+T+WxBobKTPsGD6JIMmu/k
MD5:	2232F55A30908D4C70CAD6353A132560
SHA1:	E1577E7B763F6DF073F30460EA1A151E9E760DA5
SHA-256:	1B5547E8668D86FD08F8F6754BA9518A0367C597CCC5D0AA2D23D6BC4CFBAA6F
SHA-512:	1CE73E4CA4CBF62E8C37C7B89CE76426A142BEBB96399F39F66C616E3151C10CA00A84088687A42E6A5D6289C0645AA02882A738D93252E948B5001FD4A4835E
Malicious:	false
URL:	https://zn9ypt3vnzbt6rvcy-fedtradecommission.gov1.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_9ypT3vNZBT6rVcy
Preview:	(function () {. if (typeof window.QSI === 'undefined'){. window.QSI = {};. }.. var tempQSIConfig = {"hostedJSLocation":"https://gov1.siteintercept.qualtrics.com/dxjsmodule/","baseURL":"https://gov1.siteintercept.qualtrics.com","surveyTakingBaseURL":"https://gov1.qualtrics.com/jam","zoneId":"ZN_9ypT3vNZBT6rVcy"};.. // If QSI.config is defined in snippet, merge with QSIConfig from orchestrator-handler.. if (typeof window.QSI.config !== 'undefined' && typeof window.QSI.config === 'object') {. // This merges the user defined QSI.config with the handler defined QSIConfig. // If both objects have a property with the same name,. // then the second object property overwrites the first.. for (var attrname in tempQSIConfig) { window.QSI.config[attrname] = tempQSIConfig[attrname]; }. } else {. window.QSI.config = tempQSIConfig;. }.. window.QSI.shouldStripQueryParamsInQLoc = false;.})();../@preserve.Version 2.5.0./../*@licen

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	11143
Entropy (8bit):	7.982002086391646
Encrypted:	false
SSDEEP:	192:eof+4ctTJZLkFwXq2gVbH1E8jEa9TCI/ayunFJpKOPyr1pjrxSgH02oBpSo:e399ZoKXmH1LjxiyunFrKBHBsfx
MD5:	C4B60D08FEF4C401AE9D3C08330C62D5
SHA1:	5B6636E79C5DCD0AA73825A8B4022CB397309611
SHA-256:	D52141EEDA4427C267101242327533449D2A3249C4968358B5680BAA1951E219
SHA-512:	0CB3274F924B286D5AA5D26F7F2C3695A403C6A4C677177A39E79CC86B5E09ECEC500F709C6A11BADC6C55B8D0A7F5CB1584E4D55DE2289F99F48D70611362C7
Malicious:	false
URL:	https://reportfraud.ftc.gov/polyfills.289c63289f8f9520.js
Preview:	.).....>..jZW.Z..D.../FlU.z$...UU..S.4..2....P.<Z=6.2...Ue=.>Bc..^f.^o.K..a.E..R.6.A+.2..-.St.....6.............CIB..u._..Um.bt.P....]...y....\|S..W.Na../..&.....zd.ek..^..e.S.(}..>.,.l...r..2..........s....\...t.R6.(....H..{3-.N....>..B.h.W.TI.~......w.=.3.1.....Y;.`U..o.....5383$...M.=....X..g\|$W.JY. S.J:..be[..C..=.DA...U.:.W.@.......B...:..k.N\.U.....W\|.._...x...5./..}....6.....A...8w.{..n...,E.k.g"..c.t.\{..C..c...8.jG4>.....n2.......m..L.4K....q+....<.!7\|0..u..R;..5........qy.k.G...W....O..qnC..L...e.#g{..a......Et..[.%..BX.pF.o.....3>..9...j..f..A.w.....q..h..S.=l....5..[.J...r.#.........T._.RT.kb.2...Vbt..5..A"...9.^...O..d..1ZD...1.F......V...Z.)F!..1..I.....[..DX.....,.....$}......U.v.[.k.jq...PRX.1c.[.jd.'..Z7..*.........i.l."I#..lB...6\|/.....m.".8....H....Y6...U...~....7c+.W..5....Z.,.0].O3X.o.....w.....K:..p.D,...l.8...'wG.m.....1.A..Q...:~..`,..z....Msq..%..1.Uy}....N.{...M4.h~...X.b..;..>"$0....Y...F..h.,.Q.5

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	262250
Entropy (8bit):	5.567143071453933
Encrypted:	false
SSDEEP:	3072:R0p3LwAZVNSNcMzszFeIkx8A9CBPIrTWR4YESfhmpt2nBsLqbyHXDeltzvsXshNQ:CBcAFMgzFe8c0fhmpt+aqbyHXDelJsXZ
MD5:	6E29F5CE3B8CEB90628939EEF6C7FD80
SHA1:	3C84974F9A59C0A74E2AEE98195AD44D0911588D
SHA-256:	9D0FF07459B7E048423E7AB71CAA6FFFC9679EEA229CB6423AE85A4C4D9EA359
SHA-512:	B2D03DC7408FE4D537EF398B87B62195A40661B3CD9DC744DC772E0874CB86DADACD108C8690CC965A20FEBC1111FBED87FE5B561E1181F188609A15664A1BF2
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-CSLL4ZEK4L
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_auto_events","priority":19,"vtp_enableScroll":true,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":true,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":15},{"function":"__ogt_dma","priority":9,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":17},{"function":"__ogt_1p_data_v2","priority":9,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","v

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	577
Entropy (8bit):	4.912360195147334
Encrypted:	false
SSDEEP:	12:tHG7b9GZeP41h/2VJHMM+d+5CjhW4EU41mMawUa0:tbeP41h/2bMMn5SvEhsM0
MD5:	C6A0EFFBE867DB0941BD5592F8F43810
SHA1:	7AA5B690050E8469C6A27908ECF4F7123F5885A7
SHA-256:	F16477078310CABEFA1EB16FC3A7FBBD01B20964BBBD05C5D563D6096AF785E4
SHA-512:	A97B1B1512D756380B1AF3F8F24E948FDEA5F6B7EB9BB0947660BE21010CE2C3C7B6027FAC14C30352FF280D441226AF998A9745E9AB10F0F9FB3095999B0079
Malicious:	false
Preview:	<svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="search" class="svg-inline--fa fa-search fa-w-16" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path fill="currentColor" d="M505 442.7L405.3 343c-4.5-4.5-10.6-7-17-7H372c27.6-35.3 44-79.7 44-128C416 93.1 322.9 0 208 0S0 93.1 0 208s93.1 208 208 208c48.3 0 92.7-16.4 128-44v16.3c0 6.4 2.5 12.5 7 17l99.7 99.7c9.4 9.4 24.6 9.4 33.9 0l28.3-28.3c9.4-9.4 9.4-24.6.1-34zM208 336c-70.7 0-128-57.2-128-128 0-70.7 57.2-128 128-128 70.7 0 128 57.2 128 128 0 70.7-57.2 128-128 128z"></path></svg>

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (393), with no line terminators
Category:	downloaded
Size (bytes):	393
Entropy (8bit):	4.948787899601118
Encrypted:	false
SSDEEP:	12:wQCJqJw3X7mKleCSJwhWbRBnRSJwxc/le5rhXUJwEyPMe:BKz3XiKYCLhWbRBnRLxc/Y5rBdT0e
MD5:	D319BFB776A87DDE2EF8E9EF5E13846F
SHA1:	170A83C77FDEE564CF625D41344BC763B992BCBA
SHA-256:	31E18D2BFE76850F6E50816755BA2703305215C3BA5800373AE38546E57AADB4
SHA-512:	DEB9128A333977CE99CA10FC6AE53F005889A1E3155255265E9EF2B88BE861585234E248FF4A9F98E19C7F88CD42985E1CDCB6958DA6A4DBE89CBC9003FBA044
Malicious:	false
URL:	https://www.donotcall.gov/js/menu.js
Preview:	$(function(){var n=$("#navbtn"),a=$("#topnav nav");$(window).on("resize",function(){$(this).width()<150&&a.hasClass("keep-nav-closed")&&$("#topnav nav").hide().removeAttr("class"),n.is(":hidden")&&a.is(":hidden")&&$(window).width()>569&&$("#topnav nav").show().addClass("keep-nav-closed")}),$(document).on("click","#navbtn",function(n){n.preventDefault(),$("#topnav nav").slideToggle(600)})});

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=166, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=962], baseline, precision 8, 883x42, components 3
Category:	dropped
Size (bytes):	27527
Entropy (8bit):	6.795433962868685
Encrypted:	false
SSDEEP:	384:HuA7inuVZsnJB9xcyMgCxAFaEjJyXco+b8pVpVNVdt/UagsfjLDShBsP:D73ZspxcyMzwp8GhB8
MD5:	F5A158AB25272C4220112AEDA74F9836
SHA1:	D9D0554EA04F45B271CE5E3B4E288C563DE525B5
SHA-256:	8CDBB3423A2AE916CF59FB5FF4E7D7D2B3A9AC729010D53BA71122A9EC8F85FA
SHA-512:	5C4E4006888C8CC4479CEBEED8B6C27D6B808D0AF567C57F456754EFE892064113506433B210947D784897EB9E96282D360F19159FC9F423933FDC0D7C61020E
Malicious:	false
Preview:	......Exif..MM........................................................................................................(...........1..... .....2..........i............. ............'.......'.Adobe Photoshop CS6 (Macintosh).2013:07:31 07:51:06...........0221.......................s..........................................n...........v.(.....................~...........(.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..y-....,s...A$..if...7z......Q.G...v.=.d......5..o..?.[.....s7t.px.jmF+.#u..C.

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1085
Entropy (8bit):	4.428927125368303
Encrypted:	false
SSDEEP:	24:2diddurCfJMUMzbsMImGnHxQJ6+00xRYNkDL75YIlKvOvK3PYEB:c2kLz7GnHxQI0DYg75YIlKvz3PYEB
MD5:	1DFEF9FEDDCC96E16EAAC3FB53350D83
SHA1:	9FAF1344D6326402A7E0EC3AAF89FFD16071487D
SHA-256:	9C22E09818C567C876A90A2BC4C77D788FB9803FAA10897A12DC1FEF6572B6B4
SHA-512:	216B5A6CC53A86E30E28CD83595F18FE733C0820215566282D7A11F37FBCD5DCFE463397CEA4D7F25EADD3365D664FF7877D099437913FA23D895DF34121E5A8
Malicious:	false
URL:	https://www.ftc.gov/themes/custom/ftc_uswds/uswds/dist/img/search-primary.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64"><title>search-primary</title><path fill="#005EA2" fill-rule="evenodd" d="M39.25 39.25c3.37-3.372 5.06-7.425 5.06-12.174 0-4.74-1.686-8.798-5.06-12.173-3.372-3.37-7.425-5.056-12.174-5.056-4.74 0-8.798 1.686-12.173 5.056-3.37 3.371-5.056 7.433-5.056 12.173 0 4.745 1.686 8.802 5.056 12.173 3.371 3.37 7.433 5.06 12.173 5.06 4.745 0 8.802-1.685 12.173-5.06zm23.325 16.366c.951.947 1.425 2.103 1.425 3.46 0 1.336-.486 2.488-1.463 3.46a4.724 4.724 0 0 1-3.456 1.46c-1.391 0-2.54-.487-3.465-1.46L42.423 49.383a26.334 26.334 0 0 1-15.347 4.77c-3.665 0-7.168-.708-10.517-2.133a27.017 27.017 0 0 1-8.653-5.768 27.046 27.046 0 0 1-5.773-8.657A26.6 26.6 0 0 1 0 27.076c0-3.665.713-7.168 2.133-10.517a27.025 27.025 0 0 1 5.773-8.653 26.961 26.961 0 0 1 8.649-5.773A26.563 26.563 0 0 1 27.076 0c3.67 0 7.177.708 10.522 2.133a27.008 27.008 0 0 1 8.653 5.773 27.093 27.093 0 0 1 5.768 8.653 26.

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64780)
Category:	downloaded
Size (bytes):	104033
Entropy (8bit):	5.418239575298822
Encrypted:	false
SSDEEP:	1536:4HvmxIHKjYkp+ugJzNDor4bMoAXJBZa1PqyulHBcHH/R7XcZ5zK090MuDKq:4pYYNutw3R7XizKm0MQ
MD5:	851722E61B1043270C981C220BBF37ED
SHA1:	3BC31C72FDC02969E6E8F4C67925261C3317AE67
SHA-256:	3475964F410FCC1E1EF5CCA4DB5E7D2741982AE1298FFA3D6920E5A25B3356A9
SHA-512:	1A06735738EF5A6C33806F5F0D32C47883B244D6A9A79CABE9158D09FF13399A422E9F9CC8CEDD1C61A7C078D161F2B2D29E8FD4EA6A980319B99346AA5D846C
Malicious:	false
URL:	https://gov1.siteintercept.qualtrics.com/dxjsmodule/CoreModule.js?Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDID=fedtradecommission
Preview:	./@preserve.Version 2.5.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. !function(e){var t={};function n(i){if(t[i])return t[i].exports;var r=t[i]={i:i,l:!1,exports:{}};return e[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1497
Entropy (8bit):	4.962345250034442
Encrypted:	false
SSDEEP:	24:NfkzhbkXkSxkODrtm00QUF1lAeyiAvdXzrMft9jcvAeI/AvtQ8bRfJNC:NMz2XZR2lAFiAvdjrUfjIA9AvGCC
MD5:	1225EE931C347C7A5D671A851F39FEF8
SHA1:	54B65D3B4F4805D9FB49AADC1B011D0D4E6F6E57
SHA-256:	FAB4A6230026F47FFAA9A06474549D62C064DDEE0AE8C532BA30EF51E2511B2C
SHA-512:	824202DA9774AE562D447AF2DAE79246A9CD0FFC9E472B8455A0DA1DF6E71CFEBFFC2F04E732778792670801C34BA0FD97ADBEFF824353225206D4821DFBB0D7
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/button.css?scewfd
Preview:	/!. jQuery UI Button 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/button/#theming. /..ui-button {..padding: .4em 1em;..display: inline-block;..position: relative;..line-height: normal;..margin-right: .1em;..cursor: pointer;..vertical-align: middle;..text-align: center;..-webkit-user-select: none;..-moz-user-select: none;..-ms-user-select: none;..user-select: none;.../ Support: IE <= 11 /..overflow: visible;.}...ui-button,..ui-button:link,..ui-button:visited,..ui-button:hover,..ui-button:active {..text-decoration: none;.}../ to make room for the icon, a width needs to be set here /..ui-button-icon-only {..width: 2em;..box-sizing: border-box;..text-indent: -9999px;..white-space: nowrap;.}../ no icon support for input elements /.input.ui-button.ui-button-icon-only {..text-indent: 0;.}../ button icon element(s) */..ui-button-icon-only .ui-icon {

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 640x360, components 3
Category:	dropped
Size (bytes):	41603
Entropy (8bit):	7.972030784534592
Encrypted:	false
SSDEEP:	768:OLObBD2HOCYKiW4KIOlvdXgNJAjxBJ4iu019sZLp/j6knZH9R6KYJRhbXrBD3t:OLSD2HOyiWh7Bg4j7J45019mp/NzjGxz
MD5:	F0D8820C5EDA82DE6B9BEC572BE15EDB
SHA1:	A6A8BECD86C92BA4B7E37B8E851D3AB574895F48
SHA-256:	A72BDE1A25F0A01FBD6C15A6F6C8C521F988D9ADFE688A3C6F740D279C58F56F
SHA-512:	921F17CD6D095E1B42A4BFC665B3BEFFB7C7C6A279DDC6D79CF1B15953C329FC75734E1EDC0A039F8E73108B0DB97214BE4CFC4D5BDD7F0AE470B7F1AB49EB23
Malicious:	false
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(....(...(...(....R.p..'.u..V.P......:...Z.=*^.6...A<....)1.UW......Z.jz.{....;!..I>.&....-=.f5nB._...@....Q.....I..3g...j...3.{%.^..g..V5..F..Ro...[....Oq.{f2......J../>.d#..)\g.42.aMK....F...M.[..~F.......A..WpP...s.T...jZ{/.P2..A.&.....eR..n.lU].b9SW=Z.Vh.-I\..5....8...WQZ#...QE..JB..MbI. .0.....

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	321
Entropy (8bit):	4.784315747575465
Encrypted:	false
SSDEEP:	6:UBQ+NCNQkOzMyaWSAbhBvJAJUYlaWSAbpFLdXpfVpPE1aWSAbpFLdE:UBQYhjM63hBvJc3pFhXh/s3pFhE
MD5:	35E92BC4614358154CE15D129EE5CCA0
SHA1:	5BA1C4DCDFF2EF939763F6072583DCE2DD9D5243
SHA-256:	0E5742A0CB4508BCB2B8D3D81C00FA86FE7C62337D344A58306868187DCB280B
SHA-512:	47D1D23981641BBF32736204BE98EB7C09DAF0B4FE6AA2327C625A7F5B5453EFD46A02551FA2D1B97F04847D069B5F1594771EC592666E8512CEB2D5A66CF6AF
Malicious:	false
URL:	https://www.ftc.gov/core/modules/layout_builder/layouts/fourcol_section/fourcol_section.css?sbdm6u
Preview:	/. @file. * Provides the layout styles for four-column layout section.. */...layout--fourcol-section {. display: flex;. flex-wrap: wrap;.}...layout--fourcol-section > .layout__region {. flex: 0 1 100%;.}..@media screen and (min-width: 40em) {. .layout--fourcol-section > .layout__region {. flex: 0 1 25%;. }.}.

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	18128
Entropy (8bit):	5.086424697022946
Encrypted:	false
SSDEEP:	192:p2qjV+6xpF5fyEiXsQt8MoW5Y2VKeggmB0iBfT9RhS2wV53skuMaaSQhQz0iIhiM:pTF5fy6QtwDS25xM
MD5:	6C2DF3669C46774AF4082150EBA7259F
SHA1:	62F234596479484E811A98FD239F1C79630AA748
SHA-256:	BDCA1344DC6182760ECD899F3A5FDF620EAEA2667753B450B4FA04537EFFC2DF
SHA-512:	A17FA0CCFBE8BB1C7DB84CF508182D95D319DD79FD333361CE3C112DB0ABD2296BD866B3818761D1D64AD27C02A055E3BD8A5CA413D9BE2C0D3BA88F82A9AD5E
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/theme.css?scewfd
Preview:	/!. jQuery UI CSS Framework 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/category/theming/. . To view and modify this theme, visit http://jqueryui.com/themeroller/. /.../ Component containers.----------------------------------/..ui-widget {..font-family: Arial,Helvetica,sans-serif/{ffDefault}/;..font-size: 1em/{fsDefault}/;.}..ui-widget .ui-widget {..font-size: 1em;.}..ui-widget input,..ui-widget select,..ui-widget textarea,..ui-widget button {..font-family: Arial,Helvetica,sans-serif/{ffDefault}/;..font-size: 1em;.}..ui-widget.ui-widget-content {..border: 1px solid #c5c5c5/{borderColorDefault}/;.}..ui-widget-content {..border: 1px solid #dddddd/{borderColorContent}/;..background: #ffffff/{bgColorContent}/ /{bgImgUrlContent}/ /{bgContentXPos}/ /{bgContentYPos}/ /{bgContentRepeat}/;..color: #333333/{fcContent}*/;.}..ui-widg

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 400x264, components 3
Category:	downloaded
Size (bytes):	12242
Entropy (8bit):	7.874805042429418
Encrypted:	false
SSDEEP:	192:cz2tA8toEFbET7kZtyo8DY0DrXxPz4fsM7x45xQXo3bANNlRl940Sm9:HtA8trFbK7kZtyopw1UEMFo0NlRvS+
MD5:	6801786769740E23AC023E22024AFBED
SHA1:	58EB8D0C72A0CEAE4E1311A4E47BD7352CBBCB40
SHA-256:	6F487EAE3CAAEBD812E24C9BE1E79CF29EA7BDCD0E445812E965C46F04A9446B
SHA-512:	A4AFD6589411C23727D90AAD7D46677287926B55A58DCAFDBAD4DD792BDB68A704B5ABE0EE5EC3128ED691D4866E07DA67AB849B298575A663048BB539B218D2
Malicious:	false
URL:	https://www.ftc.gov/sites/default/files/styles/crop_thumbnail/public/ftc_gov/images/covid-map-tableau.jpg?itok=M9ZkvgoM
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..9..\|Q....B.3..9.........H.P..f.@..w.,A\...#wc.=8.%...H.(..#.e..A.*[q..;........g.eJ3n..S..p:t....0y8..e.b

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	495
Entropy (8bit):	4.790815326458524
Encrypted:	false
SSDEEP:	12:TMHdidlffGCYRfQMKDe0vzzyZTIyy0zxQydRH7Qyf7:2didduffQMKDd+ZTXyAmygyf7
MD5:	FE3F13F6B9F4A53D64E5F5591A17BA87
SHA1:	BBA3C5AAE448C1F87A41D21EB6B0F67729AE4D7F
SHA-256:	4B533EB734D44FE36838C1F03DF0133E725B742BC97ED213F413D9E267410B99
SHA-512:	5CB6B036779D14A75A15D261A1A77F4C04072CED571F04B2BD95655695E278D9A4F344BDEF8FFFD66539921AF4397553187E07DE4EA64ECF6D54FFC9E9F3E817
Malicious:	false
URL:	https://www.ftc.gov/themes/custom/ftc_uswds/uswds/dist/img/close.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64"><title>close</title><path fill="#565C65" fill-rule="evenodd" d="M57.042 1.15l5.809 5.808a4 4 0 0 1 0 5.657L43.465 32l19.386 19.385a4 4 0 0 1 0 5.657l-5.809 5.809a4 4 0 0 1-5.657 0L32 43.465 12.615 62.851a4 4 0 0 1-5.657 0l-5.809-5.809a4 4 0 0 1 0-5.657L20.535 32 1.149 12.615a4 4 0 0 1 0-5.657l5.809-5.809a4 4 0 0 1 5.657 0L32 20.535 51.385 1.149a4 4 0 0 1 5.657 0z"/></svg>

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2045)
Category:	downloaded
Size (bytes):	2898
Entropy (8bit):	5.239699559799549
Encrypted:	false
SSDEEP:	48:svxTFcCPrwbrJbGqU/RNsJG7HW36Hg9vzEjdWVO4Yxxt2CjWMjc9sk/jYINKOToe:sZRxaZWM/vzNwtIruhcc3l7s
MD5:	D5BBC96C73884F9828F519CF531B35F1
SHA1:	EEC9A06335D14190E2BE8BE904123ACF488EBA6C
SHA-256:	077F749583AC7257763350E57E4D566ED638EDDF5AA12D184BCEFC120F926F8F
SHA-512:	4B536674F07F665A013FE20C66CA12A1157202DCE4B28F9A3AB68E503C5CF7AFF3E28A7638DB85ABABBD0721EAE7E16FA92F82B806688C3E3EF3A6F0E9F90E98
Malicious:	false
URL:	https://gov1.siteintercept.qualtrics.com/dxjsmodule/7.8e62d1a979d0c1ed6038.chunk.js?Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDID=fedtradecommission
Preview:	./@preserve.Version 2.5.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. (window["WAFQualtricsWebpackJsonP-cloud-2.5.0"]=window["WAFQualtricsWebpackJsonP-cloud-2.5.0"]\|\|[]).push([[7],{38:function(e,n,t){"use strict";t.r(n);var d=function(e,n){this.payload=n,this.type=e};t.d(n,"addPopunderEmbeddedDataHandler",(func

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3646)
Category:	downloaded
Size (bytes):	7360381
Entropy (8bit):	5.865685111744452
Encrypted:	false
SSDEEP:	24576:noRKAL4AV0Q1suw5onazmAbfmtmqAXcE7+1gskW/VTCAK8FOzYhj61wcKwqmyPDN:noRKAL4AV0Q1rv
MD5:	C158DE20A5B72FDB910BF06711D85A01
SHA1:	7FD8CBC70F1E0485DBAF612F1F8897DA870A3181
SHA-256:	807B89C3F879F5C4DE0B67EE7588F4F775670B76BDB737FEDF89FBE27590C782
SHA-512:	8F8B0D12B9D4C798D7BF20047DC56DE5E3E235364663030B0C2F7101FC78436D46B775013AC8D11CA9A3D0C5A4900B4391F99096DE600AF8AB99C72BCF3B57EB
Malicious:	false
URL:	https://www.ftc.gov/themes/custom/ftc_uswds/build/css/styles.css?sbs84s
Preview:	/*. @file.* Variable overrides for USWDS.././ _uswds-theme-general.scss /./ _uswds-theme-typography.scss /./ _uswds-theme-spacing.scss /./ _uswds-theme-color.scss /./ _uswds-theme-components.scss /./ _uswds-theme-utilities.scss /./! uswds @version /./.* * * * * ==============================.* * * * * ==============================.* * * * * ==============================.* * * * * ==============================.========================================.========================================.========================================.----------------------------------------.USWDS 2.9.0.----------------------------------------.GENERAL SETTINGS.----------------------------------------.Read more about settings and.USWDS style tokens in the documentation:.https://designsystem.digital.gov/design-tokens.----------------------------------------././.----------------------------------------.Image path.----------------------------------------.Relative image file path.---------

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	15281
Entropy (8bit):	4.334330974025632
Encrypted:	false
SSDEEP:	192:Xr/IlKJJPkgUQOnz54nTSZlABSqwH57qsgMUn7V28d8SQtFxuWBoTJtWX97yFT88:r5kj7z5kAJH5735E2uKto62Tc0
MD5:	098A0918E8C85629CF0445B2BCAFECE1
SHA1:	5CEB8AE831431A733DCD73691D0D17C92BF6949F
SHA-256:	CDA5AABE292D4969BF5C3A38D0D8B29284630CA611B16B11C2FB8200E669A445
SHA-512:	BC2A8A2E796F93A8B0F3C488C3D09EE03FA52666AAAD59DC59D80C4D7E9E03127FAAAB89E11054FD8F4344BC4A98848272F0C6EAB595941305C78CD06A5C5C63
Malicious:	false
URL:	https://www.ftc.gov/modules/contrib/extlink_extra/js/extlink_extra.js?scewfd
Preview:	(function ($, Drupal, drupalSettings) {..// Checks if a given element resides in default extra leaving container page.. function isInExtraLeavingContainer(element) {. return $(element).closest('div.extlink-extra-leaving').length > 0;. }.... Drupal.behaviors.extlink_extra = {. // Function mostly duplicated from extlink.js.. // Returns an array of DOM elements of all external links.. extlinkAttach: function(context) {. var settings = drupalSettings;.. if (!settings.data.hasOwnProperty('extlink')) {. return;. }.. // Strip the host name down, removing ports, subdomains, or www.. var pattern = /^(([^\/:]+?\.))([^\.:]{4,})((\.[a-z]{1,4}))(:[0-9]{1,5})?$/;. var host = window.location.host.replace(pattern, '$3$4');. var subdomain = window.location.host.replace(pattern, '$1');.. // Determine what subdomains are considered internal.. var subdoma

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=GIMP 2.10.22, datetime=2021:03:18 14:41:41], progressive, precision 8, 590x143, components 3
Category:	downloaded
Size (bytes):	30654
Entropy (8bit):	7.679450595422665
Encrypted:	false
SSDEEP:	768:+iWZTDHsDa+hZV2lluYAHWWSbH5rmuxAmwue:+X5Ds++rV2S3lUnml
MD5:	2B723CB60E1189E6F6A701E772AA33F3
SHA1:	27404F1E2D3A4881FCA895F845AA9FD242FD9B11
SHA-256:	630B0E3748C059ABF9B147AE03D4FE5C1A600C67A0CA8D94B06F508B4C559432
SHA-512:	6F573FD6930065EAD1151FE99EC1E4E8DDB86C72F4825406A8D9757590B7CD40C823BFD57B010105F28C0AB05A36AD57FC854F6FB36BCB29F8E9F2E970F737A7
Malicious:	false
URL:	https://reportfraud.ftc.gov/assets/images/ftc-dnc-logo.jpg
Preview:	......JFIF.....H.H......Exif..II...........................b...........j...(...........1.......r...2...........i...............H.......H.......GIMP 2.10.22..2021:03:18 14:41:41.........................................>.......................................................................i...................JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......>...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(.I"D......}..j^,..;ZT.x..O.Vr..X..Xh.r...aO..?..=.J.C.o...N..`.@..

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (552), with CRLF line terminators
Category:	downloaded
Size (bytes):	28851
Entropy (8bit):	5.771311912057063
Encrypted:	false
SSDEEP:	768:B3v464PbyVqrYtdQ52pnbrwSmCsslOFFct0DMWbM/AR:Bf464PbyVqrYtdQcbrwSmCsQOrDMrM
MD5:	26433217E805A89CF41ADAC58221316E
SHA1:	BBF155E3C6D673D127021EF9B669338A5D9F3C24
SHA-256:	07AE623F7D42C8707E43608A6A946B0806C4753193CC29E89A296A7585556EBB
SHA-512:	6849E1896CCBA102880DD535BF3FB430F082E3CB12D4A649D038D673F31D85050B0781A416639BB38FBE669787D48CB655771097CF6F052A290250BC0D4CF35E
Malicious:	false
URL:	https://dap.digitalgov.gov/Universal-Federated-Analytics-Min.js?agency=FTC
Preview:	var tObjectCheck,_allowedQuerystrings=[],isSearch=!1,oCONFIG={GWT_UAID:["UA-33523145-1"],GWT_GA4ID:["G-CSLL4ZEK4L"],FORCE_SSL:!0,ANONYMIZE_IP:!0,AGENCY:"",SUB_AGENCY:"",VERSION:"20240416 v7.01 - Dual Tracking",SITE_TOPIC:"",SITE_PLATFORM:"",SCRIPT_SOURCE:"",URL_PROTOCOL:location.protocol,USE_MAIN_CUSTOM_DIMENSIONS:!0,MAIN_AGENCY_CUSTOM_DIMENSION_SLOT:"dimension1",MAIN_SUBAGENCY_CUSTOM_DIMENSION_SLOT:"dimension2",MAIN_CODEVERSION_CUSTOM_DIMENSION_SLOT:"dimension3",MAIN_SITE_TOPIC_CUSTOM_DIMENSION_SLOT:"dimension4",..MAIN_SITE_PLATFORM_CUSTOM_DIMENSION_SLOT:"dimension5",MAIN_SCRIPT_SOURCE_URL_CUSTOM_DIMENSION_SLOT:"dimension6",MAIN_URL_PROTOCOL_CUSTOM_DIMENSION_SLOT:"dimension7",MAIN_INTERACTION_TYPE_CUSTOM_DIMENSION_SLOT:"dimension8",USE_PARALLEL_CUSTOM_DIMENSIONS:!1,PARALLEL_AGENCY_CUSTOM_DIMENSION_SLOT:"dimension1",PARALLEL_SUBAGENCY_CUSTOM_DIMENSION_SLOT:"dimension2",PARALLEL_CODEVERSION_CUSTOM_DIMENSION_SLOT:"dimension3",PARALLEL_SITE_TOPIC_CUSTOM_DIMENSION_SLOT:"dimension4",PARALLE

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	52825
Entropy (8bit):	5.066488513346282
Encrypted:	false
SSDEEP:	768:8qFmrWI7gfM4A0As+sTs5xwROoUrYVkklr0MMw9T2MFHj+:8qsKI7qDOouYakd0McCD+
MD5:	22CD065AAF3814F44E42AB50791861B9
SHA1:	FD409E5D3AEB34B90DE1BC81D6C2EF87A7F1E389
SHA-256:	14329B99E3E92E964621073D3E7D956ED78DC353A185008E3F650C63EF9D3B25
SHA-512:	FD39A8FE30E92AE2AA5F907FA016C8465B9E7F0319BA9DCF4195C213BDB91CDE6F4C863C7A0BF5A08FC38765E5CFD337B714E3E8C5150070FCC9B240702392FB
Malicious:	false
Preview:	{.. "@metadata": { "locale": "es-mx" },.. "sitewide.page-title": "Registro Nacional No Llame",.. "sitewide.MasterFileSiteHeader" : "<header class=\"mainHeader\">\r\n <div class=\"mainHeader_i_img\"><a href=\"http://www.ftc.gov/es\"><img src=\"images/masthead.jpg\" width=\"960\" height=\"155\" alt=\"La Comisi.n Federal de Comercio- Protegiendo a los Consumidores\" runat=\"server\"></a>\r\n </div>\r\n <div class=\"mobile_header\">\r\n <h2 class=\"mobile_site_slogan\"><a href=\"http://www.ftc.gov/es\">Federal Trade Commission</a></h2>\r\n </div>\r\n <nav>\r\n <div class=\"header_nav\"><a href=\"http://www.ftc.gov/es\">De nuevo a FTC.gov</a> \| <a \r\n href=\"http://ftc.gov\">Ingles</a></div>\r\n </nav>\r\n</header>",.. "sitewide.MasterFileLinks" : "<div class=\"rightNavLinks\"><a href=\"faq.html?lang=es-MX\">Recursos</a> \| <a href=\"http://www.ftc.gov/es/informaci%C3%B3n-sobre-el-sitio/pol%C3%ADtica-de-privacidad\" target=\"_blank

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29501), with no line terminators
Category:	downloaded
Size (bytes):	29501
Entropy (8bit):	5.173428938665469
Encrypted:	false
SSDEEP:	384:gUQMqX/D41JAib+/+LfkKHv4c3feTdPkGCnIYEctbSwZxOQqteOHdE:fQMANGLfrnPefY9tmcxNCep
MD5:	35400D27CD7B24F7984CC46A1F1E02DE
SHA1:	02D2E7C218B06061418D570640F8920BBFA4FD79
SHA-256:	B2B29BE004F15659F00A0E2E3CD4DF7271841C8AEDBBBC6834CCB1029162FED3
SHA-512:	AA9F266C108D62EE6D52EADCC3A863FFFBBA817BB8EC43DA961F25F97C9FF4A5CB853E256AE948F811B2F9E03B40AF8DF9E8B4A0D628C91A03818E2CEC83C722
Malicious:	false
URL:	https://www.donotcall.gov/css/report.css
Preview:	.rnl_hp .rightNavLinks{margin-top:40px}br{display:block!important}.bnnr_area_i{margin:0 auto}.txtSubjectMatter{display:none;position:relative}.noDisplay{display:none}#pnlLinks{width:100%}#PnlRedirectToCA{height:100%;width:100%}.mobileMessage{padding-left:40px}.AcceptComplaint{padding:0 0 0 20px}.modal{display:none;position:fixed;z-index:1;left:0;top:0;width:100%;height:100%;overflow:auto;background-color:#000;background-color:rgba(0,0,0,.4)}.modal-content{background-color:#fefefe;margin:15% auto;padding:20px;border:1px solid #888;width:30%}.btnCenter{text-align:center}input[type=button].clsHaveBusinessModalMessageClose{width:140px;background:#339a33;color:#fff;font-family:Tahoma,Geneva,sans-serif;height:30px;-webkit-border-radius:15px;-webkit-appearance:none;-moz-border-radius:15px;border-radius:15px;text-transform:uppercase}.btnHaveBusinessModalMessageClose:focus,.btnHaveBusinessModalMessageClose:hover{color:#000;text-decoration:none;cursor:pointer}input[type=text].txtBoxBorderRed{BOR

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	83156
Entropy (8bit):	7.997655754950957
Encrypted:	true
SSDEEP:	1536:IbQmACy5NtN7WMXQhr8pFG+3CnElY74x4ohz1rG6NA+d:IE4qLNyhr8GbE5vrGOr
MD5:	4369622A32766E027BF42FCB25BC9D85
SHA1:	B6ADC418792AC5C934CE25D23CD62155E7302CBF
SHA-256:	924C52A6A1F1A067A5F82E91E87E517700906B8A4CAD57793F073DDFEBAD91E2
SHA-512:	FBC9E2EF27753638F61D7F8DDF6448E9676EB5BD13EA1CFA09F9D6F5FB7314135B105C956D1499311BD006BD6EA9983FCD9AFE543C54F0BADE9A490D76A91982
Malicious:	false
URL:	https://reportfraud.ftc.gov/667.87de367fb3b518c9.js
Preview:	[y.x..2,.S..u.mK...%(Vw.)....u.......Y..4.:....KMe.p...G.>....k....u.4-.X........Zr......~..I{..3..y"hZ. .c0.Qa.....fdW....~...Ak."..V.......Z...0<X+.m&65.v...j.2.7L..=agc.M.9..................E.O..1.Nn-x..=..I^5z.h......%4I...0AER...P.....%.oDiO.....;..Y~h.-..T.9.77._!.....1...( :.....u.6Q..V..k ......q;..".S...w...D..-.v.....4cH?.y..P....w..x.\|........$.....U).H..a&D.\j..e.ux)}5.b'.....q".0.q!...y....%...5$h...~..l....tL!1..Dh..5"_Q.:....o=.7.^......{...IJ..aRmT\|...N.g...l......M...R.%#..... B...~..qJ.]jF.r.&..FV.u..K...F6..x....l.W.Y.........J".Wg[..E..m.A........[b[X.....f...F.&^%e;[....r20.......VN........t..&..FB..-..I...U.` _m.?TK...(..#..f..U.w268+.n..\....W..........g[I......D@2/..%A..{.}S.vS.'..'....nT.]y.~..M.....{..U..Lw...M. .,?PTw.P....cT!.%.U{..b@.Y..".ES}...V.-sMu..}l....h/)'.@Z......$.g@:......fh..Cif4.j..T..j.....{.Y.....!....hn....1)_9....W2.E....Y...../.N.u.[7.&...@=..Xt-.....V..i.'......{.)e...].!.s.mo... ?...^."...!

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	391
Entropy (8bit):	4.828599495738655
Encrypted:	false
SSDEEP:	6:1PNPrkI6VFEYQyQrklMGMlr4J0klh5Eg/dHNi6u2klh5E/KREHNioxtd:1NrJHvrklMTvGkgdt3u2Gk/KKtXxj
MD5:	98671781BD92BD354C9F52D5C219F383
SHA1:	15710D893EB74845597C9B0E44A166A80C48E08D
SHA-256:	4333FC1ED0C26ADDC91A4AE0C34BFE08826F5F25A647A2A2E21422BCB18BCF1F
SHA-512:	FF3B3CB5F63974F7544B51DAACD54CB0EEE62962920EF894C4D6E8C2345440BD96CAA9D2CBE8D91132B0B7AB77913913D3BCDA61FDE9D4F29D9E5BA497846229
Malicious:	false
URL:	https://www.ftc.gov/themes/custom/ftc_uswds/build/js/returnToTop.js?v=1
Preview:	"use strict";../*. @file. * Theme Javascript file for the return to top button.. */.(function ($) {. $(window).scroll(function () {. if ($(this).scrollTop() > 1000) {. // Button hidden initially. See _footer.scss.. $('.usa-footer__return-to-top').addClass('js-show');. } else {. $('.usa-footer__return-to-top').removeClass('js-show');. }. });.})(jQuery, Drupal);

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1581
Entropy (8bit):	4.969030599428063
Encrypted:	false
SSDEEP:	48:N5Bz20sDfRrk+rzzSr4VccK/OiAwKrhF6mG:p23Jfy8C/OitK1FY
MD5:	694D2F642B4066B577CB1015190481F1
SHA1:	FD80C02B616158E15119912A53ECA28F3C998B41
SHA-256:	8E58D519637D5290C10E194EBE26D51D20318C2399A27BAF4F5B4979615B9076
SHA-512:	0B43DCEB8C715065B60E8CCDBE87E04BCC390CE4622B645F3EC1FFECAFE9AE2B7536D199E2E8E00DE7FB9C3B4832B5F1ABE245460B0CE3E773E4909F9C4DADAA
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/core.css?sbdm6u
Preview:	/!. jQuery UI CSS Framework 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/category/theming/. /../ Layout helpers.----------------------------------/..ui-helper-hidden {..display: none;.}..ui-helper-hidden-accessible {..border: 0;..clip: rect(0 0 0 0);..height: 1px;..margin: -1px;..overflow: hidden;..padding: 0;..position: absolute;..width: 1px;.}..ui-helper-reset {..margin: 0;..padding: 0;..border: 0;..outline: 0;..line-height: 1.3;..text-decoration: none;..font-size: 100%;..list-style: none;.}..ui-helper-clearfix:before,..ui-helper-clearfix:after {..content: "";..display: table;..border-collapse: collapse;.}..ui-helper-clearfix:after {..clear: both;.}..ui-helper-zfix {..width: 100%;..height: 100%;..top: 0;..left: 0;..position: absolute;..opacity: 0;..-ms-filter: "alpha(opacity=0)"; / support: IE8 /.}...ui-front {..z-index: 100;.}.../ Interacti

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8729
Entropy (8bit):	4.6149846847982525
Encrypted:	false
SSDEEP:	192:Ms+Kke7Xn1FYGndcE2AgFLXOIchMlkcIMzctUvsiaC4O7kxVC4OWqB6L:MKkAX1FRH2ocDQUkbrqB6L
MD5:	91DE47E6401906C7F794781A24C1CC4E
SHA1:	EF574ED1076338BEF1D374FF629370DE6D936374
SHA-256:	E5B636421DD189359C3B80075189D28961A205B71032CFA610B39A3401E40552
SHA-512:	9FE2F208AF3D1A6FED9DCA4E39AB94F1740922244F39450F5F62BA35F39B8094D81CC7377EAC4DD5935EF85072AF06AB4233EEA6895906F149BCD01666A442DC
Malicious:	false
URL:	https://www.ftc.gov/core/misc/dialog/dialog.ajax.js?v=10.1.8
Preview:	/*. @file. * Extends the Drupal AJAX functionality to integrate the dialog API.. /..(function ($, Drupal, { focusable }) {. /. Initialize dialogs for Ajax purposes.. . @type {Drupal~behavior}. . @prop {Drupal~behaviorAttach} attach. * Attaches the behaviors for dialog ajax functionality.. */. Drupal.behaviors.dialog = {. attach(context, settings) {. const $context = $(context);.. // Provide a known 'drupal-modal' DOM element for Drupal-based modal. // dialogs. Non-modal dialogs are responsible for creating their own. // elements, since there can be multiple non-modal dialogs at a time.. if (!$('#drupal-modal').length) {. // Add 'ui-front' jQuery UI class so jQuery UI widgets like autocomplete. // sit on top of dialogs. For more information see. // http://api.jqueryui.com/theming/stacking-elements/.. $('<div id="drupal-modal" class="ui-front"></div>'). .hide(). .appendTo('body');.

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1526
Entropy (8bit):	4.90155265256983
Encrypted:	false
SSDEEP:	24:NnkzhbkmQdDTJML9hVoSLbL4/dM4FX3CZiXMLfnCuHrcwxHrcXuGAVxGA1VJsqbn:Nkz2O9j3v4uXZicLfCuLpLQuDaqCs
MD5:	4813C46035061C60856B7766F5302812
SHA1:	466EA8F06F05C913761BE5A42258829E05AA0B70
SHA-256:	8ABD2990CD9C45B48665F4C2090FB8CCC901AA6736B9D8E75C99E6243361B3BB
SHA-512:	E97AD9A1DE31E9C7B9E30055DFD4D1CF80D985B25FD71AEED35F021A9D3981ACBB43AD9C73C389CD69304141B3E91F9FCDAD97B2BF30F2732E718D55956E3160
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/controlgroup.css?scewfd
Preview:	/!. jQuery UI Controlgroup 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/controlgroup/#theming. */...ui-controlgroup {..vertical-align: middle;..display: inline-block;.}..ui-controlgroup > .ui-controlgroup-item {..float: left;..margin-left: 0;..margin-right: 0;.}..ui-controlgroup > .ui-controlgroup-item:focus,..ui-controlgroup > .ui-controlgroup-item.ui-visual-focus {..z-index: 9999;.}..ui-controlgroup-vertical > .ui-controlgroup-item {..display: block;..float: none;..width: 100%;..margin-top: 0;..margin-bottom: 0;..text-align: left;.}..ui-controlgroup-vertical .ui-controlgroup-item {..box-sizing: border-box;.}..ui-controlgroup .ui-controlgroup-label {..padding: .4em 1em;.}..ui-controlgroup .ui-controlgroup-label span {..font-size: 80%;.}..ui-controlgroup-horizontal .ui-controlgroup-label + .ui-controlgroup-item {..border-left: none;.}..ui-controlgro

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 962x166, components 3
Category:	dropped
Size (bytes):	14153
Entropy (8bit):	7.86841101665285
Encrypted:	false
SSDEEP:	192:aRzBppLNaTcMtwsd/J8xoj3Mddp9maCBb8mlWr+EuIJnqW8dtqQIdx7fyPXll/aZ:wBsTtdg630z9zC3crFxN87L4eXltahL
MD5:	7EE154B24E9AD713B0B7A04B2A104B78
SHA1:	9EB402A746C926BD56EDE1686266CA86434389B7
SHA-256:	87BCC8D4A2E4D2A938C11DE3F336032047018CEA7FD59B31BF942B414D474545
SHA-512:	7F31F45A9004129C39AFB749BBBFF36411A7A6F183736D2D0A54EC64D3760310C5AE1A4BA53276EAFCD498C7D6368D23E05533047204F8D40DF0714C1B35923C
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}...........!.................................................................................>.]]\..............<.EEF.[.......................MY.2^<...F^x.'.}.............V;.=..}.9......w..,;c(................c\|..m7....g..k...u................#1l^.BwX..%.;....\|.$..#t.4z..... ....O'..^_~.>.....>[.Pa.....a....a{..7.`..0.]..;.o'..d...}...5_.....l.....}B.N...0.T,vC.W..@....@wP.F.[...s.....K6D..E.M.....F.t...6k.....R....F.>7oC@.Zs7.c...p................`.,y..w;.l.....ck...1l...]lZ....W.ZV..!...W.#../1...0.......#u...[....w0..Hu...4..............4.0n...p?l~vn....t.`x............#"-Mc.c.;'.{.Yi8mI...g=....................f_.yo.4..Q..............G...{BwXr&..}.....UO.S.............<............._..URw'..............`...u..h.G..6...=a=...@.............,..v^x...K..s..............Y....N..._[.\|J\..............(Y

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 46 x 26, 2-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	144
Entropy (8bit):	5.638737984890932
Encrypted:	false
SSDEEP:	3:yionv//thPlDlniMCkwMLts21pxgdlWFlZlKa5vtUoj//sup:6v/lhPeTkwMRFNqMZUgtbbp
MD5:	676F76B5275F376729ECD904CC8D9BC6
SHA1:	33495739E8DDA2B17BC1046EC57F40A23689DB8E
SHA-256:	691AF04CF37C38921020B2F9BCD6664EF8712A73EEE1365311BBC08B8D8CDD6A
SHA-512:	7E628868B819A623607F855D3581E56EF606E47AC086808E62D6241743202F14242FFF24A43C8E20089D40887B3066890ECCA32E9C15449A68F9F4667013C24D
Malicious:	false
URL:	https://reportfraud.ftc.gov/assets/images/USFlag-Icon-2x.png
Preview:	.PNG........IHDR..............<......sRGB.........PLTE.(h..0...@......5IDAT.Wc`...P0.`@.p..*0X.....a....e(.......rB. ..C'=...z;.nf.....IEND.B`.

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9487
Entropy (8bit):	4.986769472954458
Encrypted:	false
SSDEEP:	96:rRMUnaO17JeTRJer0c6akhQQbwzpdtBfvRtBwBVatiZot2+6E6L6MJ6/6x63eCkD:rRrN+8YZknEZo89+Hyc3ep5Z
MD5:	C6721DEB50E40E6842F79BB8BEF46A9F
SHA1:	32129497BEF4975A67782458C0C48F3DF9D3F28A
SHA-256:	656FC001E9392FBD86822D095F2D4DC3537146ECD7150571D2A014078FBD217C
SHA-512:	7C80DC1B3A0EAD3E124A0A2BD9DF36FAE91F5A0BEA1953234C76C133FD503DEAA350726A11D68639BD69333F07312E039A160AE1F250D09BB2078E22E13C01C9
Malicious:	false
URL:	https://search.usa.gov/assets/sayt.css
Preview:	/!. jQuery UI CSS Framework 1.8.22. . Copyright 2012, AUTHORS.txt (http://jqueryui.com/about). * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. . http://docs.jquery.com/UI/Theming/API */..#usasearch_sayt .ui-helper-hidden {. display: none;.}..#usasearch_sayt .ui-helper-hidden-accessible {. clip: rect(1px 1px 1px 1px);. clip: rect(1px, 1px, 1px, 1px);. position: absolute !important;.}..#usasearch_sayt .ui-helper-reset {. border: 0;. outline: 0;. margin: 0;. padding: 0;. font-size: 100%;. line-height: 1.3;. text-decoration: none;. list-style: none;.}..#usasearch_sayt .ui-helper-clearfix {. zoom: 1;.}..#usasearch_sayt .ui-helper-clearfix:before {. content: "";. display: table;.}..#usasearch_sayt .ui-helper-clearfix:after {. content: "";. clear: both;. display: table;.}..#usasearch_sayt .ui-helper-zfix {. opacity: 0;. filter: Alpha(Opacity= 0);. width: 100%;. height: 100%;. position: absolute;. top: 0;. left: 0;.}..#us

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 360, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	154290
Entropy (8bit):	7.994374597145604
Encrypted:	true
SSDEEP:	3072:YH9+WVJe4A63YeEAFotmo35E8fVMaoPlpQU88eXxVoUYCFeW:Y1rnYNztmopE8Wa8lpQLXxVPYW
MD5:	44F1AD7679AB78DA87628495FBEF4559
SHA1:	CA0EC60250BBC5B4A585A62103E5F12978076294
SHA-256:	DB68C16B3097C21930D4CD2D34E9A086D7E26FCC2187C66E238C6821011EE55E
SHA-512:	61E59079D19E3B625A1F186DA9CE7029E669A55D7B81CBA4A251795A1FF6B10A99977A759D85F30A21BBA3FFA70C33645D9EA44B55FC9EBACC3F52BD8A149B09
Malicious:	false
URL:	https://www.ftc.gov/system/files/styles/wide_standard_sm/private/ftc_gov/images/irsimpostervideoss.png?h=5321ed74&itok=lybEeYu5
Preview:	.PNG........IHDR.......h......2JQ....pHYs..........+.... .IDATx..y..W~.....Yw...F.>......!..hG.jg$kVGH.....^+6.........a..G.....#d..I.J;.V.......9$.$H. N.....}w....../.... ..$A0.......UV!.S....9..+W.\.r.........+W.\.r....U...r..+W.\.1...+W.\.r....S...r..+W.\.1...+W.\.r....S...r..+W.\.1...+W.\.r....S...r..+W.\.1...+W.\.r....S...r..+W.\.1....P>#a.\.r....).....^T.sr{k......r..+W.\7W...#r..n}..n.........a.\.r..u.$...~..CDz..l.....s......._6....+W.\.>.r...k.......{m.v..9...+W.\.\9.~F...r.....[..6.{.3...-...}..6..>..~..3W.\.r.....gY[.m..n....{...`..w..@t.o..J...>.?..<.nR.M..!.-.o...r........:R[?....}..v..;.<.9.....W......$X.....l..X.1.=..#.qN......s..4.B....B............os,...7...{.#....a.{D...vt3..C..r...4.H.....m......!.z.N..;kp6..m"0...p6F.....A.8..p8...A.1...%t.k.Y..-xW.....T.N.(.S...(<.T..T....!H....BD....Ax\|..3o6Ly.....r}Z4X..W......;..M...........u...]......z.3.&......,..g#\......`M.g.kZ..2 ........$u.%.9....:78....2.....>;..a..

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (306)
Category:	downloaded
Size (bytes):	526
Entropy (8bit):	5.689113699232308
Encrypted:	false
SSDEEP:	12:UOFi343RkfLhPbC4sKIUMbHxu/HrWAK2J+oqWX63CPu+:NFdkzhb7SHxu/CboX5
MD5:	FF65B041B1317A8F43BD2CA2064FE296
SHA1:	A2B007E18F429AD36004470EF6235A0A8ED04ACD
SHA-256:	EC87E8CC99D902CDD1F74E083E4EF1AF075A8F6324E2636EC932E3622560C121
SHA-512:	260A4766E2F66B6A9B4F101EE18AC60E4E122D33A00D171E98FE5E7BD48CDBA73BC5F2E2822D68301DCBAA41E2D9B177C36849FDA64CD783CC2A4BB81622B3C5
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/keycode-min.js?v=10.1.8
Preview:	/!. jQuery UI Keycode 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","./version"],e):e(jQuery)}((function(e){"use strict";return e.ui.keyCode={BACKSPACE:8,COMMA:188,DELETE:46,DOWN:40,END:35,ENTER:13,ESCAPE:27,HOME:36,LEFT:37,PAGE_DOWN:34,PAGE_UP:33,PERIOD:190,RIGHT:39,SPACE:32,TAB:9,UP:38}}));.//# sourceMappingURL=keycode-min.js.map

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1440 x 167, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	46654
Entropy (8bit):	7.975594273434514
Encrypted:	false
SSDEEP:	768:eY3np0c4rbFbHYQMkI3AbD/HZVEYrHErvKqUiuAkJdA9dmFNIOKFJIiAq:53GXF8DkIw//oYwS2dmFNIrqq
MD5:	38378D6405135ABB487D9161C973425C
SHA1:	9AFCB4301AD023774E2F0E48D6D811444A174D82
SHA-256:	75BEF4AC34F2A462C948AD1AF9B91D0E0DC5EB18F540C6AD956EA1E9D0F4AC3F
SHA-512:	851074CC9C63E0D7DC9D0AAD41FDFD4E53270F960082F5FCF1E98A5850E999937ABADEA3E2180020ED7540637BFB51C82CB25EC7F2783DF990C290C718C5A51C
Malicious:	false
URL:	https://www.ftc.gov/themes/custom/ftc_uswds/img/cta-email-signup.png
Preview:	.PNG........IHDR..............C.....HPLTE.........)&0..... ...<9Ar.._]dMJU........^n....vsr................y......tRNS........................Sl@f....IDATx...v.0.E...#;.x....2..hF..^.[.2rBr.:.o..w~.n\~...~..].%...9...=t..M.t.....3I.x.K.a....v....:..BW.....K...._...((.T.....?.}.my.Z.......yn...c.....u.H.......;DU.\|...q_.L..W.6.v.k..LE..s.=H...A....}.K.H.6.l.&zJ..T8...\......E4...wP.......$.`..\.....>I...q....ZL.I&..&j....1.C..c..m7)...D..!....Ao..C.=.ys..Q?8.zqH...........Lx....V.S.H....i.V....c.D...`...~....`)`..j..........a...O...xfD.#d.K...!......l2L'.%{..O!....qV.%..Ne.?............X.m..e.ql'.[S.<..f><..g.......:..W.2...L..T._....C..i.......L?.x.....Q.jn..........3.i.. 4~60U......9c.8..........AhC...........K>.=... t m..Os...(."..P.].qqu..gU.h..]..U..!z;.C.&..#%....X.m<.`.#G.'.....!...N..p.4....g.F.o.'O..{\|.e..._#f..=.?*..C.""i..D..:GL.........\..C/..M...h.B. .=..%.0;.y...d.].C)...<..'"8.B.....".w..oU.....c....`....\.L..=/..zJ....H.

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2024
Entropy (8bit):	7.612067015905756
Encrypted:	false
SSDEEP:	48:taooankLGhgR8htgHoGRvzONQxjBDhEC7D4FNAnJlYi:nDkU687VdNujBn7kw
MD5:	EE6B09A2EE531F6B1993EB7460B333C5
SHA1:	67345A8C0C273DE485FD6FFC7742269391B8FFAB
SHA-256:	4EF043B04BDF3067AB4F49EBBCD1783EC36F85A64C32AC04C82DDAEE087CE067
SHA-512:	F3429C34134FCE398D7EECA2380B8EED2EFD99E40098FDDFA1EA8EEDAF43C13F81F887D8315CEB76046113F30241CACA676DAC623C6CD820147F5938D0A2AE6B
Malicious:	false
URL:	https://www.donotcall.gov/images/favicon-32x32.png
Preview:	.PNG........IHDR... ... .....szz.....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs...H...H.F.k>...[IDATX..[o........\|..x..r.c..(..mT@. .U..\p......B.J.%w.H..Z..BI..-......c...xlO..\|.os.m.D1B(.....{?z.z..BJ)......o.._.h.......H.HA............`..<hz.}.\.Zi...\...Q.+s....Lb[..0...H.pn.ev~..'?....W..f...(....l.v.....)#;.$...`.........hN.s.Rd.`/.{..j.......>]?d.P?/>..........<.,w.$9C\|..l../........w...../..)..GGy...q...3...Fi]..b-395......d.ED..9..&...Fp...oK&js.0'x.........N.g/...bw...( ..>'..3_....9r.=.#.Z!ESpGJ..m.H.nG.t._......;..!rh..\|%{....!.@@.......s.y...t..f2..F\v".... q....8...dn......z.+....O.r....1..^Y.n5H..`&.(.J..C A...EH..a..!$.m(......"e..Bh:.~....}.....@.._`fz..j.....U.x..@J..j........%V.n..?v?....($..G}f.`.(O..../~F&..u.N.:..3L\|p........sR.....70.^.I.\|.f..Z,.Y.V.......'xr. ..k;......*9]..O.....w~E...B($T...C.&...bD..%R..8.5...6..y...};..,.....N..qH.R.T..Z.#.A..%C.7..S.i.........

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	546
Entropy (8bit):	4.818001076077807
Encrypted:	false
SSDEEP:	12:U2CgrbxDAwH6ZkHxDAw4y8yERhT3QYuVfc7T:nnhPHYyP4y8JhTg1Jc7T
MD5:	C3B7727D0326712303E8F340F931314E
SHA1:	86ABD447E9AF55F82A079A1B3D46A3F581E125DD
SHA-256:	F135B1A51F9EB29B9E2D697964A3885566E60BF6E67F76BE236478CA50DCC4F8
SHA-512:	9E82DD61B8F4D4E8593B87A9CBA3B9F30CF44C30832BA27BD4104CC1EC3416A59E4F796F336012CA5F22E8C59DD63D50C132AAD8301AD199EEBEEB9B88468FC3
Malicious:	false
URL:	https://www.ftc.gov/modules/contrib/extlink/extlink.css?sbs84s
Preview:	/*. @file. * External links css file.. /..svg.ext {. width: 14px;. height: 14px;. padding-right: 0.2em;. fill: #727272;. font-weight: 900;.}..svg.mailto {. width: 14px;. height: 14px;. padding-right: 0.2em;. fill: #727272;.}..svg.ext path,.svg.mailto path {. stroke: #727272;. stroke-width: 3;.}../ Hide the extra icons when printing. /.@media print {. svg.ext,. svg.mailto {. display: none;. padding: 0;. }.}../ Put some whitespace between the link and its Font Awesome suffix. */.extlink i {. padding-left: 0.2em;.}.

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32764)
Category:	downloaded
Size (bytes):	127658
Entropy (8bit):	5.250321601215053
Encrypted:	false
SSDEEP:	1536:RE3wjhext8i4tYG3B+Hd3atXWZxKJVAhVvRC4UfEjUsYJeQ6DdxMd8XJP2reWJOP:gwrzEQsYJ4aQJPBOrbxedrOefoapx
MD5:	438D04198C6950D212D65581C228D441
SHA1:	9B05FDF8154D9C9FB0B5284D0E8A188D3D40D1A5
SHA-256:	2750954DC9E8DD41F39FC3F3F4AE6D5CD453B285502B876F3CE89C16010952B0
SHA-512:	D34F9E730BC9A3BEED1A580E09368FE31F2A9D7FE151A09F3EDA3A796AE3CD250CC0EE490641D6B6695C49E7341EBD78D7F5F32F44B755CE055A36D1EC52DFF3
Malicious:	false
URL:	https://search.usa.gov/assets/sayt_loader_libs.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){"use strict";function n(e,t,n){var i,o,r=(n=n\|\|fe).createElement("script");if(r.text=e,t)for(i in he)(o=t[i]\|\|t.getAttribute&&t.getAttribute(i))&&r.setAttribute(i,o);n.head.appendChild(r).parentNode.removeChild(r)}function i(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?ie[oe.call(e)]\|\|"object":typeof e}function o(e){var t=!!e&&"length"in e&&e.length,n=i(e);return!le(e)&&!ce(e)&&("array"===n\|\|0===t\|\|"number"==typeof t&&0<t&&t-1 in e)}function r(e,t){return e.nodeName&&e.nodeName.toLowerCase()===t.toLowerCase()}function s(e,t,n){return le(t)?pe.grep(e,function(e,i){return!!t.call(e,i,e)!==n}):t.nodeType?pe.grep(e

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 962x166, components 3
Category:	downloaded
Size (bytes):	14153
Entropy (8bit):	7.86841101665285
Encrypted:	false
SSDEEP:	192:aRzBppLNaTcMtwsd/J8xoj3Mddp9maCBb8mlWr+EuIJnqW8dtqQIdx7fyPXll/aZ:wBsTtdg630z9zC3crFxN87L4eXltahL
MD5:	7EE154B24E9AD713B0B7A04B2A104B78
SHA1:	9EB402A746C926BD56EDE1686266CA86434389B7
SHA-256:	87BCC8D4A2E4D2A938C11DE3F336032047018CEA7FD59B31BF942B414D474545
SHA-512:	7F31F45A9004129C39AFB749BBBFF36411A7A6F183736D2D0A54EC64D3760310C5AE1A4BA53276EAFCD498C7D6368D23E05533047204F8D40DF0714C1B35923C
Malicious:	false
URL:	https://www.donotcall.gov/images/FTC_subpg_header2_ismyphone.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}...........!.................................................................................>.]]\..............<.EEF.[.......................MY.2^<...F^x.'.}.............V;.=..}.9......w..,;c(................c\|..m7....g..k...u................#1l^.BwX..%.;....\|.$..#t.4z..... ....O'..^_~.>.....>[.Pa.....a....a{..7.`..0.]..;.o'..d...}...5_.....l.....}B.N...0.T,vC.W..@....@wP.F.[...s.....K6D..E.M.....F.t...6k.....R....F.>7oC@.Zs7.c...p................`.,y..w;.l.....ck...1l...]lZ....W.ZV..!...W.#../1...0.......#u...[....w0..Hu...4..............4.0n...p?l~vn....t.`x............#"-Mc.c.;'.{.Yi8mI...g=....................f_.yo.4..Q..............G...{BwXr&..}.....UO.S.............<............._..URw'..............`...u..h.G..6...=a=...@.............,..v^x...K..s..............Y....N..._[.\|J\..............(Y

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	546
Entropy (8bit):	4.818001076077807
Encrypted:	false
SSDEEP:	12:U2CgrbxDAwH6ZkHxDAw4y8yERhT3QYuVfc7T:nnhPHYyP4y8JhTg1Jc7T
MD5:	C3B7727D0326712303E8F340F931314E
SHA1:	86ABD447E9AF55F82A079A1B3D46A3F581E125DD
SHA-256:	F135B1A51F9EB29B9E2D697964A3885566E60BF6E67F76BE236478CA50DCC4F8
SHA-512:	9E82DD61B8F4D4E8593B87A9CBA3B9F30CF44C30832BA27BD4104CC1EC3416A59E4F796F336012CA5F22E8C59DD63D50C132AAD8301AD199EEBEEB9B88468FC3
Malicious:	false
URL:	https://www.ftc.gov/modules/contrib/extlink/extlink.css?sbdm6u
Preview:	/*. @file. * External links css file.. /..svg.ext {. width: 14px;. height: 14px;. padding-right: 0.2em;. fill: #727272;. font-weight: 900;.}..svg.mailto {. width: 14px;. height: 14px;. padding-right: 0.2em;. fill: #727272;.}..svg.ext path,.svg.mailto path {. stroke: #727272;. stroke-width: 3;.}../ Hide the extra icons when printing. /.@media print {. svg.ext,. svg.mailto {. display: none;. padding: 0;. }.}../ Put some whitespace between the link and its Font Awesome suffix. */.extlink i {. padding-left: 0.2em;.}.

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	495
Entropy (8bit):	4.790815326458524
Encrypted:	false
SSDEEP:	12:TMHdidlffGCYRfQMKDe0vzzyZTIyy0zxQydRH7Qyf7:2didduffQMKDd+ZTXyAmygyf7
MD5:	FE3F13F6B9F4A53D64E5F5591A17BA87
SHA1:	BBA3C5AAE448C1F87A41D21EB6B0F67729AE4D7F
SHA-256:	4B533EB734D44FE36838C1F03DF0133E725B742BC97ED213F413D9E267410B99
SHA-512:	5CB6B036779D14A75A15D261A1A77F4C04072CED571F04B2BD95655695E278D9A4F344BDEF8FFFD66539921AF4397553187E07DE4EA64ECF6D54FFC9E9F3E817
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64"><title>close</title><path fill="#565C65" fill-rule="evenodd" d="M57.042 1.15l5.809 5.808a4 4 0 0 1 0 5.657L43.465 32l19.386 19.385a4 4 0 0 1 0 5.657l-5.809 5.809a4 4 0 0 1-5.657 0L32 43.465 12.615 62.851a4 4 0 0 1-5.657 0l-5.809-5.809a4 4 0 0 1 0-5.657L20.535 32 1.149 12.615a4 4 0 0 1 0-5.657l5.809-5.809a4 4 0 0 1 5.657 0L32 20.535 51.385 1.149a4 4 0 0 1 5.657 0z"/></svg>

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1575
Entropy (8bit):	4.906161204290858
Encrypted:	false
SSDEEP:	48:YnS7riQg02ouDRl1u2JenEy2ouDRluAmE2ZO:Z7OduUeqmAmfc
MD5:	904ED05D37C9525409F52CF0AA7B5E24
SHA1:	426F70B4F53C84CDA48C68953A18056B1BD1AD98
SHA-256:	4E6B649F7D388E9A8C0F6618861BB4F37E873BF67AACE0D5E9261C216787369B
SHA-512:	366B7BA04024BF9074E27351BED61D27E5A756A6720DDB7E40D9AEF8F2F56713242161EBE5484B3616640917AA3E14BDA009F0CA356F4EC3A802B429FD56E15E
Malicious:	false
Preview:	{"CreativeDefinition":{"BrandID":"fedtradecommission","CreativeID":"CR_7ZANo3f2eTZGPe6","Revision":"15","Title":"Creative - FTC.gov Feedback","ZoneID":"ZN_9ypT3vNZBT6rVcy","Type":"FeedbackButton","Options":{"Desktop":{"LookAndFeel":{"ButtonPosition":"right","ButtonText":"Give Feedback","ButtonIcon":"speaker","TextColor":"#FFFFFF","ButtonColor":"#5e35b1","BorderRadius":"moderately-rounded","UseCustomButtonPosition":false,"ButtonPositionBottomAdjustment":50,"ButtonPositionLeftAdjustment":0,"CustomButton":{"UseCustomButtonPosition":false,"CustomButtonImageName":"","CustomButtonImageId":"","CustomButtonAltText":"","ResizeImage":true,"ButtonPosition":"left","ButtonPositionBottomAdjustment":50,"ButtonPositionLeftAdjustment":10}},"HowItDisplays":{"DisplayType":"slider","SurveySize":50,"IFrameTitle":"Survey window","OpacityLevel":0.25,"ShowCloseButton":true}},"Mobile":{"LookAndFeel":{"DoNotShow":false,"ButtonText":"Give Feedback","ButtonPosition":"right","ButtonIcon":"speaker","TextColor":"#FF

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 275x214, components 3
Category:	downloaded
Size (bytes):	23667
Entropy (8bit):	7.961728151643183
Encrypted:	false
SSDEEP:	384:ZDdbTEjncyyPNiz3TDPi2EiAo5SPOxo1uxxx30iYRSaG6t5axItCa/M3yNfELPZ:b8ncdNiLTDq2EzQSwo1uxxx3d/6t5ojH
MD5:	5C40B732E282895C530EFCA5E3C69E0F
SHA1:	1110E2433FE041026064F89A9EC441EB8194D12F
SHA-256:	5166E57E1F7B5D5051EC202CBE87BCD30BD4E95B00A50EB063A26181A89A08AB
SHA-512:	8C6C2397174CD65BAB12E40A87CBD8BABD125F534202605AA6B1FA1685397B21DD1B8E8F6C594B38DD03280C02A1FB49A5ECEF14D1A22EDDA8A57143B5FBC8C2
Malicious:	false
URL:	https://www.donotcall.gov/images/FTC_DNC_main1_2_verify.jpg
Preview:	......Exif..II*.................Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:EDC34F79AB2268118E19F96045951970" xmpMM:DocumentID="xmp.did:4767C171D36511E69939A946887A3692" xmpMM:InstanceID="xmp.iid:4767C170D36511E69939A946887A3692" xmp:CreatorTool="Adobe Fireworks CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:541d9a0f-657f-49b5-8269-be604c141234" stRef:documentID="xmp.did:EDC34F79AB2268118E19F96045951970"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpac

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4663), with no line terminators
Category:	downloaded
Size (bytes):	4663
Entropy (8bit):	5.180337910828501
Encrypted:	false
SSDEEP:	96:Z8d8Ak9JDE+FjTOfuvJ3Ok/mkR4kxUUiUaUf8vMLDCl2+nZmQCbhWh0et84FFd8N:yOAIR/FPOfsJ+BlYUUiUaUkvY+ZmQCb7
MD5:	57A90CBE78929102C4CF8772AC40EF4D
SHA1:	399257D12BE3F204C3312E7D149DA73DFA33C5E3
SHA-256:	A817103FFD01EE04B5A4EDF250ACA2CAF55766BEBC5A22CCBD376BB5C0463A7D
SHA-512:	DDB47F1881EC6CC799490A0B6AED0E6E654D8C5FB80180430B8208802B2A57202B755E7B51BDD52187F7674F834C90C5CCFF22AAA7D4DE09111AA26719C7DF0A
Malicious:	false
URL:	https://www.donotcall.gov/js/register.js
Preview:	!function(){var e=null,n=null;$.getJSON("js/json/areaCodeStateMappings.json",function(n){e=n}),$.getJSON("js/json/canadianAreaCodes.json",function(e){n=e});var t={phone1:"",phone2:"",phone3:"",email:"",confirm_email:"",language:""},o={phone1:"",phone2:"",phone3:"",email:"",confirm_email:""},a=0;$(window).on("hashchange",function(){var e="";switch(window.location.hash){case"#step1":e="partials/register/step1";break;case"#step2":e="partials/register/step2";break;case"#step3":e="partials/register/step3";break;default:e="partials/register/main"}dnc_app.getPartial(e,"mainContent")}),$("#mainContent").on("mainContent:change",function(){var e=window.location.hash;switch(dnc_app.utils.isDataEmpty(t)&&"#step2"===e&&(window.location="register.html"+window.location.search),window.location.hash){case"#step1":$("#ContentPlaceHolder1_PhoneNumberTextBox1").val(t.phone1),$("#ContentPlaceHolder1_PhoneNumberTextBox2").val(t.phone2),$("#ContentPlaceHolder1_PhoneNumberTextBox3").val(t.phone3),$("#ContentP

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3646)
Category:	downloaded
Size (bytes):	7360381
Entropy (8bit):	5.865685111744452
Encrypted:	false
SSDEEP:	24576:noRKAL4AV0Q1suw5onazmAbfmtmqAXcE7+1gskW/VTCAK8FOzYhj61wcKwqmyPDN:noRKAL4AV0Q1rv
MD5:	C158DE20A5B72FDB910BF06711D85A01
SHA1:	7FD8CBC70F1E0485DBAF612F1F8897DA870A3181
SHA-256:	807B89C3F879F5C4DE0B67EE7588F4F775670B76BDB737FEDF89FBE27590C782
SHA-512:	8F8B0D12B9D4C798D7BF20047DC56DE5E3E235364663030B0C2F7101FC78436D46B775013AC8D11CA9A3D0C5A4900B4391F99096DE600AF8AB99C72BCF3B57EB
Malicious:	false
URL:	https://www.ftc.gov/themes/custom/ftc_uswds/build/css/styles.css?scewfd
Preview:	/*. @file.* Variable overrides for USWDS.././ _uswds-theme-general.scss /./ _uswds-theme-typography.scss /./ _uswds-theme-spacing.scss /./ _uswds-theme-color.scss /./ _uswds-theme-components.scss /./ _uswds-theme-utilities.scss /./! uswds @version /./.* * * * * ==============================.* * * * * ==============================.* * * * * ==============================.* * * * * ==============================.========================================.========================================.========================================.----------------------------------------.USWDS 2.9.0.----------------------------------------.GENERAL SETTINGS.----------------------------------------.Read more about settings and.USWDS style tokens in the documentation:.https://designsystem.digital.gov/design-tokens.----------------------------------------././.----------------------------------------.Image path.----------------------------------------.Relative image file path.---------

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 46 x 26, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	144
Entropy (8bit):	5.638737984890932
Encrypted:	false
SSDEEP:	3:yionv//thPlDlniMCkwMLts21pxgdlWFlZlKa5vtUoj//sup:6v/lhPeTkwMRFNqMZUgtbbp
MD5:	676F76B5275F376729ECD904CC8D9BC6
SHA1:	33495739E8DDA2B17BC1046EC57F40A23689DB8E
SHA-256:	691AF04CF37C38921020B2F9BCD6664EF8712A73EEE1365311BBC08B8D8CDD6A
SHA-512:	7E628868B819A623607F855D3581E56EF606E47AC086808E62D6241743202F14242FFF24A43C8E20089D40887B3066890ECCA32E9C15449A68F9F4667013C24D
Malicious:	false
Preview:	.PNG........IHDR..............<......sRGB.........PLTE.(h..0...@......5IDAT.Wc`...P0.`@.p..*0X.....a....e(.......rB. ..C'=...z;.nf.....IEND.B`.

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	107218
Entropy (8bit):	4.306884426748367
Encrypted:	false
SSDEEP:	1536:o4Sk0PEpdHvyY/6lhvr8NAZm2SK4Z8vfQ6nK3tW:Gw2r6dW
MD5:	3C49456F0DD7CF5911A44F16736EE99E
SHA1:	03256EFAA27ADCF193D1E067BDF5C8521E82A120
SHA-256:	5CFDA07C481EFD8E3F84DAF9E496E8A00FAA520FC4596C05EC4B6AC7EE1DBC0B
SHA-512:	E3980E0C2A6EF2767C3EDE6BFD0858D22CE7228966090F1EA9677CFF0C046DBADF4607BBBEC492FF24B4CAA8C9F9CF0A4DCA3EFCE3A27D0875FA664B9EBD78D5
Malicious:	false
URL:	https://www.donotcall.gov/images/DNC-masthead.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 960 143"><defs><linearGradient id="linear-gradient" x1="812.936" y1="147.053" x2="960" y2="147.053" gradientTransform="matrix(5.53536 0 0 -.77689 -4353.943 200.313)" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#fff" stop-opacity="0"/><stop offset=".038" stop-color="#f9f9f9" stop-opacity=".121"/><stop offset=".111" stop-color="#eee" stop-opacity=".326"/><stop offset=".191" stop-color="#e5e5e5" stop-opacity=".508"/><stop offset=".276" stop-color="#ddd" stop-opacity=".661"/><stop offset=".369" stop-color="#d7d7d6" stop-opacity=".785"/><stop offset=".471" stop-color="#d2d2d1" stop-opacity=".881"/><stop offset=".589" stop-color="#cfcfce" stop-opacity=".949"/><stop offset=".735" stop-color="#cdcdcc" stop-opacity=".988"/><stop offset="1" stop-color="#cccccb"/></linearGradient><clipPath id="clip-path"><path d="M78.815 81.42c-24.492 0-47.248 2.347-66.133 6.367 8.725 20.535 35.033 35.454 66.133

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1674), with no line terminators
Category:	downloaded
Size (bytes):	1674
Entropy (8bit):	5.027465947636093
Encrypted:	false
SSDEEP:	24:jNR1/EjmkGhESLMXflseZh2jgbrKLRqtHKtyZ39NcdSPSLIGGT+UnhjulkCTSoTD:xhESVgbrUgNyRGoQ40GrYmZAI
MD5:	5B0C342066986ECF7A21CA39C900DB46
SHA1:	CF576AC94048A5A44589BAE6D79790E9F8906DE6
SHA-256:	9E706A6F7BC551DDF626C15CD76C1C251C0009871B6977CAB0B3BF25391CBD9A
SHA-512:	900E678D370E288C29CFA7043E5FFF237D541F78AFA2180BF964958DD3BF88C4166EECC7AB1B8074F8D1BCB1075D36BE33FE00B5934C23A68E12F06D3A87FB23
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/loadjs/loadjs.min.js?v=4.2.0
Preview:	loadjs=function(){var h=function(){},c={},u={},f={};function o(e,n){if(e){var r=f[e];if(u[e]=n,r)for(;r.length;)r[0](e,n),r.splice(0,1)}}function l(e,n){e.call&&(e={success:e}),n.length?(e.error\|\|h)(n):(e.success\|\|h)(e)}function d(r,t,s,i){var c,o,e=document,n=s.async,u=(s.numRetries\|\|0)+1,f=s.before\|\|h,l=r.replace(/[\?\|#].*$/,""),a=r.replace(/^(css\|img)!/,"");i=i\|\|0,/(^css!\|\.css$)/.test(l)?((o=e.createElement("link")).rel="stylesheet",o.href=a,(c="hideFocus"in o)&&o.relList&&(c=0,o.rel="preload",o.as="style")):/(^img!\|\.(png\|gif\|jpg\|svg\|webp)$)/.test(l)?(o=e.createElement("img")).src=a:((o=e.createElement("script")).src=r,o.async=void 0===n\|\|n),!(o.onload=o.onerror=o.onbeforeload=function(e){var n=e.type[0];if(c)try{o.sheet.cssText.length\|\|(n="e")}catch(e){18!=e.code&&(n="e")}if("e"==n){if((i+=1)<u)return d(r,t,s,i)}else if("preload"==o.rel&&"style"==o.as)return o.rel="stylesheet";t(r,n,e.defaultPrevented)})!==f(r,o)&&e.head.appendChild(o)}function r(e,n,r){var t,s;if(n&&n.trim&&(t=n

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.0074972257361514
Encrypted:	false
SSDEEP:	24:XbJOOu5sOO+OsZgOOMZg+eZQZgOOMZwy1r55ZAM1OeMZZZZyZyZgOOOM55ZAM1Ox:XbYbe/
MD5:	B374D2E7B75C67A384E234902C42B523
SHA1:	BADEF153D7313F4D4343221CC463A016C75B6A44
SHA-256:	507F8F32AAEF89F3E953E523BE7E8F4041655BFDA0B3E5951BA22E588FE4017D
SHA-512:	C97E1CEFCD9E107FE92F6E058EFD0BEC3B8770653271D2D89885EF3D599E7BA0D6A7F13C2C7A27D60B8635060E74F9030EE0D05752C046F5FB9618B32AD863B4
Malicious:	false
Preview:	............ .h.......(....... ..... .........................................................................................................................................................................................................................p...p...p...p...p...p...p...p...p...p...p...p...p...p...p...p...................................................................sH$@sH$ sH$.sH$.sH$.sH$.sH$ sH$@sH$.sH$.sH$.sH$.sH$0sH$@sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$0sH$.sH$.sH$.sH$.sH$`sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$PsH$@sH$.sH$.sH$.sH$.sH$@sH$@sH$@sH$.sH$.sH$.sH$.sH$`sH$.sH$@sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$@sH$@sH$@sH$.sH$.sH$.sH$.sH$`sH$.sH$@sH$.sH$.sH$.sH$.sH$.sH$.sH$@sH$@sH$@sH$@sH$.sH$.sH$@sH$PsH$.sH$.sH$PsH$@sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$0sH$.sH$.sH$.sH$.sH$psH$@sH$@sH$@sH$@sH$@sH$@sH$@sH$@sH$@sH$@sH$.sH$.sH$0sH$@sH$.sH$...........................................

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	262262
Entropy (8bit):	5.567248909304131
Encrypted:	false
SSDEEP:	3072:R0p3LwAZVNSNcMzszFeI3v8A9CBPIrTWR4YESfhmpt2nBsLqbyHXDeltzvsXshNQ:CBcAFMgzFeVc0fhmpt+aqbyHXDelJsXZ
MD5:	0AC137F5E61C1B647AA7976715674B89
SHA1:	C41E3632A8D4CC9792BD31A812F59B7E7A9DB820
SHA-256:	C3E363E5FE99606B8FCC3BD46B0B447349F81252E3DAFE1F48D18A14011E7D59
SHA-512:	5D937904577DA32AD6614B925A5AEEEC65CD586CE809276A442E0B5C2F742D7C4DF8B268B61AD0F030DFF24C5EADAF855729D2CEBD02432DD175F5F177AF626A
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-CSLL4ZEK4L
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_auto_events","priority":19,"vtp_enableScroll":true,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":true,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":15},{"function":"__ogt_dma","priority":9,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":17},{"function":"__ogt_1p_data_v2","priority":9,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","v

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 960x143, components 3
Category:	dropped
Size (bytes):	16227
Entropy (8bit):	7.918752113865796
Encrypted:	false
SSDEEP:	384:zwyTF+Q9q/xBPTlthgC1VEEqd5CBhXXkdIDIcPY2weRMrBxVnNtC:syR9q/t8CcEqdQXUQIZeRM9/bC
MD5:	C4D1BD0C89EA64C5A43E170DE96B994E
SHA1:	6DF6B4F38451D3A377A93F780A0843D97987972A
SHA-256:	E0D2EE0445C1D07872278AA4E1D5C7635ECABD28000A09162C66303722B40D7C
SHA-512:	37FE24F4850451D2FC388606CF43CBE380A52CBFFB723B6A8B9D6474B54362377DCFF2DB661E574EB5BF47459D786CE5B7445FA7370E9BE768D6C34739854BF9
Malicious:	false
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................".........................................\...........................!...1A"7Qa...2RTq......Bu...$FSbrs...#35C..%48HUV.....DEct....................................5.........................!1AQq.2..."4Ba.....#3C5...............?..D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD..!@...DD..y.4p.s..-..]Y.'....\|...~l`...-.Uk[}...W+..p..@.@.y...N.........c.5U......Q..'..s..TU....+E.RW?"8.pk...y....N....I..FP..5.:}..........U....<g./.......&..I...QU.L..]]..t...k.....:1S......B.w.n...c...._6=._.c..D.6........]7...=.....&.....+......I.v..o.&....yp..[......Kn.......B...}......)..G.s.MKS....:.s6.\......t/.5%.*..]7_KS.........H....W4....di.~.6.j".e..2.T...s.....t..;.&..UP..ao<...ci..x...u[.M.

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	720
Entropy (8bit):	4.7252395316953155
Encrypted:	false
SSDEEP:	12:TMHdidlffGCeU/fFKZRMq2R2uK92rdIZgVTz8jxJz/jQ4mZWJ72H19wl0wB7:2didduxU/fFKjM9RFPrdYgVP8jb7jQ9w
MD5:	73ABD86624CA4C09A380E14D5F60E258
SHA1:	72DE7AA9EB600F4EB92FA3EC5DFABFD28FEFCEE0
SHA-256:	912DAFF95CE9CABAE7D0195D39AA98D49C4BEC3B975D404AC266534C069CEE20
SHA-512:	154EAC6B8FDC42C87E14D1CF0C0EA209941EE8ECAB23B5DACDF776D38B1D8A40B208786A8E788954A21C1B80600023F0BF29DF6FFD92C90951B64CE499407D85
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64"><title>icon-https</title><path fill="#719F2A" fill-rule="evenodd" d="M32 0c17.673 0 32 14.327 32 32 0 17.673-14.327 32-32 32C14.327 64 0 49.673 0 32 0 14.327 14.327 0 32 0zm0 1.208C14.994 1.208 1.208 14.994 1.208 32S14.994 62.792 32 62.792 62.792 49.006 62.792 32 49.006 1.208 32 1.208zm0 18.886a7.245 7.245 0 0 1 7.245 7.245v3.103h.52c.86 0 1.557.698 1.557 1.558v9.322c0 .86-.697 1.558-1.557 1.558h-15.53c-.86 0-1.557-.697-1.557-1.558V32c0-.86.697-1.558 1.557-1.558h.52V27.34A7.245 7.245 0 0 1 32 20.094zm0 3.103a4.142 4.142 0 0 0-4.142 4.142v3.103h8.284V27.34A4.142 4.142 0 0 0 32 23.197z"/></svg>

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 960x155, components 3
Category:	downloaded
Size (bytes):	19166
Entropy (8bit):	7.792161147460808
Encrypted:	false
SSDEEP:	384:rgCEqM8i6DEegZVLFEWp7WVM1oDNbqW0gIMf1ETQU:UlqM34kYWgVM1mLjI8ETQU
MD5:	F2E835B924C12939CFF7F05BD36D0B03
SHA1:	F975F099FE65D0C65F1AA80884FF83C014AC6799
SHA-256:	FD88DE076651C41B32E8C18285D3433BA8A0E010D67FA05CCC5A7E4AF4C90FCD
SHA-512:	53EB1F2A0BF22C4891479E57D85F95CD3138B2600CA48590CA1DA07029A6D022BE0ECD6FB0FCDA1DAFAC37F51DBDEDF2A87B2FCA94F6DB0B1FB74BC601A9104C
Malicious:	false
URL:	https://www.donotcall.gov/images/masthead.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"........................................E......................!......1...Aaq....."Q.2....#B37Rb.$Cr4ESUtu................................./.......................!1..aAQ...."#q....2...............?....\|9X(.K.-)`.f~HZr.U.R.G...ZR..iK..X%.,.......\.4..4..'.K.@...c.....T.@=)`.=.`.)`.9..........,...})`...`.6..4.....K...A/..zR..iK.O......,..JX#JX#....4.......i.'.,....`.)`...Lr...9X'. .)`.)`.a^.T.OJX%.,...C#.jX'..ZR.=)`.4..zR.).R.=)`...X#NA.R...T.@....4..4..4.....L.jX%.,.yR...?.,......,.O.A...K....K.v....s..,.......K..6...p...(JUw.,.....(..r.3H...,....R.)...`......$}8R.F`Z.....,.t.........X(.;..,.t...X(...T.P=...S.....wr.8+...A.?.AXw.i.K..!..R.F.A....d....;.......R......._q....QOt......!..4R..,....%...@.V.bN..................<.....<...B"....J'm;.[0.K... .X`..p..86]H.../\|...}.....J~...@<{E...i.

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29122), with CRLF line terminators
Category:	downloaded
Size (bytes):	30644
Entropy (8bit):	5.206808455013937
Encrypted:	false
SSDEEP:	384:2pdMtaXOfRQ/1emxyJwaIy+4qG6s1B+Sc7nfZBhVTQ:2ufRQzxyJHICqG6s1BSBh2
MD5:	FCEE5CBAC5101EDFB281BB849BDFC990
SHA1:	9A0767D249C72315DB6880DE808301BDC270B5E1
SHA-256:	4FC2C047FEDB9F07855D51778AE0A1BD9362F8100B85C5D3E8E497F1463D3EDC
SHA-512:	3BED3CE1D17341E27FBDE41EB6873E6CDA41EDD31FD449B07A3AF0BD47BB1D51496D977F6C2585FD3A2CD29C262C6E89231E63FE884D8657944D06FABED0699E
Malicious:	false
URL:	https://www.donotcall.gov/css/jquery-ui.css
Preview:	/! jQuery UI - v1.12.1 - 2016-09-14.. http://jqueryui.com..* Includes: core.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, draggable.css, resizable.css, progressbar.css, selectable.css, selectmenu.css, slider.css, sortable.css, spinner.css, tabs.css, tooltip.css, theme.css..* To view and modify this theme, visit http://jqueryui.com/themeroller/?ffDefault=Arial%2CHelvetica%2Csans-serif&fsDefault=1em&fwDefault=normal&cornerRadius=3px&bgColorHeader=e9e9e9&bgTextureHeader=flat&borderColorHeader=dddddd&fcHeader=333333&iconColorHeader=444444&bgColorContent=ffffff&bgTextureContent=flat&borderColorContent=dddddd&fcContent=333333&iconColorContent=444444&bgColorDefault=f6f6f6&bgTextureDefault=flat&borderColorDefault=c5c5c5&fcDefault=454545&iconColorDefault=777777&bgColorHover=ededed&bgTextureHover=flat&borderColorHover=cccccc&fcHover=2b2b2b&iconColorHover=555555&bgColorActive=007fff&bgTextureActive=flat&borderColorAc

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 25940, version 1.0
Category:	downloaded
Size (bytes):	25940
Entropy (8bit):	7.979210111030606
Encrypted:	false
SSDEEP:	768:GfZD9wPwmFUGxU5EhGsK4BHVmxB0BOgknTTR:GfZD90FUOhJKMH4x0ORnJ
MD5:	3D30133F7CF7C507958AC073BF6CEACC
SHA1:	801FD6424C0CDDA1D0667619F2FF06EC96E42888
SHA-256:	E0BB2F44AF2C7F274A3F40BF136F11392743544833B03EE10B0E64ABEDD214BF
SHA-512:	9D97B3209CE63F6716C46B92DFCCA36344160F9D66A2013BB2283706AA778A950C59A4F31537DB5791D074D6DD3DBE5577D1728DC664CA139B2636A2A176BE2E
Malicious:	false
URL:	https://reportfraud.ftc.gov/assets/fonts/proximanova_regular/ProximaNova-Reg-webfont.woff
Preview:	wOFF......eT.......(........................FFTM............^.KGDEF.......-...2....GPOS..........$..p..GSUB............L.u.OS/2.......Z...`..."cmap...<..........sfcvt .......4...4...wfpgm...........eS./.gasp................glyf......M......^..head..\....2...6.LS?hhea..\.... ...$....hmtx..]....H......C.loca.._L........0.T.maxp..a.... ... ...~name..a8.......w....post..b.........t...prep..d............webf..eL.........P..........o1.............=..x.c`d``..b-..`b`a`d...z.F .........X.$..._......x..Y}H.U.....mk:.ej...h.-K...9.au.1d.!....ea.c.\....)...n...H..I`6..G..,.H..@.c....=............>.........K."..........L`......'..8R-\|....(.].,m*.M...#...~..N..Q.....%.........^e......'z...z@kV.5..Q\|<..9.Uv...w..Z..Q..n...1wX....5X...G.Mqx....v.......p\|..#`.B.@R4W.L.9..8..cV+.^.m..A.O...F.1.-.r.....XI...:.s.\|...>!.......H...@.$.D.......y.'......n.}..^Pt..D.)..a6...U;.......8.Z.mrvh........P..>]..Q....<.1nP..W7.4.5Z.A.....x..e..#.xR..9..Fac".3.!.<wocw.#b..l.5/O....BN..6..?.z.

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 961x166, components 3
Category:	downloaded
Size (bytes):	17047
Entropy (8bit):	7.5385822199063295
Encrypted:	false
SSDEEP:	192:MPuR3f26TQWHM4IT06r2hYsxkor6iRzw34tY1hySOyJSwAH1n4ibK2Hw:bvLTQWHM4INsxk0hzwS8hLlAH1n48w
MD5:	EDD6466A094E486843AA7413F81E1248
SHA1:	82EDE7CAA627A48705A2DEA76669ED3527570DAD
SHA-256:	460F85A772798963B34F810166CC2501016D136F2C0348CCE7A774306AF3117B
SHA-512:	DB943D40263427338A901D543C35EED1867D063C83896A2FBEAA0F2893AC3D644A33D8DA6391B4703905FC44A02862E040AF3D8B12FEDE5F332F941CC04D2F11
Malicious:	false
URL:	https://www.donotcall.gov/images/FTC_subpg_header3_submit.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:EDC34F79AB2268118E19F96045951970" xmpMM:DocumentID="xmp.did:01AEDD34D36211E686C7B191F1381FA3" xmpMM:InstanceID="xmp.iid:01AEDD33D36211E686C7B191F1381FA3" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3E54BF0FEC2068118083D94D1A840615" stRef:documentID="xmp.did:EDC34F79AB2268118E19F96045951970"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1669
Entropy (8bit):	4.929160402060859
Encrypted:	false
SSDEEP:	48:YnNsGhwiQgLouDRlhu2J5nExouDRljE2ZqW/o:Jm5uU5Q7fDw
MD5:	8DEF835C2D20FE707308F3B90EF373E8
SHA1:	14FB81280BC85B9B43AF678EEF9748AB737999BA
SHA-256:	D2061D8A3348BFAA2A94782560818CF3B4CED47989E212E6A61CDB77AD595D30
SHA-512:	BC77646E7690EAEEC701A3E458A3B50806D1AEC1BD86306C1DA8057EC6DC960C33C72A6C991B744CC23621B2A85600B97F927300C14A40CBA0068063A9C8CD0E
Malicious:	false
Preview:	{"CreativeDefinition":{"BrandID":"fedtradecommission","CreativeID":"CR_6ru8XWIwGF4Ymy2","Revision":"14","Title":"Creative - Report Fraud-Feedback","ZoneID":"ZN_9FZSuvvWKc6nzFQ","Type":"FeedbackButton","Options":{"Desktop":{"LookAndFeel":{"ButtonPosition":"right","ButtonText":"Give Feedback","ButtonIcon":"speaker","TextColor":"#FFFFFF","ButtonColor":"#6a4600","BorderRadius":"very-rounded","UseCustomButtonPosition":false,"ButtonPositionBottomAdjustment":50,"ButtonPositionLeftAdjustment":0,"CustomButton":{"UseCustomButtonPosition":false,"CustomButtonImageName":"","CustomButtonImageId":"","CustomButtonAltText":"","ResizeImage":true,"ButtonPosition":"left","ButtonPositionBottomAdjustment":50,"ButtonPositionLeftAdjustment":10}},"HowItDisplays":{"DisplayType":"new-window","SurveySize":50,"IFrameTitle":"Survey window","OpacityLevel":0.25,"ShowCloseButton":false}},"Mobile":{"LookAndFeel":{"DoNotShow":false,"ButtonText":"Give Feedback","ButtonPosition":"right","ButtonIcon":"speaker","TextColor":

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	720
Entropy (8bit):	4.7252395316953155
Encrypted:	false
SSDEEP:	12:TMHdidlffGCeU/fFKZRMq2R2uK92rdIZgVTz8jxJz/jQ4mZWJ72H19wl0wB7:2didduxU/fFKjM9RFPrdYgVP8jb7jQ9w
MD5:	73ABD86624CA4C09A380E14D5F60E258
SHA1:	72DE7AA9EB600F4EB92FA3EC5DFABFD28FEFCEE0
SHA-256:	912DAFF95CE9CABAE7D0195D39AA98D49C4BEC3B975D404AC266534C069CEE20
SHA-512:	154EAC6B8FDC42C87E14D1CF0C0EA209941EE8ECAB23B5DACDF776D38B1D8A40B208786A8E788954A21C1B80600023F0BF29DF6FFD92C90951B64CE499407D85
Malicious:	false
URL:	https://www.ftc.gov/themes/custom/ftc_uswds/uswds/dist/img/icon-https.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64"><title>icon-https</title><path fill="#719F2A" fill-rule="evenodd" d="M32 0c17.673 0 32 14.327 32 32 0 17.673-14.327 32-32 32C14.327 64 0 49.673 0 32 0 14.327 14.327 0 32 0zm0 1.208C14.994 1.208 1.208 14.994 1.208 32S14.994 62.792 32 62.792 62.792 49.006 62.792 32 49.006 1.208 32 1.208zm0 18.886a7.245 7.245 0 0 1 7.245 7.245v3.103h.52c.86 0 1.557.698 1.557 1.558v9.322c0 .86-.697 1.558-1.557 1.558h-15.53c-.86 0-1.557-.697-1.557-1.558V32c0-.86.697-1.558 1.557-1.558h.52V27.34A7.245 7.245 0 0 1 32 20.094zm0 3.103a4.142 4.142 0 0 0-4.142 4.142v3.103h8.284V27.34A4.142 4.142 0 0 0 32 23.197z"/></svg>

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4753), with no line terminators
Category:	downloaded
Size (bytes):	4753
Entropy (8bit):	5.236690293913108
Encrypted:	false
SSDEEP:	96:u8M8tk3c+FBAeTZK0iKJLjjeINU8k4QFT2z24QFT2zFrJlS4jdsNX38v1L60k8J0:zdtMzAeTw0NJv60U8k4QFT2z24QFT2zS
MD5:	06DA68DBD57AF0E9638AB3856465C869
SHA1:	68A8A9692DC2F2F615602F20A02F588C049B7B33
SHA-256:	03C9394FE57B9C3FD8DB434743B6109A97D756300068D954B7FDF70FA6D6CB8A
SHA-512:	6FE8C3FA1EDB3AE8FA21BCEC220CBAD1D158073F151F68BBEF9CEEE6B33C49CF67BDA9EF6B3FE016CFF3D1846A392E5C23A2FD4FCD6E83C651EC7746366491D6
Malicious:	false
URL:	https://www.donotcall.gov/js/verify.js
Preview:	!function(){var e=null,n=null;$.getJSON("js/json/areaCodeStateMappings.json",function(n){e=n}),$.getJSON("js/json/canadianAreaCodes.json",function(e){n=e}),dnc_app.getPartial("partials/verify/step1","mainContent");var t={phone1:"",phone2:"",phone3:"",email:""},i={phone1:"",phone2:"",phone3:"",email:""},o=0;$(window).on("hashchange",function(){var e="";switch(window.location.hash){case"#step1":e="partials/verify/step1";break;case"#step2":e="partials/verify/step2";break;case"#step3":e="partials/verify/step3";break;default:e="partials/verify/step1"}dnc_app.getPartial(e,"mainContent"),$("#verify_step1_instr").show(),$(".errorMessage").html("")}),$(document).on("click","#VerifySubmitButton",function(o){o.preventDefault(),i.phone1=$("#VerifyPhoneNumberTextBox1").val().trim().replace(/\D/g,""),i.phone2=$("#VerifyPhoneNumberTextBox2").val().trim().replace(/\D/g,""),i.phone3=$("#VerifyPhoneNumberTextBox3").val().trim().replace(/\D/g,""),i.email=$("#VerifyEmailAddressTextBox").val().trim();var a

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	532
Entropy (8bit):	4.750725312439917
Encrypted:	false
SSDEEP:	12:TMHdidlfAIdfhuZ0S5J+sEfETOX40WGKGMPTLXAEZi:2diddAIdfh6ZEG0o3Pm
MD5:	F15C792A0A47E965CC3648C5464AF1A4
SHA1:	4F5391CD2806FAA6923C653512AD9C370145915B
SHA-256:	C053745593B65754FF0D51A58DDB54B84791604D2ED286520C54B76363BB8292
SHA-512:	EC025C1DB3749BC4D53DE0D095DCF9BC293F93C436B947DF1F3F10BB5520CBCBEEB250EDD40463F22F34551D7AD303DB8CE7FFBF156B105AF74BF82D675C5A75
Malicious:	false
URL:	https://www.ftc.gov/themes/custom/ftc_uswds/uswds/dist/img/chevron.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="64" height="39" viewBox="0 0 64 39"><title>chevron</title><path fill="#000" d="M63.36 4.004L60.155.741c-.427-.436-.919-.654-1.475-.654-.555 0-1.047.218-1.475.654L32 26.4 6.798.74C6.37.306 5.878.088 5.323.088c-.556 0-1.048.218-1.476.654L.642 4.005C.213 4.44 0 4.941 0 5.507c0 .565.214 1.066.642 1.501l29.883 30.427c.427.435.92.652 1.475.652.556 0 1.047-.217 1.474-.652L63.361 7.008c.427-.435.639-.936.639-1.501 0-.566-.212-1.067-.64-1.503z"/></svg>

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65621
Entropy (8bit):	4.659756668527034
Encrypted:	false
SSDEEP:	1536:8BzbFJ3Smh7xYXXIl2tHgtPJvLh+vBL+FE0j049ZkR/0+V5Z:oGmhMJtW9SNZ
MD5:	0E3C52459A5796E3E885FB35DB14E2F4
SHA1:	2A5DB05ACB9919397F4FA79DDB60EB192AE75D26
SHA-256:	5B724A10DD320540D90D7AB0660BD39B61738C107F653DE42F5781EDD5446185
SHA-512:	8245817C9553B1206E9D10FFD1F03FDDF80CF5210A0D586B027068E0F374F7D75EE43A0A193C8D64B5F9A402A5E9168939ED10213146A0E75E2D81D58F1AA54B
Malicious:	false
URL:	https://www.ftc.gov/core/misc/ajax.js?v=10.1.8
Preview:	/*. @file. * Provides Ajax page updating via jQuery $.ajax.. . Ajax is a method of making a request via JavaScript while viewing an HTML. * page. The request returns an array of commands encoded in JSON, which is. * then executed to make any changes that are necessary to the page.. . Drupal uses this file to enhance form elements with `#ajax['url']` and. * `#ajax['wrapper']` properties. If set, this file will automatically be. * included to provide Ajax capabilities.. /..(function (. $,. window,. Drupal,. drupalSettings,. loadjs,. { isFocusable, tabbable },.) {. /. Attaches the Ajax behavior to each Ajax form element.. . @type {Drupal~behavior}. . @prop {Drupal~behaviorAttach} attach. * Initialize all {@link Drupal.Ajax} objects declared in. * `drupalSettings.ajax` or initialize {@link Drupal.Ajax} objects from. * DOM elements having the `use-ajax-submit` or `use-ajax` css class.. * @prop {Drupal~behaviorDetach} detach. * During `u

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	321
Entropy (8bit):	4.784315747575465
Encrypted:	false
SSDEEP:	6:UBQ+NCNQkOzMyaWSAbhBvJAJUYlaWSAbpFLdXpfVpPE1aWSAbpFLdE:UBQYhjM63hBvJc3pFhXh/s3pFhE
MD5:	35E92BC4614358154CE15D129EE5CCA0
SHA1:	5BA1C4DCDFF2EF939763F6072583DCE2DD9D5243
SHA-256:	0E5742A0CB4508BCB2B8D3D81C00FA86FE7C62337D344A58306868187DCB280B
SHA-512:	47D1D23981641BBF32736204BE98EB7C09DAF0B4FE6AA2327C625A7F5B5453EFD46A02551FA2D1B97F04847D069B5F1594771EC592666E8512CEB2D5A66CF6AF
Malicious:	false
URL:	https://www.ftc.gov/core/modules/layout_builder/layouts/fourcol_section/fourcol_section.css?sbs84s
Preview:	/. @file. * Provides the layout styles for four-column layout section.. */...layout--fourcol-section {. display: flex;. flex-wrap: wrap;.}...layout--fourcol-section > .layout__region {. flex: 0 1 100%;.}..@media screen and (min-width: 40em) {. .layout--fourcol-section > .layout__region {. flex: 0 1 25%;. }.}.

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.554126181568605
Encrypted:	false
SSDEEP:	3:FIvrhxG6Wbw/MTgYwYvn:yH5Wbw/eB
MD5:	F6E9B393829B1A829280A43870018429
SHA1:	6B09804BD7C8651000F6D0DA6B87AED34ACDA5F4
SHA-256:	749B4AA5AB5415EB842C079FFBE07837C3753A77D049C22AD00AB2567EA32FCA
SHA-512:	8405C1A7BDFCDC63485CC774A1279DB425804CF5A4F5FC57306DB7BB2E3BC7E44BA55157BA799F3C1EA4243FC6DB25762E9148B661A8BFDB60E7F052D5AF920B
Malicious:	false
URL:	https://www.ftc.gov/core/modules/ckeditor5/css/ckeditor5.dialog.fix.css?scewfd
Preview:	.ui-dialog ~ .ck-body-wrapper {. --ck-z-modal: 1261;.}.

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	980
Entropy (8bit):	7.432281965818854
Encrypted:	false
SSDEEP:	24:hD2sK8Fkpcdm34uXyoKT0t6Q7Y7Pix8s3j8FCptgrD9sPzcX57:hSsHA34uXyoKgMhWYCpSv9sM57
MD5:	5191CBE73D48EDD009A122354A6E86F6
SHA1:	652793FE60FCEA523EBC30E1ED28AA19DD7C48EA
SHA-256:	B904CF8A29D9E2A2E04D6FC4DDBEAC66F811D9E6AF0C13B2C34CEC0DDE4DEEA5
SHA-512:	2E4F0E0992AC6075A7FD2411EA02FAF83D01460C915AB9594595330CAB1A5B8BCF56F650F2C53EA40117A4347A4E537EEB1AD9690E361F5A14C9A5CD331D810B
Malicious:	false
URL:	https://reportfraud.ftc.gov/assets/images/wh-icon.png
Preview:	.PNG........IHDR...P...P.............sRGB........8eXIfMM........i...........................P...........P.....(nu...WPLTE... p. x. u. y. x. w.#v.#y.#x."w."v."x."x."w."w."x.#x.#w.#w.#x.#x."w."w."x."x."w."w.#x..,.....tRNS.. 0?@OP_`op................B.......IDATX..X..0.l....!........{..7.w.M....T...M....=.4.`.\|........R.0.......16.t...$&.....Mw7.S...L......M..k.L_\|.....$.LSD.g.#..3/...Pj..]V.....6.x...b...#V..k..W.`....'@.]./v.....=.GT...+..E...rW{.,...G.7^>.\|D8w.NA..\|.=?G...n.@'1.........B..zw...2.Q$. ._.l.....E.G......\|.,.\|Z...sF&...)#.........FJ.F5.H\.L.D..},$...c...p..HB......l...iU.b[P.H.d..`..M...."bu]W....gU..;,FR..."..D.S..o...LW...........^.....a"...b...#..].\|.q..^..%.X....+.[.%}.=....mR.:..&.n..z..OW... Shn."....3.E.DV^C(.O]8/..%........e?7..-..h.Q....x.x{..N...B.'......p....+...N./...GVU:...m.B.<...Y..l....R.....)_`.V..K.5.../u%lq.e.....w...-~k....t..3_L....$..^.~:.2.Q...s...,%...`.....`..;.;...H`.^(.!....IEND.B`.

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	15281
Entropy (8bit):	4.334330974025632
Encrypted:	false
SSDEEP:	192:Xr/IlKJJPkgUQOnz54nTSZlABSqwH57qsgMUn7V28d8SQtFxuWBoTJtWX97yFT88:r5kj7z5kAJH5735E2uKto62Tc0
MD5:	098A0918E8C85629CF0445B2BCAFECE1
SHA1:	5CEB8AE831431A733DCD73691D0D17C92BF6949F
SHA-256:	CDA5AABE292D4969BF5C3A38D0D8B29284630CA611B16B11C2FB8200E669A445
SHA-512:	BC2A8A2E796F93A8B0F3C488C3D09EE03FA52666AAAD59DC59D80C4D7E9E03127FAAAB89E11054FD8F4344BC4A98848272F0C6EAB595941305C78CD06A5C5C63
Malicious:	false
URL:	https://www.ftc.gov/modules/contrib/extlink_extra/js/extlink_extra.js?sbs84s
Preview:	(function ($, Drupal, drupalSettings) {..// Checks if a given element resides in default extra leaving container page.. function isInExtraLeavingContainer(element) {. return $(element).closest('div.extlink-extra-leaving').length > 0;. }.... Drupal.behaviors.extlink_extra = {. // Function mostly duplicated from extlink.js.. // Returns an array of DOM elements of all external links.. extlinkAttach: function(context) {. var settings = drupalSettings;.. if (!settings.data.hasOwnProperty('extlink')) {. return;. }.. // Strip the host name down, removing ports, subdomains, or www.. var pattern = /^(([^\/:]+?\.))([^\.:]{4,})((\.[a-z]{1,4}))(:[0-9]{1,5})?$/;. var host = window.location.host.replace(pattern, '$3$4');. var subdomain = window.location.host.replace(pattern, '$1');.. // Determine what subdomains are considered internal.. var subdoma

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	121060
Entropy (8bit):	4.221823243480417
Encrypted:	false
SSDEEP:	3072:DfD3EqDTF3/m9zzbIp+Pfuryr/igqg0t4uXLb96VB2saIDYnFScE7b:zjMo4AO3
MD5:	7FCBE74CFDD291DC540963E91071CA2E
SHA1:	896C18F426BD075524EA81941DCEC23123B57618
SHA-256:	D60F69AC294F8B7B93E5A7DDB71900D2657F3A15F0A35A8FF57A6115334F1CAF
SHA-512:	B478AA6A559ABC7DE000628899C8CCEB3C7076A8F34992538D431A8E838429DAEB8AD688A9D01FE67EB773E912992C71D966116207DA9EAE6BBA1ACF3D158CEC
Malicious:	false
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 495.7 117.9"><defs><style>.cls-1{fill:#fff;}.cls-1,.cls-4{fill-rule:evenodd;}.cls-2,.cls-4{fill:#244873;}.cls-3{fill:#231f20;}</style></defs><path class="cls-1" d="M62,108A49.1,49.1,0,1,0,12.9,58.9,49.12,49.12,0,0,0,62,108Z"/><path class="cls-2" d="M92.5,44.2a41.49,41.49,0,0,1-.5,5.4m3.5,6.8-3.3,4.2m-2-.1c.2-.7,3.9-5.1,4.2-7.2M82.8,71.6s4.5-4,6.5-4.5a14,14,0,0,0,5.9-4.2m-7.7,9.2s-.4,2.3-6.7,4.7m1.7-.3-3.7.7m13.7-.5s-3.8,4-12.7,4.7m13.8-8.7c-.9.3-5.8,4.2-6.3,3.8,0,0-.5.7-3.5,2.1s-7.1,5-8,5.6c-1,.8,3.7-.5,6.1,0s5.4-1.9,5.4-1.9m-4.7,3.8a13,13,0,0,0-4.2.7c-1.7.8-5.4,1-6.4,1.2-3.1.7,3.1-3.8,3.8-3.8M61.7,94.9a36,36,0,1,0-35.9-36,36,36,0,0,0,35.9,36Z"/><path class="cls-2" d="M61.7,95.1A36.2,36.2,0,1,1,97.9,58.9,36.25,36.25,0,0,1,61.7,95.1Zm0-71.9A35.75,35.75,0,1,0,92.5,77.1c-.9.8-4.8,3.9-12.6,4.6v-.3c-1.3.9-2.4,1.9-3.2,2.5-.2.2-.4.3-.5.4.3,0,.8-.1,1.3-.1a13.71,13.71,0,0,1,4.5-.1c2.2.4,5.2-1.8,5.2-1.8l.3.4c-.

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1014)
Category:	downloaded
Size (bytes):	12177
Entropy (8bit):	4.990157325835464
Encrypted:	false
SSDEEP:	192:H7ylfDS8TGQagunKkuiCqIryXJaBFagUdar/vAyKYUVuh9W+z2TxkRng7uKOmKaW:GGxLKTaSnPuy82P1wVtO
MD5:	5F1AE7090CD3EA518AFB70E78F484F75
SHA1:	391B24E76B9BF11847AEB2C17E442D2689422879
SHA-256:	478D1CD080AD8A570BB3950719F296D39C07E52A3B867CDD0F822AB9236FC33D
SHA-512:	0F117792929D80305E2D84AD7B833105444DD678CF04B554853C1A05BA9C2E3E08C504DFFB168DD9E46057D70F7ADEE899093834471ACF399CAB10FD2DAA20DD
Malicious:	false
URL:	https://www.ftc.gov/modules/contrib/extlink/extlink.js?v=10.1.8
Preview:	/*. @file. * External links js file.. /..(function ($, Drupal, drupalSettings) {.. 'use strict';.. Drupal.extlink = Drupal.extlink \|\| {};.. Drupal.extlink.attach = function (context, drupalSettings) {. if (typeof drupalSettings.data === 'undefined' \|\| !drupalSettings.data.hasOwnProperty('extlink')) {. return;. }.. // Define the jQuery method (either 'append' or 'prepend') of placing the. // icon, defaults to 'append'.. var extIconPlacement = 'append';. if (drupalSettings.data.extlink.extIconPlacement && drupalSettings.data.extlink.extIconPlacement != '0') {. extIconPlacement = drupalSettings.data.extlink.extIconPlacement;. }.. // Strip the host name down, removing ports, subdomains, or www.. var pattern = /^(([^\/:]+?\.))([^\.:]{1,})((\.[a-z0-9]{1,253})*)(:[0-9]{1,5})?$/;. var host = window.location.host.replace(pattern, '$2$3$6');. var subdomain = window.location.host.replace(host, '');.. // Determine what subdomains are co

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 275x214, components 3
Category:	dropped
Size (bytes):	21936
Entropy (8bit):	7.956471364090721
Encrypted:	false
SSDEEP:	384:iQUHBSb/gxxT/z/wjCiPWwf3tUXolLaQ3pKDLw8ZlulnBNIpCz1ujGBZ1a7uEWFQ:iFBSTgxhzmC4rhaQ3p8ulngpC0yEOY3z
MD5:	594DA8EB52473C61D277F3D382A6DB6E
SHA1:	BEE6B9BA961C530AF479B8BA50FFC6FAB27F6B57
SHA-256:	E8D2E791FFDC22A20E68BA3475EE44913B8EA48D125C00BB88D159374D8BCB14
SHA-512:	D234E50C671C852546C09E37B89D3399792DB2F26A12E85E513F8D4853FBAB42BD21C4CF6BD5FC1BE34E6D19B660AEEC0C4DE90F96C85815E33583C2C5C4FB24
Malicious:	false
Preview:	......Exif..II*.................Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:EDC34F79AB2268118E19F96045951970" xmpMM:DocumentID="xmp.did:AA348DFDD36511E6BAD1E44963D3DC87" xmpMM:InstanceID="xmp.iid:AA348DFCD36511E6BAD1E44963D3DC87" xmp:CreatorTool="Adobe Fireworks CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8a233a02-ad80-4a5d-b4b8-042af2a82e3b" stRef:documentID="xmp.did:EDC34F79AB2268118E19F96045951970"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpac

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14528
Entropy (8bit):	5.457169725657282
Encrypted:	false
SSDEEP:	384:uB+x54lm4++5DwGrf66vVerW6zmQfvnXy5uHERvwgB5NQL4vpZo50J+c:S
MD5:	45AB14BE9A3F6A2EA4712CF13493CB9C
SHA1:	38D81E8AABAB45F0D325706B871253D92F1277FB
SHA-256:	74FAFD938C343C7CD171B4C24093C73883C7630E02E6250D84B4D5B3F21DD192
SHA-512:	5C55FF1AE449CA6459E7F9F43345787B048B844ED874C2CA53A9C77B7B37F5A0AAD4133A564C15E968251788E89A2EB79250984E76708B56585459F05915F77A
Malicious:	false
URL:	"https://fonts.googleapis.com/css2?family=Cormorant:ital,wght@0,500;0,600;1,500;1,600&family=Inter:wght@400;500;600&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Cormorant';. font-style: italic;. font-weight: 500;. font-display: swap;. src: url(https://fonts.gstatic.com/s/cormorant/v21/H4cjBXOCl9bbnla_nHIq6quyoqOOag.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Cormorant';. font-style: italic;. font-weight: 500;. font-display: swap;. src: url(https://fonts.gstatic.com/s/cormorant/v21/H4cjBXOCl9bbnla_nHIq6qu7oqOOag.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Cormorant';. font-style: italic;. font-weight: 500;. font-display: swap;. src: url(https://fonts.gstatic.com/s/cormorant/v21/H4cjBXOCl9bbnla_nHIq6quwoqOOag.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1085
Entropy (8bit):	4.428927125368303
Encrypted:	false
SSDEEP:	24:2diddurCfJMUMzbsMImGnHxQJ6+00xRYNkDL75YIlKvOvK3PYEB:c2kLz7GnHxQI0DYg75YIlKvz3PYEB
MD5:	1DFEF9FEDDCC96E16EAAC3FB53350D83
SHA1:	9FAF1344D6326402A7E0EC3AAF89FFD16071487D
SHA-256:	9C22E09818C567C876A90A2BC4C77D788FB9803FAA10897A12DC1FEF6572B6B4
SHA-512:	216B5A6CC53A86E30E28CD83595F18FE733C0820215566282D7A11F37FBCD5DCFE463397CEA4D7F25EADD3365D664FF7877D099437913FA23D895DF34121E5A8
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64"><title>search-primary</title><path fill="#005EA2" fill-rule="evenodd" d="M39.25 39.25c3.37-3.372 5.06-7.425 5.06-12.174 0-4.74-1.686-8.798-5.06-12.173-3.372-3.37-7.425-5.056-12.174-5.056-4.74 0-8.798 1.686-12.173 5.056-3.37 3.371-5.056 7.433-5.056 12.173 0 4.745 1.686 8.802 5.056 12.173 3.371 3.37 7.433 5.06 12.173 5.06 4.745 0 8.802-1.685 12.173-5.06zm23.325 16.366c.951.947 1.425 2.103 1.425 3.46 0 1.336-.486 2.488-1.463 3.46a4.724 4.724 0 0 1-3.456 1.46c-1.391 0-2.54-.487-3.465-1.46L42.423 49.383a26.334 26.334 0 0 1-15.347 4.77c-3.665 0-7.168-.708-10.517-2.133a27.017 27.017 0 0 1-8.653-5.768 27.046 27.046 0 0 1-5.773-8.657A26.6 26.6 0 0 1 0 27.076c0-3.665.713-7.168 2.133-10.517a27.025 27.025 0 0 1 5.773-8.653 26.961 26.961 0 0 1 8.649-5.773A26.563 26.563 0 0 1 27.076 0c3.67 0 7.177.708 10.522 2.133a27.008 27.008 0 0 1 8.653 5.773 27.093 27.093 0 0 1 5.768 8.653 26.

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2319
Entropy (8bit):	4.569044347092472
Encrypted:	false
SSDEEP:	48:NSMeyy/NsWaNjWrFE9FBe4fAw19wvw4Aw9y2lXu:O/KWaNjWrG1v16Ylw9y6Xu
MD5:	1D5BB3A361A2462BB1C91695BEBC9E78
SHA1:	67F91637C8C167F37287D0C67819EFB79FB9DBA7
SHA-256:	5C0A7E29C6F9159BE78F50C9BCE755B12104D38497D5C9213AF3DC4304E3EA1A
SHA-512:	AF6399E32C32744B197358AFF68DF71AC95AD06B9EB3D71DC4104FF24C143B0352FB3152F6560940CD651A5A6E2E7B5C9F1F886DE050C98F1B9683B09C5898DD
Malicious:	false
URL:	https://www.ftc.gov/core/misc/dialog/dialog.jquery-ui.js?v=10.1.8
Preview:	/*. @file. * Adds default classes to buttons for styling purposes.. */..(function ($, { tabbable, isTabbable }) {. $.widget('ui.dialog', $.ui.dialog, {. options: {. buttonClass: 'button',. buttonPrimaryClass: 'button--primary',. },. _createButtons() {. const opts = this.options;. let primaryIndex;. let index;. const il = opts.buttons.length;. for (index = 0; index < il; index++) {. if (. opts.buttons[index].primary &&. opts.buttons[index].primary === true. ) {. primaryIndex = index;. delete opts.buttons[index].primary;. break;. }. }. this._super();. const $buttons = this.uiButtonSet.children().addClass(opts.buttonClass);. if (typeof primaryIndex !== 'undefined') {. $buttons.eq(index).addClass(opts.buttonPrimaryClass);. }. },. // Override jQuery UI's `_focusTabbable()` so finding tabbable elements uses. // the core/tabbable library in

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	10417
Entropy (8bit):	4.075360208251934
Encrypted:	false
SSDEEP:	96:CjEUeRSRPWMERiFfZjd0AegjIyEsAq4pjhlbkYVX+klptuoX9Ax7aOzAcmJOsh:CjTPWMEgZjRvIyjMjnYy9OoiBU5EE
MD5:	B7B8208828595FDF0BA3D84C91DAE6D1
SHA1:	10D2FE53FA41C789B6D97C3E8FA61949C45D367B
SHA-256:	80EE4B7304E9FAC253771ADDB8FCC8880B2F9B8A2566D8173F073C9367C8AA0B
SHA-512:	AD83659E3CFD295550232BBE99359860D8435BC84644BF81BF96AC51DBF315DC6A4EC0674331BD2BB74C02B7F02BF1368A839D4B5843AC5ADEB1A27D5A843827
Malicious:	false
URL:	https://www.donotcall.gov/js/json/areaCodeStateMappings.json
Preview:	[{"code":"201","state":"NJ"},{"code":"202","state":"DC"},{"code":"203","state":"CT"},{"code":"205","state":"AL"},{"code":"206","state":"WA"},{"code":"207","state":"ME"},{"code":"208","state":"ID"},{"code":"209","state":"CA"},{"code":"210","state":"TX"},{"code":"212","state":"NY"},{"code":"213","state":"CA"},{"code":"214","state":"TX"},{"code":"215","state":"PA"},{"code":"216","state":"OH"},{"code":"217","state":"IL"},{"code":"218","state":"MN"},{"code":"219","state":"IN"},{"code":"220","state":"OH"},{"code":"223","state":"PA"},{"code":"224","state":"IL"},{"code":"225","state":"LA"},{"code":"227","state":"MD"},{"code":"228","state":"MS"},{"code":"229","state":"GA"},{"code":"231","state":"MI"},{"code":"234","state":"OH"},{"code":"235","state":"MO"},{"code":"239","state":"FL"},{"code":"240","state":"MD"},{"code":"248","state":"MI"},{"code":"251","state":"AL"},{"code":"252","state":"NC"},{"code":"253","state":"WA"},{"code":"254","state":"TX"},{"code":"256","state":"AL"},{"code":"260","stat

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	434
Entropy (8bit):	4.720230615985452
Encrypted:	false
SSDEEP:	12:UNJAE2B7hYz5oXoSNxpdXIk9rIysPE94aoM+A:WZ2B7qzm5Lp1Ik9rIysvzM+A
MD5:	77119203CA0DDEC77DD080884AC45FF6
SHA1:	F48551CE0E38FEAC8BD07C795ADF00B0CE969B4D
SHA-256:	34169AF71B02B45FEB08DBE27772638C0B3BED26FE26D9F015B019BE64E4389B
SHA-512:	BEA29FD1FCE6FE50A3B2192D4DA398AA03877C48662613AAA4C21D5510E120CFAFBE3F8E321D31D359F90028411B2D1AFC819DE326BB38B1B6E18CDDE15FA488
Malicious:	false
URL:	https://www.ftc.gov/core/modules/views/css/views.module.css?sbdm6u
Preview:	/* table style column align /..views-align-left {. text-align: left;.}..views-align-right {. text-align: right;.}..views-align-center {. text-align: center;.}./ Grid style column align. /..views-view-grid .views-col {. float: left;.}..views-view-grid .views-row {. float: left;. clear: both;. width: 100%;.}./ Provide some space between display links. */..views-display-link + .views-display-link {. margin-left: 0.5em;.}.

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1526
Entropy (8bit):	4.90155265256983
Encrypted:	false
SSDEEP:	24:NnkzhbkmQdDTJML9hVoSLbL4/dM4FX3CZiXMLfnCuHrcwxHrcXuGAVxGA1VJsqbn:Nkz2O9j3v4uXZicLfCuLpLQuDaqCs
MD5:	4813C46035061C60856B7766F5302812
SHA1:	466EA8F06F05C913761BE5A42258829E05AA0B70
SHA-256:	8ABD2990CD9C45B48665F4C2090FB8CCC901AA6736B9D8E75C99E6243361B3BB
SHA-512:	E97AD9A1DE31E9C7B9E30055DFD4D1CF80D985B25FD71AEED35F021A9D3981ACBB43AD9C73C389CD69304141B3E91F9FCDAD97B2BF30F2732E718D55956E3160
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/controlgroup.css?sbdm6u
Preview:	/!. jQuery UI Controlgroup 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/controlgroup/#theming. */...ui-controlgroup {..vertical-align: middle;..display: inline-block;.}..ui-controlgroup > .ui-controlgroup-item {..float: left;..margin-left: 0;..margin-right: 0;.}..ui-controlgroup > .ui-controlgroup-item:focus,..ui-controlgroup > .ui-controlgroup-item.ui-visual-focus {..z-index: 9999;.}..ui-controlgroup-vertical > .ui-controlgroup-item {..display: block;..float: none;..width: 100%;..margin-top: 0;..margin-bottom: 0;..text-align: left;.}..ui-controlgroup-vertical .ui-controlgroup-item {..box-sizing: border-box;.}..ui-controlgroup .ui-controlgroup-label {..padding: .4em 1em;.}..ui-controlgroup .ui-controlgroup-label span {..font-size: 80%;.}..ui-controlgroup-horizontal .ui-controlgroup-label + .ui-controlgroup-item {..border-left: none;.}..ui-controlgro

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3445
Entropy (8bit):	5.351882680932181
Encrypted:	false
SSDEEP:	96:N/SLaoST5YS1hSHFAWWwpdGdvcYCOCc2PbiUFF:RcaHT5IlGwpdpouF
MD5:	05632AA5D1EEF52E534ABE613E657140
SHA1:	B4C2986944AF1DF615BAD5F07FD981EF15B6E7FB
SHA-256:	D0258C1340CF83CC5E49CC3AE9E140AFD6D20ED3E295CCAEC3D6520417164802
SHA-512:	4E4DAC0CBC2C68F7E3625C6C2E73B0D1B63EAAA9FE7E9C8883F4CC2236B6F4046212F4DB242B67CEC1080AB31E8EB1845BA75FEF71B5A999512B8FCF46389A4D
Malicious:	false
URL:	https://reportfraud.ftc.gov/config/config.json
Preview:	{..."apiUrl": "https://www2.reportfraud.ftc.gov/PROD_EAST",..."showBanner": true,..."showBanner2": false,.. "foresee": true,..."melissaLicenseKey": "QGRWK_xYIfB4QhLvOJMBNJ**",..."melissaExpressAPIUrl": "https://expressentry.melissadata.net/web/GlobalExpressFreeForm",..."mlServiceUrl": "https://rfml.consumersentinel.gov/ca/predict/api/v1.1/toptwo",..."internetFlagSpecified": true,..."internetFlag": false,..."appInsightsKey": "28bebdb8-7010-4839-b144-be8b2f0cbfe8",..."englishURL": "https://reportfraud.ftc.gov/",..."spanishURL": "https://reportefraude.ftc.gov/",..."qnaUrl": "https://rfkb.azurewebsites.net/qnamaker/knowledgebases/5a1d1b1e-1f22-4e75-8226-de6542c72bca/generateAnswer",..."webChatURL": "https://cdn.botframework.com/botframework-webchat/latest/webchat-es5.js",..."gaTrackingID": "UA-36365578-2",..."enableChat": true,..."enableInContactChat": false,..."enableABTesting": false,..."abTestingValue": ".69",..."areaCodes": [....840,....447,....945,....582,....572,....939,....78

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 32316, version 1.0
Category:	downloaded
Size (bytes):	32316
Entropy (8bit):	7.992666668377042
Encrypted:	true
SSDEEP:	768:dGHhr+VskpK2Wia+uZXWlMJzew2JVJjEcxJV7tYg4svs:chrnqKjiafZGgKwUVJjFJpyg4sU
MD5:	33FC15A618E8604C30BA2CB15F87CD8B
SHA1:	A00C23EABA48E629604BE3E14D445E76ED869328
SHA-256:	5553138957B1A7A87169EE4A2DBED5D66DF20ABBFCC9043E0F5CB38C19FD3EB3
SHA-512:	D9B0F81A719EB273E569264B06F05D270B8BDC66729207D7E88EDA2F001ED532537B6647FDE5C86F9EAFE6F77FF98CF9336204D696789A5D7C98050A023C554A
Malicious:	false
URL:	https://fonts.gstatic.com/s/cormorant/v21/H4clBXOCl9bbnla_nHIq75u9.woff2
Preview:	wOF2......~<......3...}...........................>..J..T?HVAR.M.`?STAT..'".../V.....8..f..D.0....6.$.... .....0..[a.q.m...w....w...m....%.....6....L..?)...M.....Nw..T.F...f....."..I0.C>...VI...4.."..u....G..j..MT.L......C.1.T>....s..k.6L......C..... 8.!...%5N.XL!.{.#a....2S(.F........7...':S..).8....^f....t....F.k...iSM.4m..T....":..:L7`..0.......U..xwl..J..H...$.W..K..i..VjY..m.<f...v....c..]...p%@...I..eaHV.}'.SYG.....3..>.C]Ue....(z..w{.pn.)....h..<m[...L.cO9......g..AWR..2...W........W.....L:.Z....~[.Q....[&!..'X...d&4...hoq..4igz.hO.7........I..{..u../.....@.C..M...Fc{..`......$.nZ...%...J..lk.f..w.@`w-.........htT....I...........g.tB.........../&'{C...N.........o.}_.3...........f.....N....(.s.d...l7{b/..-.@..%T.. h.]L.m..Y^[S.......t..9.IGPt..2....).......D..d.........,....+..u.h.:\.......~...p...HfB.IeO*&....4...C...}%......R........i.....<...v'.{.'....:....=!...y..LH...]/.f.w9lw.\........[.B$E....<.&B...l.d.1iD.=.D%T...._..J..X..

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (5726), with no line terminators
Category:	downloaded
Size (bytes):	5748
Entropy (8bit):	5.3857909047430566
Encrypted:	false
SSDEEP:	96:q4NM6fhnK0E06UxmpjQLghEtDp8LbUN0/7L2RPgR5E2E1EsE1EUE44:3FnK0E06UxmpjQD8LbUS7L6PG5E2E1Ey
MD5:	6DBEAC431E71833BE6218F6E97772347
SHA1:	44949357D86EACFED85A4D8F38EB03A5EC43D830
SHA-256:	A313B5EFCF3A9BA3D8F11752934F81F6C5F3F3F66ED5E0725E53210032B6899A
SHA-512:	BE0B1838C5A8BFFA5F2EF18E0191FAF8C28E71B0973B26397FE616309878DB8C352040AE0C0E304ED1EAB7BA5EF65655809A90D662FC9A8E4E247AEF02D9D5B9
Malicious:	false
URL:	https://www.donotcall.gov/js/global.js
Preview:	String.prototype.startsWith\|\|(String.prototype.startsWith=function(e,n){return n=n\|\|0,this.indexOf(e,n)===n}),String.prototype.includes\|\|(String.prototype.includes=function(e){return-1!==this.indexOf(e)}),window.dnc_app&&console.log('"dnc_app" is already defined and is being overwritten.');var dnc_app=function(){var e="https://www2.donotcall.gov";var n=function(e){e=e.replace(/[\[]/,"\\[").replace(/[\]]/,"\\]");var n=new RegExp("[\\?&]"+e+"=([^&#]*)").exec(location.search);return null===n?"":decodeURIComponent(n[1].replace(/\+/g," "))};function t(e,n){for(var t=!1,a=0;a<n.length;a++)if(n[a].code==e){t=!0;break}return t}return{config:{submit_registration_url:e+"/save-phone-registration",confirm_registration_url:e+"/confirm-phone-registration",submit_verification_url:e+"/save-phone-verification",submit_complaint_url:e+"/save-complaint",complaint_step2_url:e+"/complaint-step2",complaint_text_url:e+"/complaint-text-message-link"},setLanguage:function(e){var t;!0===e?("es-MX"===n("lang")?(t

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2381), with no line terminators
Category:	downloaded
Size (bytes):	2381
Entropy (8bit):	4.46733778035722
Encrypted:	false
SSDEEP:	48:K+LlDmPv4h+1yxCUDc7g3EMnyTnnptCoI:bqok1yxCUDwbnptCoI
MD5:	C2848E227FCC05E0E4D450D4966495F1
SHA1:	4EDAF992DF1E4CED543E8EC6C6F0FEF801818D16
SHA-256:	2583424FFC1A35D8FA87F48E714A8E9A5B8812341A905CF9E27ADB91DE382A3D
SHA-512:	A4DD4DBDA146680EF266D086DEC730ED5DFF728C90E72A0FADE7B55E3454DC01F8534F65EF2BFF502C33DB17A7C53251E02238BE6F950F8775BC4D6AA44827B6
Malicious:	false
URL:	https://www.donotcall.gov/js/lib/jquery.i18n/jquery.i18n.fallbacks.js
Preview:	!function(r){"use strict";r.i18n=r.i18n\|\|{},r.extend(r.i18n.fallbacks,{ab:["ru"],ace:["id"],aln:["sq"],als:["gsw","de"],an:["es"],anp:["hi"],arn:["es"],arz:["ar"],av:["ru"],ay:["es"],ba:["ru"],bar:["de"],"bat-smg":["sgs","lt"],bcc:["fa"],"be-x-old":["be-tarask"],bh:["bho"],bjn:["id"],bm:["fr"],bpy:["bn"],bqi:["fa"],bug:["id"],"cbk-zam":["es"],ce:["ru"],crh:["crh-latn"],"crh-cyrl":["ru"],csb:["pl"],cv:["ru"],"de-at":["de"],"de-ch":["de"],"de-formal":["de"],dsb:["de"],dtp:["ms"],egl:["it"],eml:["it"],ff:["fr"],fit:["fi"],"fiu-vro":["vro","et"],frc:["fr"],frp:["fr"],frr:["de"],fur:["it"],gag:["tr"],gan:["gan-hant","zh-hant","zh-hans"],"gan-hans":["zh-hans"],"gan-hant":["zh-hant","zh-hans"],gl:["pt"],glk:["fa"],gn:["es"],gsw:["de"],hif:["hif-latn"],hsb:["de"],ht:["fr"],ii:["zh-cn","zh-hans"],inh:["ru"],iu:["ike-cans"],jut:["da"],jv:["id"],kaa:["kk-latn","kk-cyrl"],kbd:["kbd-cyrl"],khw:["ur"],kiu:["tr"],kk:["kk-cyrl"],"kk-arab":["kk-cyrl"],"kk-latn":["kk-cyrl"],"kk-cn":["kk-arab","kk-cyrl"]

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.554126181568605
Encrypted:	false
SSDEEP:	3:FIvrhxG6Wbw/MTgYwYvn:yH5Wbw/eB
MD5:	F6E9B393829B1A829280A43870018429
SHA1:	6B09804BD7C8651000F6D0DA6B87AED34ACDA5F4
SHA-256:	749B4AA5AB5415EB842C079FFBE07837C3753A77D049C22AD00AB2567EA32FCA
SHA-512:	8405C1A7BDFCDC63485CC774A1279DB425804CF5A4F5FC57306DB7BB2E3BC7E44BA55157BA799F3C1EA4243FC6DB25762E9148B661A8BFDB60E7F052D5AF920B
Malicious:	false
URL:	https://www.ftc.gov/core/modules/ckeditor5/css/ckeditor5.dialog.fix.css?sbdm6u
Preview:	.ui-dialog ~ .ck-body-wrapper {. --ck-z-modal: 1261;.}.

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	72
Entropy (8bit):	4.938964022510498
Encrypted:	false
SSDEEP:	3:hHAPh0SCaHO2k5rDrh8B3kfY:hHUMaul5jSBJ
MD5:	8DFBE800A66A980CCFDDB9CF012F2E6B
SHA1:	B9879EDE7BE5386E5E83F8525252916A4FFA810C
SHA-256:	B0AF19CD7DB15FEFD2B435CFA640556B48773FE3F3F6CFD5C0F5B27D4D9A2776
SHA-512:	2A683C449C0806958C2E0477803BF8149DB75DC95D9579B6FFA7F07FFFC79CDE2795F80E6DD8EC28C5F3D0E9E39F5255124BB9BE696D04EDC86F7833FF8EDAE4
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQnWG4wz7wb_5hIFDd6k-tsSBQ0G6sH6EgUNZY5uohIFDclFdRA=?alt=proto
Preview:	CjIKCw3epPrbGgQIDRgBCgsNBurB+hoECA0YAQoHDWWObqIaAAoNDclFdRAaBAgJGAEgAQ==

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	53529
Entropy (8bit):	7.996437903827682
Encrypted:	true
SSDEEP:	1536:Dy1bA1OzfEunEXa8fgeSuoAkqDZKcWLGbYbHy:DyS4zfEI0IpSZKcyKYO
MD5:	081F5EC292C0454200EF7C48D983ACDD
SHA1:	750C095874BF4693DF319C3BB365603C40B219DF
SHA-256:	8210726BD7A6319A54B320740C3DBCDECE3D420ABE90BBE2682848B0A6DDBA85
SHA-512:	BF8E27E91AC9D3D97C1B7E911C8A24B24936B8EE6B6483D3C69A00B04F5E74EA97F0DEAEAE3AD9D50925C45F349BE466973433A78BB67DA769735F9555C7E3A1
Malicious:	false
URL:	https://reportfraud.ftc.gov/scripts.6df1642d06080470.js
Preview:	[..R.1..@w..J_/}....R%....p... ......^....v.#rd@e.~.,$....bW...>....'tQ+.W.X...(.].!,.....z..8.....H...z.CO#..@......... .0..b..d....(6..6........4.#.....N..:arB.Oh.>.4.#./u/..L.f..#.......,.W.v.\|...({....._..8..]A....ZB...taz.C..$..........5 W$.1.-..N..q..$..;..~....p...W.LJg....+.E.")..../y..a....~.V........=..]} ...B.C.......EV...E.u...G...V.t$...>_3...dy!.......%..B..r.cxD...W..Wt.:.C......J..rk'k.y.....i.!...+i.i........TJ'...I.U....H..q?.......o..:...nu..3.,v....s..i.._eYv:.$..;.Aif..'fYv..l.O...Q.\|..?z...k........9.....F.#..f.....i..+...Kv.A^!..8..'jdJ..-....;...j.{.r.j<................e...Lv..<.+..n...p.X..y...W.L..t.l.B....R {N..\|....)...%.YU@7.....Z.$hC..".....V.8m..w..W.....g..T7.G.R........'..>.......g.......$.A..{.{Y.IZ......C...{.O.@r.........q4i........:.G..E[.M...4..Q.v.t..R..!.$.m;..?{\....l....eIv..k....?9lt.E.Bl....6j.......3...B....Ek.Y....K.X..A(.ic..:..susu.=..i."...........)..,.....m.c....y....2.....v.?.o..

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (308), with CRLF line terminators
Category:	downloaded
Size (bytes):	1437
Entropy (8bit):	5.552436563067138
Encrypted:	false
SSDEEP:	24:8XQeYcY4wtOLm92w5KQK1k1lPGVJc+XaslkjNOM6uHMI0OiV1XbfCg+GXsGXypP4:8uPAm9t5e19n5lGn+LCgENfw
MD5:	BC1E023B9B37478837CE15E73A2445AD
SHA1:	64953BDD7A26F80B921C0D5E3C1150F176ADC9D6
SHA-256:	569795452C41CF84B356B6BF47B080D3021522630CA879E7CE1EA15838A7739E
SHA-512:	78E980D9354645D9F662D81313823482861FC319999A603A8CB226952428AE6F027F15B95F45A090F3A2C88922B0F4F2F00C9F7B1DF27480D90FFC421D94AD4C
Malicious:	false
URL:	https://reportfraud.ftc.gov/foresee_assets/qualtricsScript.js
Preview:	//BEGIN QUALTRICS WEBSITE FEEDBACK SNIPPET//....setTimeout(function(){.... QSI.API.run(); ....}, 1500);....(function(){var g=function(e,h,f,g){....this.get=function(a){for(var a=a+"=",c=document.cookie.split(";"),b=0,e=c.length;b<e;b++){for(var d=c[b];" "==d.charAt(0);)d=d.substring(1,d.length);if(0==d.indexOf(a))return d.substring(a.length,d.length)}return null};....this.set=function(a,c){var b="",b=new Date;b.setTime(b.getTime()+6048E5);b="; expires="+b.toGMTString();document.cookie=a+"="+c+b+"; path=/; "};....this.check=function(){var a=this.get(f);if(a)a=a.split(":");else if(100!=e)"v"==h&&(e=Math.random()>=e/100?0:100),a=[h,e,0],this.set(f,a.join(":"));else return!0;var c=a[1];if(100==c)return!0;switch(a[0]){case "v":return!1;case "r":return c=a[2]%Math.floor(100/c),a[2]++,this.set(f,a.join(":")),!c}return!0};....this.go=function(){if(this.check()){var a=document.createElement("script");a.type="text/javascript";a.src=g;document.body&&document.body.appendChild(a)}};....this.sta

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4186)
Category:	downloaded
Size (bytes):	4418
Entropy (8bit):	5.056662308576426
Encrypted:	false
SSDEEP:	96:uxURb/ilKSz4m5Fc6PMiPaooLooeXM8ZHw2AePVePzF85+DqFiyELPF:uuMbzXTMDooLooeXxHgxFnuEh
MD5:	53F1C79A73FC9E1E7747A6151AFDE223
SHA1:	42EF99D26A16587904D5D0BCE8343886301BDB2A
SHA-256:	76736938F2D6D001288172FAC0862F743C6FF8A8087A81E1733E88574A26E47B
SHA-512:	BB7337AB2E7C8A35D6E4293CD2ABF0B907A65008DDC50D82E28D3893CA966098C11544E876DE1511AF1F346C11A967020C1BD57C3A799AB5C672E3BF7CEEC2A6
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/widgets/checkboxradio-min.js?v=10.1.8
Preview:	/!. jQuery UI Checkboxradio 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","../form-reset-mixin","../labels","../widget"],e):e(jQuery)}((function(e){"use strict";return e.widget("ui.checkboxradio",[e.ui.formResetMixin,{version:"1.13.2",options:{disabled:null,label:null,icon:!0,classes:{"ui-checkboxradio-label":"ui-corner-all","ui-checkboxradio-icon":"ui-corner-all"}},_getCreateOptions:function(){var i,t,s,n=this._super()\|\|{};return this._readType(),t=this.element.labels(),this.label=e(t[t.length-1]),this.label.length\|\|e.error("No label found for checkboxradio widget"),this.originalLabel="",(s=this.label.contents().not(this.element[0])).length&&(this.originalLabel+=s.clone().wrapAll("<div></div>").parent().html()),this.originalLabel&&(n.label=this.originalLabel),null!=(i=this.element[0].disabled)&&

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 640x360, components 3
Category:	dropped
Size (bytes):	41342
Entropy (8bit):	7.965735077214734
Encrypted:	false
SSDEEP:	768:OJBKovxOQD3dF64aya+ZNO+AS5lXISjkF+Uq76+9h3cwJTmbwmiOsmE:OnK1Qzi4aHMo9S4S4QvrJTFmiN1
MD5:	4CF9898C32F8840BE8887CF887E53B42
SHA1:	F466CA418CA8B130CEA1A8993E843F73132863DC
SHA-256:	AB4FA10C5A233E8CAED2591819504B148CEC748381353C942A344BE527B6B7CE
SHA-512:	F7390BFB542372F5DB58995143CB3DAF80E4C0262A7212879E6D49E58B0C6127BF50B3864472B1C24606A6B8E1E5B67A681DF2D7BDC93598ACEF1729FE3B5B16
Malicious:	false
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....dV......I.G.2._a9]...n.ri...A.Mf$.v...a....nh..vR...r..\.....KCYS.C...`.qR.X....H.;...bP;.W3`..t.{.Dc...nz....L....\|..:.:5'.:c..v6....k&.R.?5e=..2....j.[.......";.A.88.@...kI...Vu.F._....E....9.i.\.....U..Me...G.}G. _S]n.d./..i....u.X...dyY..!dmA.A.TWr.......%aj..;3....g...H......J....

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	46031
Entropy (8bit):	5.020399682132828
Encrypted:	false
SSDEEP:	768:sQ/igZ0MsMOsgs2nPVBHzCkERD3PzieK8:sDzPVBHzlE1VV
MD5:	0827689593F456B774FFC68AA5A534EB
SHA1:	4974A93C05C28A6D6BB3A4F65F50862EEFC2AEE9
SHA-256:	E4309D7C0671A9A30762139E5887A0B1E46286E92F3A7926071B1DDCCB123B41
SHA-512:	799E8F808D6193C38CB21A4023CE9D95C57ED5C8978E998AFF8A4439773EF8716776B5408343CC7ECD11CCF69CF48E819FB3C7090C664FFE1B3B40D2A5EE8006
Malicious:	false
URL:	https://www.donotcall.gov/js/i18n/en-US.json
Preview:	{.. "@metadata": { "locale": "en" },.. "sitewide.page-title": "National Do Not Call Registry",.. "sitewide.MasterFileSiteHeader" : "<header class=\"mainHeader\">\r\n<div class=\"mainHeader_i_img\"><a href=\"http://ftc.gov\"><img src=\"/images/masthead.jpg\" width=\"960\" height=\"155\" alt=\"Federal Trade Commission \| Protecting America's Consumer\"></a>\r\n</div>\r\n<div class=\"mobile_header\">\r\n<h2 class=\"mobile_site_slogan\"><a href=\"http://www.ftc.gov/\">Federal Trade Commission</a></h2>\r\n</div>\r\n<nav>\r\n<div class=\"header_nav\"><a href=\"http://ftc.gov\">Back to ftc.gov</a> \| <a \r\nhref=\"http://www.ftc.gov/es\">Español</a></div>\r\n</nav>\r\n</header>",.. "sitewide.MasterFileLinks" : "<div class=\"rightNavLinks\"><a href=\"/faq.html\">Resources</a> \| <a href=\"http://www.ftc.gov/ftc/privacy.shtm\" target=\"_blank\" rel=\"noopener noreferrer\">Privacy & Security</a> \| <a href=\"/index.html\">Home</a></div>",.. "sitewide.MasterFileHeader" : "<div

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 640x360, components 3
Category:	downloaded
Size (bytes):	27937
Entropy (8bit):	7.916063487364758
Encrypted:	false
SSDEEP:	768:OJn/Lsvs7tD6p/fR+Gr1n+EkNejzHxJZ4:OJ/gWtDafR+Ghn+2a
MD5:	60A2B26435B9A2363DE6A2A0F0444206
SHA1:	7F145150F11251D9E564905A31C3B823A3BAEE55
SHA-256:	B3E5C44022B00E37A2FECE7B98D1FFA8CDB7C8B7D897E758A7A091A4F657D735
SHA-512:	F40DAE3251AE15291E08554017DFD56BAB1D9D35F2B5A8D40085ECAE2AA38AE1FF6E1B58EBB2B0A017052B772BDB92D34136AF4E84535090052B4AD19AFF5420
Malicious:	false
URL:	https://www.ftc.gov/sites/default/files/styles/wide_standard_sm/public/ftc_gov/images/coronavirus-microscopic-white.jpg?h=c3fd1d45&itok=omNpfODI
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...OJ.(.....W.z\|SG2..j.7..(....R3.RI...j.5.4.+$...i9%.p.:..W:\...j....l.0.^C.\|T.Ma......c...k..J.k*u`;.3......Q..C..}h...FW......U....k....a'w?Z...._.r.5b.....-...9.H...H.1.................=..~"j..B;s.5....K.(...}1..c5..).._..[hq.L...W.

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1900
Entropy (8bit):	5.228625815310242
Encrypted:	false
SSDEEP:	24:2dVA6LfEHPrtLmVRzt53LhFZYgT+hL3fLTptBbTUGnCbKngbTuGCdK:cVA+fEvr1mHz7bhFZYnRfLTpXgLkeTBd
MD5:	6F91EA52570E7D8B5D683D2F8C01F8DE
SHA1:	E104E72D39FD9159E3EECB514AF56ECE74DA1506
SHA-256:	9269538ECE58CED5852C3E10929EDD7B07702AF290A21ADE34707DDF9E700DF5
SHA-512:	06B3A12733D1798336396A79EEAD32292A7F04AE8568B3F6385EB06BC650C16374280B26B59C0B0504580A01FE5BB4A1E7E0B9F04007807F5051B800F3B8D2F3
Malicious:	false
URL:	https://reportfraud.ftc.gov/assets/images/tellUsWhatHappenedNoDots.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 1080 938" style="enable-background:new 0 0 1080 938;" xml:space="preserve">..<style type="text/css">....st0{fill:#7ED3F3;}....st1{fill:#244974;}....st2{fill:#F5A800;}..</style>..<title>Report-Fraud-Illos</title>..<path class="st0" d="M517.1,559.7L511,553c-32.1-35.1-49.1-76.7-49.1-120.4c0-111.8,112.6-202.8,251.1-202.8s251.1,91,251.1,202.8...S851.5,635.4,713,635.4c-29.9,0.1-59.7-4.3-88.4-13l-3.8-1.1l-152.1,40L517.1,559.7z"/>..<path class="st1" d="M414.8,640.3l4.1-4.5c21.5-23.5,32.9-51.3,32.9-80.5c0-74.8-75.3-135.6-167.9-135.6s-167.9,60.8-167.9,135.6...S191.2,691,283.8,691c20,0,39.9-2.9,59.1-8.7l2.5-0.8l101.7,26.7L414.8,640.3z"/>..<path class="st2" d="M269.7,568c0-22.2,29.3-24.6,29.3-40.1c0-7.1-5.5-13.1-17.3-13.1c-1

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 771 x 144, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	25653
Entropy (8bit):	7.964858039073613
Encrypted:	false
SSDEEP:	768:M1yLrQCIC89ekk16DtWT4e3z8Io/V1SPK:yyLrehgt15T4e3YfSPK
MD5:	9F819D98B28CE7EDD627B502EA579FD8
SHA1:	BCB05483F56B3D1A2F820FDCD1F41AE2CE0CB7DD
SHA-256:	39650DA8FBE9D79A204AFC7F6DDE637B5DD796A682F85B9BEC7203B4767AEDB0
SHA-512:	80BCB11591198422185142EF6F722985D33C88C4CA78FF7F24565CFDDA8D615E8BA341A5FED05BC62946947B25C0CDE86A6E8C796D8ABC2DF9E55DA450FDCCA0
Malicious:	false
Preview:	.PNG........IHDR.............T8.S....tEXtSoftware.Adobe ImageReadyq.e<..c.IDATx.....Wy.]x...{$:..I.f..k;/..X.v.".N.1.[....z.....Q.G....;o...',.,...`@.Ll.I.i-.Fz....)\|..`t.....8.n.Go...3s.NUuUwuO...?......[_..s...S(...B.P(...B.P(...B.P(...B.P(...B.P(...B....v.../.....L.K.........Z.Y.y......D._J.R}.tu.o...V.RR(...B.P(:........e._Fo..WM.}.{.v.OMOM..p...o..............G........z....=....7o:......O?..[^yl\|t,h...^.y.B.P(..E7`...`..?..r..n\|...{......?..gjg......{...C.....v.Zo....G.....k.xssg...o\|.X......<.8q2.......K.....~..~...^.W.....gNWkz.)...B.P(T..K.{....+6./......k>./....n....;}...w..9o....v.^OO.O....7.......7h..<q".....\|h....?....{...[.}m.1..?..~..E..^v..B.P(........?......j.:.....x.....w.{.....9D....U@. .X....9...WU......;..v.&&a...U.....B.P(.*....a_.....;..7.....!.~.....7.,.....f.X.D..<q2.%.........x......t..z.SS#.j..@V(...B.P..H.../....?.......G..)<.w_...!...[..G0.?w...H.,.qD.. ..E..q..~.c.6....v..[..h.\.....f...\z......0.@E.B.P(.

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3003), with no line terminators
Category:	downloaded
Size (bytes):	3003
Entropy (8bit):	5.167974738136301
Encrypted:	false
SSDEEP:	48:hTaJfy+hiQFNB7GEGTbTzLEoPpKkVr54TH4y3yXHlrMPbEz2gqGC7samDw8//yYZ:hTsiQFNBGEGLco7DiH4eyXHhMPMoxm8o
MD5:	5F984FDD1D3384220C67422C1F544A95
SHA1:	79C8A48B5FAB47972DD69CE7DFD08CEE895006B5
SHA-256:	6E0CC78C402CBC02FDFD41CD77C5FD6FFBD8066CC07935EA8EB5F3FCC59744A3
SHA-512:	213D46E642971BE740CE74EE1F4B05835F11B88A05E89045BA6869391C40E871150ED22D96C9865203A767E45B5FBB09E879FE605D82E0E7B59CC8CF4BE3019A
Malicious:	false
URL:	https://static.addtoany.com/menu/page.js
Preview:	!function(o,i){function r(){}var n,d,s,l,c,u,f,m,e,a,t,p,y,v,h=".BRQnzO8v",_=o.head;"function"==typeof[].indexOf&&_&&(i.a2a=i.a2a\|\|{},n=i.a2a_config=i.a2a_config\|\|{},e=(d=o.currentScript)&&d.src?d.src:"",NodeList&&NodeList.prototype.forEach&&(i.a2a.init=function(e,a){void 0===a&&(a=n);var t=":not([data-a2a-url]):not(.a2a_target)";o.querySelectorAll(".a2a_dd"+t+",.a2a_kit"+t).forEach(function(e){e.matches(".a2a_kit .a2a_dd");e.a2a_index\|\|null!==e.getAttribute("data-a2a-url")\|\|e.matches(".a2a_kit .a2a_dd")\|\|(e.dataset.a2aUrl=a.linkurl\|\|"",a.linkname&&(e.dataset.a2aTitle=a.linkname))}),delete n.linkurl,delete n.linkname},i.a2a_init=i.a2a.init,!d\|\|d.async\|\|d.defer\|\|i.a2a.init("page",{linkurl:n.linkurl,linkname:n.linkname})),i.a2a.page\|\|(i.a2a.page=!0,s=[],["init_all","svg_css"].forEach(function(t){i.a2a[t]=function(){for(var e=[],a=0;a<arguments.length;a++)e[a]=arguments[a];s.push([t,e])}}),t=(v=n.static_server)?v+"/":"https://static.addtoany.com/menu/",a=e&&-1!==e.split("/")[2].indexOf("a

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	10417
Entropy (8bit):	4.075360208251934
Encrypted:	false
SSDEEP:	96:CjEUeRSRPWMERiFfZjd0AegjIyEsAq4pjhlbkYVX+klptuoX9Ax7aOzAcmJOsh:CjTPWMEgZjRvIyjMjnYy9OoiBU5EE
MD5:	B7B8208828595FDF0BA3D84C91DAE6D1
SHA1:	10D2FE53FA41C789B6D97C3E8FA61949C45D367B
SHA-256:	80EE4B7304E9FAC253771ADDB8FCC8880B2F9B8A2566D8173F073C9367C8AA0B
SHA-512:	AD83659E3CFD295550232BBE99359860D8435BC84644BF81BF96AC51DBF315DC6A4EC0674331BD2BB74C02B7F02BF1368A839D4B5843AC5ADEB1A27D5A843827
Malicious:	false
Preview:	[{"code":"201","state":"NJ"},{"code":"202","state":"DC"},{"code":"203","state":"CT"},{"code":"205","state":"AL"},{"code":"206","state":"WA"},{"code":"207","state":"ME"},{"code":"208","state":"ID"},{"code":"209","state":"CA"},{"code":"210","state":"TX"},{"code":"212","state":"NY"},{"code":"213","state":"CA"},{"code":"214","state":"TX"},{"code":"215","state":"PA"},{"code":"216","state":"OH"},{"code":"217","state":"IL"},{"code":"218","state":"MN"},{"code":"219","state":"IN"},{"code":"220","state":"OH"},{"code":"223","state":"PA"},{"code":"224","state":"IL"},{"code":"225","state":"LA"},{"code":"227","state":"MD"},{"code":"228","state":"MS"},{"code":"229","state":"GA"},{"code":"231","state":"MI"},{"code":"234","state":"OH"},{"code":"235","state":"MO"},{"code":"239","state":"FL"},{"code":"240","state":"MD"},{"code":"248","state":"MI"},{"code":"251","state":"AL"},{"code":"252","state":"NC"},{"code":"253","state":"WA"},{"code":"254","state":"TX"},{"code":"256","state":"AL"},{"code":"260","stat

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2162)
Category:	downloaded
Size (bytes):	2290
Entropy (8bit):	5.209993639970745
Encrypted:	false
SSDEEP:	48:N0WwpowHw7DwoNq7ziBrQn1lYwZSQdARZ+wwQw+C7wWGb9AZb2we:aRpXQ4oXGAQd2ZUAWgce
MD5:	5E51DB6B8277918644906BAE9F981211
SHA1:	1620441C78589D98CAEE557CE4AF840D120DDE65
SHA-256:	E11BDA5B7F71C9B452E912EB2CCBADA3FE33E6D1AFB7F48E981D23085F982B4F
SHA-512:	C87D581A693498ADB4FF58E7C865AACF04BF14EA2FB67005C37D1CED20894D97F4892ED2AE0A21858C97440B4103D242F2F8CB85782B79B06C7F2086B9105DAE
Malicious:	false
URL:	https://search.usa.gov/assets/sayt_loader.js
Preview:	/!..Developed by Robert Nyman, http://www.robertnyman.com..Code/licensing: http://code.google.com/p/getelementsbyclassname/./.var getElementsByClassName=function(e,s,t){return(getElementsByClassName=document.getElementsByClassName?function(e,s,t){for(var a,n=(t=t\|\|document).getElementsByClassName(e),c=s?new RegExp("\\b"+s+"\\b","i"):null,r=[],l=0,i=n.length;l<i;l+=1)a=n[l],c&&!c.test(a.nodeName)\|\|r.push(a);return r}:document.evaluate?function(e,s,t){s=s\|\|"",t=t\|\|document;for(var a,n,c=e.split(" "),r="",l="http://www.w3.org/1999/xhtml",i=document.documentElement.namespaceURI===l?l:null,o=[],u=0,h=c.length;u<h;u+=1)r+="[contains(concat(' ', @class, ' '), ' "+c[u]+" ')]";try{a=document.evaluate(".//"+s+r,t,i,0,null)}catch(m){a=document.evaluate(".//"+s+r,t,null,0,null)}for(;n=a.iterateNext();)o.push(n);return o}:function(e,s,t){s=s\|\|"",t=t\|\|document;for(var a,n,c=e.split(" "),r=[],l="*"===s&&t.all?t.all:t.getElementsByTagName(s),i=[],o=0,u=c.length;o<u;o+=1)r.push(new RegExp("(^\|\\s)"

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 640x360, components 3
Category:	dropped
Size (bytes):	27937
Entropy (8bit):	7.916063487364758
Encrypted:	false
SSDEEP:	768:OJn/Lsvs7tD6p/fR+Gr1n+EkNejzHxJZ4:OJ/gWtDafR+Ghn+2a
MD5:	60A2B26435B9A2363DE6A2A0F0444206
SHA1:	7F145150F11251D9E564905A31C3B823A3BAEE55
SHA-256:	B3E5C44022B00E37A2FECE7B98D1FFA8CDB7C8B7D897E758A7A091A4F657D735
SHA-512:	F40DAE3251AE15291E08554017DFD56BAB1D9D35F2B5A8D40085ECAE2AA38AE1FF6E1B58EBB2B0A017052B772BDB92D34136AF4E84535090052B4AD19AFF5420
Malicious:	false
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...OJ.(.....W.z\|SG2..j.7..(....R3.RI...j.5.4.+$...i9%.p.:..W:\...j....l.0.^C.\|T.Ma......c...k..J.k*u`;.3......Q..C..}h...FW......U....k....a'w?Z...._.r.5b.....-...9.H...H.1.................=..~"j..B;s.5....K.(...}1..c5..).._..[hq.L...W.

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	532
Entropy (8bit):	4.750725312439917
Encrypted:	false
SSDEEP:	12:TMHdidlfAIdfhuZ0S5J+sEfETOX40WGKGMPTLXAEZi:2diddAIdfh6ZEG0o3Pm
MD5:	F15C792A0A47E965CC3648C5464AF1A4
SHA1:	4F5391CD2806FAA6923C653512AD9C370145915B
SHA-256:	C053745593B65754FF0D51A58DDB54B84791604D2ED286520C54B76363BB8292
SHA-512:	EC025C1DB3749BC4D53DE0D095DCF9BC293F93C436B947DF1F3F10BB5520CBCBEEB250EDD40463F22F34551D7AD303DB8CE7FFBF156B105AF74BF82D675C5A75
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="64" height="39" viewBox="0 0 64 39"><title>chevron</title><path fill="#000" d="M63.36 4.004L60.155.741c-.427-.436-.919-.654-1.475-.654-.555 0-1.047.218-1.475.654L32 26.4 6.798.74C6.37.306 5.878.088 5.323.088c-.556 0-1.048.218-1.476.654L.642 4.005C.213 4.44 0 4.941 0 5.507c0 .565.214 1.066.642 1.501l29.883 30.427c.427.435.92.652 1.475.652.556 0 1.047-.217 1.474-.652L63.361 7.008c.427-.435.639-.936.639-1.501 0-.566-.212-1.067-.64-1.503z"/></svg>

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	544
Entropy (8bit):	4.782437501738733
Encrypted:	false
SSDEEP:	12:TMHdidlfAOIRfrPuZ0S5J+sEfETOX40WGKGMPTLXAEZi:2diddAnRfrP6ZEG0o3Pm
MD5:	8E2C629646F50923104112E15E349DCC
SHA1:	B3B53C120C1001757B603352230EE9FF96D36D42
SHA-256:	695AAB3878B03409B5303D2FB25B42F2BD85779085A52695C8A407935D3E0A00
SHA-512:	A4BA2EA81F3CAD65A2939BD34E3ECABCD8D057E31F5CA44ED735D7CEF077F9AD1183817D371AE9E6EB038E13D331FE96D62A5B064FB64554EB8E0B2CCCDD88E4
Malicious:	false
URL:	https://www.ftc.gov/themes/custom/ftc_uswds/uswds/dist/img/angle-arrow-down.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="64" height="39" viewBox="0 0 64 39"><title>angle-arrow-down</title><path fill="#565C65" d="M63.36 4.004L60.155.741c-.427-.436-.919-.654-1.475-.654-.555 0-1.047.218-1.475.654L32 26.4 6.798.74C6.37.306 5.878.088 5.323.088c-.556 0-1.048.218-1.476.654L.642 4.005C.213 4.44 0 4.941 0 5.507c0 .565.214 1.066.642 1.501l29.883 30.427c.427.435.92.652 1.475.652.556 0 1.047-.217 1.474-.652L63.361 7.008c.427-.435.639-.936.639-1.501 0-.566-.212-1.067-.64-1.503z"/></svg>

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	71454
Entropy (8bit):	5.515556518573246
Encrypted:	false
SSDEEP:	1536:T8fsjrsdDVstcbYT1rVEC/OcfRp/evG/JlWjgShAvcxIGGHV3ouFbOA2jCxZ:IfOsoUvGHGg4AvcxIp13m4xZ
MD5:	629401C31553D2F42A6CA46E58C2A97B
SHA1:	0AB6084CAA72F90913C7E4119F491838726EC5C2
SHA-256:	91B9B24F0AA59668E4D0A770EE7A294B9BAA361A76A20ADE8128CD0482A5D805
SHA-512:	1FDFF160DBC2E006E3CF12BADC53F9062B87C9F85D78ACDA67ED8FB1E6BA9E0B615416E9D08E1AE88243ED33313465376281EEAEE7A4DA5E3D2A2B20D8F013DE
Malicious:	false
URL:	https://static.addtoany.com/menu/modules/core.BRQnzO8v.js
Preview:	const t=".BRQnzO8v",J=window,K=document,p=function(){},X=void 0;J.a2a_config=J.a2a_config\|\|{};var e={localize:J.a2a_localize\|\|{},static_server:J.a2a_config.static_server\|\|"https://static.addtoany.com/menu",templates:{},native:X,onclick:2,orientation:X,track_links:X,track_links_key:"",callbacks:[],tracking_callback:X,add_services:!1,thanks:{},locale:X,no_3p:X,icon_color:X,color_main:X,color_bg:X,color_border:X,color_link_text:X,color_link_text_hover:X,counts:X,overlays:[]};const L={num_services:8,prioritize:X,exclude_services:X,custom_services:X,delay:0,show_menu:X,bookmarklet:X},m={linkmedia:X,linkname:X,linkurl:X,linkname_escape:X,menu_type:X,target:X},Z={...e,...L,...m},v=function(){for(const e in J.a2a_config)Z[e]=J.a2a_config[e]},z=function(e){for(const a in e)Z[a]=e[a],J.a2a_config[a]&&(J.a2a_config[a]=e[a])},u=(v(),"https://static.addtoany.com/menu"),o=["feed","mail","page"];let w,x=0;const k=e=>{e?x=e.a2a_index:A&&(x=A)};let j=0;const Q={},n={feed:[],page:[]};let i=["a2a","share

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6017)
Category:	downloaded
Size (bytes):	6235
Entropy (8bit):	4.999842212804203
Encrypted:	false
SSDEEP:	96:kkm/jA6CuDPqz2q4dQ/abfTM4JbpekuLO/TJ3KJJX:kdjrCnSq4dQ/abfTVbphuLO/TI
MD5:	5A8912F17BA2963E6E65462264CCAE26
SHA1:	D1E919727E6C1FF7E14E2236849D8D365EB535AC
SHA-256:	231A1B012C1C89C4C938EFD43277621D6D8D2732F2D8129531C57370DBFF561E
SHA-512:	8B9911ADE7E96E131C6F98AB756A6A9CF217590B8A31E9A2430646A18A7678801253B9EB82760A26030ABE6BB2FC77080A57DB201B526D3865D8FD26330ED395
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/widgets/button-min.js?v=10.1.8
Preview:	/!. jQuery UI Button 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery","./controlgroup","./checkboxradio","../keycode","../widget"],t):t(jQuery)}((function(t){"use strict";var i;return t.widget("ui.button",{version:"1.13.2",defaultElement:"<button>",options:{classes:{"ui-button":"ui-corner-all"},disabled:null,icon:null,iconPosition:"beginning",label:null,showLabel:!0},_getCreateOptions:function(){var t,i=this._super()\|\|{};return this.isInput=this.element.is("input"),null!=(t=this.element[0].disabled)&&(i.disabled=t),this.originalLabel=this.isInput?this.element.val():this.element.html(),this.originalLabel&&(i.label=this.originalLabel),i},_create:function(){!this.option.showLabel&!this.options.icon&&(this.options.showLabel=!0),null==this.options.disabled&&(this.options.disabled=this.element[0].disabled

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 113 x 79
Category:	downloaded
Size (bytes):	3374
Entropy (8bit):	7.7720887236241865
Encrypted:	false
SSDEEP:	96:o+wXmXAP/IhxX62+XnWtUsmAVOsIuqgWUz:o+8216hqU5UOiqNw
MD5:	22AA9BB3EB477C9B74F786E05A2B1C17
SHA1:	58A4CEF425D1ECBADA26F2DBD2024F73CC3FD683
SHA-256:	A23DE10656FAACF7ACC5E8BEBB44956117681EE71CD5A054A45651AE4B517579
SHA-512:	2BCE8587490F4303C73D63EC88EA2683ED173DBC492A9CE8B3CE81F3577DD4F2D25B13A6ED529FD91D3CD6DC6566EB941599CE6BD66DDDA51BF4FF3ACE8ACE5C
Malicious:	false
URL:	https://www.donotcall.gov/images/submit_gr_sm.gif
Preview:	GIF89aq.O....kkk..v.............[.......z..rG]2...~..............t.....f............y....................Ri<xxx...................@@A...)5..........t333......[w?.....................}.W..q..}....x............n.........>L.........q3D$s.R///...\\\..................y..................v..............y........bm.Lh.HTTT....u.......v .<<<.....m............{{.[...MMM............HHG....................t......&&&.....w............................}u.R.......o.....g.......... ............vf.H..................{..sm.K........c.E1?#......................................~.......................g.....\|.....DCD.....`}A.....8H(o.T..b..............102...........q.P.......x/?!..............rrr.....................u?P......p......!.......,....q.O........H......\....#J.H....3j.... C...#..%z.%..e.<y.M..dM..8#..3.....(.(P...Ga..T G-.c. 1w.f..c(.I...`.p..L.P'.]{%..[....V)..Ly...r..$.j...!L......q....$BH..........e..JO.8...D.(U.!.?.

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	20471
Entropy (8bit):	4.692706549231412
Encrypted:	false
SSDEEP:	384:Z5cxj/s6RKSzfu5M33jKsdvp6ZBoUJ1ew3FN2yFp97TXIMDNIADz:Z5UDRKSzG5M33jKLrX
MD5:	691AA124E75E020B4CDCF9AE71A682A0
SHA1:	BD420C7906AE1EC9606C8F2E6EFCEF3C7F5DB242
SHA-256:	C8CBF2740A067865F6037169A5325E8E4CC54A6FE3B922DC67652D4C4E913FDD
SHA-512:	E8C84A1677B8825F3B62F9E41A50F7038FDC03C57DA57D919A830DCB09ECAC8F9CE8403E188B281B32C7F9380A0DD0D45BF7477922B9B8CFC2FF9002541E94C1
Malicious:	false
URL:	https://www.ftc.gov/core/misc/drupal.js?v=10.1.8
Preview:	/*. @file. * Defines the Drupal JavaScript API.. /../. A jQuery object, typically the return value from a `$(selector)` call.. . Holds an HTMLElement or a collection of HTMLElements.. . @typedef {object} jQuery. . @prop {number} length=0. * Number of elements contained in the jQuery object.. /../. Variable generated by Drupal that holds all translated strings from PHP.. . Content of this variable is automatically created by Drupal when using the. * Interface Translation module. It holds the translation of strings used on. * the page.. . This variable is used to pass data from the backend to the frontend. Data. * contained in `drupalSettings` is used during behavior initialization.. . @global. . @var {object} drupalTranslations. /../. Global Drupal object.. . All Drupal JavaScript APIs are contained in this namespace.. . @global. . @namespace. */.window.Drupal = { behaviors: {}, locale: {} };..// JavaScript should be made compatible with

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (6860), with no line terminators
Category:	downloaded
Size (bytes):	6862
Entropy (8bit):	5.1036548190335145
Encrypted:	false
SSDEEP:	96:lKrpq4fjy7STczL7CkWQe1zvQe+Usck+skmZ1guc6uCoAoT5gOH4bIU5gOH4bIS5:l2dWWTczCkWNv8A9uRfs35
MD5:	22F060DFDDAF3562D18370BDD6D06108
SHA1:	53AD4431B05A9D3E82AECE601D9385C92C58EB68
SHA-256:	D14254DA432909930D7C7C744E65C9454A362382D0B39858CE88CA6A5D5C9C6D
SHA-512:	638BA1EE2B3B23D0DFEBE98527A8E6F6D830158D851512CC0D3B73C0B9C5011D766A1EE4E2F575313334994274FB99F5297EA91EF075D1FFD7FC743D1820A517
Malicious:	false
URL:	https://www.donotcall.gov/report.html
Preview:	<!doctype html> <head> <script async src="https://www.googletagmanager.com/gtag/js?id=G-X2KH68RJRQ"></script> <script type="text/javascript" src="/js/gafourprod.js"></script> <title data-i18n="sitewide.page-title">National Do Not Call Registry</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1"> <meta name="msapplication-TileColor" content="#ffffff"> <meta name="msapplication-TileImage" content="/images/ms-icon-144x144.png"> <meta name="theme-color" content="#ffffff"> <meta name="description" content="Register your phone number to report stop or block unwanted, annoying,telemarketing, spam calls, robocalls to the FTC"> <meta name="keywords" content="Annoying, Block unwanted calls, Report annoying calls, Robocalls, Telemarketers, Avoid unwanted calls, Spam calls, Stop spam calls"> <link rel="apple-touch-icon" sizes="57x57" href="/images/apple-icon-57x57.png"> <link rel="apple-touch-icon" sizes="60x60" href="/images/apple-icon-60x60.png"> <li

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 400x264, components 3
Category:	dropped
Size (bytes):	12242
Entropy (8bit):	7.874805042429418
Encrypted:	false
SSDEEP:	192:cz2tA8toEFbET7kZtyo8DY0DrXxPz4fsM7x45xQXo3bANNlRl940Sm9:HtA8trFbK7kZtyopw1UEMFo0NlRvS+
MD5:	6801786769740E23AC023E22024AFBED
SHA1:	58EB8D0C72A0CEAE4E1311A4E47BD7352CBBCB40
SHA-256:	6F487EAE3CAAEBD812E24C9BE1E79CF29EA7BDCD0E445812E965C46F04A9446B
SHA-512:	A4AFD6589411C23727D90AAD7D46677287926B55A58DCAFDBAD4DD792BDB68A704B5ABE0EE5EC3128ED691D4866E07DA67AB849B298575A663048BB539B218D2
Malicious:	false
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..9..\|Q....B.3..9.........H.P..f.@..w.,A\...#wc.=8.%...H.(..#.e..A.*[q..;........g.eJ3n..S..p:t....0y8..e.b

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 275x214, components 3
Category:	dropped
Size (bytes):	19887
Entropy (8bit):	7.92540476843091
Encrypted:	false
SSDEEP:	384:ZyOBdvmFDg7M6pvEgTLRwN8bhVgycVMSqF3ImFIi3:HhBEYw8FrcVA5ImFIi3
MD5:	2543DCBC3F3815E3714FD7393358B091
SHA1:	142A7D20B30587B5928307FA2451BF363D1F95A2
SHA-256:	092485F2131A45059D496C8B8DFBBC4D310470E7A51EC403D467C227C1E41FAB
SHA-512:	8F44DEED1CF3072E61B6EB29EBF6C2F58AE0E52B6FA7C8839742CFC4A1139AE50A560F9D8A5E2D5677943E6AB6775B38B2484C7565D81C2D97A5A9DCC2EA12D8
Malicious:	false
Preview:	......Exif..II*.................Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:EDC34F79AB2268118E19F96045951970" xmpMM:DocumentID="xmp.did:E95ED191D36411E6BE7FD11C62D4B884" xmpMM:InstanceID="xmp.iid:E95ED190D36411E6BE7FD11C62D4B884" xmp:CreatorTool="Adobe Fireworks CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f3749a33-cb1a-4497-b4fc-af8cc0071200" stRef:documentID="xmp.did:EDC34F79AB2268118E19F96045951970"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpac

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	917
Entropy (8bit):	5.138337853602521
Encrypted:	false
SSDEEP:	24:YHA6f5lxisJt/ErLonqgNXy+N6HCb1CR6Iv82pC15T7WE/yScFu:Yn5Ohr0nqglyWKCb1CRrv82pC15/L7/
MD5:	9ADA4DCCABC9DF56EF5569369D036B80
SHA1:	32FB3FE569EC25CDA8E4CCABF176630552506874
SHA-256:	A92605900410FC04A4D141742E76D0943A2A5909E3581A4E6D870CE874CC4FD2
SHA-512:	CE752DDC924653D6EE1A92A8758F006A78E76D64196CF8B9181592DE76ED7014C464E590450000E7ACBEDE93D7F10B367359E1FE032D6F1D83F564338B955152
Malicious:	false
URL:	https://gov1.siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=SI_8uImeHqBl1yuGVg&Version=18&Q_ORIGIN=https://www.ftc.gov&Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDTIER=lIjhYuMl2g&Q_ARCACHEVERSION=21
Preview:	{"InterceptDefinition":{"BrandID":"fedtradecommission","InterceptID":"SI_8uImeHqBl1yuGVg","InterceptName":"FTC.gov Feedback","Revision":"18","DeletedDate":null,"ActionSets":{"AS_96581019":{"ID":"AS_96581019","Creative":"CR_7ZANo3f2eTZGPe6","WeightedSampleRate":"","Target":{"PrimaryElement":"SV_6KlC6jQKGJ9RQvY","Type":"Survey"},"ActionOptions":{"targetNewWindow":true,"targetEmbedded":false,"targetFullScreen":false,"resizeForEmbeddedTargets":true,"targetWidth":1000,"targetHeight":800,"displayElement":"","selectedDevices":[],"actionSetSampleRate":100,"actionSetContinueExecution":true},"CreativeType":"FeedbackButton","EmbeddedData":[{"name":"Page URL","type":"GoogleDataLayer","value":"Page URL"}]}},"DisplayOptions":{"displayRate":100,"noshow":"30","cookieDomain":"https:\/\/www.ftc.gov\/","hasRandomization":false,"displayInterceptType":"onload","hideOnCookiesDisabled":true,"hideOnLocalStorageDisabled":true}}}

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 640x360, components 3
Category:	dropped
Size (bytes):	22272
Entropy (8bit):	7.948751633239579
Encrypted:	false
SSDEEP:	384:Oi4sNGo08gmy5UPm0hs1TU5yomPGzTCOaCbqG59CYUFIFD:Oi3svmPmv1TU5ydPGzuOaCb59SqD
MD5:	38FEE93850640C4F6BD42569A54E6128
SHA1:	B751007940B7B98D32B6C4D89E373FCE569FD5F9
SHA-256:	11B0B7A541D20DBD7AC104C6CB43794232E9B2146282670B577D1802756FFF91
SHA-512:	9E522E04B40A0100F76FA8646FA2B260B7B9B6309B93AA48BB8CF96CC66A82FA169BF138FB2269436A93B82CC3A7D1913287A98328154E5E89BEFC21D7E3B9D3
Malicious:	false
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..{@A.....b3Z..Tyse{..X.p..w.k...mH...+......Z.ma.u.e.q.b..Gok&@..n+....<U.O.r.b.Z.."U.O..G..]..LQ.u%1.GVW.W......o.MT....i..m...)h...%-."......Z........I.'....T..[...E.f...+^...~...Vl.-._.R.J.~.Tw..K1.b.X.}.k.x....C@..H..D...w..S.\|.iaP.i.CHD..#%F\..4...M.*:..<.......+.nM&).h.E....T.)BQp#.J...OH.

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18628)
Category:	downloaded
Size (bytes):	18852
Entropy (8bit):	5.006441721282247
Encrypted:	false
SSDEEP:	384:7wBH0koxdgs2JHuoNw4YV88/br/21F96Sg4msp:8BH0kM2kOYViT96HC
MD5:	91406539D47598DD84B9201F53AF96B2
SHA1:	A1C969D769CEE2F1A9A55B95FF03AF5F9D2D7A97
SHA-256:	CAFEFF68E458075C3425CA859AC8A32D3B618EFA8D8848FA662FE8B99C1FA213
SHA-512:	A786C49C74980B62C6AB3E74364E1AE28CA09B67C4EE6F335515D2881A22D90EF82633402E231B325D7F69C058EA611E60EEC53B218910EF2CBF0FE340870BAB
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/widgets/resizable-min.js?v=10.1.8
Preview:	/!. jQuery UI Resizable 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery","./mouse","../disable-selection","../plugin","../version","../widget"],t):t(jQuery)}((function(t){"use strict";return t.widget("ui.resizable",t.ui.mouse,{version:"1.13.2",widgetEventPrefix:"resize",options:{alsoResize:!1,animate:!1,animateDuration:"slow",animateEasing:"swing",aspectRatio:!1,autoHide:!1,classes:{"ui-resizable-se":"ui-icon ui-icon-gripsmall-diagonal-se"},containment:!1,ghost:!1,grid:!1,handles:"e,s,se",helper:!1,maxHeight:null,maxWidth:null,minHeight:10,minWidth:10,zIndex:90,resize:null,start:null,stop:null},_num:function(t){return parseFloat(t)\|\|0},_isNumber:function(t){return!isNaN(parseFloat(t))},_hasScroll:function(i,e){if("hidden"===t(i).css("overflow"))return!1;var s=e&&"left"===e?"scrollLeft":"scrollTop",h

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4276)
Category:	downloaded
Size (bytes):	4506
Entropy (8bit):	5.06549945463965
Encrypted:	false
SSDEEP:	96:wkL/LM6aMTa8n/zJKrgon4Gg7bgsvxxewiEB/7jl3QSvsvRF7yKam:woLfplEg0A3vTewT97jl3QZRFOKV
MD5:	7536EF4EE07FE8CC9095C01A520E2BA2
SHA1:	A77F75D868A14FB23CEE7681ACB29BF161568A22
SHA-256:	5684459AA18F12E2B2BA47C25E460B7EDBD77219C9B39E3EA09C27FB3FFD7AA5
SHA-512:	D6BDF8D696068F71BD5CF8338FA5B78DEFBC8A878A22FD27E5F9C243543B16416E354129D3375709D7A9DEB97960A750E3ED3206E9ADB99C12CF9ED7FB5CE953
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/widgets/controlgroup-min.js?v=10.1.8
Preview:	/!. jQuery UI Controlgroup 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery","../widget"],t):t(jQuery)}((function(t){"use strict";var e=/ui-corner-([a-z]){2,6}/g;return t.widget("ui.controlgroup",{version:"1.13.2",defaultElement:"<div>",options:{direction:"horizontal",disabled:null,onlyVisible:!0,items:{button:"input[type=button], input[type=submit], input[type=reset], button, a",controlgroupLabel:".ui-controlgroup-label",checkboxradio:"input[type='checkbox'], input[type='radio']",selectmenu:"select",spinner:".ui-spinner-input"}},_create:function(){this._enhance()},_enhance:function(){this.element.attr("role","toolbar"),this.refresh()},_destroy:function(){this._callChildMethod("destroy"),this.childWidgets.removeData("ui-controlgroup-data"),this.element.removeAttr("role"),this.options.items.controlgro

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (415)
Category:	downloaded
Size (bytes):	655
Entropy (8bit):	5.042640777384768
Encrypted:	false
SSDEEP:	12:UOMB343RkfLhPbC4sKIUMbHxu/HIRzurxPoIz+IInHdu:NXkzhb7SHxu/uurxPoGI9u
MD5:	C968287AA5E3E6DA495EAFCACD763C9D
SHA1:	5317CAAEC8870F2C94596D21A22806008D144800
SHA-256:	C3D0A82D799B9698207F270F9D5EC1746C4E4928657890255D4BEC6DDC06F735
SHA-512:	C356C07EC58A07CB9059E3B40F2D295CCDDE1095862BE7B463264438BA1A8781D0336FF38FA09860529BA613A2C6806602F41B43B29FADABCAFCD66638B3194A
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/disable-selection-min.js?v=10.1.8
Preview:	/!. jQuery UI Disable Selection 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","./version"],e):e(jQuery)}((function(e){"use strict";return e.fn.extend({disableSelection:(n="onselectstart"in document.createElement("div")?"selectstart":"mousedown",function(){return this.on(n+".ui-disableSelection",(function(e){e.preventDefault()}))}),enableSelection:function(){return this.off(".ui-disableSelection")}});var n}));.//# sourceMappingURL=disable-selection-min.js.map

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2379), with no line terminators
Category:	downloaded
Size (bytes):	2379
Entropy (8bit):	5.051326564482408
Encrypted:	false
SSDEEP:	48:QYYKcCf7RDSoCTTdSzdcgSTn0Gw/fb3L3mg:jNcyVD8deClwfF
MD5:	7CAD2917D72A5D148873118C83FDE259
SHA1:	C510712BADC4CD332448EC66EA087A6227510647
SHA-256:	63FEB9DE1B9DA985A978E66F6D324183D1DE24C606ECD834E020EF6DAB9B727E
SHA-512:	26EEFFCEFE899A48EE4E08A4540BC5E759D661C39D7B8FD7DED7356474ABFE6B92A6B0340B2026F2AD9AB5C705958FEB8521F999F00D933568894E4785CA3732
Malicious:	false
URL:	https://www.donotcall.gov/js/lib/jquery.i18n/jquery.i18n.js
Preview:	!function(e){"use strict";var a,n,t=Array.prototype.slice;(a=function(n){this.options=e.extend({},a.defaults,n),this.parser=this.options.parser,this.locale=this.options.locale,this.messageStore=this.options.messageStore,this.languages={}}).prototype={localize:function(a){var n,t,o,i,l,s;for(o=this.locale,i=0;o;){t=(n=o.split("-")).length;do{if(l=n.slice(0,t).join("-"),s=this.messageStore.get(l,a))return s;t--}while(t);if(o===this.options.fallbackLocale)break;o=e.i18n.fallbacks[this.locale]&&e.i18n.fallbacks[this.locale][i]\|\|this.options.fallbackLocale,e.i18n.log("Trying fallback locale for "+this.locale+": "+o+" ("+a+")"),i++}return""},destroy:function(){e.removeData(document,"i18n")},load:function(a,n){var t,o,i,l={};if(a\|\|n\|\|(a="i18n/"+e.i18n().locale+".json",n=e.i18n().locale),"string"==typeof a&&"json"!==a.split("?")[0].split(".").pop()){for(l[n]=a+"/"+n+".json",t=(e.i18n.fallbacks[n]\|\|[]).concat(this.options.fallbackLocale),o=0;o<t.length;o++)l[i=t[o]]=a+"/"+i+".json";return this.

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1488
Entropy (8bit):	4.492329513037864
Encrypted:	false
SSDEEP:	24:fC5rBHccrTVsZaDj4OpRdXf+d+7oT+n4aEjG3yMgq6FU/Qc4O:fCvlBsZaDtfdx7oT+x38q6W/Qc/
MD5:	408B3E82F72D4C9C910CECC336C7F1F0
SHA1:	A74E97521ADF2B37D2B4419E843C654043EF5E36
SHA-256:	08917CE03BF43E31F728F6AA830CD2F8D252E39A8F6D769578F07B500C3EB87F
SHA-512:	2088B4F9D9953E4F0B27467933925946CFD8EC21FCFAE5C89213F8FAE92D82DFC10E5689C61BD7B8D87E7031FFD8DA3FDB51C9E9221E1E8988B3BA1E7B8D19CC
Malicious:	false
URL:	https://www.ftc.gov/core/misc/debounce.js?v=10.1.8
Preview:	/*. @file. * Adapted from underscore.js with the addition Drupal namespace.. /../. Limits the invocations of a function in a given time frame.. . The debounce function wrapper should be used sparingly. One clear use case. * is limiting the invocation of a callback attached to the window resize event.. . Before using the debounce function wrapper, consider first whether the. * callback could be attached to an event that fires less frequently or if the. * function can be written in such a way that it is only invoked under specific. * conditions.. . @param {function} func. * The function to be invoked.. * @param {number} wait. * The time period within which the callback function should only be. * invoked once. For example if the wait period is 250ms, then the callback. * will only be called at most 4 times per second.. * @param {boolean} immediate. * Whether we wait at the beginning or end to execute the function.. . @return {function}. * The debounced func

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1497
Entropy (8bit):	4.962345250034442
Encrypted:	false
SSDEEP:	24:NfkzhbkXkSxkODrtm00QUF1lAeyiAvdXzrMft9jcvAeI/AvtQ8bRfJNC:NMz2XZR2lAFiAvdjrUfjIA9AvGCC
MD5:	1225EE931C347C7A5D671A851F39FEF8
SHA1:	54B65D3B4F4805D9FB49AADC1B011D0D4E6F6E57
SHA-256:	FAB4A6230026F47FFAA9A06474549D62C064DDEE0AE8C532BA30EF51E2511B2C
SHA-512:	824202DA9774AE562D447AF2DAE79246A9CD0FFC9E472B8455A0DA1DF6E71CFEBFFC2F04E732778792670801C34BA0FD97ADBEFF824353225206D4821DFBB0D7
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/button.css?sbs84s
Preview:	/!. jQuery UI Button 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/button/#theming. /..ui-button {..padding: .4em 1em;..display: inline-block;..position: relative;..line-height: normal;..margin-right: .1em;..cursor: pointer;..vertical-align: middle;..text-align: center;..-webkit-user-select: none;..-moz-user-select: none;..-ms-user-select: none;..user-select: none;.../ Support: IE <= 11 /..overflow: visible;.}...ui-button,..ui-button:link,..ui-button:visited,..ui-button:hover,..ui-button:active {..text-decoration: none;.}../ to make room for the icon, a width needs to be set here /..ui-button-icon-only {..width: 2em;..box-sizing: border-box;..text-indent: -9999px;..white-space: nowrap;.}../ no icon support for input elements /.input.ui-button.ui-button-icon-only {..text-indent: 0;.}../ button icon element(s) */..ui-button-icon-only .ui-icon {

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8363)
Category:	downloaded
Size (bytes):	299170
Entropy (8bit):	5.5707870598017175
Encrypted:	false
SSDEEP:	3072:mY4lgMhzgNSNow8VNz2r168nF1+TYc20DCSY1KGoub1QgD4tL+aVsQCENbmN8LMd:D4LhewMNz25qSJD4tLfV9CENqN8aig
MD5:	D0112FAA6F843AA27E599895EFF1DC6F
SHA1:	F4A42778A0AE42DA641B11536762517CC71E7365
SHA-256:	594A8B0B87C9D6DEC9A449BBA3A1398C02812D559ED46BED46C6EDCEAF878C2E
SHA-512:	4842D2A1AB8421EFE359619E21521DFAB78ED103876ABA5CDBBDF44A654C1EA3BE98AEDBE559FC7FA2983AC0C2AC50BBC91C6D8E8C076CB1E2201120A5899217
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-GWC5V51YNF&l=ga4DataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":19,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":f

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	370
Entropy (8bit):	4.877647340249682
Encrypted:	false
SSDEEP:	6:1PNPrkI6VF6wD3d7nGJE2eqnawWLcFOF/F+k+RoKFZ86wT:1NrJyTlGy2G3ckN+kuoKrdk
MD5:	38551DFBF5C564AA9AED1A1D1CD65E67
SHA1:	2F55A0140BB5F61F08B98811C272EFA0DF00137E
SHA-256:	562155480C7813281080CB2F775C7CC8DAB4EB933DC5B18B850BC510DD537AC2
SHA-512:	D634CA2707465B4623B58968995537420A25FC5B54BBDE4B3C8F22467CDC56345B110012C95B9B26A05E94DE7E019F6B7ECD588A1549498A5E7023F34A2B24AA
Malicious:	false
URL:	https://www.ftc.gov/themes/custom/ftc_uswds/build/js/navigation.js?v=1
Preview:	"use strict";../*. @file. * Theme Javascript file for initializing scripts.. */.// Prevent dropdown menu collapse on click..var dropdownMenu = document.querySelectorAll('.dropdown-menu');..if (dropdownMenu.length) {. for (var i = 0; i < dropdownMenu.length; i++) {. dropdownMenu[i].addEventListener('click', function (e) {. e.stopPropagation();. });. }.}

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1110), with no line terminators
Category:	downloaded
Size (bytes):	1110
Entropy (8bit):	5.173457203639323
Encrypted:	false
SSDEEP:	24:Hexe83Mx7ybTs3Zhu3yqsv8Zhu3yaSZhu3yO:HywL
MD5:	AE32ED65D20B726D02D55E2598684C85
SHA1:	9FA60D3BDD9BEC5014C2535D8B235DF68144BB67
SHA-256:	129A182CD41CA6C44FA819AB5C4A02C743002034BADA91159D3986D2C3687949
SHA-512:	33641F7EFA4901489207AA04DF23DF2795A2452EC2F2943A4FF9598D717CBB2C366ADB7917DA0E59329D9F92E3D3E2E6FC9C8B7247AD9B36FFD84B5713D27DA5
Malicious:	false
URL:	https://www.donotcall.gov/css/register.css
Preview:	.rnl_hp .rightNavLinks{margin-top:40px}@media only screen and (max-width:768px) and (min-width:481px){body:nth-of-type(1) .rnl_hp .rightNavLinks{margin-top:40px}}.form_field_right{margin:-27px 0 0 220px;width:250px;clear:both}@media only screen and (min-width:150px) and (max-width:480px){.form_field_right{margin:10px 0 0 0}}#ContentPlaceHolder1_btnVerifyRegistration{width:200px;background:#006394;color:#fff;font-family:Tahoma,Geneva,sans-serif;height:30px;-webkit-border-radius:15px;-webkit-appearance:none;-moz-border-radius:15px;border-radius:15px;border:1p solid #999;text-transform:uppercase}#ContentPlaceHolder1_Button1{width:200px;background:#b85d2e;color:#fff;font-family:Tahoma,Geneva,sans-serif;height:30px;-webkit-border-radius:15px;-webkit-appearance:none;-moz-border-radius:15px;border-radius:15px;border:1p solid #999;text-transform:uppercase}input[type=button]{width:100px;background:#cc6733;color:#fff;font-family:Tahoma,Geneva,sans-serif;height:30px;-webkit-border-radius:15px;-we

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	107218
Entropy (8bit):	4.306884426748367
Encrypted:	false
SSDEEP:	1536:o4Sk0PEpdHvyY/6lhvr8NAZm2SK4Z8vfQ6nK3tW:Gw2r6dW
MD5:	3C49456F0DD7CF5911A44F16736EE99E
SHA1:	03256EFAA27ADCF193D1E067BDF5C8521E82A120
SHA-256:	5CFDA07C481EFD8E3F84DAF9E496E8A00FAA520FC4596C05EC4B6AC7EE1DBC0B
SHA-512:	E3980E0C2A6EF2767C3EDE6BFD0858D22CE7228966090F1EA9677CFF0C046DBADF4607BBBEC492FF24B4CAA8C9F9CF0A4DCA3EFCE3A27D0875FA664B9EBD78D5
Malicious:	false
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 960 143"><defs><linearGradient id="linear-gradient" x1="812.936" y1="147.053" x2="960" y2="147.053" gradientTransform="matrix(5.53536 0 0 -.77689 -4353.943 200.313)" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#fff" stop-opacity="0"/><stop offset=".038" stop-color="#f9f9f9" stop-opacity=".121"/><stop offset=".111" stop-color="#eee" stop-opacity=".326"/><stop offset=".191" stop-color="#e5e5e5" stop-opacity=".508"/><stop offset=".276" stop-color="#ddd" stop-opacity=".661"/><stop offset=".369" stop-color="#d7d7d6" stop-opacity=".785"/><stop offset=".471" stop-color="#d2d2d1" stop-opacity=".881"/><stop offset=".589" stop-color="#cfcfce" stop-opacity=".949"/><stop offset=".735" stop-color="#cdcdcc" stop-opacity=".988"/><stop offset="1" stop-color="#cccccb"/></linearGradient><clipPath id="clip-path"><path d="M78.815 81.42c-24.492 0-47.248 2.347-66.133 6.367 8.725 20.535 35.033 35.454 66.133

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62901)
Category:	downloaded
Size (bytes):	65276
Entropy (8bit):	5.686331824002571
Encrypted:	false
SSDEEP:	768:4Jg9tyqHoPcYSzpen3JY74fq12KQcCh2GbjynzSJCcZa:4JuT8olR73qg
MD5:	3D67230C0EB75B796C0B999A9DAF3D8D
SHA1:	72873696D3310C0A8690351EBAF4AE4F7CD07BB4
SHA-256:	4CD759E06B78CCDA4B5AB88D8951E59F9C12DAD548576910720C00DF948BFE07
SHA-512:	978173AF3520A23757464D34C269D4817F049A18ED467949200038432EC0D56D7D4606246B4912FEAF5A8BB20BDC7D4910224D18203223D68D5C3863E66204AA
Malicious:	false
URL:	https://gov1.siteintercept.qualtrics.com/dxjsmodule/FeedbackButtonModule.js?Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDID=fedtradecommission
Preview:	./@preserve.Version 2.5.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. !function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	11812
Entropy (8bit):	7.9848618580025565
Encrypted:	false
SSDEEP:	192:I8lL1vyhkeGOWtvM6wesKsNeNQOxJHnfNq3V4vmm7JDnzQMx2x+KHiqp+jQr:5vyhLGlvMnhrNe2WnfNqWz7Fn2NJoQr
MD5:	1DA9FF81D61056B3C465FF2048DE0D7E
SHA1:	26072FA7772210A1D71B357DC2858E05EE568F1B
SHA-256:	2387DF7D1F5DDFAAE1A8E2ADC11E481FB7EA0839B1A96BAFD05A632BB4E2D808
SHA-512:	08C404B9C60EE210ACAC27FB6BE1E21B7DCFE09DC463CAB360A9EB3666D77FE5AF0BA4F7782C49A8B642E15185C05C43818BACC16202110A7AE37BF1E5CF186F
Malicious:	false
URL:	https://reportfraud.ftc.gov/885.e4c25f8965e3c3f1.js
Preview:	....N.Z.6.`.`..=.;.v.E....jY...G....P...xpH...........LkkAwJ..K=.w../.\|}. ...wrDz......^..).d.{.>J!&T..Dw..8"h.U..w5.g...D.G.V...L6M..\|....c.....!.s..9..S.". .........T.tv....OmH3lO..1B.Z..!..H..i...B.y..=E.{.p.Y.K).R&1)U.]3g...P?B.@..:[{'Q.....5.~..}.".N]..U}W.....d....l.q.}......I...dS........$..r..................c..d....jo.IQ..V?5..T.,h..E.Y...9bT...0xo.$.Er3%...6!...............W=..W...6..i..Df.1.p....g.DP..Z.....<.t.i@YK.....F...v...Io.._^.,...)..& ."....?[.....0..~../NpX2...\|.@....].V......=.k....h7'/..H..%.b./.....t.)...%w.....f^....MZM..).....c47Y.,.....16.......]...B/...........z.(.H.7.N.......d....9............I.........x..73.M.?>...t.5."..a.%....?.9B.J...\..>bpN.1....6.$.."<^_......x.V....O.._FB.E..#bS.....-..R/.s...\}6..].2....U}.2.n.t.-......-... 9M.l.xVm..o.`.U...R.....m.Ms...O.....x....+........T.d.2...e...~n...l`...Ic.._.......gS..#m.L.n7A.E!MB.......O....s.N.....w$.V.Q..q..35o+..X8A.tx..F..)... I.]..

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8035)
Category:	downloaded
Size (bytes):	9843
Entropy (8bit):	5.487123928787299
Encrypted:	false
SSDEEP:	192:pIVupNRxauPT2Gh6N+rHfGWTddZBobKTPsGD6u0IMmu/RLl7s:hRxHc+T+WxBobKTPsGD6JIMmu/k
MD5:	D3CCBFA665B904F8B385DCDE775A4B60
SHA1:	A3EA18CBE2A45BB0DDA994904B3EFA0BA7A15B0C
SHA-256:	67B64860D20F18371DB2A9079C84ECF4220593F73595BFE1DE40BD645DE43F59
SHA-512:	56708360B2208B73D63EC87DB532297F6AECB960D4F519CE4641DB4A8B03FA5BE9F8DD66B644717A3733210ABC7023DF159809F74B940CEF938154D7E79D9C4D
Malicious:	false
URL:	https://zn9fzsuvvwkc6nzfq-fedtradecommission.gov1.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_9FZSuvvWKc6nzFQ
Preview:	(function () {. if (typeof window.QSI === 'undefined'){. window.QSI = {};. }.. var tempQSIConfig = {"hostedJSLocation":"https://gov1.siteintercept.qualtrics.com/dxjsmodule/","baseURL":"https://gov1.siteintercept.qualtrics.com","surveyTakingBaseURL":"https://gov1.qualtrics.com/jam","zoneId":"ZN_9FZSuvvWKc6nzFQ"};.. // If QSI.config is defined in snippet, merge with QSIConfig from orchestrator-handler.. if (typeof window.QSI.config !== 'undefined' && typeof window.QSI.config === 'object') {. // This merges the user defined QSI.config with the handler defined QSIConfig. // If both objects have a property with the same name,. // then the second object property overwrites the first.. for (var attrname in tempQSIConfig) { window.QSI.config[attrname] = tempQSIConfig[attrname]; }. } else {. window.QSI.config = tempQSIConfig;. }.. window.QSI.shouldStripQueryParamsInQLoc = false;.})();../@preserve.Version 2.5.0./../*@licen

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (624)
Category:	downloaded
Size (bytes):	716
Entropy (8bit):	5.2368725597776615
Encrypted:	false
SSDEEP:	12:qTjxS1BKFaGCGT9MTkKqqzi8EmpGe3whGe3OgyGhlzUNBfgxy02sUf0OPv4S:0jE+FaGCTTqq2Vmce3wUe3gBkFUFXf
MD5:	41B7ED0CBE240173EEA85148FCBA633E
SHA1:	39ACD5FE099974486A1C9BA11BA0FE7BE6BC97CA
SHA-256:	274D4116239B63097BB7C16E56E27CBB5A77BE20392FB8E2317C0A0235185CAD
SHA-512:	1EE1D21B138A9F55F823B93D809B3BC58453DDFC3B3EE4D00A1010BBD4EC296546277C6777819CFB744C393BA93FE7578B60CCF0259FD17901F4542714D6C06F
Malicious:	false
URL:	https://static.addtoany.com/menu/sm.25.html
Preview:	<!doctype html><html><head><title>A2A</title><meta name="robots" content="noindex"><script>.!function(e){var o=document.cookie,t=0<o.length;var n,a={feed:[],page:[]};t&&["feed","page"].forEach(function(e){var t=e+"_services",n=o.indexOf(t+"=");-1!=n&&(-1==(t=o.indexOf(";",n=n+t.length+1))&&(t=o.length),n=decodeURIComponent(o.substring(n,t)),a[e]=n.split(","))}),n={a2a:!0,h1:(t=!1,"function"==typeof performance.getEntriesByType&&(n=(n=performance.getEntriesByType("navigation")[0])&&n.nextHopProtocol?n.nextHopProtocol:"",t=/^http\/1/.test(n)),t),user_services:{feed:a.feed,page:a.page}},e.postMessage&&e.parent.postMessage(n,"*")}(window);</script></head><body style="background-color:transparent"></body></html>

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1122
Entropy (8bit):	4.73116782836501
Encrypted:	false
SSDEEP:	12:UBQYBsaMLshBvJBspFhXh/Rs2Fis2Fr3srKFisrKF0sLgpF0sLgpFnwzs2F0srK/:NYmtW1JEXh/ym47KTshI
MD5:	E19F850914A8F53485F463E04C6CBA6D
SHA1:	D1C2440ED964F0C3113CFFE7AC447456D0942758
SHA-256:	4850C5C58606A7C9311D48B1327D6264D0557FB1C331B64CAFB2FBB2E1D66C12
SHA-512:	298C76A66D16F917B3D2DD67E44A43B436421F4E32BE2368DAC585CAD7A9000C5707B5C770362EFE674D8793FC1926A4102DED65E8692E7D2D5CCD1DC7A477F3
Malicious:	false
URL:	https://www.ftc.gov/core/modules/layout_builder/layouts/threecol_section/threecol_section.css?sbdm6u
Preview:	/. @file. * Provides the layout styles for three-column layout section.. */...layout--threecol-section {. display: flex;. flex-wrap: wrap;.}...layout--threecol-section > .layout__region {. flex: 0 1 100%;.}..@media screen and (min-width: 40em) {. .layout--threecol-section--25-50-25 > .layout__region--first,. .layout--threecol-section--25-50-25 > .layout__region--third,. .layout--threecol-section--25-25-50 > .layout__region--first,. .layout--threecol-section--25-25-50 > .layout__region--second,. .layout--threecol-section--50-25-25 > .layout__region--second,. .layout--threecol-section--50-25-25 > .layout__region--third {. flex: 0 1 25%;. }. .layout--threecol-section--25-50-25 > .layout__region--second,. .layout--threecol-section--25-25-50 > .layout__region--third,. .layout--threecol-section--50-25-25 > .layout__region--first {. flex: 0 1 50%;. }. .layout--threecol-section--33-34-33 > .layout__region--first,. .layout--threecol-section--33-34-33 > .layout__region--

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (625)
Category:	downloaded
Size (bytes):	887
Entropy (8bit):	5.299011641124547
Encrypted:	false
SSDEEP:	24:No6KykzhbPSHxu/hRTpvE6hEVIf1GIfel:Nv0zJSHmhRTm/VW1GWel
MD5:	46620ADB596BCB14FCAE25718D85C3F2
SHA1:	330F5DF1869AF9466BC7402620726D2B32794A90
SHA-256:	C29D588FB9121F2C8BF222585F2E02AC1B5D903A6C641293D9317ED21D888AA3
SHA-512:	4CE432655426C736BF704F0EA56CB1C19337DACABDBBE94D67BECAADF0D45132451FA84D3E531420366D2CCFCFBA24415C534A7B3F1A678A2EB308FD8844D3B7
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/jquery-patch-min.js?v=10.1.8
Preview:	/!. jQuery UI Support for jQuery core 1.8.x and newer 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . /.!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","./version"],e):e(jQuery)}((function(e){"use strict";if(e.expr.pseudos\|\|(e.expr.pseudos=e.expr[":"]),e.uniqueSort\|\|(e.uniqueSort=e.unique),!e.escapeSelector){var n=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\x80-\uFFFF\w-]/g,t=function(e,n){return n?"\0"===e?".":e.slice(0,-1)+"\\"+e.charCodeAt(e.length-1).toString(16)+" ":"\\"+e};e.escapeSelector=function(e){return(e+"").replace(n,t)}}e.fn.even&&e.fn.odd\|\|e.fn.extend({even:function(){return this.filter((function(e){return e%2==0}))},odd:function(){return this.filter((function(e){return e%2==1}))}})}));.//# sourceMappingURL=jquery-patch-min.js.map

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	757
Entropy (8bit):	6.916926599457542
Encrypted:	false
SSDEEP:	12:6v/7N6bp92cDPuY1qHlnv/pebLaeMUN53v1GKmRWTGTy87FCYkkWY/ieKYGFI:nYWuqylnv/pe3aMZv1hO4GTjRCJaimoI
MD5:	2380931290AEEA9096404EE72A7B7984
SHA1:	903D4C43FED535FB4D325B1612C605E48417DC74
SHA-256:	28D780F5E175239904DF4AEBF3980D6FDDE24B2722B41C34D73BD09DA20237F0
SHA-512:	5E511795D535F77D1BFB61246657AB40CD0047C86421DC2CEEB10528F590FC216072E6FB9C9B531CB08DA16448BC6B2ECD69444977E9E72E4E4D9B3D9603FD23
Malicious:	false
URL:	https://gov1.siteintercept.qualtrics.com/WRQualtricsShared/Graphics/siteintercept/wr-dialog-close-btn-black.png
Preview:	.PNG........IHDR...$...$.............sRGB........YiTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.4.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>.L.'Y...JIDATX..Q.. .D..O....x...2.4.... ....+...e.....=.k.......i.K.}....[.#...m....v.w1.'{C.0..f..u\|.F/......6.....U..'..V.@.....k.^tkv.DLnZ.B...}..P3V.s,WS.0$S..5...-.-s..s.j....\|w.k.X[V...i..5....PCaZ.$..].5N..V....2.............;U..y-sK.1.+....<....Y.r..=.=4.`...P..$...)/..s...t...}J.C..........$.e.>...qT.6<.9..e(..-a..2S......IEND.B`.

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 1440x961, components 3
Category:	downloaded
Size (bytes):	120249
Entropy (8bit):	7.943886499511159
Encrypted:	false
SSDEEP:	1536:UVRXTitZ+DSjPRB6vaLB9g+1V/YC9okoxUUxkrBF5irgg4wfYQlLGahmupf8PkYt:4DM+W73BKa39jrBF2fXJRpe4hOp
MD5:	4CBE7342A5F85844F151E53AA7BE1D8A
SHA1:	C633CF95C3FA47711A104ACDF0AAC25079926B5F
SHA-256:	D9125D528A80C97565827EDAF21D901E0AFDC6D024314C24FCF04520199BE1B3
SHA-512:	16D5E0CB5D85567EC51A704E5D09D0C705E86A4B6269EB854F5A22EA56B3E835D5FE649AFAB6760D6A95F2EBD416302A2B5995FF3D9CBC3A2D21CD0BDEF79B97
Malicious:	false
URL:	https://www.ftc.gov/system/files/styles/wide_standard_banner/private/ftc_gov/images/ftchq-building-belowview.jpg?itok=ThK4u0Hp
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..:R.....>LQJ(....R.F(..)..(.....(.RR.b......AF9....i...Q..(.E.h..b.H)...........R.>.....S.:R.'z@...P.qK.(...KE..qK.Lq@4..)h4.AKE....E.Q@..Q@..4.P(.@..AN..eX^.........!. ..--....N4.b..QE..R...Z.!..ZJ..QE....c.1@..4.CLC3E..H...3@.h........1.M%).I@...E.......QM.4...:.........y.(....P;.S..P.O.M.....2)..Y'..t...

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 113 x 79
Category:	downloaded
Size (bytes):	3972
Entropy (8bit):	7.706820515830212
Encrypted:	false
SSDEEP:	96:oenZQwxEUmuPkWjZyB7KVyaWAed5dWPOGimWCqNAm9/2auy/:ouZ5EUVsMw7KkHZ1Cq//sy/
MD5:	46B5CBBBC288F09FF58A6453DE4D53F4
SHA1:	9F244B011B488AA44BAA3FFAB6830BD41E712269
SHA-256:	85D73AB6DC0299C55421AAECE106EE8902ACE18B8D1AB898180F95F3C119AB2D
SHA-512:	D9D06CDF67070BDD299A6377905D95A10A258597D3A03ACC505F5435FEBD861F3E2F449621BC8A2B58F55187D30325CF3436C62BF31C9D36E5F0946AB4E91154
Malicious:	false
URL:	https://www.donotcall.gov/images/register_or_sm.gif
Preview:	GIF89aq.O....P5..............ccc..a..........i..q....u...{{{.....l..c..............T..~D,......\........QQQ.y;........e.......mmm.............V.....X......wi........\\\....l5999.............X......M.......^fD!...........EEE.....z....................tJ..................f...+,,.....i4.....333.....V..T###..T...x.D........s.q7......XXX....%..P..y...LLL........v.....+.......S....x................Z..Vqqq....F....Z..UrL%................R.I.d1....E............\|R(....Y..U..........T........ ........A..n..T#&.....R.....S.......S.....{..R....h..o..............T..x.....Q..R...........R..........?..._>......rYQK.........c...].RC4..c...???....R.......N..._..[..t........?....U...................(((........S......!.......,....q.O........H......\....#J.H....3j..Q .. C..Irb.O..MYR..../.......%s&.e...)E.=....GY.X.4K.C....#.....tj%...'.NdAD ..Q.la.&.[6[....%..DY8Q.r....$}..b......m9.C.....\.@.....(..%.....q....?..'...i0...

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3445
Entropy (8bit):	5.351882680932181
Encrypted:	false
SSDEEP:	96:N/SLaoST5YS1hSHFAWWwpdGdvcYCOCc2PbiUFF:RcaHT5IlGwpdpouF
MD5:	05632AA5D1EEF52E534ABE613E657140
SHA1:	B4C2986944AF1DF615BAD5F07FD981EF15B6E7FB
SHA-256:	D0258C1340CF83CC5E49CC3AE9E140AFD6D20ED3E295CCAEC3D6520417164802
SHA-512:	4E4DAC0CBC2C68F7E3625C6C2E73B0D1B63EAAA9FE7E9C8883F4CC2236B6F4046212F4DB242B67CEC1080AB31E8EB1845BA75FEF71B5A999512B8FCF46389A4D
Malicious:	false
Preview:	{..."apiUrl": "https://www2.reportfraud.ftc.gov/PROD_EAST",..."showBanner": true,..."showBanner2": false,.. "foresee": true,..."melissaLicenseKey": "QGRWK_xYIfB4QhLvOJMBNJ**",..."melissaExpressAPIUrl": "https://expressentry.melissadata.net/web/GlobalExpressFreeForm",..."mlServiceUrl": "https://rfml.consumersentinel.gov/ca/predict/api/v1.1/toptwo",..."internetFlagSpecified": true,..."internetFlag": false,..."appInsightsKey": "28bebdb8-7010-4839-b144-be8b2f0cbfe8",..."englishURL": "https://reportfraud.ftc.gov/",..."spanishURL": "https://reportefraude.ftc.gov/",..."qnaUrl": "https://rfkb.azurewebsites.net/qnamaker/knowledgebases/5a1d1b1e-1f22-4e75-8226-de6542c72bca/generateAnswer",..."webChatURL": "https://cdn.botframework.com/botframework-webchat/latest/webchat-es5.js",..."gaTrackingID": "UA-36365578-2",..."enableChat": true,..."enableInContactChat": false,..."enableABTesting": false,..."abTestingValue": ".69",..."areaCodes": [....840,....447,....945,....582,....572,....939,....78

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	789
Entropy (8bit):	4.974834590139333
Encrypted:	false
SSDEEP:	24:NVkzhbkUQ1zeFjAZTWrdVWZXWrXKxrXKI5Sdfm2eYYX:NCz2UjkMI5uJeL
MD5:	3E9A19B76A55085EA818FEE8983F1E76
SHA1:	276A5A43F00C75E82E8914C57489A1B8AD3CF61E
SHA-256:	11EBDC8EC2AA61DC61415643E98671EB3D9DB88F1626D43054E81E0235AD480F
SHA-512:	9987EDFCCC6778CA9D16BA7902EACE2AAC008219A6F4BB4E618E6D61618E9961722C18EEA19BCA65D0D73DF363005ADD8B9323182FE9AE44CB25088E74A520AB
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/checkboxradio.css?sbs84s
Preview:	/!. jQuery UI Checkboxradio 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/checkboxradio/#theming. */...ui-checkboxradio-label .ui-icon-background {..box-shadow: inset 1px 1px 1px #ccc;..border-radius: .12em;..border: none;.}..ui-checkboxradio-radio-label .ui-icon-background {..width: 16px;..height: 16px;..border-radius: 1em;..overflow: visible;..border: none;.}..ui-checkboxradio-radio-label.ui-checkboxradio-checked .ui-icon,..ui-checkboxradio-radio-label.ui-checkboxradio-checked:hover .ui-icon {..background-image: none;..width: 8px;..height: 8px;..border-width: 4px;..border-style: solid;.}..ui-checkboxradio-disabled {..pointer-events: none;.}.

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 640x360, components 3
Category:	downloaded
Size (bytes):	27745
Entropy (8bit):	7.9633443053019235
Encrypted:	false
SSDEEP:	768:O0fn1FOegsoKwSDk+MskIoud3FxMaIJJGYLdsZ985+f:O5UDWXIh3FiaOGYGZ985+f
MD5:	F2D1057598A2FE79C0B4D0A68ED67888
SHA1:	01F1FEF5C434ABF119E1603B39972F697BC71069
SHA-256:	C1D65F0F9591815397E10116BF373E968C3DA9CFDB0247DB99CDCE1E906290CB
SHA-512:	7621A8B1EEEE439F5F139B1200C3F256A8209A6BE6A4299D1BAFB48781B1A44866C0AD0A06802A2F1CB64406CF6FFAE40C5CFB24FEFA832609CFEE0CA8A0DDE8
Malicious:	false
URL:	https://www.ftc.gov/sites/default/files/styles/wide_standard_sm/public/ftc_gov/images/feature-videos_1.jpg?h=c74750f6&itok=dWLWdEpB
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..+.4.M.B+..z.r8...K..B.4..\R..JFi.U&".\.H..HE1.m..R.!...\f...8..+....s.^ob+....Xe...4....H.5...@...6.!...e."..7A.d.i..iX....u..e.d...k>q.\.........k6.=...+.J....a...4]...[9<..z.+....-.....:....5.3....F.jr..q^e...%..n.(.Qp..... ..f.....p^\P..z.......E...;...4\...F.....DOwo.[u...>g..Yz..;".R..jb<.)GZj

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 960x143, components 3
Category:	downloaded
Size (bytes):	16227
Entropy (8bit):	7.918752113865796
Encrypted:	false
SSDEEP:	384:zwyTF+Q9q/xBPTlthgC1VEEqd5CBhXXkdIDIcPY2weRMrBxVnNtC:syR9q/t8CcEqdQXUQIZeRM9/bC
MD5:	C4D1BD0C89EA64C5A43E170DE96B994E
SHA1:	6DF6B4F38451D3A377A93F780A0843D97987972A
SHA-256:	E0D2EE0445C1D07872278AA4E1D5C7635ECABD28000A09162C66303722B40D7C
SHA-512:	37FE24F4850451D2FC388606CF43CBE380A52CBFFB723B6A8B9D6474B54362377DCFF2DB661E574EB5BF47459D786CE5B7445FA7370E9BE768D6C34739854BF9
Malicious:	false
URL:	https://www.donotcall.gov/images/FTC_DNC_masthead.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................".........................................\...........................!...1A"7Qa...2RTq......Bu...$FSbrs...#35C..%48HUV.....DEct....................................5.........................!1AQq.2..."4Ba.....#3C5...............?..D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD..!@...DD..y.4p.s..-..]Y.'....\|...~l`...-.Uk[}...W+..p..@.@.y...N.........c.5U......Q..'..s..TU....+E.RW?"8.pk...y....N....I..FP..5.:}..........U....<g./.......&..I...QU.L..]]..t...k.....:1S......B.w.n...c...._6=._.c..D.6........]7...=.....&.....+......I.v..o.&....yp..[......Kn.......B...}......)..G.s.MKS....:.s6.\......t/.5%.*..]7_KS.........H....W4....di.~.6.j".e..2.T...s.....t..;.&..UP..ao<...ci..x...u[.M.

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	546
Entropy (8bit):	4.818001076077807
Encrypted:	false
SSDEEP:	12:U2CgrbxDAwH6ZkHxDAw4y8yERhT3QYuVfc7T:nnhPHYyP4y8JhTg1Jc7T
MD5:	C3B7727D0326712303E8F340F931314E
SHA1:	86ABD447E9AF55F82A079A1B3D46A3F581E125DD
SHA-256:	F135B1A51F9EB29B9E2D697964A3885566E60BF6E67F76BE236478CA50DCC4F8
SHA-512:	9E82DD61B8F4D4E8593B87A9CBA3B9F30CF44C30832BA27BD4104CC1EC3416A59E4F796F336012CA5F22E8C59DD63D50C132AAD8301AD199EEBEEB9B88468FC3
Malicious:	false
URL:	https://www.ftc.gov/modules/contrib/extlink/extlink.css?scewfd
Preview:	/*. @file. * External links css file.. /..svg.ext {. width: 14px;. height: 14px;. padding-right: 0.2em;. fill: #727272;. font-weight: 900;.}..svg.mailto {. width: 14px;. height: 14px;. padding-right: 0.2em;. fill: #727272;.}..svg.ext path,.svg.mailto path {. stroke: #727272;. stroke-width: 3;.}../ Hide the extra icons when printing. /.@media print {. svg.ext,. svg.mailto {. display: none;. padding: 0;. }.}../ Put some whitespace between the link and its Font Awesome suffix. */.extlink i {. padding-left: 0.2em;.}.

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	52825
Entropy (8bit):	5.066488513346282
Encrypted:	false
SSDEEP:	768:8qFmrWI7gfM4A0As+sTs5xwROoUrYVkklr0MMw9T2MFHj+:8qsKI7qDOouYakd0McCD+
MD5:	22CD065AAF3814F44E42AB50791861B9
SHA1:	FD409E5D3AEB34B90DE1BC81D6C2EF87A7F1E389
SHA-256:	14329B99E3E92E964621073D3E7D956ED78DC353A185008E3F650C63EF9D3B25
SHA-512:	FD39A8FE30E92AE2AA5F907FA016C8465B9E7F0319BA9DCF4195C213BDB91CDE6F4C863C7A0BF5A08FC38765E5CFD337B714E3E8C5150070FCC9B240702392FB
Malicious:	false
URL:	https://www.donotcall.gov/js/i18n/es-MX.json
Preview:	{.. "@metadata": { "locale": "es-mx" },.. "sitewide.page-title": "Registro Nacional No Llame",.. "sitewide.MasterFileSiteHeader" : "<header class=\"mainHeader\">\r\n <div class=\"mainHeader_i_img\"><a href=\"http://www.ftc.gov/es\"><img src=\"images/masthead.jpg\" width=\"960\" height=\"155\" alt=\"La Comisi.n Federal de Comercio- Protegiendo a los Consumidores\" runat=\"server\"></a>\r\n </div>\r\n <div class=\"mobile_header\">\r\n <h2 class=\"mobile_site_slogan\"><a href=\"http://www.ftc.gov/es\">Federal Trade Commission</a></h2>\r\n </div>\r\n <nav>\r\n <div class=\"header_nav\"><a href=\"http://www.ftc.gov/es\">De nuevo a FTC.gov</a> \| <a \r\n href=\"http://ftc.gov\">Ingles</a></div>\r\n </nav>\r\n</header>",.. "sitewide.MasterFileLinks" : "<div class=\"rightNavLinks\"><a href=\"faq.html?lang=es-MX\">Recursos</a> \| <a href=\"http://www.ftc.gov/es/informaci%C3%B3n-sobre-el-sitio/pol%C3%ADtica-de-privacidad\" target=\"_blank

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	208
Entropy (8bit):	4.978437714125564
Encrypted:	false
SSDEEP:	3:qQgp0g5HDQLGqS1Rc/BmbfZ2QHMVXcY8NPpy9YfBp0g55b6LmMHYRQHUHX6/u/Yg:qQ2b9ebME4xFHMVkdDfrbvWNYcMg7Y/
MD5:	FB8BDDB427DE3EBF781BC98C47D3499E
SHA1:	DC6532E71E960A2ACF6204D4579F5F4F3045E2D3
SHA-256:	CA7687E25560C73BD3FF63F8368E9CFE9EBAC6B4E0AC11643556C5141A42500E
SHA-512:	13EBC48962FFBAFD1D8D5AFFCA3A28F2394674D67F3BA29B727B942EF1A6C8DADFC204B534001F1B36D04DC515440238E89DEA53C106D9922A39795400C23944
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/version-min.js?v=10.1.8
Preview:	!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery"],e):e(jQuery)}((function(e){"use strict";return e.ui=e.ui\|\|{},e.ui.version="1.13.2"}));.//# sourceMappingURL=version-min.js.map

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37005)
Category:	downloaded
Size (bytes):	37191
Entropy (8bit):	5.417407795996285
Encrypted:	false
SSDEEP:	768:gkYDSwk2yeqHY4GQi7YP1vnGMFl7eBZHs61lRHPOvehgXV+dx1oWi:gkAk2yeEaQi7YPWH2vehgXUdxSWi
MD5:	4D6AE6407B0A7380A603A1EB2B78E585
SHA1:	5857BF8505E5B9C30D9BDB9E1379D46A74C55E12
SHA-256:	7E3426102BE7A60C313B84F21243BB0897AEF7B2EEF892A818308D1150ECED7D
SHA-512:	7C7BF41A21701C5FE812841C976DBA6AA0BA625B9EA812CC1B2D40EC37BD10CFB943042A4133A0E0CAF2EF368417A1E47D8CC59362DE93D332284E6BD10D94FC
Malicious:	false
URL:	https://use.fontawesome.com/releases/v5.13.1/js/fontawesome.js
Preview:	/!. Font Awesome Free 5.13.1 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.!function(){"use strict";function i(t){return(i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function r(t,e){for(var n=0;n<e.length;n++){var a=e[n];a.enumerable=a.enumerable\|\|!1,a.configurable=!0,"value"in a&&(a.writable=!0),Object.defineProperty(t,a.key,a)}}function Q(r){for(var t=1;t<arguments.length;t++){var i=null!=arguments[t]?arguments[t]:{},e=Object.keys(i);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(i).filter(function(t){return Object.getOwnPropertyDescriptor(i,t).enumerable}))),e.forEach(function(t){var e,n,a;e=r,a=i[n=t],n in e?Object.defineProperty(e,n,{value:a,enumerable:!0,configurable:!

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 25948, version 1.0
Category:	downloaded
Size (bytes):	25948
Entropy (8bit):	7.9809028674388385
Encrypted:	false
SSDEEP:	768:cA6a3usrTHwpSLH2990dUdFzpVQ/pNsWA1zcRt+lHk:B6aeMaWHM9/ypNTUmf
MD5:	C7F7371247B82E95CBDE4AED3031E005
SHA1:	CA4580A95B9E3E68FFB85F87FF7F52F7CB873EC9
SHA-256:	18FB9174BCACBC64211838AB1AFE29E749CC3AA04847AB72A7FFBFDC6CEDDEC7
SHA-512:	9DB3A6C902A52DEA2961B601E7B4F129AA27AB4C8DA0B68525333CFE504E11E5779C1F3C2BAE282D4A215E22D248BF221FCEFF4D96A6C86C3390EE7E9B949B18
Malicious:	false
URL:	https://reportfraud.ftc.gov/assets/fonts/proximanova_semibold/ProximaNova-Sbold-webfont.woff
Preview:	wOFF......e\.......x........................FFTM............^.>.GDEF.......-...2....GPOS.......)..$.....GSUB... ........L.u.OS/2...,...Z...`...#cmap..............sfcvt .......2...2.M.yfpgm...D.......eS./.gasp................glyf......N....(z...head..\....3...6..\.hhea..\.... ...$...phmtx..]....G.....I:"loca.._\........F"ipmaxp..a(... ... ...<name..aH.......z.\..post..b.........t...prep..d...........D.webf..eT........X'P..........o1.......2.....6..x.c`d``..b-..`b`a`d...z.F .........X.$..._......x..Y=l#E.~...b.............$1..e.9t\....FB...t....i%D..Q.T......a.h....!.P.vAq.7of.{....&.4..y....@DEz.6......34.......w>.}.Z.6..34.......y@.i.3,..=..u.....Z_t.p...>.;...'.]9B........C....F.*09..G....D....X...v"...3.c.....t3....1.....nHo.X.d...].....Q;..1..p..2.....@..n.h.G.U..5..F;..P.H...H.}:.G....a.-..G.0.n.....\|.....AvNJK.^....i/.<..W.%......5`...6W4u...p&,.....Zx.!.AK.p8FuL....RvC....9vEx.xf.{.P.F.,.V.-..=..[.E..w.w......eQ..M1Z.G5.(.U..d...(6.+K..^..'..\|8.p.(....

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	4.608018597820658
Encrypted:	false
SSDEEP:	3:UBQ+gHfyCDqKQcrJb1K2EIIrKcl68MQevFS/un:UBQ+NCWLcrJZKe9FLdS2
MD5:	0A8A1897BB979B68492A277505848DDF
SHA1:	5D8AE17434AD381A63BDC4AE476C69F1921709A7
SHA-256:	D73A0B31E08ED90E9746B1723CA266064B7F4F113370842BC347A893E217ABF7
SHA-512:	0D590D3D92F331B0378BA181D7B43900DD9B4A3344F04B270ECBE10CF1EBB0615C6092448FECAB5361D147CC7AEDE4EF55B9E979B1863640E14D2997AEE6AD0A
Malicious:	false
URL:	https://www.ftc.gov/core/modules/layout_discovery/layouts/onecol/onecol.css?sbdm6u
Preview:	/. @file. * Provides the layout styles for layout_onecol.. */..layout--onecol .layout__region {. width: 100%;.}.

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1753
Entropy (8bit):	4.941493927855892
Encrypted:	false
SSDEEP:	48:Ncz23grQdJs9uCsJsHrNHi5sOh3AsY5ip6PsTMSsDfOIKEXkQEXHXhEpXGXJtHsu:o23gus8CsJsHhHusIQseiMPsTpsDfORl
MD5:	E6E03548F7CD3FF2520E3BE4EB638609
SHA1:	3CFC4AF994DC0440CE658CD1E337DD3D946864F9
SHA-256:	CC6570D3E437B61217958A3591010B60DD964E80A7E06EE5356E1E2D0FB29547
SHA-512:	859A9BA6DA3B06F3D2537DA512E637CE3E7A3EFBB57A9D07DF078A84845662124122C2B468DBAC04087DE25B78AF0EA4DB124373644F0B7C443BB4745AD62C6C
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/dialog.css?sbdm6u
Preview:	/!. jQuery UI Dialog 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/dialog/#theming. */..ui-dialog {..position: absolute;..top: 0;..left: 0;..padding: .2em;..outline: 0;.}..ui-dialog .ui-dialog-titlebar {..padding: .4em 1em;..position: relative;.}..ui-dialog .ui-dialog-title {..float: left;..margin: .1em 0;..white-space: nowrap;..width: 90%;..overflow: hidden;..text-overflow: ellipsis;.}..ui-dialog .ui-dialog-titlebar-close {..position: absolute;..right: .3em;..top: 50%;..width: 20px;..margin: -10px 0 0 0;..padding: 1px;..height: 20px;.}..ui-dialog .ui-dialog-content {..position: relative;..border: 0;..padding: .5em 1em;..background: none;..overflow: auto;.}..ui-dialog .ui-dialog-buttonpane {..text-align: left;..border-width: 1px 0 0 0;..background-image: none;..margin-top: .5em;..padding: .3em 1em .5em .4em;.}..ui-dialog .ui-dialog-buttonpane .ui-dia

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 46704, version 1.0
Category:	downloaded
Size (bytes):	46704
Entropy (8bit):	7.994860687757006
Encrypted:	true
SSDEEP:	768:f3Ybit5PQRS0FhgC1g10ijolF5rm2GsRnENYMSGAxgvZdH3VayjX2p2iKEmcLf:fIbi7eHBmt0F5rm2GsRENqGAx0Zdlt2r
MD5:	30A274CD01B6EEB0B082C918B0697F1E
SHA1:	393311BDE26B99A4AD935FA55BAD1DCE7994388B
SHA-256:	88DF0B5A7BC397DBC13A26BB8B3742CC62CD1C9B0DDED57DA7832416D6F52F42
SHA-512:	C02C5894DFB5FBF47DB7E9EDA5E0843C02E667B32E6C6844262DD5DED92DD95CC72830A336450781167BD21FBFAD35D8E74943C2817BAAC1E4CA34EAAD317777
Malicious:	false
URL:	https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
Preview:	wOF2.......p......................................O......^?HVAR.g.`?STAT.8..4/l.....<..6..f.0..\.6.$..H. ..\..>..[`....\|...........7o.)....C81=......g#l..PA.c.......%...$.K.....\|}}....8H.\Yd.....2c.J....0K.....I..k...F..f......,L.....P...JGwj..KM....n..,..o.....n.ck...1...%.<.....;5...9..2....=b.....("4..:.k...K_...`.5v..2@...,_.3..6..@PR.]...f!X.~..b.....-..9.....?.=:kt.'@_...N...8.i......Fo..S.C.=%.........W.@7d..%......,"h...b@.DE.]l.n..(;......E.ng].`....8..C;m....).u8.....4...%..c.A.hc]....s.{.+....J..Rq...f..I;.B..g.....j.@~.........H.........:]Dc.J.6r..].".c...8j...v. M.PXB.,.v...M..NtOO.......Z`-.i..X.....".y....c.....+..e[..(..q...u..kh.k5W..=OK{.;...7...V...I.FMTWv.Dv.[..^`......JY..:.,.. tgKhC..2-...I..S..'...IL..........p......&:..(...g..B.`......%U....-.m.D.b.m..p..26.0D.....$j.r...w..z.9.)`..n.I..B...s"es...;..vY...6.T...**..2o.....W.Lu:wx.?.7..x......C..E.^SE..F.5WcMi..a..n...X...t.........6.j.j..M.9..a.....f<J.....@.&f..'.\|.....p

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	691
Entropy (8bit):	4.883897739925605
Encrypted:	false
SSDEEP:	12:UJahuDmIerkZRMoNWdnYbZbCuvEMhmYHpP2/SkmvNXmirN5fgv:hh7gcAYnYNuu8jCmmZlq
MD5:	C9D3346CA20F2076F07F97C755A39833
SHA1:	47C99924D38ECA0F69C110FE6154E17BD575D366
SHA-256:	F47D56F4E42A0FD576EE274454E24C085010B464B849CABE80041C88AAF45363
SHA-512:	1070D5D68F6932BB2A613E3298D6845D8E5F77BDD435990496C1CD8B82D8CDCA539C49F957A14370727BD9D26BC363B29E65587334010CD2046FBAB95D706CE4
Malicious:	false
URL:	https://www.ftc.gov/core/misc/drupalSettingsLoader.js?v=10.1.8
Preview:	/*. @file. * Parse inline JSON and initialize the drupalSettings global object.. /..(function () {. // Use direct child elements to harden against XSS exploits when CSP is on.. const settingsElement = document.querySelector(. 'head > script[type="application/json"][data-drupal-selector="drupal-settings-json"], body > script[type="application/json"][data-drupal-selector="drupal-settings-json"]',. );.. /. Variable generated by Drupal with all the configuration created from PHP.. . @global. . @type {object}. */. window.drupalSettings = {};.. if (settingsElement !== null) {. window.drupalSettings = JSON.parse(settingsElement.textContent);. }.})();.

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	941
Entropy (8bit):	4.710541566641108
Encrypted:	false
SSDEEP:	24:0UfiTDQTa5mRIdZwyDP+CyeTnjqR93D1gWm:0AqmRmXF
MD5:	1991E7332990CE178BCB59AD5FFAF84A
SHA1:	693FB3B5CB7A336D4CC73537CA94656EA3CB31C1
SHA-256:	90F8F57FCE474FEC7A943DD6716E18F2F4BB7640501C39145146D5575EFB2DB5
SHA-512:	182985DEEB509535E34D098EBB5D832BC1BE79632847DE8966E9D8C4FCF6640A37D8489261E7B96B314EAAAF4D7A2E88F5493F2B46462096B434871474838FDF
Malicious:	false
URL:	https://www.ftc.gov/modules/contrib/addtoany/css/addtoany.css?sbdm6u
Preview:	.addtoany {. display: inline;.}..addtoany_list {. display: inline;. line-height: 16px;.}..addtoany_list > a,..addtoany_list a img,..addtoany_list a > span {. vertical-align: middle;.}..addtoany_list > a {. border: 0;. display: inline-block;. font-size: 16px;. padding: 0 4px;.}..addtoany_list.a2a_kit_size_32 > a {. font-size: 32px;.}..addtoany_list .a2a_counter img {. float: left;.}..addtoany_list a span.a2a_img {. display: inline-block;. height: 16px;. opacity: 1;. overflow: hidden;. width: 16px;.}..addtoany_list a span {. display: inline-block;. float: none;.}..addtoany_list.a2a_kit_size_32 a > span {. border-radius: 4px;. height: 32px;. line-height: 32px;. opacity: 1;. width: 32px;.}..addtoany_list a:hover:hover img,..addtoany_list a:hover span {. opacity: .7;.}..addtoany_list a.addtoany_share_save img {. border: 0;. width: auto;. height: auto;.}..addtoany_list a .a2a_count {. position: relative;.}.

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 640x360, components 3
Category:	dropped
Size (bytes):	26261
Entropy (8bit):	7.960026550453563
Encrypted:	false
SSDEEP:	384:Oq3t7riwjNLJ3z+tlhq2h51XDJslhzWYnGIx1OR6M3nNJFXwQKUZZlQzZ0:OaBNjJFzeLhDJehSzqM3nmQK0qzu
MD5:	D0F74B2C64AEC2A8DD23E4337D06CA64
SHA1:	3AB32D99569B5984865B8A8932A326A13756AE67
SHA-256:	41F270A1C4D90FABD8E3D1EB07A1740EAE109B6678F3D0A41961100A969CE178
SHA-512:	32C6AB2A660B566E77526BED24A4B637D1E0376689DBED5E2C9E51EFB51848374AE0AF9C23C1AEB4379B3B76E34F355C3ACC4DBB6B288E2FE0D0DAE9E2FE5AE6
Malicious:	false
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...B8&.n4.~..D.t ...N...Y7(.t...A4Z.....N..go.....{.....q.DV..]~CL.b..x..X..i .Fq...%~U...a.8n.1.Q....1.c..i....n.g.k:A.......&.:."[....B......%.1.=.kZ..OOk{...KFF.....V..KK.4.F"...JH.......d9R1.Z. ......55E...-4...QT ..(...(...-.P.P^..9.....L3..U?..\|.VN.{.~..s.r.=i)OZJ....*;..~.)..0.P46..Z.).}.L.

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	5745
Entropy (8bit):	7.967405716919506
Encrypted:	false
SSDEEP:	96:c+d800vFIzpko2nPQsyvEz7bQ+7+90qB4akXoNumA/79ifoqLdfPUm8BoqnS2F45:c+d800vFIzpko2ysXg908YowmA/pifog
MD5:	8749A840FD2767F24774FBB6E4EE6AA4
SHA1:	030467DBD28A97397225C2918B4AA2BE95E2B194
SHA-256:	930CDCDBAC26B37BC38CE84B458B9C08D1E5D3506F03FBFBBB31B0314B61FD22
SHA-512:	712B17B450351E44CD46D88B87066F691049796A5DC44B8F6073D67879DB75E5C17C5638A93F00B2B1AF2C83DEF075FABE20FFAD14AE16FAF50671174E7A5792
Malicious:	false
URL:	https://reportfraud.ftc.gov/640.b1edbf4b35c3951b.js
Preview:	.;_#........P.......K....:...t.W}{U......%..a.ik=.#.."...dvS5....#..cJ-.....}...u..K.)Oz......M..d...b.e.pNR.D..'.&]V.....v..Z.......%z?....u...}.rTW......u..nA~..R)w.f.9.o..#...\|O.......~Y.a...s....S..R...K)B..BF..................BV.. .....X...'"....#Bn.`.T....4.pN..?...f..\|..<..@.$../....~.n...71....V..!Wa.b=1......V.."...bhm.GK.b.2^.......[..~..7.'.....zU.....>:....j...R........$...=......(..........(.........i....Q.2">"z/.]e........-.Y...w6.6Q...7..wF@?.t./.u.bN....#v28....V..b...{.._..f........9#..C..f!O.8..p.$9-U..M.g`u..].....[<.b\|.&.d`L/6...x+m&..i...........n.wX.yE.. b.....3.bE&2.$.9.(OA,.....V@..A.....n...]T.\...d7...s..E..[......:g..:.!P... .\........5a...p.f... ..X.u....Z2.".."z}.P.....V.q../W}.Nlb.~.6y..K..db..=m......8@.L.!.0..D.BNk.....j....;.K...]...1m..H..VG.2\|.x..\.......[....4_O@....j.\<$....'...L.8>..n.. ....L..X.^......j..:R.^...m:...c...g...4^.o.OS..~M....<9^:...j]..;....Y.8..RwD.................

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (611)
Category:	downloaded
Size (bytes):	27242
Entropy (8bit):	4.3631679730758375
Encrypted:	false
SSDEEP:	384:6FamwIluB0sJQqCeSQup5szCUXAG0VVi82OgoKACZQQofNJXY3gW3:663Mp5If8WOmgW3
MD5:	DF3D48946E8D3F5A83608308EDBB4B86
SHA1:	47B9C40C97ABF2658DF96B1C06109324E15E1A00
SHA-256:	570A6631252B8A52DF4DE0E953AE77DBDF524DFC3637CDA2840494A0D2B49499
SHA-512:	36EC1CEC72DC3245730C813277C645525473CC5232E85CD23503B8593D90264F335E61A16D364A1E6C41922820B40BA7C0F46B19F4B91DB6A0CF5E31E778DDEA
Malicious:	false
URL:	https://use.fontawesome.com/releases/v5.13.1/js/sharp-light.js
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <meta name="viewport" content="width=device-width, initial-scale=1.0" />. <link rel="icon" href="https://www.cloudflare.com/favicon.ico" />. <title>Not Found</title>. <style>. body {. font-family: system-ui;. font-weight: 300;. font-size: 1.25rem;. color: #36393a;. display: flex;. align-items: center;. justify-content: center;. }. main {. max-width: 1200px;. margin-top: 120px;. display: flex;. flex-wrap: wrap;. align-items: center;. justify-content: center;. }. #text {. max-width: 60%;. margin-left: 1rem;. margin-right: 1rem;. }. main > section > div {. margin-bottom: 3.25rem;. }. svg {. margin-left: 2rem;. }. @keyframes eye-1 {. 0% {. transform: translateX(0);. }. 10%,. 50% {. tr

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 275x214, components 3
Category:	downloaded
Size (bytes):	19887
Entropy (8bit):	7.92540476843091
Encrypted:	false
SSDEEP:	384:ZyOBdvmFDg7M6pvEgTLRwN8bhVgycVMSqF3ImFIi3:HhBEYw8FrcVA5ImFIi3
MD5:	2543DCBC3F3815E3714FD7393358B091
SHA1:	142A7D20B30587B5928307FA2451BF363D1F95A2
SHA-256:	092485F2131A45059D496C8B8DFBBC4D310470E7A51EC403D467C227C1E41FAB
SHA-512:	8F44DEED1CF3072E61B6EB29EBF6C2F58AE0E52B6FA7C8839742CFC4A1139AE50A560F9D8A5E2D5677943E6AB6775B38B2484C7565D81C2D97A5A9DCC2EA12D8
Malicious:	false
URL:	https://www.donotcall.gov/images/FTC_DNC_main1_3_submit.jpg
Preview:	......Exif..II*.................Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:EDC34F79AB2268118E19F96045951970" xmpMM:DocumentID="xmp.did:E95ED191D36411E6BE7FD11C62D4B884" xmpMM:InstanceID="xmp.iid:E95ED190D36411E6BE7FD11C62D4B884" xmp:CreatorTool="Adobe Fireworks CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f3749a33-cb1a-4497-b4fc-af8cc0071200" stRef:documentID="xmp.did:EDC34F79AB2268118E19F96045951970"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpac

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	4.608018597820658
Encrypted:	false
SSDEEP:	3:UBQ+gHfyCDqKQcrJb1K2EIIrKcl68MQevFS/un:UBQ+NCWLcrJZKe9FLdS2
MD5:	0A8A1897BB979B68492A277505848DDF
SHA1:	5D8AE17434AD381A63BDC4AE476C69F1921709A7
SHA-256:	D73A0B31E08ED90E9746B1723CA266064B7F4F113370842BC347A893E217ABF7
SHA-512:	0D590D3D92F331B0378BA181D7B43900DD9B4A3344F04B270ECBE10CF1EBB0615C6092448FECAB5361D147CC7AEDE4EF55B9E979B1863640E14D2997AEE6AD0A
Malicious:	false
URL:	https://www.ftc.gov/core/modules/layout_discovery/layouts/onecol/onecol.css?sbs84s
Preview:	/. @file. * Provides the layout styles for layout_onecol.. */..layout--onecol .layout__region {. width: 100%;.}.

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	987
Entropy (8bit):	7.424427212494858
Encrypted:	false
SSDEEP:	24:hD2sKsZvpXo8rkYXXtfbR1hKiVfhngEDt+ZZj6z:hSs9vpXowVXZbRTKizgEp6G
MD5:	DE4E7C7C704F29E1EB625CEDBA62C88A
SHA1:	D1BA92A788782FC78450E3579CAABB1E9D849F60
SHA-256:	F1E1C9F3B5B4B4EA4431FBE0D7662FAA1D908A9564F87DB5B9E8DB344473EE96
SHA-512:	CE71AAC0823D3EFB15C2E5EB28A30E4631E10853534D524BE9E8AEF02D60EF2B60EEE2559088A6A5E0A350ADFF1E1AF64ACF213DC92F3FF900234DC6F7B46287
Malicious:	false
Preview:	.PNG........IHDR...P...P.............sRGB........8eXIfMM........i...........................P...........P.....(nu...WPLTE...p. p.(p.+q.(p.(q.p.)q.(p.(q.)p.)p.p.p.)q.)p.q.)p.)q.p.)q.)p.q.p.)q.)p.q.)q.$.......tRNS.. 0?@OP_`op................B.......IDATX..[..0..S..2.Xh.....s/t..-..fs.....94.....u........!.\|^..0f..a........&o.0.\|QI....&.q.....g..p.....L.xK....vg.`6m.....U.l....Te...k....W....?..cY4.X..kK.e.u.uy..1..J....1....xDuLZ...[Dj,..j......hJ..]......Cb.k>L.:....j.@.e..."....H...D.\|... .}G.<.(...NQ.[E..#U..._.f..-Uq.......DT.#Q\|..<...C.{P..F........>U....j....2F"Z.....Ck...f."......o..-H......R.p.=.:.~...E...@.u&.~..l..#.s&..N....qQ#&$d.\...I.w.M.h./.3..g.......\..1...X.c.W1PB....8@.Ys..X.I..1.mtN.g..RT.w....\.w....!!...@e^....G.z}.P..p.....wi.~9.t^...C4...Y..F..F/........8.=."H....K.`.k...X.(JW:..._..gUe....-...[..u_.6......!flM...oe.0.Y.x.....b........+...............7A\|...jg.hF..ZO}.....`.....h...o...-.....Z..r.8....IEND.B`.

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (6402), with no line terminators
Category:	downloaded
Size (bytes):	6404
Entropy (8bit):	5.1056452874475164
Encrypted:	false
SSDEEP:	96:lKrpq4fjy7STmL7CkWQe1zvQe+Usck+skmZ1gucomT5gOH4bIU5gOH4bIs:l2dWWT4CkWNv8A9us/
MD5:	F4D6FA7B1BA8B2E3D33688F9002713A4
SHA1:	28104C76C30EA87A0131E2B1D06553921629421D
SHA-256:	8898D15711EE6D71E7562745D4AAE2B00CDCA7AA248759EB08844614D0FB7D86
SHA-512:	A98E23178CFF90B5860D2D46F8BD9A7C1033D838817BF3F88502DF1E455F8CD2DDD9E4917B5C4A22900835C3815C4F47AB3F8AA59D7031DBABAD850C23AECA46
Malicious:	false
URL:	https://www.donotcall.gov/verify.html
Preview:	<!doctype html> <head> <script async src="https://www.googletagmanager.com/gtag/js?id=G-X2KH68RJRQ"></script> <script type="text/javascript" src="/js/gafourprod.js"></script> <title data-i18n="sitewide.page-title">National Do Not Call Registry</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1"> <meta name="msapplication-TileColor" content="#ffffff"> <meta name="msapplication-TileImage" content="/images/ms-icon-144x144.png"> <meta name="theme-color" content="#ffffff"> <meta name="description" content="Register your phone number to report stop or block unwanted, annoying,telemarketing, spam calls, robocalls to the FTC"> <meta name="keywords" content="Annoying, Block unwanted calls, Report annoying calls, Robocalls, Telemarketers, Avoid unwanted calls, Spam calls, Stop spam calls"> <link rel="apple-touch-icon" sizes="57x57" href="/images/apple-icon-57x57.png"> <link rel="apple-touch-icon" sizes="60x60" href="/images/apple-icon-60x60.png"> <li

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	917
Entropy (8bit):	5.138337853602521
Encrypted:	false
SSDEEP:	24:YHA6f5lxisJt/ErLonqgNXy+N6HCb1CR6Iv82pC15T7WE/yScFu:Yn5Ohr0nqglyWKCb1CRrv82pC15/L7/
MD5:	9ADA4DCCABC9DF56EF5569369D036B80
SHA1:	32FB3FE569EC25CDA8E4CCABF176630552506874
SHA-256:	A92605900410FC04A4D141742E76D0943A2A5909E3581A4E6D870CE874CC4FD2
SHA-512:	CE752DDC924653D6EE1A92A8758F006A78E76D64196CF8B9181592DE76ED7014C464E590450000E7ACBEDE93D7F10B367359E1FE032D6F1D83F564338B955152
Malicious:	false
Preview:	{"InterceptDefinition":{"BrandID":"fedtradecommission","InterceptID":"SI_8uImeHqBl1yuGVg","InterceptName":"FTC.gov Feedback","Revision":"18","DeletedDate":null,"ActionSets":{"AS_96581019":{"ID":"AS_96581019","Creative":"CR_7ZANo3f2eTZGPe6","WeightedSampleRate":"","Target":{"PrimaryElement":"SV_6KlC6jQKGJ9RQvY","Type":"Survey"},"ActionOptions":{"targetNewWindow":true,"targetEmbedded":false,"targetFullScreen":false,"resizeForEmbeddedTargets":true,"targetWidth":1000,"targetHeight":800,"displayElement":"","selectedDevices":[],"actionSetSampleRate":100,"actionSetContinueExecution":true},"CreativeType":"FeedbackButton","EmbeddedData":[{"name":"Page URL","type":"GoogleDataLayer","value":"Page URL"}]}},"DisplayOptions":{"displayRate":100,"noshow":"30","cookieDomain":"https:\/\/www.ftc.gov\/","hasRandomization":false,"displayInterceptType":"onload","hideOnCookiesDisabled":true,"hideOnLocalStorageDisabled":true}}}

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:H+uZYn:euZYn
MD5:	46DF3E5E2D15256CA16616EBFDA5427F
SHA1:	BE8F9B307E458075DA0D43585A05F1D451469182
SHA-256:	AF3248D0B278571EFF9A22F8ED1CEB54B70D202B44FD70ECA4CA13A5771CECC3
SHA-512:	88FBCC0A92317A0BADE7D4B72C023A16792F3728443075BF4B1767C8A55258836B54D56B24EABE36AE4EF240F796B58B8F1EA10C7E3C146BDE89882FC9ADE302
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAl0cqDTNZw06xIFDZFhlU4=?alt=proto
Preview:	CgkKBw2RYZVOGgA=

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (510)
Category:	downloaded
Size (bytes):	728
Entropy (8bit):	5.182112766953486
Encrypted:	false
SSDEEP:	12:UOx343RkfLhPbC4sKjUMbHxuFTwkQ1NLnAPHEJFBPP3c4muCd9wND9q:N+kzhbOSHxuRBQ1NwAFN3u395
MD5:	5F68DEC7DC74765EB750D91AD1F9F02D
SHA1:	81177159D92B2156AB75669DBD771B44FFD086C4
SHA-256:	3F12C2ECC1E784AA4859B0BDE4CDA5747A3BBB43BB73086F66755995EFD7A968
SHA-512:	BD526480CE40E1348BC4484DF568DD9D9C0CACD3BFA0DB17802D9F63D239D9BA93473F047EF8B67E9BD4F48BA7A53E0A1D1F7DF6E5932E30F0E2F31D64C72B09
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/labels-min.js?v=10.1.8
Preview:	/!. jQuery UI Labels 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery","./version"],t):t(jQuery)}((function(t){"use strict";return t.fn.labels=function(){var e,s,i,n,a;return this.length?this[0].labels&&this[0].labels.length?this.pushStack(this[0].labels):(n=this.eq(0).parents("label"),(i=this.attr("id"))&&(a=(e=this.eq(0).parents().last()).add(e.length?e.siblings():this.siblings()),s="label[for='"+t.escapeSelector(i)+"']",n=n.add(a.find(s).addBack(s))),this.pushStack(n)):this.pushStack([])}}));.//# sourceMappingURL=labels-min.js.map

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 771 x 144, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	25653
Entropy (8bit):	7.964858039073613
Encrypted:	false
SSDEEP:	768:M1yLrQCIC89ekk16DtWT4e3z8Io/V1SPK:yyLrehgt15T4e3YfSPK
MD5:	9F819D98B28CE7EDD627B502EA579FD8
SHA1:	BCB05483F56B3D1A2F820FDCD1F41AE2CE0CB7DD
SHA-256:	39650DA8FBE9D79A204AFC7F6DDE637B5DD796A682F85B9BEC7203B4767AEDB0
SHA-512:	80BCB11591198422185142EF6F722985D33C88C4CA78FF7F24565CFDDA8D615E8BA341A5FED05BC62946947B25C0CDE86A6E8C796D8ABC2DF9E55DA450FDCCA0
Malicious:	false
URL:	https://reportfraud.ftc.gov/assets/images/idt-logo.png
Preview:	.PNG........IHDR.............T8.S....tEXtSoftware.Adobe ImageReadyq.e<..c.IDATx.....Wy.]x...{$:..I.f..k;/..X.v.".N.1.[....z.....Q.G....;o...',.,...`@.Ll.I.i-.Fz....)\|..`t.....8.n.Go...3s.NUuUwuO...?......[_..s...S(...B.P(...B.P(...B.P(...B.P(...B.P(...B....v.../.....L.K.........Z.Y.y......D._J.R}.tu.o...V.RR(...B.P(:........e._Fo..WM.}.{.v.OMOM..p...o..............G........z....=....7o:......O?..[^yl\|t,h...^.y.B.P(..E7`...`..?..r..n\|...{......?..gjg......{...C.....v.Zo....G.....k.xssg...o\|.X......<.8q2.......K.....~..~...^.W.....gNWkz.)...B.P(T..K.{....+6./......k>./....n....;}...w..9o....v.^OO.O....7.......7h..<q".....\|h....?....{...[.}m.1..?..~..E..^v..B.P(........?......j.:.....x.....w.{.....9D....U@. .X....9...WU......;..v.&&a...U.....B.P(.*....a_.....;..7.....!.~.....7.,.....f.X.D..<q2.%.........x......t..z.SS#.j..@V(...B.P..H.../....?.......G..)<.w_...!...[..G0.?w...H.,.qD.. ..E..q..~.c.6....v..[..h.\.....f...\z......0.@E.B.P(.

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	15281
Entropy (8bit):	4.334330974025632
Encrypted:	false
SSDEEP:	192:Xr/IlKJJPkgUQOnz54nTSZlABSqwH57qsgMUn7V28d8SQtFxuWBoTJtWX97yFT88:r5kj7z5kAJH5735E2uKto62Tc0
MD5:	098A0918E8C85629CF0445B2BCAFECE1
SHA1:	5CEB8AE831431A733DCD73691D0D17C92BF6949F
SHA-256:	CDA5AABE292D4969BF5C3A38D0D8B29284630CA611B16B11C2FB8200E669A445
SHA-512:	BC2A8A2E796F93A8B0F3C488C3D09EE03FA52666AAAD59DC59D80C4D7E9E03127FAAAB89E11054FD8F4344BC4A98848272F0C6EAB595941305C78CD06A5C5C63
Malicious:	false
URL:	https://www.ftc.gov/modules/contrib/extlink_extra/js/extlink_extra.js?sbdm6u
Preview:	(function ($, Drupal, drupalSettings) {..// Checks if a given element resides in default extra leaving container page.. function isInExtraLeavingContainer(element) {. return $(element).closest('div.extlink-extra-leaving').length > 0;. }.... Drupal.behaviors.extlink_extra = {. // Function mostly duplicated from extlink.js.. // Returns an array of DOM elements of all external links.. extlinkAttach: function(context) {. var settings = drupalSettings;.. if (!settings.data.hasOwnProperty('extlink')) {. return;. }.. // Strip the host name down, removing ports, subdomains, or www.. var pattern = /^(([^\/:]+?\.))([^\.:]{4,})((\.[a-z]{1,4}))(:[0-9]{1,5})?$/;. var host = window.location.host.replace(pattern, '$3$4');. var subdomain = window.location.host.replace(pattern, '$1');.. // Determine what subdomains are considered internal.. var subdoma

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1600x1248, components 3
Category:	downloaded
Size (bytes):	114310
Entropy (8bit):	7.701673230837779
Encrypted:	false
SSDEEP:	3072:Tjhc1T1BMNQkpZsRCfCx6P3h6K3Q6aq1UC8wT/b33m:TjheYNB1JnQ6NAWT33m
MD5:	6D409FC6EC54E36ABE0C33AB849966F5
SHA1:	189D89B2387B1CD4C13F5F479383C5FB1C2667B0
SHA-256:	ECA10A5DF4B175FE289F8FDF148F7CDCC6CF7809E046C737AEC42229D4591A0C
SHA-512:	737037C15960E80319A2C9E14F38F8A0AFC7F5566BF9C7F3CB160664A76937F1972914DDC20C770254CC9BA191E69252E2B50888A28AE147B1F4D743077CDE1D
Malicious:	false
URL:	https://www.donotcall.gov/images/background-s.jpg
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...................................................................................................................................................@.................................................................................!.1AQaq........"2..R...B.3.b#...Ur..4..$DT..5E.C.Ss.%....................!Q....A..1q............?.....0H.'.a..I....4. ......;..\...e..N....EE....}X.{..xV0@jr..;........ ....E...P..H...=..S......W.....`C`....P...@...T.2....i.0.%]..P.........H.........b........`+......... .......=...N.2#~.'v@t.p..6..b3".r..^..E.@O...."Uh.......fEf4Q..i..1P.b..H......I.6.X..;}+:is9....Xf.z.F...&\Z..h.......35..t...L...&]/j......7\|F%.g...9.....(..r.. ...C$ .. .F...p...+.@..0....d.G...xd.I....#V...........mA)......=.....j.../I....{.p..... ..V.N...#..`...}....).... ....F...8vp......T.f.2..0...e...O..'q...............7.......\....2._ 'p.._h.p.X.J0..r.... .@P..J...`T........@(.(..... @...QP.....r.........^).d.eE

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1122
Entropy (8bit):	4.73116782836501
Encrypted:	false
SSDEEP:	12:UBQYBsaMLshBvJBspFhXh/Rs2Fis2Fr3srKFisrKF0sLgpF0sLgpFnwzs2F0srK/:NYmtW1JEXh/ym47KTshI
MD5:	E19F850914A8F53485F463E04C6CBA6D
SHA1:	D1C2440ED964F0C3113CFFE7AC447456D0942758
SHA-256:	4850C5C58606A7C9311D48B1327D6264D0557FB1C331B64CAFB2FBB2E1D66C12
SHA-512:	298C76A66D16F917B3D2DD67E44A43B436421F4E32BE2368DAC585CAD7A9000C5707B5C770362EFE674D8793FC1926A4102DED65E8692E7D2D5CCD1DC7A477F3
Malicious:	false
URL:	https://www.ftc.gov/core/modules/layout_builder/layouts/threecol_section/threecol_section.css?sbs84s
Preview:	/. @file. * Provides the layout styles for three-column layout section.. */...layout--threecol-section {. display: flex;. flex-wrap: wrap;.}...layout--threecol-section > .layout__region {. flex: 0 1 100%;.}..@media screen and (min-width: 40em) {. .layout--threecol-section--25-50-25 > .layout__region--first,. .layout--threecol-section--25-50-25 > .layout__region--third,. .layout--threecol-section--25-25-50 > .layout__region--first,. .layout--threecol-section--25-25-50 > .layout__region--second,. .layout--threecol-section--50-25-25 > .layout__region--second,. .layout--threecol-section--50-25-25 > .layout__region--third {. flex: 0 1 25%;. }. .layout--threecol-section--25-50-25 > .layout__region--second,. .layout--threecol-section--25-25-50 > .layout__region--third,. .layout--threecol-section--50-25-25 > .layout__region--first {. flex: 0 1 50%;. }. .layout--threecol-section--33-34-33 > .layout__region--first,. .layout--threecol-section--33-34-33 > .layout__region--

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1005), with no line terminators
Category:	downloaded
Size (bytes):	1005
Entropy (8bit):	5.013191602556252
Encrypted:	false
SSDEEP:	24:oXO6saQC09wymqq4rUbIacbIWYCNv4LTqJz3MF+sCn:Ks+Vy7q6AIXbhLgLOJz3MF+sC
MD5:	B0EFB54BB16214EB91111B19C36E6468
SHA1:	1C0F78E75BC1082BE9372CEF13E1F09BA6A9337E
SHA-256:	E52E0AB4A1ED86F3A295C0CFE163E6B7BE40D1AD2028E5D43180093FF58BE66E
SHA-512:	B1F366227E0F203EBE2D652BEAB4CD9278848C3871196A90129F0BD2AF6F2A522765C652C339389B678EA5C53B3EEBB2C9774A5377A65EFC331E4FA4089498EF
Malicious:	false
URL:	https://www.donotcall.gov/js/lib/jquery.i18n/jquery.i18n.emitter.js
Preview:	!function(e){"use strict";var n=function(){this.language=e.i18n.languages[String.locale]\|\|e.i18n.languages.default};n.prototype={constructor:n,emit:function(n,r){var t,a,u,i=this;switch(typeof n){case"string":case"number":t=n;break;case"object":if(a=e.map(n.slice(1),function(e){return i.emit(e,r)}),u=n[0].toLowerCase(),"function"!=typeof i[u])throw new Error('unknown operation "'+u+'"');t=i[u](a,r);break;case"undefined":t="";break;default:throw new Error("unexpected type in AST: "+typeof n)}return t},concat:function(n){var r="";return e.each(n,function(e,n){r+=n}),r},replace:function(e,n){var r=parseInt(e[0],10);return r<n.length?n[r]:"$"+(r+1)},plural:function(e){var n=parseFloat(this.language.convertNumber(e[0],10)),r=e.slice(1);return r.length?this.language.convertPlural(n,r):""},gender:function(e){var n=e[0],r=e.slice(1);return this.language.gender(n,r)},grammar:function(e){var n=e[0],r=e[1];return r&&n&&this.language.convertGrammar(r,n)}},e.extend(e.i18n.parser.emitter,new n)}(jQu

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	324
Entropy (8bit):	4.967859651212846
Encrypted:	false
SSDEEP:	6:qQ2b9ebME4xFHMVGuifAdDfrbvWxRz8Yramf8YEqUdwK+fvK7rmZZm:AUMbHxu/H44pPqUdwKegCm
MD5:	3E043F92950B398134D48D71A6D4C3EF
SHA1:	96F56F62EBD38AF26EBE08AD8AE06032CAAE9B5C
SHA-256:	10F06EED42DA60C0EAA527C45D9DED31F1AAC744F4E54C0B439C974AFF2D64E6
SHA-512:	2DD16EB055136D5CC5B95512244A0F2B6921585C3001FD0B1B658DE42E2A36A0279642ED7E08AD86DA09E56C38B0DCC8AF6A49B776D8683D0A48C56A39EE4AED
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/safe-active-element-min.js?v=10.1.8
Preview:	!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","./version"],e):e(jQuery)}((function(e){"use strict";return e.ui.safeActiveElement=function(e){var n;try{n=e.activeElement}catch(t){n=e.body}return n\|\|(n=e.body),n.nodeName\|\|(n=e.body),n}}));.//# sourceMappingURL=safe-active-element-min.js.map

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 640x360, components 3
Category:	downloaded
Size (bytes):	41603
Entropy (8bit):	7.972030784534592
Encrypted:	false
SSDEEP:	768:OLObBD2HOCYKiW4KIOlvdXgNJAjxBJ4iu019sZLp/j6knZH9R6KYJRhbXrBD3t:OLSD2HOyiWh7Bg4j7J45019mp/NzjGxz
MD5:	F0D8820C5EDA82DE6B9BEC572BE15EDB
SHA1:	A6A8BECD86C92BA4B7E37B8E851D3AB574895F48
SHA-256:	A72BDE1A25F0A01FBD6C15A6F6C8C521F988D9ADFE688A3C6F740D279C58F56F
SHA-512:	921F17CD6D095E1B42A4BFC665B3BEFFB7C7C6A279DDC6D79CF1B15953C329FC75734E1EDC0A039F8E73108B0DB97214BE4CFC4D5BDD7F0AE470B7F1AB49EB23
Malicious:	false
URL:	https://www.ftc.gov/sites/default/files/styles/wide_standard_sm/public/ftc_gov/images/feature-consejos_0.jpg?h=10d202d3&itok=kiOGZUXN
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(....(...(...(....R.p..'.u..V.P......:...Z.=*^.6...A<....)1.UW......Z.jz.{....;!..I>.&....-=.f5nB._...@....Q.....I..3g...j...3.{%.^..g..V5..F..Ro...[....Oq.{f2......J../>.d#..)\g.42.aMK....F...M.[..~F.......A..WpP...s.T...jZ{/.P2..A.&.....eR..n.lU].b9SW=Z.Vh.-I\..5....8...WQZ#...QE..JB..MbI. .0.....

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 640x360, components 3
Category:	downloaded
Size (bytes):	26261
Entropy (8bit):	7.960026550453563
Encrypted:	false
SSDEEP:	384:Oq3t7riwjNLJ3z+tlhq2h51XDJslhzWYnGIx1OR6M3nNJFXwQKUZZlQzZ0:OaBNjJFzeLhDJehSzqM3nmQK0qzu
MD5:	D0F74B2C64AEC2A8DD23E4337D06CA64
SHA1:	3AB32D99569B5984865B8A8932A326A13756AE67
SHA-256:	41F270A1C4D90FABD8E3D1EB07A1740EAE109B6678F3D0A41961100A969CE178
SHA-512:	32C6AB2A660B566E77526BED24A4B637D1E0376689DBED5E2C9E51EFB51848374AE0AF9C23C1AEB4379B3B76E34F355C3ACC4DBB6B288E2FE0D0DAE9E2FE5AE6
Malicious:	false
URL:	https://www.ftc.gov/sites/default/files/styles/wide_standard_sm/public/ftc_gov/images/feature-conceptos-basicos_1.jpg?h=c74750f6&itok=fBZSNsG4
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...B8&.n4.~..D.t ...N...Y7(.t...A4Z.....N..go.....{.....q.DV..]~CL.b..x..X..i .Fq...%~U...a.8n.1.Q....1.c..i....n.g.k:A.......&.:."[....B......%.1.=.kZ..OOk{...KFF.....V..KK.4.F"...JH.......d9R1.Z. ......55E...-4...QT ..(...(...-.P.P^..9.....L3..U?..\|.VN.{.~..s.r.=i)OZJ....*;..~.)..0.P46..Z.).}.L.

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1490
Entropy (8bit):	4.853073083409658
Encrypted:	false
SSDEEP:	24:tuLxN2h4tYP/dlhPWC/Oqsy9EUvdGELPHdJ/bCzdGeTB4Lk5IFLbS6NXHQF9gZC0:sxjqPFGqsyGnE3ad/2LC2nS6RoOC0
MD5:	2223B58D213AFC2A08E8C2F62A739FD4
SHA1:	647309084A74C02960BDEF19FA1661144ABAE4D2
SHA-256:	B6062EE316BBFEE293633D2DA1B1BE391ED06EAE27303D3F7743245AC82C9DEF
SHA-512:	C3470A30214AF462347AD45419FF74AD4DCFD65BD9CD0C0EB2B5F52FB6108DF219A5A31BA099164EE80763A2095D66314CDBA53E3FECAF8F37440F2F0CDE996B
Malicious:	false
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 1080 938"><defs><style>.cls-1{fill:none;}.cls-2{clip-path:url(#clip-path);}.cls-3{fill:#244a73;}.cls-4{fill:#f5a800;}.cls-5{fill:#7ed3f3;}</style><clipPath id="clip-path"><rect class="cls-1" x="214.13" y="191.02" width="651.74" height="555.95"/></clipPath></defs><title>Report-Fraud-Illos</title><g class="cls-2"><path class="cls-3" d="M699.52,263.13A139.82,139.82,0,0,1,552.9,196.06a13,13,0,0,0-18.18-2.33,12.59,12.59,0,0,0-2.34,2.33A140.33,140.33,0,0,1,385.8,263.15a12.49,12.49,0,0,0-15.53,8.41,12.66,12.66,0,0,0-.51,3.56V392.73c0,164.15,167.88,211.83,169.59,212.28a12.62,12.62,0,0,0,6.57,0c1.71-.46,169.59-48.14,169.59-212.28V275.13a12.52,12.52,0,0,0-12.59-12.48,13,13,0,0,0-3.4.48"/><path class="cls-4" d="M857.91,409.44a69.63,69.63,0,0,1-73-33.39,6.45,6.45,0,0,0-10.22,0,69.87,69.87,0,0,1-73,33.4,6.22,6.22,0,0,0-7.73,4.19,6,6,0,0,0-.25,1.77V474c0,81.73,83.59,105.48

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 640x360, components 3
Category:	dropped
Size (bytes):	52177
Entropy (8bit):	7.977559626021423
Encrypted:	false
SSDEEP:	1536:OmJhv3H0kjJyieKhYiHlfpmKcG+HLJ3B9:BJN3HLJ8JMHmG+HLJX
MD5:	446AFB7E85A9864BFD004C1E050113A0
SHA1:	5637F1FA36CDF10151610E535618B57FC166F3DA
SHA-256:	60C2DBCDA6EDBDA7C31B4FC9DCF5AB6864B1E31F8187B24554F7AB1045492029
SHA-512:	F3BB1545C071CD7501F6648DEB0254F7890B9B5E5D0F1E9E5BFF0EE57492B457EA6663A401489A23E4AC02C26657277DB2EAAF1CCEF9659DF975F3F68BCA445B
Malicious:	false
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....\....]....(T)<t......#..R......)foE.8....9...=.z.f....3C.e.w./'..+X].8\|..a......].q..f..l.....]f.a.PG...JN>..ZQ..62.T~.e#.U...d.....*g.R..9dO.5v2.DB.)[O.O."7.a..>.$..4...Jp......~.."H...;....E.<P.b..(....U..U....(...p..)q@..".D...1Bbd.N?p.AH?Jx.9.L.....Kx...Y..:.9.5.:.R.,K....``xYFc....S...9...O...

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	262293
Entropy (8bit):	5.567309517144614
Encrypted:	false
SSDEEP:	3072:R0p3LwAZVNSNcMzszFeIko8AjCBPIrTWR4YESfhmpt2nBsLqwyHXDeltzvsXshNA:CBcAFMgzFeNc0fhmpt+aqwyHXDelJsXV
MD5:	F0EAC0710232DCCE4A81177332630E06
SHA1:	91C002997B56B36CA1E39A750A0E709EB74B41AD
SHA-256:	03852F50F8C08FE043370BE39C55AB85457B19649EB459836313DAE3DF7ACDE8
SHA-512:	4B45566F7F6591B3051DA07AEF93FA39D03F42314EBFFA1E8643183CF6BEA84FCE30DA24440027914261DCBAB7B20D3B28E54325EBD8F88B9464C05161BA131D
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-CSLL4ZEK4L&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_auto_events","priority":19,"vtp_enableScroll":true,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":true,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":15},{"function":"__ogt_dma","priority":9,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":17},{"function":"__ogt_1p_data_v2","priority":9,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","v

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1234
Entropy (8bit):	7.776462537472208
Encrypted:	false
SSDEEP:	24:OKOu+8EhxnvFOSqWM63A8gffg1ihFi7r3If8lPyzhhDHmVBdUFutR4:wu7Ehn5M0gffG4injyfDHaUFsC
MD5:	E11468F375F0D022BB0A3720A10ED01D
SHA1:	C3A0AB00F7E999CCCCC64C0EEECA5E43DE7516C4
SHA-256:	1A27FEAC5149B3C5118A7915E3BEF7A5FEDE9C15E476C531CD0707BC6D848625
SHA-512:	0D42B6B37599B9FAA17E3C145A08C4ACDA9823B33A6572AE2C9EC4174FCD579F20CE257DB8572B5613A9EEFF9695F93318B3D00B1D23C2890758C99C7B775EB7
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....zTXtRaw profile type exif..x..[..(.E.Y.,.B............\|UvWWV.tL.H...B.c....;.?.......S....B...;..t.u_..]h....C.\|6c...z.....^.n?...7.<g..m;..z.m....n....m......h....L\|.ns.>.y.y...g.#...<w.R}H....#o=...q...m=.....FD..:H.=n....l.~....LE.....U.aAy..(.....$...+.5.,(.Q".l...(..d.....^!.....X}.'.0.....96..P.K,..Mk.J........F.+..rq4..D.]r......c..wX....SY.].....,...4....r.(B..3.N....i...)..`.A...B...^..G....=._@.D\|#7..9...97.(-[/.T.h....(.$...`.h0.,,..H...$9r.Qb......5.hTU....ES3K..O.#LRL..r...3FgX.\\|....X.XI%Wl....X.ZM57...o..k.R.:.R.]z...........8t.H#_.m.......6..e.WjP....y..d.b>...$...'..(.?.MfG.x(....h........+._rs.>..........6...Pky.Qx..O.........eoy..^....:..8}.T.=.r.....f....A.x ...g.>:w.\|...{u.c.}d.....w.<.../e.....I.v...J....NVsn.C.........@9.Lm$H..>.r..\|l..0.6FX....,...2%.\jr..@.*..TG.P<....7.k..~&.G.O....1....8_..}>........0...$.".3Z..&m..U..A..to.....\G./1.ow?.Nx.@p......bKGD...

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	577
Entropy (8bit):	4.912360195147334
Encrypted:	false
SSDEEP:	12:tHG7b9GZeP41h/2VJHMM+d+5CjhW4EU41mMawUa0:tbeP41h/2bMMn5SvEhsM0
MD5:	C6A0EFFBE867DB0941BD5592F8F43810
SHA1:	7AA5B690050E8469C6A27908ECF4F7123F5885A7
SHA-256:	F16477078310CABEFA1EB16FC3A7FBBD01B20964BBBD05C5D563D6096AF785E4
SHA-512:	A97B1B1512D756380B1AF3F8F24E948FDEA5F6B7EB9BB0947660BE21010CE2C3C7B6027FAC14C30352FF280D441226AF998A9745E9AB10F0F9FB3095999B0079
Malicious:	false
URL:	https://reportfraud.ftc.gov/assets/images/search-solid.svg
Preview:	<svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="search" class="svg-inline--fa fa-search fa-w-16" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path fill="currentColor" d="M505 442.7L405.3 343c-4.5-4.5-10.6-7-17-7H372c27.6-35.3 44-79.7 44-128C416 93.1 322.9 0 208 0S0 93.1 0 208s93.1 208 208 208c48.3 0 92.7-16.4 128-44v16.3c0 6.4 2.5 12.5 7 17l99.7 99.7c9.4 9.4 24.6 9.4 33.9 0l28.3-28.3c9.4-9.4 9.4-24.6.1-34zM208 336c-70.7 0-128-57.2-128-128 0-70.7 57.2-128 128-128 70.7 0 128 57.2 128 128 0 70.7-57.2 128-128 128z"></path></svg>

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (7046), with no line terminators
Category:	downloaded
Size (bytes):	7048
Entropy (8bit):	5.111001816847584
Encrypted:	false
SSDEEP:	192:l2dWWTRGCkWNv8A9uGUAwcif6fuiUB5Yc:1QT3k3
MD5:	511AFF7D3BB40360DD62609CE8131640
SHA1:	23376157E016B3955332CE636159FA29392DCF77
SHA-256:	34522601A898E26DBE1A606389138FC10EB01F15B4500B5D7104B9CC2C1BD57A
SHA-512:	E847924F80D2274AEC342A8909D386C87F74A0442E3DBC71ACD9B21060B2A027FAF81992E4AAFCC759CBBBB5DC992EF23615CECF1C6E1080FE46DF85209820DD
Malicious:	false
URL:	https://www.donotcall.gov/register.html
Preview:	<!doctype html> <head> <script async src="https://www.googletagmanager.com/gtag/js?id=G-X2KH68RJRQ"></script> <script type="text/javascript" src="/js/gafourprod.js"></script> <title data-i18n="sitewide.page-title">National Do Not Call Registry</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1"> <meta name="msapplication-TileColor" content="#ffffff"> <meta name="msapplication-TileImage" content="/images/ms-icon-144x144.png"> <meta name="theme-color" content="#ffffff"> <meta name="description" content="Register your phone number to report stop or block unwanted, annoying,telemarketing, spam calls, robocalls to the FTC"> <meta name="keywords" content="Annoying, Block unwanted calls, Report annoying calls, Robocalls, Telemarketers, Avoid unwanted calls, Spam calls, Stop spam calls"> <link rel="apple-touch-icon" sizes="57x57" href="/images/apple-icon-57x57.png"> <link rel="apple-touch-icon" sizes="60x60" href="/images/apple-icon-60x60.png"> <li

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	20942
Entropy (8bit):	4.808295534533685
Encrypted:	false
SSDEEP:	384:0OKQzI0dRvbr7wUbu19QmAMwDQsv63TYt:PzISRB66Dfvkct
MD5:	FA17E6E5F6CF3EEEBBAA6FA93D65180F
SHA1:	52336D3B5B3BEEF44D6DF249078022E084D1DDAD
SHA-256:	9D1AE71A704E9F75F86BFAC7933B98AC66DC1FD8595D9D6B299F0EB121785816
SHA-512:	94D934CA108694C945D99E77BD399C09B588927E4E8EC28F1164A7E2629ECB7729E84158A0FC7B772B03AAD7E442A8F5AE618BCDF1ECBB02F0B9371250B2DFCA
Malicious:	false
URL:	https://reportfraud.ftc.gov/assets/images/RF-Hero-1200x467-v3.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 1200 467" style="enable-background:new 0 0 1200 467;" xml:space="preserve">..<style type="text/css">....st0{fill:#ABE2F7;}....st1{fill:#7ED3F3;}....st2{fill:#BEE9F9;}....st3{fill:#9EDEF6;}....st4{fill:#ECA986;}....st5{fill:#5C7295;}....st6{fill:#DFF4FC;}....st7{fill:#C75410;}....st8{fill:#FFD28B;}....st9{fill:#244974;}....st10{fill:#943E17;}....st11{fill:#C6CDDA;}....st12{fill:#69481C;}....st13{fill:#F5A800;}....st14{fill:#919EB7;}....st15{fill:#FDBD50;}....st16{fill:#4E5156;}..</style>..<path class="st0" d="M735-83.5l-130.4-5.2l-94-90.5c-1.3-1.2-2.9-1.9-4.6-1.9c-1.7,0-3.3,0.6-4.6,1.8L407-88.6l-130.4,5.4...c-3.6,0.1-6.4,3.1-6.4,6.6v199c0,35.1,6.9,68.9,20.5,100.5c13.6,31.5,33.3,59.6,58.7,83.8c35.7,33.9,75.2,51.9,9

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 640x360, components 3
Category:	dropped
Size (bytes):	34028
Entropy (8bit):	7.957531319561825
Encrypted:	false
SSDEEP:	768:OJd5mbnau1Zja4WjP11LxPYG8lIYev7EgllyWNWXX5+1eZRPuIdn:OJ7mbntOzAGLjllF4XpokQE
MD5:	89FE446EDE314B1645B46925471EAE33
SHA1:	25B84AE648D9EA189E5E00799B495D707916193E
SHA-256:	61B4882199419C22548B9C4AF4ACD08E5DA8316058A438F627E91D0E6BCC268E
SHA-512:	843AF37D102DC4C53DA351DB3D12CD4F014AE23936FE22245807346CD9A2E2B48A9229C8EE6492BCC102C8B7FF616C7011A26FCE6FEAE0B59BA70AF39EB22E24
Malicious:	false
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..#ux.x1">.....q.p9..].PAy.1a......s.....C..{VU.yO.........[.d.D,.#.N.V?....7d...Rt............9...`H`rGv...E(.#.S.......t.Blbr:8...."...O(6.9.....S.p.@.x..4...[.@ t?.z..@G...'...#......_C^}\|s;.RI..R.S`..=;q^}r.(&..kH.27.c..z..z...=.j.E..c...55`f=q.m@Wj....-.@;.'..#..\L.[..N.A'..R...J.0?.X..!.&

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	800
Entropy (8bit):	4.694665334624766
Encrypted:	false
SSDEEP:	24:2diddubfQM9RFPrdYgVYA/9HvrO7/35UK:c2kjdVVTs/5
MD5:	42B4AC468597239A3D96DB04C363277E
SHA1:	4CD2BFE2859F99793F1C2E27D0619A28C7D2E107
SHA-256:	54F6653A149C83B73515CC2EC032A18151B57D3FFE97EF04495CE6623E48D1BB
SHA-512:	7D260611F638544F90C0D86CC69FA98D559F90640D645D5122C8C87132B6B4C4F69306F7DFC8893F348DA27AB568EEB68784BCD74D9DF749E4E7E92C8204CBF5
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64"><title>icon-dot-gov</title><path fill="#2378C3" fill-rule="evenodd" d="M32 0c17.673 0 32 14.327 32 32 0 17.673-14.327 32-32 32C14.327 64 0 49.673 0 32 0 14.327 14.327 0 32 0zm0 1.208C14.994 1.208 1.208 14.994 1.208 32S14.994 62.792 32 62.792 62.792 49.006 62.792 32 49.006 1.208 32 1.208zm10.59 38.858a.857.857 0 0 1 .882.822v1.642H18.886v-1.642a.857.857 0 0 1 .882-.822H42.59zM25.443 27.774v9.829h1.642v-9.83h3.273v9.83H32v-9.83h3.272v9.83h1.643v-9.83h3.272v9.83h.76a.857.857 0 0 1 .882.821v.821h-21.3v-.809a.857.857 0 0 1 .88-.82h.762v-9.842h3.272zm5.736-8.188l12.293 4.915v1.642h-1.63a.857.857 0 0 1-.882.822H21.41a.857.857 0 0 1-.882-.822h-1.642v-1.642l12.293-4.915z"/></svg>

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	709
Entropy (8bit):	7.568671974519862
Encrypted:	false
SSDEEP:	12:6v/76ANlKR6IQi+xB2svZbKWB+VRgCsIjTdp7kd0FAh8fnKKx2uCpPcNSPxMZvu:kwKi+xF5o7dsNd0FAh8fnKKromSpMRu
MD5:	BEAC50BD07EDFF28267A7A0B5D406A62
SHA1:	069DE979880EEFA02FE50C09AE941F3DDD60EF54
SHA-256:	5EFE4C946AF02A643DC41B1133CCBBFEE026AC41060A3EB11289871C791386E5
SHA-512:	64DA6781150AE79265366F906794110FD7E8E7FB42F7416F0EED7082FAB5DAF78B7C44B7F9280F1969193ED290B13BA4C8E8A8959939ACC58F56FD1B7984CDDE
Malicious:	false
URL:	https://reportfraud.ftc.gov/assets/images/arrow-11-64.png
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........+.....wIDATx...O..Q....Ij$...IV..$...RV.AD.DQ....k...lH.U.(..J....JNI.,..t]f..;..y.\|..{...7.s....B.P(.......1X;W.'.q.K.".gb....A....x..U..8...l...........q-..b.l..r.........$g.H.......a$.].6..2.;..<..J<....,..(.@..Sx...U..E.....i. .FU.X 5O..i.FY.6...p?.t...E....3.8....u.N.^.......~.d...................t......e.Le..k..n.....}._.....k. ..z..q...ViK..\|8N..\..v..P....pp....B,.."1.<..F..qs....F.{.om..[.o4=.\|8..h..6N]<.w@.Q..p......T.:............'q....6x...}..Mx^Q.?...9l...R.\|.Y..Wr8.....T.^.39...K..........#.5....(......[.P...-.\|..F.........s.s...p.{..x.v....y7.$9:............55....Zjj.!..\|...z.P(...B.......~5C......IEND.B`.

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	849
Entropy (8bit):	4.8647044100631
Encrypted:	false
SSDEEP:	24:0LC7b54G0XOAipxErL1XJf99XMIpju5yyN5lnv:08byGYkQ5Zf7G5ym55
MD5:	F762D4695B98A4FCC2E91FC73BF9992E
SHA1:	BE5A7071D99B7346C8F81A7F412FBBE4C15D8CF9
SHA-256:	A0B4E74C76FD014099C8620CBBFC58A04E8C8B3FCB03F736E2648ECC7884C315
SHA-512:	D181B1B1D91AE2D409938AE992EF3D844242F72363241A9D8EF58A380783F61ACCCB40D648E6933F8D0DD53692941A6499575FC288E201A2D167635EA81B3FC7
Malicious:	false
URL:	https://www.ftc.gov/core/modules/ckeditor5/js/ckeditor5.dialog.fix.js?v=10.1.8
Preview:	/*. @file. * This file overrides the way jQuery UI focus trap works.. . When a focus event is fired while a CKEditor 5 instance is focused, do not. * trap the focus and let CKEditor 5 manage that focus.. */..(($) => {. $.widget('ui.dialog', $.ui.dialog, {. // Override core override of jQuery UI's `_allowInteraction()` so that. // CKEditor 5 in modals can work as expected.. // @see https://api.jqueryui.com/dialog/#method-_allowInteraction. _allowInteraction(event) {. // Fixes "Uncaught TypeError: event.target.classList is undefined". // in Firefox (only).. // @see https://www.drupal.org/project/drupal/issues/3351600. if (event.target.classList === undefined) {. return this._super(event);. }. return event.target.classList.contains('ck') \|\| this._super(event);. },. });.})(jQuery);.

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 640x360, components 3
Category:	downloaded
Size (bytes):	52177
Entropy (8bit):	7.977559626021423
Encrypted:	false
SSDEEP:	1536:OmJhv3H0kjJyieKhYiHlfpmKcG+HLJ3B9:BJN3HLJ8JMHmG+HLJX
MD5:	446AFB7E85A9864BFD004C1E050113A0
SHA1:	5637F1FA36CDF10151610E535618B57FC166F3DA
SHA-256:	60C2DBCDA6EDBDA7C31B4FC9DCF5AB6864B1E31F8187B24554F7AB1045492029
SHA-512:	F3BB1545C071CD7501F6648DEB0254F7890B9B5E5D0F1E9E5BFF0EE57492B457EA6663A401489A23E4AC02C26657277DB2EAAF1CCEF9659DF975F3F68BCA445B
Malicious:	false
URL:	https://www.ftc.gov/sites/default/files/styles/wide_standard_sm/public/ftc_gov/images/feature-small-bus_0.jpg?h=10d202d3&itok=3FMXaU3a
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....\....]....(T)<t......#..R......)foE.8....9...=.z.f....3C.e.w./'..+X].8\|..a......].q..f..l.....]f.a.PG...JN>..ZQ..62.T~.e#.U...d.....*g.R..9dO.5v2.DB.)[O.O."7.a..>.$..4...Jp......~.."H...;....E.<P.b..(....U..U....(...p..)q@..".D...1Bbd.N?p.AH?Jx.9.L.....Kx...Y..:.9.5.:.R.,K....``xYFc....S...9...O...

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (767)
Category:	downloaded
Size (bytes):	991
Entropy (8bit):	5.173391065509193
Encrypted:	false
SSDEEP:	24:NBkzhb7SHxu/Od6HIZllXpYNQCBfazjYltrfE9p:NuzxSHmo6oRWG0fpDrfC
MD5:	5B0FDEC4F9D01660208D062254B73BEE
SHA1:	B45CE85DFC222F3CE830534B9B03E39854A0652D
SHA-256:	EB31C7DE8380B910D7290A7BFC72358B8535728251E7DF090A561DD6184254EB
SHA-512:	57EFD22FA0699379C8846A50E900F703F90B4623906EDA0CFB6805EE578F4CFCCCA3991F45F84AFBF8BF89C6E1B37AAB785FA8FC4BE33AF5938E33FBF5A1D401
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/focusable-min.js?v=10.1.8
Preview:	/!. jQuery UI Focusable 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","./version"],e):e(jQuery)}((function(e){"use strict";return e.ui.focusable=function(i,t){var n,s,r,u,a,o=i.nodeName.toLowerCase();return"area"===o?(s=(n=i.parentNode).name,!(!i.href\|\|!s\|\|"map"!==n.nodeName.toLowerCase())&&((r=e("img[usemap='#"+s+"']")).length>0&&r.is(":visible"))):(/^(input\|select\|textarea\|button\|object)$/.test(o)?(u=!i.disabled)&&(a=e(i).closest("fieldset")[0])&&(u=!a.disabled):u="a"===o&&i.href\|\|t,u&&e(i).is(":visible")&&function(e){var i=e.css("visibility");for(;"inherit"===i;)i=(e=e.parent()).css("visibility");return"visible"===i}(e(i)))},e.extend(e.expr.pseudos,{focusable:function(i){return e.ui.focusable(i,null!=e.attr(i,"tabindex"))}}),e.ui.focusable}));.//# sourceMappingURL=focusable-min.js.map

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 11, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	176
Entropy (8bit):	6.175594527798972
Encrypted:	false
SSDEEP:	3:yionv//thPl90tikmul21IwLXe+M6aRAyYnl1hUy5VEuWh42xxh7THyH5ch8mKdp:6v/lhPUtHmulLwLXepxk5lVVWPx7LzhQ
MD5:	BE327DC2791D8096D69C7737A1D0A2B8
SHA1:	394B5D8B5324C9E32CA0B5D3E378B4A0D2C5285F
SHA-256:	8A6F68DD8703CE4CB475C92FC1EEFA84C41F4741EC4C6CA8403EF99B74B94D20
SHA-512:	B9258823039A9E61B0A7428957F486626C618D60E0F6782343512BF928C2DE044666DC578732D3B227E03DF6720CC1862FA5729F7290E51993580A63F2C458F0
Malicious:	false
Preview:	.PNG........IHDR.............A<......PLTE.3..4..3..@ .>..>..?.....? Do.5...PIDAT..m.7......=....1.AB..9).....aY..W...luLe.l}D.Bq..~..!.2........G..uO.......>..p.....IEND.B`.

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.673822201987808
Encrypted:	false
SSDEEP:	3:1QWMMIQBREHqeHUJRE/2TyDE7kidJ0A:1XIQEKtREW5zf
MD5:	7967AE2C4E4FA4FAB1D9C1C0D7BA83FF
SHA1:	10A0950BBC8A781C8C9CC0AC2ACBFBB5CF713C2D
SHA-256:	D86AAC0900E93F64FC5BD4B329D1367C3677736C2B3678938C458C50E3A3D180
SHA-512:	F78125A8BDEAD9856C379DDA07ADD7437F845F74F9B4DD0C5DBA2C84B9AC27B74B8F28BC112C3B3F71E1458D6EC27D499A992B5149B575A9D04FF18ECEC52ACA
Malicious:	false
URL:	https://www.ftc.gov/modules/contrib/responsive_table_filter/css/responsive-table-filter.css?scewfd
Preview:	.responsive-figure-table {. max-width: 100%;. overflow-x: auto;. margin: 0;.}

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 360, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	154290
Entropy (8bit):	7.994374597145604
Encrypted:	true
SSDEEP:	3072:YH9+WVJe4A63YeEAFotmo35E8fVMaoPlpQU88eXxVoUYCFeW:Y1rnYNztmopE8Wa8lpQLXxVPYW
MD5:	44F1AD7679AB78DA87628495FBEF4559
SHA1:	CA0EC60250BBC5B4A585A62103E5F12978076294
SHA-256:	DB68C16B3097C21930D4CD2D34E9A086D7E26FCC2187C66E238C6821011EE55E
SHA-512:	61E59079D19E3B625A1F186DA9CE7029E669A55D7B81CBA4A251795A1FF6B10A99977A759D85F30A21BBA3FFA70C33645D9EA44B55FC9EBACC3F52BD8A149B09
Malicious:	false
Preview:	.PNG........IHDR.......h......2JQ....pHYs..........+.... .IDATx..y..W~.....Yw...F.>......!..hG.jg$kVGH.....^+6.........a..G.....#d..I.J;.V.......9$.$H. N.....}w....../.... ..$A0.......UV!.S....9..+W.\.r.........+W.\.r....U...r..+W.\.1...+W.\.r....S...r..+W.\.1...+W.\.r....S...r..+W.\.1...+W.\.r....S...r..+W.\.1...+W.\.r....S...r..+W.\.1....P>#a.\.r....).....^T.sr{k......r..+W.\7W...#r..n}..n.........a.\.r..u.$...~..CDz..l.....s......._6....+W.\.>.r...k.......{m.v..9...+W.\.\9.~F...r.....[..6.{.3...-...}..6..>..~..3W.\.r.....gY[.m..n....{...`..w..@t.o..J...>.?..<.nR.M..!.-.o...r........:R[?....}..v..;.<.9.....W......$X.....l..X.1.=..#.qN......s..4.B....B............os,...7...{.#....a.{D...vt3..C..r...4.H.....m......!.z.N..;kp6..m"0...p6F.....A.8..p8...A.1...%t.k.Y..-xW.....T.N.(.S...(<.T..T....!H....BD....Ax\|..3o6Ly.....r}Z4X..W......;..M...........u...]......z.3.&......,..g#\......`M.g.kZ..2 ........$u.%.9....:78....2.....>;..a..

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2863
Entropy (8bit):	4.735566085985225
Encrypted:	false
SSDEEP:	48:kIDCGV2tyr2Gog+EvFt3wWs/pamosxqsDUnjeGulcsn+RKOBcGursskOJHk1ikGx:veGsyryAvFWWs/8mfqsDUj0lVn1ycEsv
MD5:	F99E8409BC34A22F9D6CFDB89CD89AAB
SHA1:	3C3E98826DA634DD3A5338AFA8764D032C1E7534
SHA-256:	0D0095256B4FB73A4A9175D8464D22BCDFC25C7934059F4A99DCF2C605A764E8
SHA-512:	DCC1EB116C0D75D4BF97F5B896F107A18E79EAC11C84F4CB896A1B8024C83B6BF420EADA0326E52B72750E21CF4151F2A775CC0EBB16E2669A2E42434DA8AA8E
Malicious:	false
URL:	https://www.ftc.gov/core/misc/dialog/dialog.js?v=10.1.8
Preview:	/*. @file. * Dialog API inspired by HTML5 dialog element.. . @see http://www.whatwg.org/specs/web-apps/current-work/multipage/commands.html#the-dialog-element. /..(function ($, Drupal, drupalSettings) {. /. Default dialog options.. . @type {object}. . @prop {boolean} [autoOpen=true]. * @prop {string} [dialogClass='']. * @prop {string} [buttonClass='button']. * @prop {string} [buttonPrimaryClass='button--primary']. * @prop {function} close. */. drupalSettings.dialog = {. autoOpen: true,. dialogClass: '',. // Drupal-specific extensions: see dialog.jquery-ui.js.. buttonClass: 'button',. buttonPrimaryClass: 'button--primary',. // When using this API directly (when generating dialogs on the client. // side), you may want to override this method and do. // `jQuery(event.target).remove()` as well, to remove the dialog on. // closing.. close(event) {. Drupal.dialog(event.target).close();. Drupal.detachBehaviors(even

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	5.734144390241774
Encrypted:	false
SSDEEP:	192:jOYaRwHXcOHMVkRf98kw7IxwTQwRbQgiLmQdyYluQ1SDPbAOM/ZVUlFwIeNylfq:jnaP5G/8kfxlVLm6lu+SDTAO+l4U
MD5:	37103B865E978489B1DD08A14B0ABAC7
SHA1:	D47484F07A21390A2415D9879AF3279B9D6CE9DB
SHA-256:	A7C75D044EBB4E9D0175BA4FD4FD88455C098AD13F048EA060CC7DF643D023D3
SHA-512:	7F11A2D60EBED605D364D5E4537975FBC854663B84ACA21DB6A0F4955C1DA2EA6CF1018230090239EC469877C070873AE63AF919D788E499759A469E7EFCED3A
Malicious:	false
URL:	https://reportfraud.ftc.gov/favicon.ico
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... ...........................................`-...................a*.........................qU..................................m..............................x........j.................m...................j...b................u...................c,.......{........................z..r...........f(............\..\|.....n..r..p..o......[..f..................h...Z.....\|................\|.....u..\|................s......................................n................l.......................................x................{......................................x..............................................................e+...................................................`(.............................................................`...............u.........y...............`...............

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1669
Entropy (8bit):	4.929160402060859
Encrypted:	false
SSDEEP:	48:YnNsGhwiQgLouDRlhu2J5nExouDRljE2ZqW/o:Jm5uU5Q7fDw
MD5:	8DEF835C2D20FE707308F3B90EF373E8
SHA1:	14FB81280BC85B9B43AF678EEF9748AB737999BA
SHA-256:	D2061D8A3348BFAA2A94782560818CF3B4CED47989E212E6A61CDB77AD595D30
SHA-512:	BC77646E7690EAEEC701A3E458A3B50806D1AEC1BD86306C1DA8057EC6DC960C33C72A6C991B744CC23621B2A85600B97F927300C14A40CBA0068063A9C8CD0E
Malicious:	false
URL:	https://gov1.siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=CR_6ru8XWIwGF4Ymy2&Version=14&Q_InterceptID=SI_6yt4nfrpcp1HQTs&Q_ORIGIN=https://reportfraud.ftc.gov&Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDTIER=lIjhYuMl2g&Q_ARCACHEVERSION=21
Preview:	{"CreativeDefinition":{"BrandID":"fedtradecommission","CreativeID":"CR_6ru8XWIwGF4Ymy2","Revision":"14","Title":"Creative - Report Fraud-Feedback","ZoneID":"ZN_9FZSuvvWKc6nzFQ","Type":"FeedbackButton","Options":{"Desktop":{"LookAndFeel":{"ButtonPosition":"right","ButtonText":"Give Feedback","ButtonIcon":"speaker","TextColor":"#FFFFFF","ButtonColor":"#6a4600","BorderRadius":"very-rounded","UseCustomButtonPosition":false,"ButtonPositionBottomAdjustment":50,"ButtonPositionLeftAdjustment":0,"CustomButton":{"UseCustomButtonPosition":false,"CustomButtonImageName":"","CustomButtonImageId":"","CustomButtonAltText":"","ResizeImage":true,"ButtonPosition":"left","ButtonPositionBottomAdjustment":50,"ButtonPositionLeftAdjustment":10}},"HowItDisplays":{"DisplayType":"new-window","SurveySize":50,"IFrameTitle":"Survey window","OpacityLevel":0.25,"ShowCloseButton":false}},"Mobile":{"LookAndFeel":{"DoNotShow":false,"ButtonText":"Give Feedback","ButtonPosition":"right","ButtonIcon":"speaker","TextColor":

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13143)
Category:	downloaded
Size (bytes):	13144
Entropy (8bit):	5.275932032523709
Encrypted:	false
SSDEEP:	192:MW4NdMBLAoQ3a4/yAASLs6DdoT31qSg1Tea+TA0FLK4gk:B4zoM4SLsghWaB4gk
MD5:	A451FF3A47C6F93F422F191FBA03BBDB
SHA1:	CDD369F87B31AFE1105362C40FFCD2CA10EB1B41
SHA-256:	6D48929BF5EAE1CD3DD011D61A9F97A8767A0D6A877D7EE7231882FE3CF5A94A
SHA-512:	02BCC14B77FB37378D89113199BD36013F83132F6A1BBB5AFE3A2D2C78404A5213EDDC25E4C614B0B82752720A7F92BE9440B5BA7AFEF64A6CB7865E9EF33D63
Malicious:	false
URL:	https://home-c72.niceincontact.com/inContact/ChatClient/js/embed.min.js
Preview:	var icPatronChat=icPatronChat\|\|function(){var initialH=0;var initialW=0;var chatButtonH=80;var chatButtonW=180;var minH=0;var minW=0;var chatH=600;var chatW=380;var _frame=null;var _chatButtonFrame=null;var _host=null;var isIpad=false;var popOutChat;var CHILD_WINDOW_HANDLE=null;var _url="";var win;var showBadge;var customChatButton=false;var xMax;var yMax;var minHeight=400;var minWidth=380;var customWidth=null;var customHeight=null;var windowConfig=null;var browserScrollWidth=21;var windowScrollWidth=17;var leftPos;var topPos;var sessionParameter=[];function resizeChat(frame,h,w){if(frame){frame.height=h;frame.width=w}}function addCss(position){var css=".ie-div-position-customer-chat {display: block;} .chat-iframe-wrap {border-radius: 5px 5px 0 0;z-index: 2147483000;position: fixed;bottom: 100px;width: 380px;min-height: 300px;border-radius: 8px;overflow: hidden;opacity: 1;height: calc(100% - 130px);box-shadow: 0 -5px 50px rgba(0, 0, 0, .2);"+position+": 24px;} .ie-iframe-fixed-customer

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 640x360, components 3
Category:	downloaded
Size (bytes):	34028
Entropy (8bit):	7.957531319561825
Encrypted:	false
SSDEEP:	768:OJd5mbnau1Zja4WjP11LxPYG8lIYev7EgllyWNWXX5+1eZRPuIdn:OJ7mbntOzAGLjllF4XpokQE
MD5:	89FE446EDE314B1645B46925471EAE33
SHA1:	25B84AE648D9EA189E5E00799B495D707916193E
SHA-256:	61B4882199419C22548B9C4AF4ACD08E5DA8316058A438F627E91D0E6BCC268E
SHA-512:	843AF37D102DC4C53DA351DB3D12CD4F014AE23936FE22245807346CD9A2E2B48A9229C8EE6492BCC102C8B7FF616C7011A26FCE6FEAE0B59BA70AF39EB22E24
Malicious:	false
URL:	https://www.ftc.gov/system/files/styles/wide_standard_sm/private/ftc_gov/images/financial-literacy-woman-calculator-smaller-istock-1333748557.jpg?h=82f92a78&itok=vOByPu76
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..#ux.x1">.....q.p9..].PAy.1a......s.....C..{VU.yO.........[.d.D,.#.N.V?....7d...Rt............9...`H`rGv...E(.#.S.......t.Blbr:8...."...O(6.9.....S.p.@.x..4...[.@ t?.z..@G...'...#......_C^}\|s;.RI..R.S`..=;q^}r.(&..kH.27.c..z..z...=.j.E..c...55`f=q.m@Wj....-.@;.'..#..\L.[..N.A'..R...J.0?.X..!.&

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	987
Entropy (8bit):	7.424427212494858
Encrypted:	false
SSDEEP:	24:hD2sKsZvpXo8rkYXXtfbR1hKiVfhngEDt+ZZj6z:hSs9vpXowVXZbRTKizgEp6G
MD5:	DE4E7C7C704F29E1EB625CEDBA62C88A
SHA1:	D1BA92A788782FC78450E3579CAABB1E9D849F60
SHA-256:	F1E1C9F3B5B4B4EA4431FBE0D7662FAA1D908A9564F87DB5B9E8DB344473EE96
SHA-512:	CE71AAC0823D3EFB15C2E5EB28A30E4631E10853534D524BE9E8AEF02D60EF2B60EEE2559088A6A5E0A350ADFF1E1AF64ACF213DC92F3FF900234DC6F7B46287
Malicious:	false
URL:	https://reportfraud.ftc.gov/assets/images/lock-icon.png
Preview:	.PNG........IHDR...P...P.............sRGB........8eXIfMM........i...........................P...........P.....(nu...WPLTE...p. p.(p.+q.(p.(q.p.)q.(p.(q.)p.)p.p.p.)q.)p.q.)p.)q.p.)q.)p.q.p.)q.)p.q.)q.$.......tRNS.. 0?@OP_`op................B.......IDATX..[..0..S..2.Xh.....s/t..-..fs.....94.....u........!.\|^..0f..a........&o.0.\|QI....&.q.....g..p.....L.xK....vg.`6m.....U.l....Te...k....W....?..cY4.X..kK.e.u.uy..1..J....1....xDuLZ...[Dj,..j......hJ..]......Cb.k>L.:....j.@.e..."....H...D.\|... .}G.<.(...NQ.[E..#U..._.f..-Uq.......DT.#Q\|..<...C.{P..F........>U....j....2F"Z.....Ck...f."......o..-H......R.p.=.:.~...E...@.u&.~..l..#.s&..N....qQ#&$d.\...I.w.M.h./.3..g.......\..1...X.c.W1PB....8@.Ys..X.I..1.mtN.g..RT.w....\.w....!!...@e^....G.z}.P..p.....wi.~9.t^...C4...Y..F..F/........8.=."H....K.`.k...X.(JW:..._..gUe....-...[..u_.6......!flM...oe.0.Y.x.....b........+...............7A\|...jg.hF..ZO}.....`.....h...o...-.....Z..r.8....IEND.B`.

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	19981
Entropy (8bit):	7.990025111729145
Encrypted:	true
SSDEEP:	384:cQnwyIvKq3HK4iV0BZQ7pivkzH+r4xMcpgxKx9HLdc3d/YaG:cQnwyIvH3JBZ+pWC+r4x35rGN/bG
MD5:	EAF2CE54D156E3B1BA2875B7F8F256C1
SHA1:	039896129C4430E18E7FED1F193E095DE51469FC
SHA-256:	E85C854FADA1F274B619A6B3B948FDCE3BDA57C0AE9F8A7B11EC215D6FAC0359
SHA-512:	D793633F88FAB6FD454CA74CA250EB936E7935AC75928796EC668029AF36A9D8126E0C6881960C4B35137D572D47ACACCDD25D94727FC6015042D2A24C2CC21C
Malicious:	false
URL:	https://reportfraud.ftc.gov/styles.e8c5964d39f13771.css
Preview:	[u.R.7]....Lw...&..w.y..#MQ....R..F..S[7.PU.&.#b.k.U_...j.f@...h.k..]UJZY..B.x..T...n....A.....L'7.BD...L.7.....~..........zy.Ux.j=.0....n. .m..!..B..w.....~.L}=].]..G.T`L..s.Mi..,#..P.5...g~.(J.\|..O..)...U+.$....gvg.... z..<Y.H,P..^.iU{......5.\|....`[..wuH...L..13....N....>...?k.:8..{....f.."....V{....q..Lv..SmsI..VglqVlx....,..Rk...IF..l .zw.wZU.K.....gz..x......._jU..I.[-..L.6qD.dNBGv..IR.(t..kj..R..Tr...........3!............':Ht1.M.....!!{........Q...9.e.\.....&......{....O...g.n.Z.O..]Ap....>u...!....P.Q.7..fC{H)....1..Q'..,ti....."$.{.n.......@..f.....}...'..>....6..]...:....r.........WH...{.?....y....".Hg.......5......_cv.....2.....Q;..gIJ..m.d...8.....a..I.V..,....V.E.D.j.G.T..?8....nb....j6E....b...n.lb..?.iT.e..z... ]&z..o.r..bq.Y6.aom...7...o?..m.?.Q.$.:c..R.....G....';..!+n../k\`...!.~.$..p<6U....\|.+..V_........z.~C....]2<.........=.x.....i...y...%........Yl..7W.X..W.\.oo,."..s..f..!...;...s..u.E....<s$s.}.@w.W.].s..R.g.

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2306
Entropy (8bit):	5.165366851933223
Encrypted:	false
SSDEEP:	48:cVA+fEvr1wkPFxwpE1oodJ5NFtZt2/NJwrxwrVT:3+fWrdtYwrxwrt
MD5:	1E0055EEE1B9B68B2D7988A65842810A
SHA1:	7E3D2016AA89DB37A3FEE1E7630F51F76DEEFDA9
SHA-256:	5D915569D7068200A8E936A9EB614DBA2C7F5DEB63C8A483A9C12C0CB86E4DDE
SHA-512:	5861EA4BA947BB2B5A8F332141B840BEE37A315D14A21F71A7749AB1F93415F6D4719F8BCBF37B1CFF1FCB3A9EBD24C3D85D84496CDDB6E53F3FF091EF6ED07A
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 1080 938" style="enable-background:new 0 0 1080 938;" xml:space="preserve">..<style type="text/css">....st0{fill:#7ED3F3;}....st1{fill:#244974;}....st2{enable-background:new ;}..</style>..<title>Report-Fraud-Illos</title>..<rect x="251" y="146" class="st0" width="522" height="646"/>..<path class="st1" d="M338.5,648.5L338.5,648.5c18.2,0,33,14.8,33,33l0,0c0,18.2-14.8,33-33,33l0,0c-18.2,0-33-14.8-33-33l0,0...C305.5,663.2,320.3,648.5,338.5,648.5z"/>..<path class="st1" d="M338.5,361.5L338.5,361.5c18.2,0,33,14.8,33,33l0,0c0,18.2-14.8,33-33,33l0,0c-18.2,0-33-14.8-33-33l0,0...C305.5,376.2,320.3,361.5,338.5,361.5z"/>..<rect x="399.5" y="361.5" class="st1" width="319" height="66"/>..<path class="st1" d="M338.5,504.5L338

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 958x166, components 3
Category:	downloaded
Size (bytes):	13965
Entropy (8bit):	7.688687503708182
Encrypted:	false
SSDEEP:	384:qLqe6Vc//lFyT7CHWt2OPjiBsDGhvPHwPpppppppppppppppppppmLpU:qLqLcFWt2OWBsDUfwPpppppppppppppj
MD5:	F9A124517A6647603B17D72AA5ABAF82
SHA1:	259BDCA9E2712F7EEA4A8759238411E962A9FCBB
SHA-256:	899A7466FF16B2FCA094000FBBE1F21A421E798F62FAA13D1D85E964AA352ACE
SHA-512:	94B090BAC5D13D6F1D36E46914AB5C922A6B4ADA4812CEE3E1A1BD1FF4E917AE38526724DC03ABB616D96CA8EC2BA98171555ED74C3505F16F72D4CA0F1A5725
Malicious:	false
URL:	https://www.donotcall.gov/images/FTC_subpg_header1_register.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................".........................................X............................!...1AUf..."Qa..2Bq..6RVbu........#7W..358CSet..%EFr......................................8...........................!R..1AQS..aq."42....3B..#C.............?..`...............................................................................................................r...F.J.A...>f....)...:]q..;.h.[M..`...G..{.>....L......;.p..+.l..M.`x#.E=..b.F.%..NQ.Gx8k...$......................................................................................................................8UDM..ru.F...TU.:.MMo..J.Q..m).I....>...F....i.A...../...j./U.n....c..W/..TU....c...T.j^..5..x.{....QX...VJ.Mg..~...K.;.V.......U..t...\.>b..........I"?....E.....u-c...i....~...6.....Q.Z........b$.....G.o....sh.A.........i....~...k.....Z=..*V8.er....'HQ.....f...O

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	703
Entropy (8bit):	4.906157453368071
Encrypted:	false
SSDEEP:	12:tHG7bMKcCmK8A3P41z2iHMRoaOyMFUNvIFExf3TkZWXcXcKMlRMQ/ZqkBq5lNWPg:tyRBP41z2NK90I6xbxX4LuMGlq3Nq7c
MD5:	74F0E0B04AB3C0976630DFC50D7A060E
SHA1:	8FE641DF217F7E4091CE64793FA7B19C3F8A3BD1
SHA-256:	468AB0514D2DB0BA96FE12564A8CF66AA86F9EE82F71BA0132810DEB4FE4C188
SHA-512:	8326CB53DB0A9A0556C504717302DB1175A5B15055B23C3A88CB532A306DBDF2E810632EB8DBEEC4F11E79627C68C4E8033E403A3DBF7329975E6818F29762A9
Malicious:	false
URL:	https://reportfraud.ftc.gov/assets/images/exclamation-triangle-solid.svg
Preview:	<svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="exclamation-triangle" class="svg-inline--fa fa-exclamation-triangle fa-w-18" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512"><path fill="white" d="M569.517 440.013C587.975 472.007 564.806 512 527.94 512H48.054c-36.937 0-59.999-40.055-41.577-71.987L246.423 23.985c18.467-32.009 64.72-31.951 83.154 0l239.94 416.028zM288 354c-25.405 0-46 20.595-46 46s20.595 46 46 46 46-20.595 46-46-20.595-46-46-46zm-43.673-165.346l7.418 136c.347 6.364 5.609 11.346 11.982 11.346h48.546c6.373 0 11.635-4.982 11.982-11.346l7.418-136c.375-6.874-5.098-12.654-11.982-12.654h-63.383c-6.884 0-12.356 5.78-11.981 12.654z"></path></svg>..

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	277
Entropy (8bit):	4.955015244566813
Encrypted:	false
SSDEEP:	6:qQ08F9ebME4xFHMVGuFLff8Fvgybxn4Xn7YsWXxj7S:bUMbHxuFTwgybgbQxC
MD5:	2FD90190C925ECF93E740D03BF131BD6
SHA1:	CAC9F990A79524CE58CD5F9BC07BCCF05EFDB647
SHA-256:	7A509A3C38EBEB07349EBDD11BFFE17276D9D656B9CCFF17EF99251651AE433C
SHA-512:	D7540227246D039FB420251B8A79AD70C3A66AFCD31E3A362DF31631E086620658DE5DF8D78FB56B44A72ED89A90FE81DD02508F1B696D924D976892D03EAAB4
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/form-min.js?v=10.1.8
Preview:	!function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery","./version"],t):t(jQuery)}((function(t){"use strict";return t.fn._form=function(){return"string"==typeof this[0].form?this.closest("form"):t(this[0].form)}}));.//# sourceMappingURL=form-min.js.map

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64780)
Category:	downloaded
Size (bytes):	75389
Entropy (8bit):	5.317998421041909
Encrypted:	false
SSDEEP:	1536:4nzjSf/dcNANA2AWIIql+HbZ/f3OL4/4K:4zjSf/d8l+HbZ/PN
MD5:	25BFB70085441577363541B4DF4A77E7
SHA1:	0F9DEF166C5537480C274BCDF079ACADCBF0B196
SHA-256:	4018D7F0A983131974ACBEA85F1BE1A84C2CCA541C584F98B5C5C83413913695
SHA-512:	AC5FE942E0F74684DCA14BFD69F06A94DFE21485D9A9F4FE2360A5E194D1D180B4330015295E7700418D2BC5C271686337D359CDAB087775D543822E58A45137
Malicious:	false
URL:	https://gov1.siteintercept.qualtrics.com/dxjsmodule/12.ffd98a9d3b8cbf2075ed.chunk.js?Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDID=reportfraud.ftc.gov
Preview:	./@preserve.Version 2.5.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. (window["WAFQualtricsWebpackJsonP-cloud-2.5.0"]=window["WAFQualtricsWebpackJsonP-cloud-2.5.0"]\|\|[]).push([[12],{19:function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"e",(function(){return r})),n.d(t,"d",(function(){return a

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 11, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	176
Entropy (8bit):	6.175594527798972
Encrypted:	false
SSDEEP:	3:yionv//thPl90tikmul21IwLXe+M6aRAyYnl1hUy5VEuWh42xxh7THyH5ch8mKdp:6v/lhPUtHmulLwLXepxk5lVVWPx7LzhQ
MD5:	BE327DC2791D8096D69C7737A1D0A2B8
SHA1:	394B5D8B5324C9E32CA0B5D3E378B4A0D2C5285F
SHA-256:	8A6F68DD8703CE4CB475C92FC1EEFA84C41F4741EC4C6CA8403EF99B74B94D20
SHA-512:	B9258823039A9E61B0A7428957F486626C618D60E0F6782343512BF928C2DE044666DC578732D3B227E03DF6720CC1862FA5729F7290E51993580A63F2C458F0
Malicious:	false
URL:	https://www.ftc.gov/themes/custom/ftc_uswds/uswds/dist/img/us_flag_small.png
Preview:	.PNG........IHDR.............A<......PLTE.3..4..3..@ .>..>..?.....? Do.5...PIDAT..m.7......=....1.AB..9).....aY..W...luLe.l}D.Bq..~..!.2........G..uO.......>..p.....IEND.B`.

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	434
Entropy (8bit):	4.720230615985452
Encrypted:	false
SSDEEP:	12:UNJAE2B7hYz5oXoSNxpdXIk9rIysPE94aoM+A:WZ2B7qzm5Lp1Ik9rIysvzM+A
MD5:	77119203CA0DDEC77DD080884AC45FF6
SHA1:	F48551CE0E38FEAC8BD07C795ADF00B0CE969B4D
SHA-256:	34169AF71B02B45FEB08DBE27772638C0B3BED26FE26D9F015B019BE64E4389B
SHA-512:	BEA29FD1FCE6FE50A3B2192D4DA398AA03877C48662613AAA4C21D5510E120CFAFBE3F8E321D31D359F90028411B2D1AFC819DE326BB38B1B6E18CDDE15FA488
Malicious:	false
URL:	https://www.ftc.gov/core/modules/views/css/views.module.css?sbs84s
Preview:	/* table style column align /..views-align-left {. text-align: left;.}..views-align-right {. text-align: right;.}..views-align-center {. text-align: center;.}./ Grid style column align. /..views-view-grid .views-col {. float: left;.}..views-view-grid .views-row {. float: left;. clear: both;. width: 100%;.}./ Provide some space between display links. */..views-display-link + .views-display-link {. margin-left: 0.5em;.}.

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 275x214, components 3
Category:	dropped
Size (bytes):	23667
Entropy (8bit):	7.961728151643183
Encrypted:	false
SSDEEP:	384:ZDdbTEjncyyPNiz3TDPi2EiAo5SPOxo1uxxx30iYRSaG6t5axItCa/M3yNfELPZ:b8ncdNiLTDq2EzQSwo1uxxx3d/6t5ojH
MD5:	5C40B732E282895C530EFCA5E3C69E0F
SHA1:	1110E2433FE041026064F89A9EC441EB8194D12F
SHA-256:	5166E57E1F7B5D5051EC202CBE87BCD30BD4E95B00A50EB063A26181A89A08AB
SHA-512:	8C6C2397174CD65BAB12E40A87CBD8BABD125F534202605AA6B1FA1685397B21DD1B8E8F6C594B38DD03280C02A1FB49A5ECEF14D1A22EDDA8A57143B5FBC8C2
Malicious:	false
Preview:	......Exif..II*.................Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:EDC34F79AB2268118E19F96045951970" xmpMM:DocumentID="xmp.did:4767C171D36511E69939A946887A3692" xmpMM:InstanceID="xmp.iid:4767C170D36511E69939A946887A3692" xmp:CreatorTool="Adobe Fireworks CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:541d9a0f-657f-49b5-8269-be604c141234" stRef:documentID="xmp.did:EDC34F79AB2268118E19F96045951970"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpac

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (22683), with no line terminators
Category:	downloaded
Size (bytes):	22689
Entropy (8bit):	5.328728595815772
Encrypted:	false
SSDEEP:	384:r2Fy9uv5dYwlQfjqtw47ma82SC1Zv8bPMTy3PszRTw1any8gHaSIp7yMfpYGe/Ky:ZWeaW2tv7ma82SC1Zv8bp3PsgJJIRyGg
MD5:	3C8066081F46883B791D9D71B30388DC
SHA1:	C741291CD47974F8675DEB2D6EACE5ADA1E2FFAC
SHA-256:	64F69E8EB55EDC4EB7256A82834286659C5FC3060DCA71777D6417E19B4B48CD
SHA-512:	2DCBF27554EAF983E1EC7E64E5942DCDAD109D2AFA8AE2AE2E891FE2995F07575964EAC5C6EB74C77F89D8AA1E186A218A2E7702E4E7E50AA9F79CC878F7F267
Malicious:	false
URL:	https://www.donotcall.gov/js/report.js
Preview:	var isChecked,_contentElementId,phoneMobileCall="",subjectMatterVal="",subjectOtherText="",dateOfCallOriginal="",chkConsumerPhoneVal="",caLinkUrlEn="",caLinkUrlEs="",hashVal="",_model={phoneNumber:"",dateOfCall:"",timeOfCall:"",minuteOfCall:"",wasPrerecorded:"",isMobileCall:"",subjectMatter:"",companyPhoneNumber:"",companyName:"",haveDoneBusiness:"",askedToStop:"",firstName:"",lastName:"",streetAddress1:"",streetAddress2:"",city:"",state:"",zip:"",comments:"",language:"",validFlag:""},inputData={phoneNumber:"",dateOfCall:"",timeOfCall:"",minuteOfCall:"",wasPrerecorded:""};function Count(e,t){var a=new Number(t);document.getElementById("CommentTextBox").value.length>a&&(e.value=e.value.substring(0,a))}function updateLeng(e,t,a){var o=document.getElementById("myCounter");e&&o&&a&&(e.value.length>a&&(e.value=e.value.substring(0,a)),o.innerHTML=e.value.length),document.getElementById("myCounter").innerHTML=e.value.length}function checkLength(e,t){return!e\|\|!t\|\|(unescape(e.value).length>=t&

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	46031
Entropy (8bit):	5.020399682132828
Encrypted:	false
SSDEEP:	768:sQ/igZ0MsMOsgs2nPVBHzCkERD3PzieK8:sDzPVBHzlE1VV
MD5:	0827689593F456B774FFC68AA5A534EB
SHA1:	4974A93C05C28A6D6BB3A4F65F50862EEFC2AEE9
SHA-256:	E4309D7C0671A9A30762139E5887A0B1E46286E92F3A7926071B1DDCCB123B41
SHA-512:	799E8F808D6193C38CB21A4023CE9D95C57ED5C8978E998AFF8A4439773EF8716776B5408343CC7ECD11CCF69CF48E819FB3C7090C664FFE1B3B40D2A5EE8006
Malicious:	false
Preview:	{.. "@metadata": { "locale": "en" },.. "sitewide.page-title": "National Do Not Call Registry",.. "sitewide.MasterFileSiteHeader" : "<header class=\"mainHeader\">\r\n<div class=\"mainHeader_i_img\"><a href=\"http://ftc.gov\"><img src=\"/images/masthead.jpg\" width=\"960\" height=\"155\" alt=\"Federal Trade Commission \| Protecting America's Consumer\"></a>\r\n</div>\r\n<div class=\"mobile_header\">\r\n<h2 class=\"mobile_site_slogan\"><a href=\"http://www.ftc.gov/\">Federal Trade Commission</a></h2>\r\n</div>\r\n<nav>\r\n<div class=\"header_nav\"><a href=\"http://ftc.gov\">Back to ftc.gov</a> \| <a \r\nhref=\"http://www.ftc.gov/es\">Español</a></div>\r\n</nav>\r\n</header>",.. "sitewide.MasterFileLinks" : "<div class=\"rightNavLinks\"><a href=\"/faq.html\">Resources</a> \| <a href=\"http://www.ftc.gov/ftc/privacy.shtm\" target=\"_blank\" rel=\"noopener noreferrer\">Privacy & Security</a> \| <a href=\"/index.html\">Home</a></div>",.. "sitewide.MasterFileHeader" : "<div

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3227), with no line terminators
Category:	downloaded
Size (bytes):	3227
Entropy (8bit):	5.072155090985937
Encrypted:	false
SSDEEP:	48:hS2aXGAb/CAfiUXSLHZXQA64A/zrCFVxrybUjCerfrRkqxIDJ0deX:h2XGAb/DaUXc5BhALiryo7frRkqSDJH
MD5:	D9C6FB5E14997495BE3C8F2C0E063859
SHA1:	62D95B99CD502C7D873B8A7DD521889C9547BA25
SHA-256:	6978AB7800491AECD280BD6BF4D28F07BFF961AFFB262AD484C3AC69FC467048
SHA-512:	3DFE351229E7BC39D14F7EB50057846B7DE971FD546AC31609E6A587EF4217ECEF6A0208E6987EB47CE30ABA951DB29A81D1EC2CFE6A2BFA61D15B26E97297F9
Malicious:	false
URL:	https://www.donotcall.gov/js/lib/CLDRPluralRuleParser/CLDRPluralRuleParser.js
Preview:	!function(n,r){"function"==typeof define&&define.amd?define(r):"object"==typeof exports?module.exports=r():n.pluralRuleParser=r()}(this,function(){return function(n,r){"use strict";if(!(n=n.split("@")[0].replace(/^\s/,"").replace(/\s$/,"")).length)return!0;var t,u,l,e,o=0,i=z(/^\s+/),a=z(/^\d+/),f=q("n"),s=q("i"),c=q("f"),p=q("t"),v=q("v"),h=q("w"),I=q("is"),g=q("is not"),d=q("!="),b=q("="),m=q("mod"),w=q("%"),F=q("not"),$=q("in"),x=q("within"),y=q(".."),P=q(","),j=q("or"),E=q("and");function R(n){return function(){var r,t;for(r=0;r<n.length;r++)if(null!==(t=n[r]()))return t;return null}}function S(n){var r,t,u=o,l=[];for(r=0;r<n.length;r++){if(null===(t=n[r]()))return o=u,null;l.push(t)}return l}function k(n,r){return function(){for(var t=o,u=[],l=r();null!==l;)u.push(l),l=r();return u.length<n?(o=t,null):u}}function q(r){var t=r.length;return function(){var u=null;return n.substr(o,t)===r&&(u=r,o+=t),u}}function z(r){return function(){var t=n.substr(o).match(r);return null===t?null

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2317), with CRLF line terminators
Category:	downloaded
Size (bytes):	5543
Entropy (8bit):	5.274109305995004
Encrypted:	false
SSDEEP:	96:564d7Eun96qzwdBbHJ+6LbJZbJWIbluHj1hSPtzPbffXaPWPbtTdfyIT:5fRwUt1s1PrPDBfy0
MD5:	1EE3D9597B6A3D02CC9F9C1664AAB4B4
SHA1:	3A39C240AD3A0EC3ACBA856A84D328E2006774B5
SHA-256:	870404C88C0D37589AB2DE95AAF614521981BA4B2FD11B8702703CEBC02DCC14
SHA-512:	A22F6ADB9FEFF57377A3BB049C47246910D547C1393EAE99364372BD36A4ADAAFD79EC983EDA8DD13A3F2417D62B2375ECDB72BBD01807F083F171AD27E42213
Malicious:	false
URL:	https://reportfraud.ftc.gov/
Preview:	<!doctype html>..<html lang="en" data-critters-container>....<head>.. <meta charset="utf-8">.. <meta name="Description" content="Protect your community by reporting fraud, scams, and bad business practices">.. <title>ReportFraud.ftc.gov</title>.. <base href="/">.. <meta name="viewport" content="width=device-width, initial-scale=1">.. <meta name="keywords" content="report fraud calls, scammed out of money, report scam phone number, report scammer, how to report a phone scammer, report cyber crime, report phishing, report a scam website, report fraud, consumer complaints, report phone number, report scam calls, report website, how to report scams, how to report a scammer, report scam numbers, ftc complaint, federal trade commission, ftc, government imposter, report imposter scam, report an impersonator, fake government, fake business, imposter business, amazon imposter, amazon scam, bitcoin scam, phishing, imposter, smishing, text scams, email scams, scam calls, romance scams, nft

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28835)
Category:	downloaded
Size (bytes):	29688
Entropy (8bit):	5.20681443083328
Encrypted:	false
SSDEEP:	768:4sErTKABAYAcyCIADmtEeVX85u5y8DiAhAgmtEAn5Xf8a9rihsvgrfSa9wtvfVav:4JTKABAYAcyCIADk60iAhAgydvEsvva7
MD5:	0FAB54BCF479DBDBA3CC06ED719665C2
SHA1:	3F0A1ACEBABE39D2D77F1523DCAE2FAEB86DFB4F
SHA-256:	086D1AD485D9282CCAF5F69E7C3A7E2722C9BE1A70282A6C472E6C2D25E9B136
SHA-512:	DB893D824E45D0C82D499FC305732FB04E53D8F70EEE5DD58E957B99DBD4DD3B80844F2CAF98789D327AFBC00A439171F3A5F3C7E3B11D59C896F98A51A479BB
Malicious:	false
URL:	https://gov1.siteintercept.qualtrics.com/dxjsmodule/1.63e783d0bfcf19085382.chunk.js?Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDID=fedtradecommission
Preview:	./@preserve.Version 2.5.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. (window["WAFQualtricsWebpackJsonP-cloud-2.5.0"]=window["WAFQualtricsWebpackJsonP-cloud-2.5.0"]\|\|[]).push([[1],{26:function(e,t,i){"use strict";i.d(t,"a",(function(){return o}));var n=function(e,t,i,n){return new(i\|\|(i=Promise))((function(r,o)

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (6115), with no line terminators
Category:	downloaded
Size (bytes):	6395
Entropy (8bit):	5.029836467751119
Encrypted:	false
SSDEEP:	96:YgkOqZM4EPzJAbyheZZM4qzJrZNX6oyYhb4Kf2NLZi4Tq2EZM4zWliZM4D7Zi4Ti:FTiiyXu8UOkSoaJ
MD5:	95A2616199F7C8EC98824386B311BD78
SHA1:	B5E56C8758E837BAED3613D296E9D95AF18CDB83
SHA-256:	85720846D131C9E946A0A3860ACD16D5125DEF587B583DD00BA098BA054BB8F2
SHA-512:	4D5CEFD046FAB53E2760D61147AC1E203B4F359BDAC362133F1742EEA072985002A8B2F31AC73809CC19447DC69DEF03546A5BF0F48C2853CC7CCC25FD8884D6
Malicious:	false
URL:	https://www.donotcall.gov/js/lib/jquery.i18n/jquery.i18n.language.js
Preview:	!function(n){"use strict";var o={pluralRules:{ak:{one:"n = 0..1"},am:{one:"i = 0 or n = 1"},ar:{zero:"n = 0",one:"n = 1",two:"n = 2",few:"n % 100 = 3..10",many:"n % 100 = 11..99"},ars:{zero:"n = 0",one:"n = 1",two:"n = 2",few:"n % 100 = 3..10",many:"n % 100 = 11..99"},as:{one:"i = 0 or n = 1"},be:{one:"n % 10 = 1 and n % 100 != 11",few:"n % 10 = 2..4 and n % 100 != 12..14",many:"n % 10 = 0 or n % 10 = 5..9 or n % 100 = 11..14"},bh:{one:"n = 0..1"},bn:{one:"i = 0 or n = 1"},br:{one:"n % 10 = 1 and n % 100 != 11,71,91",two:"n % 10 = 2 and n % 100 != 12,72,92",few:"n % 10 = 3..4,9 and n % 100 != 10..19,70..79,90..99",many:"n != 0 and n % 1000000 = 0"},bs:{one:"v = 0 and i % 10 = 1 and i % 100 != 11 or f % 10 = 1 and f % 100 != 11",few:"v = 0 and i % 10 = 2..4 and i % 100 != 12..14 or f % 10 = 2..4 and f % 100 != 12..14"},cs:{one:"i = 1 and v = 0",few:"i = 2..4 and v = 0",many:"v != 0"},cy:{zero:"n = 0",one:"n = 1",two:"n = 2",few:"n = 3",many:"n = 6"},da:{one:"n = 1 or t != 0 and i = 0,1"

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16858)
Category:	downloaded
Size (bytes):	16926
Entropy (8bit):	5.157261513574259
Encrypted:	false
SSDEEP:	384:mPqNtjavijNPlkRLwodDm5uLglUYZlreeQ:tfZPl84LZlqeQ
MD5:	377B77886B8F14F7C30F202B4AFEDDE9
SHA1:	D8FFA187F74C7B4295240038349937F7B57C2B42
SHA-256:	6C649CC3D4AEE7683250622541A6045AD4AC3BEB93DF1FCDD3EC1F7F12A1FF44
SHA-512:	B920A8E5F73EC074D6C15EE159CC99D89BE98CABB46285BCDDB1E2B07217224EDBB0AC9D3CF21A754A56DFAE45D9EFDC7C4F135F57FBFB27C9BB9CCB0E52A67F
Malicious:	false
URL:	https://extend.vimeocdn.com/ga/98318866.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e.Vimeo=e.Vimeo\|\|{},e.Vimeo.Player=t())}(this,function(){"use strict";function e(e,t){return t={exports:{}},e(t,t.exports),t.exports}function t(e,t,n){var r=_.get(e.element)\|\|{};t in r\|\|(r[t]=[]),r[t].push(n),_.set(e.element,r)}function n(e,t){var n=_.get(e.element)\|\|{};return n[t]\|\|[]}function r(e,t,n){var r=_.get(e.element)\|\|{};if(!r[t])return!0;if(!n)return r[t]=[],_.set(e.element,r),!0;var o=r[t].indexOf(n);return-1!==o&&r[t].splice(o,1),_.set(e.element,r),r[t]&&0===r[t].length}function o(e,t){var n=_.get(e);_.set(t,n),_["delete"](e)}function i(e,t){return 0===e.indexOf(t.toLowerCase())?e:""+t.toLowerCase()+e.substr(0,1).toUpperCase()+e.substr(1)}function a(e){return e instanceof window.HTMLElement}function u(e){return!isNaN(parseFloat(e))&&isFinite(e)&&Math.floor(e)==e}function s(e){return/^(https?:)?\/\/(player.)?vimeo.com/.test(e)}function c(){v

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	18240
Entropy (8bit):	7.9905444303929025
Encrypted:	true
SSDEEP:	384:NyQXQbI5auhhwLp9FZd3UuiDMKCd6PhQOuRop/dqeX9:N0b/uv6LFLEuiYK+6Ph3uep/keN
MD5:	D1C6E84A81D8C231276A02FE0B31112E
SHA1:	5A8D08FBF26208D6B0E668DF301B2CFE8F73E310
SHA-256:	31AFD6F016D8024EDBC63CA5145366B15603864F5D2EA13D327F29AA6E79C273
SHA-512:	062AC7611CE7D30ABA79209C6E16726E88F338C994B9F5330C0F8D65985248A5870DEAC31E0595D07DE3D26E3C76534A5F5A1D02DB7725F35234BB4105D13024
Malicious:	false
URL:	https://reportfraud.ftc.gov/551.2647647041282ed3.js
Preview:	[.,1.!...`...O.Q..K......p.....y.{..@..k....1&4.Z\Z..R'...s-+7O.Y8.^.Y....+..6{..bxVQk.....#........}..d..f_....;..Q........+7.%B`6 9.p.'w.._#....)...Y...Bk.5N....)Kla.}}..U..(........W.uI.._w&.....&aa.D9x...U....4.@. .^......?e/._.3..:.m.B.........i+.,.':o..@...-...../.[.*..#....k...........p..ojn9. ..)V.u\..rI.....R......'... ..k(......g03.!.+..b'n.N......hrh............6.]...Z.....;Y..l...h..-.]m.....z..U..kR.yO...\i..;\|..=.:.0m..&/.h......q.=......!..\|.,..v.............]$?.......%.......\Dl.....8...v.U...[..4...;H...8.2...Wvg..vP...,..B..cp.BD......\|Q...l.K..R\...E.}...2.. G.MG..N...q.Wr;..F..g......K....U.3..D..U.R...S..b.D..}.>d.F.+2...8...!....,.S....dU...>D.....ho.}.!.......T..W@r<\..S$F.r.Q..}.-T....pI..@Y.>.J..........,D..w..odD..O.....4nP oA.S..V9...?.d.tZ..u.....5..8..{.E.....^....._...[..A..&o..s.......9.TW..........8....T./A7o-.....:.m r.....80...tGt...Mm.G...y....[...y..U.....735.C...BD..E..kTtL5..M...... ...j........iV.C,.

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	941
Entropy (8bit):	4.710541566641108
Encrypted:	false
SSDEEP:	24:0UfiTDQTa5mRIdZwyDP+CyeTnjqR93D1gWm:0AqmRmXF
MD5:	1991E7332990CE178BCB59AD5FFAF84A
SHA1:	693FB3B5CB7A336D4CC73537CA94656EA3CB31C1
SHA-256:	90F8F57FCE474FEC7A943DD6716E18F2F4BB7640501C39145146D5575EFB2DB5
SHA-512:	182985DEEB509535E34D098EBB5D832BC1BE79632847DE8966E9D8C4FCF6640A37D8489261E7B96B314EAAAF4D7A2E88F5493F2B46462096B434871474838FDF
Malicious:	false
URL:	https://www.ftc.gov/modules/contrib/addtoany/css/addtoany.css?scewfd
Preview:	.addtoany {. display: inline;.}..addtoany_list {. display: inline;. line-height: 16px;.}..addtoany_list > a,..addtoany_list a img,..addtoany_list a > span {. vertical-align: middle;.}..addtoany_list > a {. border: 0;. display: inline-block;. font-size: 16px;. padding: 0 4px;.}..addtoany_list.a2a_kit_size_32 > a {. font-size: 32px;.}..addtoany_list .a2a_counter img {. float: left;.}..addtoany_list a span.a2a_img {. display: inline-block;. height: 16px;. opacity: 1;. overflow: hidden;. width: 16px;.}..addtoany_list a span {. display: inline-block;. float: none;.}..addtoany_list.a2a_kit_size_32 a > span {. border-radius: 4px;. height: 32px;. line-height: 32px;. opacity: 1;. width: 32px;.}..addtoany_list a:hover:hover img,..addtoany_list a:hover span {. opacity: .7;.}..addtoany_list a.addtoany_share_save img {. border: 0;. width: auto;. height: auto;.}..addtoany_list a .a2a_count {. position: relative;.}.

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	9562
Entropy (8bit):	7.980287631434975
Encrypted:	false
SSDEEP:	192:sREzPkSmapQLJOs9NG0qPxMqNY1tIA2dnset3dFySheiyg5al1DJ:cEgSmapGVOlP2q21t12dsOCiyg5GJ
MD5:	F793B34FF6BCF9EE7EA2D5AB82490622
SHA1:	A68F6BCE9770476047D1DE9F8EAC1E72BE93CADA
SHA-256:	AD60BA0AE81D350CBE8EFDC0338E0E93C6E5AA7CB13CAE823176F1B18FE00F2C
SHA-512:	19230E0A6DE771348534C4617E57907A6E0C2AA507A748AE58AACDB04353330AF02A4962106DFF2FFD18171CFE3C4B8F6AC68C225F444EBC5282E8EFEB4A59EC
Malicious:	false
URL:	https://reportfraud.ftc.gov/265.dae6f19b57ed9aa7.js
Preview:	....(...jV..E.m........r...B..j.5Gh.....}}k.P$..v.....k..h0...3r..._...U..E...V.....P#.d..MD.{..=R...l.{x.]..b.....\|.....QJ.5fz}....h.fVm.a..."........t...D..S.mg$~....2.k..z.k......L.....w.}...a...A...._....>Vt.tNun.;.e...jW...`.._a..........C....+j].....9....{..fGV.c.""p6..E8;q#n.v.@..7.l_...c....u...Y..5&_.......4..v3q.g..z._..rT..f........?}.........o.m............H^...k.......;H....w7...m.L.........[...@.... w^......XW.Q..;..W..N..._....sw.....^N....+..).s,.I.....$.,...X....G4...V9.{..BQ..1_..,k.pr7.c.D.R..<.M$J.0....1.....P(....H.aJ1..g..Gq.s\|..Qu..l.-CE....#.]......+.+V...K8JNdj.....2m.u...{.Y..M.i.t.hnu.gu....C..q=..%..w....ln....-.B...M..K.&`.xsRQ..WO.v.l.].~....l..^S......,\|...../..3.x.......&.T...K..`.T..*..,~n 4..E7....R\W.I75.>k.nMFs.......]......2F)n...f..L....@....Mypr=F...w.XY..h..d..}.h'....d'.....@.v.F......B.\...:.\|.V#.Ypp..O.pu.F.@pt.F...m....?...........w....z.cO.\.9.1.....E..m...../j...t+.Cu).s.4d..

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	789
Entropy (8bit):	4.974834590139333
Encrypted:	false
SSDEEP:	24:NVkzhbkUQ1zeFjAZTWrdVWZXWrXKxrXKI5Sdfm2eYYX:NCz2UjkMI5uJeL
MD5:	3E9A19B76A55085EA818FEE8983F1E76
SHA1:	276A5A43F00C75E82E8914C57489A1B8AD3CF61E
SHA-256:	11EBDC8EC2AA61DC61415643E98671EB3D9DB88F1626D43054E81E0235AD480F
SHA-512:	9987EDFCCC6778CA9D16BA7902EACE2AAC008219A6F4BB4E618E6D61618E9961722C18EEA19BCA65D0D73DF363005ADD8B9323182FE9AE44CB25088E74A520AB
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/checkboxradio.css?sbdm6u
Preview:	/!. jQuery UI Checkboxradio 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/checkboxradio/#theming. */...ui-checkboxradio-label .ui-icon-background {..box-shadow: inset 1px 1px 1px #ccc;..border-radius: .12em;..border: none;.}..ui-checkboxradio-radio-label .ui-icon-background {..width: 16px;..height: 16px;..border-radius: 1em;..overflow: visible;..border: none;.}..ui-checkboxradio-radio-label.ui-checkboxradio-checked .ui-icon,..ui-checkboxradio-radio-label.ui-checkboxradio-checked:hover .ui-icon {..background-image: none;..width: 8px;..height: 8px;..border-width: 4px;..border-style: solid;.}..ui-checkboxradio-disabled {..pointer-events: none;.}.

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (611)
Category:	downloaded
Size (bytes):	27242
Entropy (8bit):	4.3631679730758375
Encrypted:	false
SSDEEP:	384:6FamwIluB0sJQqCeSQup5szCUXAG0VVi82OgoKACZQQofNJXY3gW3:663Mp5If8WOmgW3
MD5:	DF3D48946E8D3F5A83608308EDBB4B86
SHA1:	47B9C40C97ABF2658DF96B1C06109324E15E1A00
SHA-256:	570A6631252B8A52DF4DE0E953AE77DBDF524DFC3637CDA2840494A0D2B49499
SHA-512:	36EC1CEC72DC3245730C813277C645525473CC5232E85CD23503B8593D90264F335E61A16D364A1E6C41922820B40BA7C0F46B19F4B91DB6A0CF5E31E778DDEA
Malicious:	false
URL:	https://use.fontawesome.com/releases/v5.13.1/js/sharp-solid.js
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <meta name="viewport" content="width=device-width, initial-scale=1.0" />. <link rel="icon" href="https://www.cloudflare.com/favicon.ico" />. <title>Not Found</title>. <style>. body {. font-family: system-ui;. font-weight: 300;. font-size: 1.25rem;. color: #36393a;. display: flex;. align-items: center;. justify-content: center;. }. main {. max-width: 1200px;. margin-top: 120px;. display: flex;. flex-wrap: wrap;. align-items: center;. justify-content: center;. }. #text {. max-width: 60%;. margin-left: 1rem;. margin-right: 1rem;. }. main > section > div {. margin-bottom: 3.25rem;. }. svg {. margin-left: 2rem;. }. @keyframes eye-1 {. 0% {. transform: translateX(0);. }. 10%,. 50% {. tr

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	2850
Entropy (8bit):	7.930529030959939
Encrypted:	false
SSDEEP:	48:M1YQPtAcgfZ1C4CEoxtEaLv96gDlShoKLTFQkWyuc2xNvS3P:i2C4CEMflEhtOkWyuc2fEP
MD5:	9337AAA47D6C8A0B0D5CBF23D8212F5A
SHA1:	50608C74FE832FC1EF78397B63FF72B652BC6D8D
SHA-256:	16465A0D8587D2282EF6AA16BE2364380F7EEED4DED2E5D4B8CAA24CAA139D65
SHA-512:	82B4CD1EC9FE1B47E028294EA09EAA9B7CDBC3B0EE00DBFA7BC57BF42E0420913C00FAA5CC7A74B32D49843FD2BE8227AFBF0F36CF1E896EB4525D2AF7BB4503
Malicious:	false
URL:	https://reportfraud.ftc.gov/515.93f17397f92c22a2.js
Preview:	.x!Q.r...8.......P........mG.b.!...~f_....d.v7..fJ.."./..q.[....v.@...(,........D.[.....).2.....,.SPD.~Z...".v....)...]...3%V=.u...H.3....<....\|.)!X.%..~..F....<.U..%...?a.XH...T~...^.l).."%..e...N..}..m...:..)..a.....Cg..K.._..._b...$...e+:_yo.g~.e&.K..EL..z.0.06.L.s.-R...J.}..V..Ze.cn2....\|.......c>%.w.H.....#.TOP..xC.............npE........A.h.....^!.O..N4.1.7.$.p'H..J.F...LDy...)...E..Ri"}s.`.......!..-..'Vp..<k+.%A...@~.....4_f..t..G.[.;(fB3.zf..K..qD...YwT....+.c........j$1\......z')`}..a.7.......$..7.X.~?~.....4m8..!.?5...Q..n.>.946..[.L..=..^E^b(.d<m...8f\|..k..R8J.AWK.....u.........E....K^......).."......b.P...t...........!Ck...-HO.Z.]..5...Q....x.H.%..H.......+.J..V......!Tu.tsE..".-..b.......D_hd.%..ni1.R. .F./B....q%...v..3 .....B)........v.#....W.. .$.E.....H.<..j<w.b_>.I.Qf.Z........K....&.$......F.s..o..<.%?....c.I....w.cr.q..1..I].7a.7.V.:.[.O.`.'/......'....<X1+..X..:..;......U.....v~&v5.Rs...@.\|.Q6.\|sN.%se.CZ...z<..

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1753
Entropy (8bit):	4.941493927855892
Encrypted:	false
SSDEEP:	48:Ncz23grQdJs9uCsJsHrNHi5sOh3AsY5ip6PsTMSsDfOIKEXkQEXHXhEpXGXJtHsu:o23gus8CsJsHhHusIQseiMPsTpsDfORl
MD5:	E6E03548F7CD3FF2520E3BE4EB638609
SHA1:	3CFC4AF994DC0440CE658CD1E337DD3D946864F9
SHA-256:	CC6570D3E437B61217958A3591010B60DD964E80A7E06EE5356E1E2D0FB29547
SHA-512:	859A9BA6DA3B06F3D2537DA512E637CE3E7A3EFBB57A9D07DF078A84845662124122C2B468DBAC04087DE25B78AF0EA4DB124373644F0B7C443BB4745AD62C6C
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/dialog.css?scewfd
Preview:	/!. jQuery UI Dialog 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/dialog/#theming. */..ui-dialog {..position: absolute;..top: 0;..left: 0;..padding: .2em;..outline: 0;.}..ui-dialog .ui-dialog-titlebar {..padding: .4em 1em;..position: relative;.}..ui-dialog .ui-dialog-title {..float: left;..margin: .1em 0;..white-space: nowrap;..width: 90%;..overflow: hidden;..text-overflow: ellipsis;.}..ui-dialog .ui-dialog-titlebar-close {..position: absolute;..right: .3em;..top: 50%;..width: 20px;..margin: -10px 0 0 0;..padding: 1px;..height: 20px;.}..ui-dialog .ui-dialog-content {..position: relative;..border: 0;..padding: .5em 1em;..background: none;..overflow: auto;.}..ui-dialog .ui-dialog-buttonpane {..text-align: left;..border-width: 1px 0 0 0;..background-image: none;..margin-top: .5em;..padding: .3em 1em .5em .4em;.}..ui-dialog .ui-dialog-buttonpane .ui-dia

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 958x166, components 3
Category:	dropped
Size (bytes):	13965
Entropy (8bit):	7.688687503708182
Encrypted:	false
SSDEEP:	384:qLqe6Vc//lFyT7CHWt2OPjiBsDGhvPHwPpppppppppppppppppppmLpU:qLqLcFWt2OWBsDUfwPpppppppppppppj
MD5:	F9A124517A6647603B17D72AA5ABAF82
SHA1:	259BDCA9E2712F7EEA4A8759238411E962A9FCBB
SHA-256:	899A7466FF16B2FCA094000FBBE1F21A421E798F62FAA13D1D85E964AA352ACE
SHA-512:	94B090BAC5D13D6F1D36E46914AB5C922A6B4ADA4812CEE3E1A1BD1FF4E917AE38526724DC03ABB616D96CA8EC2BA98171555ED74C3505F16F72D4CA0F1A5725
Malicious:	false
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................".........................................X............................!...1AUf..."Qa..2Bq..6RVbu........#7W..358CSet..%EFr......................................8...........................!R..1AQS..aq."42....3B..#C.............?..`...............................................................................................................r...F.J.A...>f....)...:]q..;.h.[M..`...G..{.>....L......;.p..+.l..M.`x#.E=..b.F.%..NQ.Gx8k...$......................................................................................................................8UDM..ru.F...TU.:.MMo..J.Q..m).I....>...F....i.A...../...j./U.n....c..W/..TU....c...T.j^..5..x.{....QX...VJ.Mg..~...K.;.V.......U..t...\.>b..........I"?....E.....u-c...i....~...6.....Q.Z........b$.....G.o....sh.A.........i....~...k.....Z=..*V8.er....'HQ.....f...O

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18314)
Category:	downloaded
Size (bytes):	18538
Entropy (8bit):	5.0387012302838805
Encrypted:	false
SSDEEP:	384:ZC6xJBlL3jIvwEm767Yuk6ZYJY4W5Q2MYWKN0UefA5QxC0QxPCmsyuq+AzjkU0zP:MKOvg76Lk6ZAw2PycXxCDxPCmsyuq+OK
MD5:	199830539F702BC3535CFF0638D2526E
SHA1:	37953F917079CBDDB5D92DC472C82062F7BF72A7
SHA-256:	3DC8F6A2F25D67DFB1B1885CA9C94C5E15B99757124A4FD4A15141DC79911A9D
SHA-512:	EF498A198B6A50AD332C03487998F2435BA705FB687C2A6FEF1C90C64B10BE07B89D479C5DC7482E26E3967B09603CFF1CC85AC12A9D7F813B55F3A8BBA7BAA7
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/widgets/draggable-min.js?v=10.1.8
Preview:	/!. jQuery UI Draggable 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery","./mouse","../data","../plugin","../safe-active-element","../safe-blur","../scroll-parent","../version","../widget"],t):t(jQuery)}((function(t){"use strict";return t.widget("ui.draggable",t.ui.mouse,{version:"1.13.2",widgetEventPrefix:"drag",options:{addClasses:!0,appendTo:"parent",axis:!1,connectToSortable:!1,containment:!1,cursor:"auto",cursorAt:!1,grid:!1,handle:!1,helper:"original",iframeFix:!1,opacity:!1,refreshPositions:!1,revert:!1,revertDuration:500,scope:"default",scroll:!0,scrollSensitivity:20,scrollSpeed:20,snap:!1,snapMode:"both",snapTolerance:20,stack:!1,zIndex:!1,drag:null,start:null,stop:null},_create:function(){"original"===this.options.helper&&this._setPositionRelative(),this.options.addClasses&&this._addClass(

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	243
Entropy (8bit):	5.01028531375915
Encrypted:	false
SSDEEP:	6:qQ2b9ebME4xFHMVGuifAdDfrbvWxBYtd1R4oUCR8K7wF7RNq:AUMbHxu/HHtnRES84YM
MD5:	050655726F4B0568ADFE9088C3FD6446
SHA1:	2C1257999E78B878A96121739A5BCC6CB392D2CF
SHA-256:	A856F13CACE0185EBAAC1F4B9A3336E0429E69DF7EE643D7B367996E34A237F5
SHA-512:	26790D871CBF6C91B84C260AEC1E055703A929244BBB6E7299CB4B4AAE170F6BAF9C1D7A4FD645D3B6BDA3B316DB2DB1CBC5F86C4AC6A15ED055F7507C5D8543
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/ie-min.js?v=10.1.8
Preview:	!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","./version"],e):e(jQuery)}((function(e){"use strict";return e.ui.ie=!!/msie [\w.]+/.exec(navigator.userAgent.toLowerCase())}));.//# sourceMappingURL=ie-min.js.map

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	231
Entropy (8bit):	3.3606322888247524
Encrypted:	false
SSDEEP:	6:4WyeQJSrQJjv7CC73Sryqjc+1+SLcJyd56PdirB+lSQaqFV1Y:4WyecSrcjv7CgStD7Lcq56PgdqSY/q
MD5:	55E3B6470EE37BA22AE15DA89196A663
SHA1:	0C340C84A601EE222AFC79E25D15F113D29833F9
SHA-256:	25ABA9BA95F4053D38BA80B0EB73A3CE474A2F044A1BB863345027EE1ADD54E3
SHA-512:	53396476A156B3A312FD47511BB68C1E6C71D6F0319E17B07EA47F13D36CA3B7EE2E823AFBF3197BCAE1E78F8E30E382A8D83F1C85F31D885071ADF8DE63C38B
Malicious:	false
Preview:	["368,403,587,780,825,236,250,604,672,778,204,431,506,428,709,879,867,782,902,867,226,249,289,343,365,416,437,519,548,613,647,705,807,905,782,902,354,367,418,438,450,514,579,581,819,873,306,474,639,867,600,622,633,644,655,677,688"]

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 640x360, components 3
Category:	dropped
Size (bytes):	27745
Entropy (8bit):	7.9633443053019235
Encrypted:	false
SSDEEP:	768:O0fn1FOegsoKwSDk+MskIoud3FxMaIJJGYLdsZ985+f:O5UDWXIh3FiaOGYGZ985+f
MD5:	F2D1057598A2FE79C0B4D0A68ED67888
SHA1:	01F1FEF5C434ABF119E1603B39972F697BC71069
SHA-256:	C1D65F0F9591815397E10116BF373E968C3DA9CFDB0247DB99CDCE1E906290CB
SHA-512:	7621A8B1EEEE439F5F139B1200C3F256A8209A6BE6A4299D1BAFB48781B1A44866C0AD0A06802A2F1CB64406CF6FFAE40C5CFB24FEFA832609CFEE0CA8A0DDE8
Malicious:	false
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..+.4.M.B+..z.r8...K..B.4..\R..JFi.U&".\.H..HE1.m..R.!...\f...8..+....s.^ob+....Xe...4....H.5...@...6.!...e."..7A.d.i..iX....u..e.d...k>q.\.........k6.=...+.J....a...4]...[9<..z.+....-.....:....5.3....F.jr..q^e...%..n.(.Qp..... ..f.....p^\P..z.......E...;...4\...F.....DOwo.[u...>g..Yz..;".R..jb<.)GZj

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12954)
Category:	downloaded
Size (bytes):	13172
Entropy (8bit):	5.082220972524143
Encrypted:	false
SSDEEP:	384:oKCCN4BfRezUhfB6hM3c6Hn9xstL3whf7:F4s36bf7
MD5:	1762EA4316E1BD109CE27B0B1F391920
SHA1:	1A837FB24FC9C081DBD72E5733ADFD55FF49A9CE
SHA-256:	7817DCADAB9B63E7579B8EB3851135EFEDD547A8AEDAB6308E36A5247BF0C57D
SHA-512:	C64FF3EA88E99C652C10ABDD516E1FCFD4F0B0D15401DBC520887C5C59F0FEEB4ECC6DB06670498A4C9B9A2E9E99E979BB649EFC0D0D51A02D34EBDD1610848B
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/widgets/dialog-min.js?v=10.1.8
Preview:	/!. jQuery UI Dialog 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(i){"use strict";"function"==typeof define&&define.amd?define(["jquery","./button","./draggable","./mouse","./resizable","../focusable","../keycode","../position","../safe-active-element","../safe-blur","../tabbable","../unique-id","../version","../widget"],i):i(jQuery)}((function(i){"use strict";return i.widget("ui.dialog",{version:"1.13.2",options:{appendTo:"body",autoOpen:!0,buttons:[],classes:{"ui-dialog":"ui-corner-all","ui-dialog-titlebar":"ui-corner-all"},closeOnEscape:!0,closeText:"Close",draggable:!0,hide:null,height:"auto",maxHeight:null,maxWidth:null,minHeight:150,minWidth:150,modal:!1,position:{my:"center",at:"center",of:window,collision:"fit",using:function(t){var e=i(this).css(t).offset().top;e<0&&i(this).css("top",t.top-e)}},resizable:!0,show:null,title:null,width:300,beforeClose:null,c

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (370)
Category:	downloaded
Size (bytes):	594
Entropy (8bit):	5.153396301009117
Encrypted:	false
SSDEEP:	12:UOPm343RkfLhPbC4sK0UMbHxuP7FNZXBGskkI2IBGsk5CN1/A4DL:NRkzhbPSHxuPprYkvIY5kZL
MD5:	EC13DF2587CF7B968B3D9D9E8442B56B
SHA1:	B1072A4516C7F255EC6A77198EF4936A29B69F1F
SHA-256:	70ECBB2DC3FB18E0D6967DBE5E84E67F8D707F23FA2C583E7DF992172D68E7C2
SHA-512:	08823EA4509DDF548F20A9182E47243B24B881DFD8D76E40909D0E13F7392A23D3CA97CA9B467B98BB8388612EED4FE8BF772022F41C6BCF7F899D5A90B672F5
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/unique-id-min.js?v=10.1.8
Preview:	/!. jQuery UI Unique ID 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(i){"use strict";"function"==typeof define&&define.amd?define(["jquery","./version"],i):i(jQuery)}((function(i){"use strict";return i.fn.extend({uniqueId:(e=0,function(){return this.each((function(){this.id\|\|(this.id="ui-id-"+ ++e)}))}),removeUniqueId:function(){return this.each((function(){/^ui-id-\d+$/.test(this.id)&&i(this).removeAttr("id")}))}});var e}));.//# sourceMappingURL=unique-id-min.js.map

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (790), with no line terminators
Category:	downloaded
Size (bytes):	790
Entropy (8bit):	4.874957342770338
Encrypted:	false
SSDEEP:	24:X1uUqMHz8FQ2HiAdIP0cAaOqRcOQ3oq/zEYj9BlQn:FuUzYTiAStAazRcOQ3N/zEYj9BK
MD5:	2F51FF8447980D38AD914470F549FFD1
SHA1:	7863BF0CAF4E7D743C21281BC8D49293577A4E2C
SHA-256:	E0474BA40541C3A44F826502003F99906BAE0A2718CFFE0B4EEDBEFA78900A8E
SHA-512:	3FC700E189C5EEB05D72ED20B677DA0D3738A2917BCDFEA7A10BC626B83F2001EE8BE4678FF53779376C7042A558CA4378B499E74FE3AE78B32B0790E3EFFE1A
Malicious:	false
URL:	https://www.donotcall.gov/js/lib/jquery.i18n/jquery.i18n.messagestore.js
Preview:	!function(e){"use strict";var s=function(){this.messages={},this.sources={}};s.prototype={load:function(s,t){var n=null,r=[],o=this;if("string"==typeof s)return e.i18n.log("Loading messages from: "+s),function(s){var t=e.Deferred();return e.getJSON(s).done(t.resolve).fail(function(n,r,o){e.i18n.log("Error in loading messages from "+s+" Exception: "+o),t.resolve()}),t.promise()}(s).done(function(e){o.set(t,e)}).promise();if(t)return o.set(t,s),e.Deferred().resolve();for(n in s)Object.prototype.hasOwnProperty.call(s,n)&&(t=n,r.push(o.load(s[n],t)));return e.when.apply(e,r)},set:function(s,t){this.messages[s]?this.messages[s]=e.extend(this.messages[s],t):this.messages[s]=t},get:function(e,s){return this.messages[e]&&this.messages[e][s]}},e.extend(e.i18n.messageStore,new s)}(jQuery);

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.673822201987808
Encrypted:	false
SSDEEP:	3:1QWMMIQBREHqeHUJRE/2TyDE7kidJ0A:1XIQEKtREW5zf
MD5:	7967AE2C4E4FA4FAB1D9C1C0D7BA83FF
SHA1:	10A0950BBC8A781C8C9CC0AC2ACBFBB5CF713C2D
SHA-256:	D86AAC0900E93F64FC5BD4B329D1367C3677736C2B3678938C458C50E3A3D180
SHA-512:	F78125A8BDEAD9856C379DDA07ADD7437F845F74F9B4DD0C5DBA2C84B9AC27B74B8F28BC112C3B3F71E1458D6EC27D499A992B5149B575A9D04FF18ECEC52ACA
Malicious:	false
URL:	https://www.ftc.gov/modules/contrib/responsive_table_filter/css/responsive-table-filter.css?sbs84s
Preview:	.responsive-figure-table {. max-width: 100%;. overflow-x: auto;. margin: 0;.}

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (312)
Category:	downloaded
Size (bytes):	527
Entropy (8bit):	5.065027358808206
Encrypted:	false
SSDEEP:	12:UOg343RkfLhPbC4sKIUMbHxu/HxhALY0AbdDxAK3:Nbkzhb7SHxu/bcL6daQ
MD5:	944390F99062D2A74C310D6E8416D070
SHA1:	E24FEE761B30AC8C72E1DBB491D2CEFA67C455D7
SHA-256:	7D31EC8E1D28F8DE15533C7EFEE24CA0FF5E9300DF4F7C6695BC6776E2FE991C
SHA-512:	D72B23EA5CDE464B0EC5664C59F35A19842CFB703E110879FA7A0B6B72B4157B8B0C4B203A5615E5C43EC098D30EFBBBCC0DB35AA715626E83C7AC2DDF23FCEC
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/data-min.js?v=10.1.8
Preview:	/!. jQuery UI :data 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","./version"],e):e(jQuery)}((function(e){"use strict";return e.extend(e.expr.pseudos,{data:e.expr.createPseudo?e.expr.createPseudo((function(n){return function(t){return!!e.data(t,n)}})):function(n,t,r){return!!e.data(n,r[3])}})}));.//# sourceMappingURL=data-min.js.map

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4153
Entropy (8bit):	4.608105510271253
Encrypted:	false
SSDEEP:	96:OqGpFVgJTqNGaX6DhwRTgjWaiNNw/Fy7/kiLWX:3GpFOJ3aX6DITgjWaiNNoT
MD5:	E75DA3A8E51529343733FEF3EE6B4AD6
SHA1:	2E0ECA5E276865BB1C1598946C429DAF094AFCD1
SHA-256:	1C0785E46FC0F45B1C91AEA35DA8FF9288B9271941B74D186B6EE3788C3B032A
SHA-512:	96174971EF764AFC90D0EC76D9978C141A28D6D95D4BA6F2EB1B17B9573A4A728F3D0B7C891B11C75F3D8C13CCCB4B0F09B6D1C5675165F469065916B72D82D0
Malicious:	false
URL:	https://www.ftc.gov/core/misc/dialog/dialog.position.js?v=10.1.8
Preview:	/*. @file. * Positioning extensions for dialogs.. /../. Triggers when content inside a dialog changes.. . @event dialogContentResize. /..(function ($, Drupal, drupalSettings, debounce, displace) {. // autoResize option will turn off resizable and draggable.. drupalSettings.dialog = $.extend(. { autoResize: true, maxHeight: '95%' },. drupalSettings.dialog,. );.. /. Position the dialog's center at the center of displace.offsets boundaries.. . @function Drupal.dialog~resetPosition. . @param {object} options. * Options object.. . @return {object}. * Altered options object.. */. function resetPosition(options) {. const offsets = displace.offsets;. const left = offsets.left - offsets.right;. const top = offsets.top - offsets.bottom;.. const leftString = `${. (left > 0 ? '+' : '-') + Math.abs(Math.round(left / 2)). }px`;. const topString = `${. (top > 0 ? '+' : '-') + Math.abs(Math.round(top / 2)). }px`

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.0074972257361514
Encrypted:	false
SSDEEP:	24:XbJOOu5sOO+OsZgOOMZg+eZQZgOOMZwy1r55ZAM1OeMZZZZyZyZgOOOM55ZAM1Ox:XbYbe/
MD5:	B374D2E7B75C67A384E234902C42B523
SHA1:	BADEF153D7313F4D4343221CC463A016C75B6A44
SHA-256:	507F8F32AAEF89F3E953E523BE7E8F4041655BFDA0B3E5951BA22E588FE4017D
SHA-512:	C97E1CEFCD9E107FE92F6E058EFD0BEC3B8770653271D2D89885EF3D599E7BA0D6A7F13C2C7A27D60B8635060E74F9030EE0D05752C046F5FB9618B32AD863B4
Malicious:	false
URL:	https://www.ftc.gov/themes/custom/ftc_uswds/favicon.ico
Preview:	............ .h.......(....... ..... .........................................................................................................................................................................................................................p...p...p...p...p...p...p...p...p...p...p...p...p...p...p...p...................................................................sH$@sH$ sH$.sH$.sH$.sH$.sH$ sH$@sH$.sH$.sH$.sH$.sH$0sH$@sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$0sH$.sH$.sH$.sH$.sH$`sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$PsH$@sH$.sH$.sH$.sH$.sH$@sH$@sH$@sH$.sH$.sH$.sH$.sH$`sH$.sH$@sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$@sH$@sH$@sH$.sH$.sH$.sH$.sH$`sH$.sH$@sH$.sH$.sH$.sH$.sH$.sH$.sH$@sH$@sH$@sH$@sH$.sH$.sH$@sH$PsH$.sH$.sH$PsH$@sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$.sH$0sH$.sH$.sH$.sH$.sH$psH$@sH$@sH$@sH$@sH$@sH$@sH$@sH$@sH$@sH$@sH$.sH$.sH$0sH$@sH$.sH$...........................................

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3646)
Category:	downloaded
Size (bytes):	7360381
Entropy (8bit):	5.865685111744452
Encrypted:	false
SSDEEP:	24576:noRKAL4AV0Q1suw5onazmAbfmtmqAXcE7+1gskW/VTCAK8FOzYhj61wcKwqmyPDN:noRKAL4AV0Q1rv
MD5:	C158DE20A5B72FDB910BF06711D85A01
SHA1:	7FD8CBC70F1E0485DBAF612F1F8897DA870A3181
SHA-256:	807B89C3F879F5C4DE0B67EE7588F4F775670B76BDB737FEDF89FBE27590C782
SHA-512:	8F8B0D12B9D4C798D7BF20047DC56DE5E3E235364663030B0C2F7101FC78436D46B775013AC8D11CA9A3D0C5A4900B4391F99096DE600AF8AB99C72BCF3B57EB
Malicious:	false
URL:	https://www.ftc.gov/themes/custom/ftc_uswds/build/css/styles.css?sbdm6u
Preview:	/*. @file.* Variable overrides for USWDS.././ _uswds-theme-general.scss /./ _uswds-theme-typography.scss /./ _uswds-theme-spacing.scss /./ _uswds-theme-color.scss /./ _uswds-theme-components.scss /./ _uswds-theme-utilities.scss /./! uswds @version /./.* * * * * ==============================.* * * * * ==============================.* * * * * ==============================.* * * * * ==============================.========================================.========================================.========================================.----------------------------------------.USWDS 2.9.0.----------------------------------------.GENERAL SETTINGS.----------------------------------------.Read more about settings and.USWDS style tokens in the documentation:.https://designsystem.digital.gov/design-tokens.----------------------------------------././.----------------------------------------.Image path.----------------------------------------.Relative image file path.---------

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	960
Entropy (8bit):	4.832863815501617
Encrypted:	false
SSDEEP:	24:4oZlawomRVAtxGl6DgLuNJGIHGVwX931jxKaljxsq1t:4oZIwr3AK6DgsJ7xlll9sct
MD5:	6739DD9D2E1C3205A4DE81E528AF3EE8
SHA1:	E4D571F4F9EC566A8385DB66F21EC6E35242C11D
SHA-256:	923935D813106205B31D3953B21E34A007F32758EC0C3D2BA6DD3DDA1F8CF6E9
SHA-512:	B868AAD5359D537A7C4C372D413CA221642D01BB50F52979B2C93DD788D917F895DE6C10125E8185FEE29364ADC2032B758A4AF1D8C4A6B92FC3825221F4ECD3
Malicious:	false
URL:	https://www.ftc.gov/core/misc/drupal.init.js?v=10.1.8
Preview:	// Allow other JavaScript libraries to use $..if (window.jQuery) {. jQuery.noConflict();.}..// Class indicating that JS is enabled; used for styling purpose..document.documentElement.className += ' js';..// JavaScript should be made compatible with libraries other than jQuery by.// wrapping it in an anonymous closure..(function (Drupal, drupalSettings) {. /*. Calls callback when document ready.. . @param {function} callback. * The function to be called on document ready.. */. const domReady = (callback) => {. const listener = () => {. callback();. document.removeEventListener('DOMContentLoaded', listener);. };. if (document.readyState !== 'loading') {. setTimeout(callback, 0);. } else {. document.addEventListener('DOMContentLoaded', listener);. }. };.. // Attach all behaviors.. domReady(() => {. Drupal.attachBehaviors(document, drupalSettings);. });.})(Drupal, window.drupalSettings);.

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1440 x 167, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	46654
Entropy (8bit):	7.975594273434514
Encrypted:	false
SSDEEP:	768:eY3np0c4rbFbHYQMkI3AbD/HZVEYrHErvKqUiuAkJdA9dmFNIOKFJIiAq:53GXF8DkIw//oYwS2dmFNIrqq
MD5:	38378D6405135ABB487D9161C973425C
SHA1:	9AFCB4301AD023774E2F0E48D6D811444A174D82
SHA-256:	75BEF4AC34F2A462C948AD1AF9B91D0E0DC5EB18F540C6AD956EA1E9D0F4AC3F
SHA-512:	851074CC9C63E0D7DC9D0AAD41FDFD4E53270F960082F5FCF1E98A5850E999937ABADEA3E2180020ED7540637BFB51C82CB25EC7F2783DF990C290C718C5A51C
Malicious:	false
Preview:	.PNG........IHDR..............C.....HPLTE.........)&0..... ...<9Ar.._]dMJU........^n....vsr................y......tRNS........................Sl@f....IDATx...v.0.E...#;.x....2..hF..^.[.2rBr.:.o..w~.n\~...~..].%...9...=t..M.t.....3I.x.K.a....v....:..BW.....K...._...((.T.....?.}.my.Z.......yn...c.....u.H.......;DU.\|...q_.L..W.6.v.k..LE..s.=H...A....}.K.H.6.l.&zJ..T8...\......E4...wP.......$.`..\.....>I...q....ZL.I&..&j....1.C..c..m7)...D..!....Ao..C.=.ys..Q?8.zqH...........Lx....V.S.H....i.V....c.D...`...~....`)`..j..........a...O...xfD.#d.K...!......l2L'.%{..O!....qV.%..Ne.?............X.m..e.ql'.[S.<..f><..g.......:..W.2...L..T._....C..i.......L?.x.....Q.jn..........3.i.. 4~60U......9c.8..........AhC...........K>.=... t m..Os...(."..P.].qqu..gU.h..]..U..!z;.C.&..#%....X.m<.`.#G.'.....!...N..p.4....g.F.o.'O..{\|.e..._#f..=.?*..C.""i..D..:GL.........\..C/..M...h.B. .=..%.0;.y...d.].C)...<..'"8.B.....".w..oU.....c....`....\.L..=/..zJ....H.

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	709
Entropy (8bit):	7.568671974519862
Encrypted:	false
SSDEEP:	12:6v/76ANlKR6IQi+xB2svZbKWB+VRgCsIjTdp7kd0FAh8fnKKx2uCpPcNSPxMZvu:kwKi+xF5o7dsNd0FAh8fnKKromSpMRu
MD5:	BEAC50BD07EDFF28267A7A0B5D406A62
SHA1:	069DE979880EEFA02FE50C09AE941F3DDD60EF54
SHA-256:	5EFE4C946AF02A643DC41B1133CCBBFEE026AC41060A3EB11289871C791386E5
SHA-512:	64DA6781150AE79265366F906794110FD7E8E7FB42F7416F0EED7082FAB5DAF78B7C44B7F9280F1969193ED290B13BA4C8E8A8959939ACC58F56FD1B7984CDDE
Malicious:	false
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........+.....wIDATx...O..Q....Ij$...IV..$...RV.AD.DQ....k...lH.U.(..J....JNI.,..t]f..;..y.\|..{...7.s....B.P(.......1X;W.'.q.K.".gb....A....x..U..8...l...........q-..b.l..r.........$g.H.......a$.].6..2.;..<..J<....,..(.@..Sx...U..E.....i. .FU.X 5O..i.FY.6...p?.t...E....3.8....u.N.^.......~.d...................t......e.Le..k..n.....}._.....k. ..z..q...ViK..\|8N..\..v..P....pp....B,.."1.<..F..qs....F.{.om..[.o4=.\|8..h..6N]<.w@.Q..p......T.:............'q....6x...}..Mx^Q.?...9l...R.\|.Y..Wr8.....T.^.39...K..........#.5....(......[.P...-.\|..F.........s.s...p.{..x.v....y7.$9:............55....Zjj.!..\|...z.P(...B.......~5C......IEND.B`.

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	941
Entropy (8bit):	4.710541566641108
Encrypted:	false
SSDEEP:	24:0UfiTDQTa5mRIdZwyDP+CyeTnjqR93D1gWm:0AqmRmXF
MD5:	1991E7332990CE178BCB59AD5FFAF84A
SHA1:	693FB3B5CB7A336D4CC73537CA94656EA3CB31C1
SHA-256:	90F8F57FCE474FEC7A943DD6716E18F2F4BB7640501C39145146D5575EFB2DB5
SHA-512:	182985DEEB509535E34D098EBB5D832BC1BE79632847DE8966E9D8C4FCF6640A37D8489261E7B96B314EAAAF4D7A2E88F5493F2B46462096B434871474838FDF
Malicious:	false
URL:	https://www.ftc.gov/modules/contrib/addtoany/css/addtoany.css?sbs84s
Preview:	.addtoany {. display: inline;.}..addtoany_list {. display: inline;. line-height: 16px;.}..addtoany_list > a,..addtoany_list a img,..addtoany_list a > span {. vertical-align: middle;.}..addtoany_list > a {. border: 0;. display: inline-block;. font-size: 16px;. padding: 0 4px;.}..addtoany_list.a2a_kit_size_32 > a {. font-size: 32px;.}..addtoany_list .a2a_counter img {. float: left;.}..addtoany_list a span.a2a_img {. display: inline-block;. height: 16px;. opacity: 1;. overflow: hidden;. width: 16px;.}..addtoany_list a span {. display: inline-block;. float: none;.}..addtoany_list.a2a_kit_size_32 a > span {. border-radius: 4px;. height: 32px;. line-height: 32px;. opacity: 1;. width: 32px;.}..addtoany_list a:hover:hover img,..addtoany_list a:hover span {. opacity: .7;.}..addtoany_list a.addtoany_share_save img {. border: 0;. width: auto;. height: auto;.}..addtoany_list a .a2a_count {. position: relative;.}.

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (552), with CRLF line terminators
Category:	downloaded
Size (bytes):	28851
Entropy (8bit):	5.771311912057063
Encrypted:	false
SSDEEP:	768:B3v464PbyVqrYtdQ52pnbrwSmCsslOFFct0DMWbM/AR:Bf464PbyVqrYtdQcbrwSmCsQOrDMrM
MD5:	26433217E805A89CF41ADAC58221316E
SHA1:	BBF155E3C6D673D127021EF9B669338A5D9F3C24
SHA-256:	07AE623F7D42C8707E43608A6A946B0806C4753193CC29E89A296A7585556EBB
SHA-512:	6849E1896CCBA102880DD535BF3FB430F082E3CB12D4A649D038D673F31D85050B0781A416639BB38FBE669787D48CB655771097CF6F052A290250BC0D4CF35E
Malicious:	false
URL:	https://dap.digitalgov.gov/Universal-Federated-Analytics-Min.js?agency=FTC&pua=UA-36365578-3
Preview:	var tObjectCheck,_allowedQuerystrings=[],isSearch=!1,oCONFIG={GWT_UAID:["UA-33523145-1"],GWT_GA4ID:["G-CSLL4ZEK4L"],FORCE_SSL:!0,ANONYMIZE_IP:!0,AGENCY:"",SUB_AGENCY:"",VERSION:"20240416 v7.01 - Dual Tracking",SITE_TOPIC:"",SITE_PLATFORM:"",SCRIPT_SOURCE:"",URL_PROTOCOL:location.protocol,USE_MAIN_CUSTOM_DIMENSIONS:!0,MAIN_AGENCY_CUSTOM_DIMENSION_SLOT:"dimension1",MAIN_SUBAGENCY_CUSTOM_DIMENSION_SLOT:"dimension2",MAIN_CODEVERSION_CUSTOM_DIMENSION_SLOT:"dimension3",MAIN_SITE_TOPIC_CUSTOM_DIMENSION_SLOT:"dimension4",..MAIN_SITE_PLATFORM_CUSTOM_DIMENSION_SLOT:"dimension5",MAIN_SCRIPT_SOURCE_URL_CUSTOM_DIMENSION_SLOT:"dimension6",MAIN_URL_PROTOCOL_CUSTOM_DIMENSION_SLOT:"dimension7",MAIN_INTERACTION_TYPE_CUSTOM_DIMENSION_SLOT:"dimension8",USE_PARALLEL_CUSTOM_DIMENSIONS:!1,PARALLEL_AGENCY_CUSTOM_DIMENSION_SLOT:"dimension1",PARALLEL_SUBAGENCY_CUSTOM_DIMENSION_SLOT:"dimension2",PARALLEL_CODEVERSION_CUSTOM_DIMENSION_SLOT:"dimension3",PARALLEL_SITE_TOPIC_CUSTOM_DIMENSION_SLOT:"dimension4",PARALLE

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (53913)
Category:	downloaded
Size (bytes):	54254
Entropy (8bit):	5.308831293925594
Encrypted:	false
SSDEEP:	1536:g6cXRsoSceeDpWCWvME9bHBoX8Jq1K5LwL:sXqoSV/01K5Lg
MD5:	4910573778AD66E866D7FCAACAC9B452
SHA1:	AD24EB5585FE3054ABCD841F1D2C641EF3F82329
SHA-256:	62399C3BC5E5D0679BD487D24885A9A280620FD9929AB5240670E3CEEDCCD8DD
SHA-512:	3604311693DD17057978124CC74210E7F37D18A77E642D2375667FA13A3B40068DC20944CF724977110CC68AAA9F12BF1BF14D4204C03E55F92F3BC635B92D9C
Malicious:	false
URL:	https://www.donotcall.gov/js/lib/jquery-ui.js
Preview:	/! jQuery UI - v1.13.1 - 2022-05-18. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/datepicker.js.* Copyright jQuery Foundation and other contributors; Licensed MIT */..!function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(J){"use strict";J.ui=J.ui\|\|{};J.ui.version="1.13.1";var s,i=0,r=Array.prototype.hasOwnProperty,o=Array.prototype.slice;J.cleanData=(s=J.cleanData,function(t){for(var e,i,a=0;null!=(i=t[a]);a++)(e=J._data(i,"events"))&&e.remove&&J(i).triggerHandler("remove");s(t)}),J.widget=function(t,i,e){var a,s,n,r={},o=t.split(".")[0],l=o+"-"+(t=t.split(".")[1]);return e\|\|(e=i,i=J.Widget),Array.isArray(e)&&(e=J.extend.apply(null,[{}].concat(e))),J.expr.pseudos[l.toLowerCase()]=function(t){return!!J.data(t,l)},J[o]=J[o]\|\|{},a=J[o][t],s=J[o][t]=function(t,e){if(!thi

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=GIMP 2.10.22, datetime=2021:03:18 14:41:41], progressive, precision 8, 590x143, components 3
Category:	dropped
Size (bytes):	30654
Entropy (8bit):	7.679450595422665
Encrypted:	false
SSDEEP:	768:+iWZTDHsDa+hZV2lluYAHWWSbH5rmuxAmwue:+X5Ds++rV2S3lUnml
MD5:	2B723CB60E1189E6F6A701E772AA33F3
SHA1:	27404F1E2D3A4881FCA895F845AA9FD242FD9B11
SHA-256:	630B0E3748C059ABF9B147AE03D4FE5C1A600C67A0CA8D94B06F508B4C559432
SHA-512:	6F573FD6930065EAD1151FE99EC1E4E8DDB86C72F4825406A8D9757590B7CD40C823BFD57B010105F28C0AB05A36AD57FC854F6FB36BCB29F8E9F2E970F737A7
Malicious:	false
Preview:	......JFIF.....H.H......Exif..II...........................b...........j...(...........1.......r...2...........i...............H.......H.......GIMP 2.10.22..2021:03:18 14:41:41.........................................>.......................................................................i...................JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......>...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(.I"D......}..j^,..;ZT.x..O.Vr..X..Xh.r...aO..?..=.J.C.o...N..`.@..

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 960x155, components 3
Category:	dropped
Size (bytes):	19166
Entropy (8bit):	7.792161147460808
Encrypted:	false
SSDEEP:	384:rgCEqM8i6DEegZVLFEWp7WVM1oDNbqW0gIMf1ETQU:UlqM34kYWgVM1mLjI8ETQU
MD5:	F2E835B924C12939CFF7F05BD36D0B03
SHA1:	F975F099FE65D0C65F1AA80884FF83C014AC6799
SHA-256:	FD88DE076651C41B32E8C18285D3433BA8A0E010D67FA05CCC5A7E4AF4C90FCD
SHA-512:	53EB1F2A0BF22C4891479E57D85F95CD3138B2600CA48590CA1DA07029A6D022BE0ECD6FB0FCDA1DAFAC37F51DBDEDF2A87B2FCA94F6DB0B1FB74BC601A9104C
Malicious:	false
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"........................................E......................!......1...Aaq....."Q.2....#B37Rb.$Cr4ESUtu................................./.......................!1..aAQ...."#q....2...............?....\|9X(.K.-)`.f~HZr.U.R.G...ZR..iK..X%.,.......\.4..4..'.K.@...c.....T.@=)`.=.`.)`.9..........,...})`...`.6..4.....K...A/..zR..iK.O......,..JX#JX#....4.......i.'.,....`.)`...Lr...9X'. .)`.)`.a^.T.OJX%.,...C#.jX'..ZR.=)`.4..zR.).R.=)`...X#NA.R...T.@....4..4..4.....L.jX%.,.yR...?.,......,.O.A...K....K.v....s..,.......K..6...p...(JUw.,.....(..r.3H...,....R.)...`......$}8R.F`Z.....,.t.........X(.;..,.t...X(...T.P=...S.....wr.8+...A.?.AXw.i.K..!..R.F.A....d....;.......R......._q....QOt......!..4R..,....%...@.V.bN..................<.....<...B"....J'm;.[0.K... .X`..p..86]H.../\|...}.....J~...@<{E...i.

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1277)
Category:	downloaded
Size (bytes):	1357
Entropy (8bit):	5.060674328443428
Encrypted:	false
SSDEEP:	24:ekt6t/ZyyIGb1RmGPJR7tnJOLig+KGb1R8IRXiYqDVkn4KxBr:eyyIGbCGbtJOLEKGb1VDq3st
MD5:	CE982BA885BC71901074B4453BF3917A
SHA1:	1C44364024B0791A8363276225FB7D59955212E1
SHA-256:	1D137F9B816994FF3DD240EF04942EBF47C48131C32B0ACC640DB3065755D496
SHA-512:	DCB975832F9E7B61622C78ED3E03838CEAEE87E7CE7028ADDE2AF7B4A8B1EC7B4BFA3C00D345CEA0BB2DF9E21D775B1BB9B9119102575D8B88A591A53E1BB37B
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/once/once.min.js?v=1.0.1
Preview:	/! @drupal/once - v1.0.1 - 2021-06-12 /.var once=function(){"use strict";var n=/[\11\12\14\15\40]+/,e="data-once",t=document;function r(n,t,r){return n[t+"Attribute"](e,r)}function o(e){if("string"!=typeof e)throw new TypeError("once ID must be a string");if(""===e\|\|n.test(e))throw new RangeError("once ID must not be empty or contain spaces");return'[data-once~="'+e+'"]'}function u(n){if(!(n instanceof Element))throw new TypeError("The element must be an instance of Element");return!0}function i(n,e){void 0===e&&(e=t);var r=n;if(null===n)r=[];else{if(!n)throw new TypeError("Selector must not be empty");"string"!=typeof n\|\|e!==t&&!u(e)?n instanceof Element&&(r=[n]):r=e.querySelectorAll(n)}return Array.prototype.slice.call(r)}function c(n,e,t){return e.filter((function(e){var r=u(e)&&e.matches(n);return r&&t&&t(e),r}))}function f(e,t){var o=t.add,u=t.remove,i=[];r(e,"has")&&r(e,"get").trim().split(n).forEach((function(n){i.indexOf(n)<0&&n!==u&&i.push(n)})),o&&i.push(o);var c=i.join(" "

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (6283), with no line terminators
Category:	downloaded
Size (bytes):	6285
Entropy (8bit):	5.121946787747159
Encrypted:	false
SSDEEP:	96:lKrpq4fjy7STjL7CkWQe1zvQe+Usck+skmZ1gucY5l0tT5gOH4bIU5gOH4bIp:l2dWWTjCkWNv8A9uB720
MD5:	0832EF1E4B15991FC88318041FA3FD7A
SHA1:	487141C50B89504CA436F559182F3C4A53FA63E8
SHA-256:	081EC4530BA98B81F1FB9DA0665542D0A295489EE02B9E124BEF44A9FB3089EA
SHA-512:	CA612F461F94A24CB19B3658ED80266FEB6CEBCDED40143873F8A7A0F059663D58D01412B58A8D3B4006029404E61E3094677537151D4A6B434C05920094C881
Malicious:	false
URL:	https://www.donotcall.gov/
Preview:	<!doctype html> <head> <script async src="https://www.googletagmanager.com/gtag/js?id=G-X2KH68RJRQ"></script> <script type="text/javascript" src="/js/gafourprod.js"></script> <title data-i18n="sitewide.page-title">National Do Not Call Registry</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1"> <meta name="msapplication-TileColor" content="#ffffff"> <meta name="msapplication-TileImage" content="/images/ms-icon-144x144.png"> <meta name="theme-color" content="#ffffff"> <meta name="description" content="Register your phone number to report stop or block unwanted, annoying,telemarketing, spam calls, robocalls to the FTC"> <meta name="keywords" content="Annoying, Block unwanted calls, Report annoying calls, Robocalls, Telemarketers, Avoid unwanted calls, Spam calls, Stop spam calls"> <link rel="apple-touch-icon" sizes="57x57" href="/images/apple-icon-57x57.png"> <link rel="apple-touch-icon" sizes="60x60" href="/images/apple-icon-60x60.png"> <li

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	870
Entropy (8bit):	5.087874082108298
Encrypted:	false
SSDEEP:	24:YHtAUKBHUcUU5EOQsJC/ErLonqgNXy+N6HCb1CR6Iv5QT7WE/ZgJcFu:YuNzPQOr0nqglyWKCb1CRrvy/LRa/
MD5:	F49F140E9F799B4E98595DB322AD0D93
SHA1:	A21A3BB6E86CB1F28043EA9EB1E72A3BB9ABA48B
SHA-256:	F624CC110ED691ECAB18697FB1CABD7BD0E01AE036A71549E8F81CE210F5F866
SHA-512:	ADD8E0E36EE301BB772880EC933DEB63DA4A935719F50228FE368F461BB1768F6FEEC4B49A82358011A17A8A4705649085C191B3876FC6EB6B761C6746562D5D
Malicious:	false
URL:	https://gov1.siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=SI_6yt4nfrpcp1HQTs&Version=15&Q_ORIGIN=https://reportfraud.ftc.gov&Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDTIER=lIjhYuMl2g&Q_ARCACHEVERSION=21
Preview:	{"InterceptDefinition":{"BrandID":"fedtradecommission","InterceptID":"SI_6yt4nfrpcp1HQTs","InterceptName":"Report Fraud-Feedback","Revision":"15","DeletedDate":null,"ActionSets":{"AS_00113461":{"ID":"AS_00113461","Creative":"CR_6ru8XWIwGF4Ymy2","WeightedSampleRate":"","Target":{"PrimaryElement":"SV_bxwR6s4wGy28kg6","Type":"Survey"},"ActionOptions":{"targetNewWindow":true,"targetEmbedded":false,"targetFullScreen":false,"resizeForEmbeddedTargets":true,"targetWidth":1000,"targetHeight":800,"displayElement":"","selectedDevices":[],"actionSetSampleRate":100,"actionSetContinueExecution":true},"CreativeType":"FeedbackButton","EmbeddedData":[]}},"DisplayOptions":{"displayRate":100,"noshow":"30","cookieDomain":"https:\/\/reportfraud.ftc.gov\/#\/","hasRandomization":false,"displayInterceptType":"onload","hideOnCookiesDisabled":true,"hideOnLocalStorageDisabled":true}}}

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (49585)
Category:	downloaded
Size (bytes):	887517
Entropy (8bit):	4.088450493375758
Encrypted:	false
SSDEEP:	3072:4zgI1NOD511WMjPFlxW8vbVpc511WMjPFlxW8vbVpD/MajXHZ+4W8BHUlQJohlre:n1WM08jVpk1WM08jVpD/VL
MD5:	2B0C485CFEA6028E154E557EE2965FCE
SHA1:	F0B35BF0D8214AE1997DA2EE73D011D253CFB3EF
SHA-256:	0F52A161B0A2129AFBEAE7BA70254196EB63DB84EE06578E0638AE0ECE058A32
SHA-512:	AAE44346D4C0B36ED2D4F64F62732C6958496D0F69801A96C2F9446C4179897567F14DFCFDCBC48642CE3069A12D1B100B66A1C96924E2A029814D755E02E3F9
Malicious:	false
URL:	https://www.ftc.gov/es
Preview:	.<!DOCTYPE html>.<html lang="es" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# ">.<head>. Google Tag Manager -->. <script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':. new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],. j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=. 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);. })(window,document,'script','dataLayer','GTM-KFKRFZQ');</script>. End Google Tag Manager -->. <meta charset="utf-8" />.<meta name="description" content="Informaci.n de la Comisi.n Federal de Comercio (Federal Trade Co

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	231
Entropy (8bit):	3.3606322888247524
Encrypted:	false
SSDEEP:	6:4WyeQJSrQJjv7CC73Sryqjc+1+SLcJyd56PdirB+lSQaqFV1Y:4WyecSrcjv7CgStD7Lcq56PgdqSY/q
MD5:	55E3B6470EE37BA22AE15DA89196A663
SHA1:	0C340C84A601EE222AFC79E25D15F113D29833F9
SHA-256:	25ABA9BA95F4053D38BA80B0EB73A3CE474A2F044A1BB863345027EE1ADD54E3
SHA-512:	53396476A156B3A312FD47511BB68C1E6C71D6F0319E17B07EA47F13D36CA3B7EE2E823AFBF3197BCAE1E78F8E30E382A8D83F1C85F31D885071ADF8DE63C38B
Malicious:	false
URL:	https://www.donotcall.gov/js/json/canadianAreaCodes.json
Preview:	["368,403,587,780,825,236,250,604,672,778,204,431,506,428,709,879,867,782,902,867,226,249,289,343,365,416,437,519,548,613,647,705,807,905,782,902,354,367,418,438,450,514,579,581,819,873,306,474,639,867,600,622,633,644,655,677,688"]

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64780)
Category:	downloaded
Size (bytes):	75389
Entropy (8bit):	5.317998421041909
Encrypted:	false
SSDEEP:	1536:4nzjSf/dcNANA2AWIIql+HbZ/f3OL4/4K:4zjSf/d8l+HbZ/PN
MD5:	25BFB70085441577363541B4DF4A77E7
SHA1:	0F9DEF166C5537480C274BCDF079ACADCBF0B196
SHA-256:	4018D7F0A983131974ACBEA85F1BE1A84C2CCA541C584F98B5C5C83413913695
SHA-512:	AC5FE942E0F74684DCA14BFD69F06A94DFE21485D9A9F4FE2360A5E194D1D180B4330015295E7700418D2BC5C271686337D359CDAB087775D543822E58A45137
Malicious:	false
URL:	https://gov1.siteintercept.qualtrics.com/dxjsmodule/12.ffd98a9d3b8cbf2075ed.chunk.js?Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDID=www.ftc.gov
Preview:	./@preserve.Version 2.5.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. (window["WAFQualtricsWebpackJsonP-cloud-2.5.0"]=window["WAFQualtricsWebpackJsonP-cloud-2.5.0"]\|\|[]).push([[12],{19:function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"e",(function(){return r})),n.d(t,"d",(function(){return a

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	6995
Entropy (8bit):	7.971582144460471
Encrypted:	false
SSDEEP:	192:9XQ82y7M9KAwTOYIAidQwEDzZyElwVcbaPA6:+ly7M9KzOVAuCIqLbAA6
MD5:	E9F1F0FE2D19F7499A3C3D72C06D5ECC
SHA1:	22AFE2EDBE7ED4ACD559CF6B096EE87542639350
SHA-256:	6FA476F450CD6FABCAD09142FBE504D2A8A6DE9233A3873885EC3282576487D5
SHA-512:	BCD7994E1CE8B71B8C250124C717DE8481B0012A449DB2EFD6BAB04C8F0956D0C3943C05F9CF643DDD2406F55C6EB189C37D1A14BCE6731DE708688973019FBA
Malicious:	false
URL:	https://reportfraud.ftc.gov/999.eb89264becfdfe17.js
Preview:	...#....@H.BD.k;..P`...._......".6..-...B.../...y..D.%._C.NT...o....m{.#r.K.LGhr.............d.e.q..=W..Nk0......g-?W..r.......4A.u.....&.../.W..Z.6".5..F..n.....d.8..1..5...K.^d...]A~&..^...........T^....aP...jF3.....x.}.MvF...e.b.....y.d....... ....P.(.HLb......b.r.}..J.2V..W..S..PO.......M...?"....v...L.}-n...K......7...........=_^....(.......k...>.1.......R..H...Z...Chc.4..Q......#_....9t1..k.x.".\.....".m..a!...z[o.R.G.......h\|.`.z...PJ...8k4...'7..w7F.R4..-.(A.{..`WM....C...Q....n..My_cr....N.......MZ..b....~..5?.b.L.f.=.....[.+...,.636.t.].$~.......].].vH9PfJ...HN.3.e.A..`....J.!...;.....f........z(3.....TJ..1..n.U.l4..,QZ....te.....o.#WGY$..L.x\|B.W-d..t..........`.a.&b7\uu.......x$..2..n..b"..T..=.I.\.Ml..7.`....../..J..@/l.=b0..)...f.e...Bgk......[.R.\.#.7.x0...;..H.&m.3.f.gr..."K)..#\|.g.L/..b.h.y...fL..v:..Ns f.Ae..BP._.._.&..}d.zf...t....u..K$W%Y7f.&.......g.wC.h.".:zq.MH.....K....\|.<a-t.a"O.f.. .....5.d.F.*/.E.

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 1440x961, components 3
Category:	dropped
Size (bytes):	120249
Entropy (8bit):	7.943886499511159
Encrypted:	false
SSDEEP:	1536:UVRXTitZ+DSjPRB6vaLB9g+1V/YC9okoxUUxkrBF5irgg4wfYQlLGahmupf8PkYt:4DM+W73BKa39jrBF2fXJRpe4hOp
MD5:	4CBE7342A5F85844F151E53AA7BE1D8A
SHA1:	C633CF95C3FA47711A104ACDF0AAC25079926B5F
SHA-256:	D9125D528A80C97565827EDAF21D901E0AFDC6D024314C24FCF04520199BE1B3
SHA-512:	16D5E0CB5D85567EC51A704E5D09D0C705E86A4B6269EB854F5A22EA56B3E835D5FE649AFAB6760D6A95F2EBD416302A2B5995FF3D9CBC3A2D21CD0BDEF79B97
Malicious:	false
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..:R.....>LQJ(....R.F(..)..(.....(.RR.b......AF9....i...Q..(.E.h..b.H)...........R.>.....S.:R.'z@...P.qK.(...KE..qK.Lq@4..)h4.AKE....E.Q@..Q@..4.P(.@..AN..eX^.........!. ..--....N4.b..QE..R...Z.!..ZJ..QE....c.1@..4.CLC3E..H...3@.h........1.M%).I@...E.......QM.4...:.........y.(....P;.S..P.O.M.....2)..Y'..t...

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1555)
Category:	downloaded
Size (bytes):	628537
Entropy (8bit):	5.903748006642219
Encrypted:	false
SSDEEP:	6144:CjzDNL3RJ7ZXOtUA3h1X/7MCyk2/tzCINSmN3taNJoMd8LhoM7:CjzDNLhbiB/wCj2BCIEmNQNJPd+ee
MD5:	EB61F469A719286E52E42883481932B7
SHA1:	01B0A44AB2B0045AEE03F3E73C6CEF55BE5CF316
SHA-256:	2B9146460C2E08F5F595A0A690043B54512F40A37C6AFF4AA9D0D88D72266B06
SHA-512:	4A762FE4A9C63914B6F0A93FAC317CF3ADBA5378A4D9E11F872ECE91254F7407F37F9A8D843D82F5C2174EF6752AAFF9C2CB2D88AB6DA1965205677305663098
Malicious:	false
URL:	https://www.ftc.gov/themes/custom/ftc_uswds/uswds/dist/js/uswds.js?v=1
Preview:	(function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}};e[i][0].call(p.exports,function(r){var n=e[i][1][r];return o(n\|\|r)},p,p.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}return r})()({1:[function(require,module,exports){."use strict";../. classList.js: Cross-browser full element.classList implementation.. * 1.1.20170427. . By Eli Grey, http://eligrey.com. * License: Dedicated to the public domain.. * See https://github.com/eligrey/classList.js/blob/master/LICENSE.md. /../global self, document, DOMException /../! @source http://purl.eligrey.com/github/classList.js/blob/master/classList.js */.if ("document" in window.self) {. // Full polyfill for browsers with no classList support. // Including IE < Ed

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65350)
Category:	downloaded
Size (bytes):	604447
Entropy (8bit):	4.226476805309404
Encrypted:	false
SSDEEP:	3072:yJ2JM6EGL3gk0+Z7VuC12hjmfvqvrKvqHWayYjZKdASUTUpgg2uGJYjoiniC1t8j:DVA3OnseLjYJFCS8668wDKS2gVGEm1
MD5:	5A1B6ABE76B5B2FF3C078039815160CC
SHA1:	8AEA3637B54277E4F0952DCD5A0A830BB353AFDB
SHA-256:	759E3D482634BB0A6670D6CD10B9BBEA43A3CECFE658C7984D39D9EC8C0881CC
SHA-512:	08BAAC95A6A886B5395E62FA6A57B29AFBC1B58107B0BD9560154CF30C5E5B960DBBC8E9226B4E3F54765DC25EC997B6532F25216C5E59619DAD239702A0AFEE
Malicious:	false
URL:	https://use.fontawesome.com/releases/v5.13.1/js/solid.js
Preview:	/!. Font Awesome Free 5.13.1 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.!function(){"use strict";var c={},h={};try{"undefined"!=typeof window&&(c=window),"undefined"!=typeof document&&(h=document)}catch(c){}var l=(c.navigator\|\|{}).userAgent,v=void 0===l?"":l,z=c,a=h,M=(z.document,!!a.documentElement&&!!a.head&&"function"==typeof a.addEventListener&&a.createElement,~v.indexOf("MSIE")\|\|v.indexOf("Trident/"),"___FONT_AWESOME___"),m=function(){try{return!0}catch(c){return!1}}();var H=z\|\|{};H[M]\|\|(H[M]={}),H[M].styles\|\|(H[M].styles={}),H[M].hooks\|\|(H[M].hooks={}),H[M].shims\|\|(H[M].shims=[]);var s=H[M];function V(c,v){var h=(2<arguments.length&&void 0!==arguments[2]?arguments[2]:{}).skipHooks,l=void 0!==h&&h,z=Object.keys(v).reduce(function(c,h){var l=v[h];return!!l.icon?c[l.iconName]=l.icon:c[h]=l,c},{});"function"!=typeof s.hooks.addPack\|\|l?s.styles[c]=function(z){for(var c=1;c

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	434
Entropy (8bit):	4.720230615985452
Encrypted:	false
SSDEEP:	12:UNJAE2B7hYz5oXoSNxpdXIk9rIysPE94aoM+A:WZ2B7qzm5Lp1Ik9rIysvzM+A
MD5:	77119203CA0DDEC77DD080884AC45FF6
SHA1:	F48551CE0E38FEAC8BD07C795ADF00B0CE969B4D
SHA-256:	34169AF71B02B45FEB08DBE27772638C0B3BED26FE26D9F015B019BE64E4389B
SHA-512:	BEA29FD1FCE6FE50A3B2192D4DA398AA03877C48662613AAA4C21D5510E120CFAFBE3F8E321D31D359F90028411B2D1AFC819DE326BB38B1B6E18CDDE15FA488
Malicious:	false
URL:	https://www.ftc.gov/core/modules/views/css/views.module.css?scewfd
Preview:	/* table style column align /..views-align-left {. text-align: left;.}..views-align-right {. text-align: right;.}..views-align-center {. text-align: center;.}./ Grid style column align. /..views-view-grid .views-col {. float: left;.}..views-view-grid .views-row {. float: left;. clear: both;. width: 100%;.}./ Provide some space between display links. */..views-display-link + .views-display-link {. margin-left: 0.5em;.}.

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	268423
Entropy (8bit):	5.568582442385208
Encrypted:	false
SSDEEP:	3072:R0p3LwAZVNSNcMzszFeItg8AjCBPIrTWR4YISfhm6t2nBsLq5yHXDeltzvsXshNR:CBcAFMgzFeqcGfhm6t+aq5yHXDelJsX8
MD5:	BD55BB2BD5E53386A0E3859C7EFA0C8C
SHA1:	8A590F4AFD8780325B8CEF2740FF1045D8D83F2E
SHA-256:	88E61CE56FBB74A8BD4D83BD2544F73541D1EB16FC2421F689C0F43A0A9B67DF
SHA-512:	5416D2B2628E5895E07412F3C64031730D683C42104A3E2C68FBC1049997CAD210FCD85106E236AD75C6CDCB77A7D7A3C1BCF6AA829D46F1913BAA291D894B7C
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-CSLL4ZEK4L&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_auto_events","priority":19,"vtp_enableScroll":true,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":true,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":15},{"function":"__ogt_dma","priority":9,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":17},{"function":"__ogt_1p_data_v2","priority":9,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","v

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	870
Entropy (8bit):	5.087874082108298
Encrypted:	false
SSDEEP:	24:YHtAUKBHUcUU5EOQsJC/ErLonqgNXy+N6HCb1CR6Iv5QT7WE/ZgJcFu:YuNzPQOr0nqglyWKCb1CRrvy/LRa/
MD5:	F49F140E9F799B4E98595DB322AD0D93
SHA1:	A21A3BB6E86CB1F28043EA9EB1E72A3BB9ABA48B
SHA-256:	F624CC110ED691ECAB18697FB1CABD7BD0E01AE036A71549E8F81CE210F5F866
SHA-512:	ADD8E0E36EE301BB772880EC933DEB63DA4A935719F50228FE368F461BB1768F6FEEC4B49A82358011A17A8A4705649085C191B3876FC6EB6B761C6746562D5D
Malicious:	false
Preview:	{"InterceptDefinition":{"BrandID":"fedtradecommission","InterceptID":"SI_6yt4nfrpcp1HQTs","InterceptName":"Report Fraud-Feedback","Revision":"15","DeletedDate":null,"ActionSets":{"AS_00113461":{"ID":"AS_00113461","Creative":"CR_6ru8XWIwGF4Ymy2","WeightedSampleRate":"","Target":{"PrimaryElement":"SV_bxwR6s4wGy28kg6","Type":"Survey"},"ActionOptions":{"targetNewWindow":true,"targetEmbedded":false,"targetFullScreen":false,"resizeForEmbeddedTargets":true,"targetWidth":1000,"targetHeight":800,"displayElement":"","selectedDevices":[],"actionSetSampleRate":100,"actionSetContinueExecution":true},"CreativeType":"FeedbackButton","EmbeddedData":[]}},"DisplayOptions":{"displayRate":100,"noshow":"30","cookieDomain":"https:\/\/reportfraud.ftc.gov\/#\/","hasRandomization":false,"displayInterceptType":"onload","hideOnCookiesDisabled":true,"hideOnLocalStorageDisabled":true}}}

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1112), with no line terminators
Category:	downloaded
Size (bytes):	1112
Entropy (8bit):	5.176495787052674
Encrypted:	false
SSDEEP:	24:Hexe83Mx7ybTssLZhu3yqsvnZhu3yzuZhu3yO:Hy/TZ
MD5:	0B473FCC5C9C5BF4799499561091523C
SHA1:	8E29B39993F70543C94B12D583E8E6478E9688F4
SHA-256:	CEC9BCFDECB02165663DBC97AF61020BA6156FBB4ACA4F3A5A6A7B30993573DD
SHA-512:	01D184A5960A78BA964040B178B933AAFE025C47B87BB465F23299D8C2062EB7C3D57B8ADB603880E9A222B07A3807B0728CEC59FD965632F1AEA443080F87EF
Malicious:	false
URL:	https://www.donotcall.gov/css/verify.css
Preview:	.rnl_hp .rightNavLinks{margin-top:40px}@media only screen and (max-width:768px) and (min-width:481px){body:nth-of-type(1) .rnl_hp .rightNavLinks{margin-top:40px}}.form_field_right{margin:-27px 0 0 220px;width:250px;clear:both}@media only screen and (min-width:150px) and (max-width:480px){.form_field_right{margin:10px 0 0 0}}#ContentPlaceHolder1_btnVerifyRegistration{width:200px;background:#39c;color:#fff;font-family:Tahoma,Geneva,sans-serif;height:30px;-webkit-border-radius:15px;-webkit-appearance:none;-moz-border-radius:15px;border-radius:15px;border:1p solid #999;text-transform:uppercase}#ContentPlaceHolder1_Button1{width:200px;background:#cc6733;color:#fff;font-family:Tahoma,Geneva,sans-serif;height:30px;-webkit-border-radius:15px;-webkit-appearance:none;-moz-border-radius:15px;border-radius:15px;border:1p solid #999;text-transform:uppercase}input.th_v[type=button]{width:100px;background:#287aa4;color:#fff;font-family:Tahoma,Geneva,sans-serif;height:30px;-webkit-border-radius:15px;-

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15406
Entropy (8bit):	5.734144390241774
Encrypted:	false
SSDEEP:	192:jOYaRwHXcOHMVkRf98kw7IxwTQwRbQgiLmQdyYluQ1SDPbAOM/ZVUlFwIeNylfq:jnaP5G/8kfxlVLm6lu+SDTAO+l4U
MD5:	37103B865E978489B1DD08A14B0ABAC7
SHA1:	D47484F07A21390A2415D9879AF3279B9D6CE9DB
SHA-256:	A7C75D044EBB4E9D0175BA4FD4FD88455C098AD13F048EA060CC7DF643D023D3
SHA-512:	7F11A2D60EBED605D364D5E4537975FBC854663B84ACA21DB6A0F4955C1DA2EA6CF1018230090239EC469877C070873AE63AF919D788E499759A469E7EFCED3A
Malicious:	false
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... ...........................................`-...................a*.........................qU..................................m..............................x........j.................m...................j...b................u...................c,.......{........................z..r...........f(............\..\|.....n..r..p..o......[..f..................h...Z.....\|................\|.....u..\|................s......................................n................l.......................................x................{......................................x..............................................................e+...................................................`(.............................................................`...............u.........y...............`...............

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (611)
Category:	downloaded
Size (bytes):	27242
Entropy (8bit):	4.3631679730758375
Encrypted:	false
SSDEEP:	384:6FamwIluB0sJQqCeSQup5szCUXAG0VVi82OgoKACZQQofNJXY3gW3:663Mp5If8WOmgW3
MD5:	DF3D48946E8D3F5A83608308EDBB4B86
SHA1:	47B9C40C97ABF2658DF96B1C06109324E15E1A00
SHA-256:	570A6631252B8A52DF4DE0E953AE77DBDF524DFC3637CDA2840494A0D2B49499
SHA-512:	36EC1CEC72DC3245730C813277C645525473CC5232E85CD23503B8593D90264F335E61A16D364A1E6C41922820B40BA7C0F46B19F4B91DB6A0CF5E31E778DDEA
Malicious:	false
URL:	https://use.fontawesome.com/releases/v5.13.1/js/sharp-regular.js
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <meta name="viewport" content="width=device-width, initial-scale=1.0" />. <link rel="icon" href="https://www.cloudflare.com/favicon.ico" />. <title>Not Found</title>. <style>. body {. font-family: system-ui;. font-weight: 300;. font-size: 1.25rem;. color: #36393a;. display: flex;. align-items: center;. justify-content: center;. }. main {. max-width: 1200px;. margin-top: 120px;. display: flex;. flex-wrap: wrap;. align-items: center;. justify-content: center;. }. #text {. max-width: 60%;. margin-left: 1rem;. margin-right: 1rem;. }. main > section > div {. margin-bottom: 3.25rem;. }. svg {. margin-left: 2rem;. }. @keyframes eye-1 {. 0% {. transform: translateX(0);. }. 10%,. 50% {. tr

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3034)
Category:	downloaded
Size (bytes):	269937
Entropy (8bit):	5.56445672628397
Encrypted:	false
SSDEEP:	3072:4HlgAhzgNSNow8VNz3I168FF1+TYc20DCSY1KGoub1QgD4tL+aVsQCEfImN8LMjg:czhewMNz3EqSJD4tLfV9CEfLN8aAb
MD5:	B272C4FF6946F7D51BC18619D844705D
SHA1:	597671988C70AAB1D1FB9570A69312A091B7A8B5
SHA-256:	D2085EB0D8D32593A414EE52B175D6F8C5FD81411D05BAB07751D18AC7E23A65
SHA-512:	EED6095844D7808BC8C35F0216D46E9B54F218E55977337232B8BC87EF6972C0BA57A332D97BF5B942725654261C21EF65520564D71B519F611803FB7FF3E7DF
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-X2KH68RJRQ
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0}],. "tags":[{"function":"__gct","vtp_trackingId":"G-X2KH68RJRQ","vtp_sessionDuration":0,"tag_id":1},{"function":"__ccd_em_outbound_click","priority":0,"vtp_includeParams":true,"vtp_instanceDestinationId":"G-X2KH68RJRQ","tag_id":3},{"function":"__ccd_em_download","vtp_includeParams":true,"vtp_instanceDestinationId":"G-X2KH68RJRQ","tag_id":5},{"function":"__ccd_em_page_view","vtp_historyEvents":true,"vtp_includeParams":true,"vtp_instanceDestinationId":"G-X2KH68RJRQ","tag_id":6},{"function":"__ccd_conversion_marking","vtp_conversionRules":["list",["map","matchingRules","{\"type\":5,\"args\":[{\"stringValue\":\"purchase\"},{\"contextValue\":{\"namespaceType\":1,\"keyParts\":[\"eventName\"]}}]}"]],"vtp_instanceDestinationId":"G-X2KH68

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (6346), with no line terminators
Category:	downloaded
Size (bytes):	6348
Entropy (8bit):	5.114599469288821
Encrypted:	false
SSDEEP:	96:lKrpq4fjy7ST/L7CkWQe1zvQe+Usck+skmZ1guceoT5gOH4bIU5gOH4bIp:l2dWWT3CkWNv8A9uS0
MD5:	326F88E9CBD29FE1A5A2A83A2EE974AB
SHA1:	604D6B1530FF950C8D27529E854C464D73916A46
SHA-256:	0D8E44A98C849404C7A091A79422C8148E30B966EE864AD2ECB778BD8B53E2DB
SHA-512:	0825ED718CE38853E469AFCCD314B4A0D5863ACAD46849015ADD6E6EEDC7BE266EE08ABE940276CB5F2E7BC256107B15F1A8F375762C83ACF1B96B2ABF4F6703
Malicious:	false
URL:	https://www.donotcall.gov/faq.html
Preview:	<!doctype html> <head> <script async src="https://www.googletagmanager.com/gtag/js?id=G-X2KH68RJRQ"></script> <script type="text/javascript" src="/js/gafourprod.js"></script> <title data-i18n="sitewide.page-title">National Do Not Call Registry</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1"> <meta name="msapplication-TileColor" content="#ffffff"> <meta name="msapplication-TileImage" content="/images/ms-icon-144x144.png"> <meta name="theme-color" content="#ffffff"> <meta name="description" content="Register your phone number to report stop or block unwanted, annoying,telemarketing, spam calls, robocalls to the FTC"> <meta name="keywords" content="Annoying, Block unwanted calls, Report annoying calls, Robocalls, Telemarketers, Avoid unwanted calls, Spam calls, Stop spam calls"> <link rel="apple-touch-icon" sizes="57x57" href="/images/apple-icon-57x57.png"> <link rel="apple-touch-icon" sizes="60x60" href="/images/apple-icon-60x60.png"> <li

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	800
Entropy (8bit):	4.694665334624766
Encrypted:	false
SSDEEP:	24:2diddubfQM9RFPrdYgVYA/9HvrO7/35UK:c2kjdVVTs/5
MD5:	42B4AC468597239A3D96DB04C363277E
SHA1:	4CD2BFE2859F99793F1C2E27D0619A28C7D2E107
SHA-256:	54F6653A149C83B73515CC2EC032A18151B57D3FFE97EF04495CE6623E48D1BB
SHA-512:	7D260611F638544F90C0D86CC69FA98D559F90640D645D5122C8C87132B6B4C4F69306F7DFC8893F348DA27AB568EEB68784BCD74D9DF749E4E7E92C8204CBF5
Malicious:	false
URL:	https://www.ftc.gov/themes/custom/ftc_uswds/uswds/dist/img/icon-dot-gov.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64"><title>icon-dot-gov</title><path fill="#2378C3" fill-rule="evenodd" d="M32 0c17.673 0 32 14.327 32 32 0 17.673-14.327 32-32 32C14.327 64 0 49.673 0 32 0 14.327 14.327 0 32 0zm0 1.208C14.994 1.208 1.208 14.994 1.208 32S14.994 62.792 32 62.792 62.792 49.006 62.792 32 49.006 1.208 32 1.208zm10.59 38.858a.857.857 0 0 1 .882.822v1.642H18.886v-1.642a.857.857 0 0 1 .882-.822H42.59zM25.443 27.774v9.829h1.642v-9.83h3.273v9.83H32v-9.83h3.272v9.83h1.643v-9.83h3.272v9.83h.76a.857.857 0 0 1 .882.821v.821h-21.3v-.809a.857.857 0 0 1 .88-.82h.762v-9.842h3.272zm5.736-8.188l12.293 4.915v1.642h-1.63a.857.857 0 0 1-.882.822H21.41a.857.857 0 0 1-.882-.822h-1.642v-1.642l12.293-4.915z"/></svg>

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	703
Entropy (8bit):	4.906157453368071
Encrypted:	false
SSDEEP:	12:tHG7bMKcCmK8A3P41z2iHMRoaOyMFUNvIFExf3TkZWXcXcKMlRMQ/ZqkBq5lNWPg:tyRBP41z2NK90I6xbxX4LuMGlq3Nq7c
MD5:	74F0E0B04AB3C0976630DFC50D7A060E
SHA1:	8FE641DF217F7E4091CE64793FA7B19C3F8A3BD1
SHA-256:	468AB0514D2DB0BA96FE12564A8CF66AA86F9EE82F71BA0132810DEB4FE4C188
SHA-512:	8326CB53DB0A9A0556C504717302DB1175A5B15055B23C3A88CB532A306DBDF2E810632EB8DBEEC4F11E79627C68C4E8033E403A3DBF7329975E6818F29762A9
Malicious:	false
Preview:	<svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="exclamation-triangle" class="svg-inline--fa fa-exclamation-triangle fa-w-18" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512"><path fill="white" d="M569.517 440.013C587.975 472.007 564.806 512 527.94 512H48.054c-36.937 0-59.999-40.055-41.577-71.987L246.423 23.985c18.467-32.009 64.72-31.951 83.154 0l239.94 416.028zM288 354c-25.405 0-46 20.595-46 46s20.595 46 46 46 46-20.595 46-46-20.595-46-46-46zm-43.673-165.346l7.418 136c.347 6.364 5.609 11.346 11.982 11.346h48.546c6.373 0 11.635-4.982 11.982-11.346l7.418-136c.375-6.874-5.098-12.654-11.982-12.654h-63.383c-6.884 0-12.356 5.78-11.981 12.654z"></path></svg>..

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12236)
Category:	downloaded
Size (bytes):	224792
Entropy (8bit):	5.559173144452795
Encrypted:	false
SSDEEP:	3072:eFAZVNSNcyzsz/hY8n9CBPIrTW7selfK6St2nBsLqA1uYlQ:0AFygzAhfK6St+aqA1uYe
MD5:	00E79CB399D41352006A73951A45BBDC
SHA1:	41B88563AC1EEB2DFD8985ED9CA4653DDAD49380
SHA-256:	5A53ACFEF6494AF41E58B930A25D0E587007091E9BE73E1913C2EE434E056048
SHA-512:	5AEB416993F2B3F2A377483FFE69E58BCCEDF516F9308FE637545985ABD7EC9F2AC2D8C53E0CA5F7505C9C99182A4E31A3BCB02E27475E46DF286A7E15CD5573
Malicious:	false
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-KFKRFZQ
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"118",. . "macros":[{"function":"__e"},{"function":"__cid"},{"function":"__ctv"},{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"eventModel.socialAction"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"eventModel.socialTarget"},{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"QUERY","vtp_queryKey":"

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1234
Entropy (8bit):	7.776462537472208
Encrypted:	false
SSDEEP:	24:OKOu+8EhxnvFOSqWM63A8gffg1ihFi7r3If8lPyzhhDHmVBdUFutR4:wu7Ehn5M0gffG4injyfDHaUFsC
MD5:	E11468F375F0D022BB0A3720A10ED01D
SHA1:	C3A0AB00F7E999CCCCC64C0EEECA5E43DE7516C4
SHA-256:	1A27FEAC5149B3C5118A7915E3BEF7A5FEDE9C15E476C531CD0707BC6D848625
SHA-512:	0D42B6B37599B9FAA17E3C145A08C4ACDA9823B33A6572AE2C9EC4174FCD579F20CE257DB8572B5613A9EEFF9695F93318B3D00B1D23C2890758C99C7B775EB7
Malicious:	false
URL:	https://reportfraud.ftc.gov/assets/images/topSplashButtonArrow-white.png
Preview:	.PNG........IHDR... ... .....szz.....zTXtRaw profile type exif..x..[..(.E.Y.,.B............\|UvWWV.tL.H...B.c....;.?.......S....B...;..t.u_..]h....C.\|6c...z.....^.n?...7.<g..m;..z.m....n....m......h....L\|.ns.>.y.y...g.#...<w.R}H....#o=...q...m=.....FD..:H.=n....l.~....LE.....U.aAy..(.....$...+.5.,(.Q".l...(..d.....^!.....X}.'.0.....96..P.K,..Mk.J........F.+..rq4..D.]r......c..wX....SY.].....,...4....r.(B..3.N....i...)..`.A...B...^..G....=._@.D\|#7..9...97.(-[/.T.h....(.$...`.h0.,,..H...$9r.Qb......5.hTU....ES3K..O.#LRL..r...3FgX.\\|....X.XI%Wl....X.ZM57...o..k.R.:.R.]z...........8t.H#_.m.......6..e.WjP....y..d.b>...$...'..(.?.MfG.x(....h........+._rs.>..........6...Pky.Qx..O.........eoy..^....:..8}.T.=.r.....f....A.x ...g.>:w.\|...{u.c.}d.....w.<.../e.....I.v...J....NVsn.C.........@9.Lm$H..>.r..\|l..0.6FX....,...2%.\jr..@.*..TG.P<....7.k..~&.G.O....1....8_..}>........0...$.".3Z..&m..U..A..to.....\G./1.ow?.Nx.@p......bKGD...

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	7905
Entropy (8bit):	7.975649694296722
Encrypted:	false
SSDEEP:	192:FDS20h9tYejo/EpmwOX+mPhQrovQFNQ2I51C0:Fboosk2mm0Mx0
MD5:	0FFD0F7D652E4FD7FD7977F04C3A7AC0
SHA1:	2E0791CD833DD340B68AE0918BE46978582B5B5E
SHA-256:	20CF49EDA414548D40DDD3AC19D01CDF17479BDC56540497AEF4DB5CC28107E1
SHA-512:	E5CD905F53A3F5FA642E2520D3183FAAB154D05784A54C3544B2666821D9EF9BB741C52867A84CE048524F847F0DD7B692FEDB1DB374B46A6A27AAD14E7E87AE
Malicious:	false
URL:	https://reportfraud.ftc.gov/225.0130806582458f70.js
Preview:	...#....=.Q......!}._P..S......x..n\...U.x..k.V.)_.Cu....\|T.......I.o.T.^.A.3.MY.8&...-.......1.#tR\|..i.N.S........"....&..j.5+....D2.).L.%...4._..0\\|/%..FU"0.@..._.../Or.`cQ).I.Gy......S..nf...@Pr.....$(...rQ....?.h0.z..-....J.P)..g.......1.N...+7u.M...r.E....Y.E.$.?,....u.Di.E.v..{..k..b.....w...D..70.)..K...E.0.?.~.....".....Of.p......_.I=.O..R.I.X.?i..5?.Q..&.J".b....M.o.?.p...u...qDw._.E.L$.......:..f..N."......e.;.....x..D.1..}......+._....b....ePy..A.h.E:M.mcmZ?..I5;s..f..) x...v..<..p.n..P'.....II.T.q..8..1_.z.......".ynL.c..<s...........=..Y...ms...Z;.@.fp$...t..I..YEB...]~..#...7*Il..>b4.$.Cu9...1.Y...\.....\|7'.........j..".U_...9\|zc...$.Jt.~.J......".f&.R...}..~s.8.;.....v.p........KS@..9.Y.X.z.:...k.U....'O.g.......-.2.q..#......Z..p.D.....H.......y...x...H.............xv..p....k."r.6^h..3..l.zu.n.I.^.d.^P]..jZ...m.#.J...>N...AW.H.3.f..].X.^..r..j....F?@..U....].....o3\!...).B.........V..c.F.&....l..GI@.-...e.%.Z......'.G..I..k

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1753
Entropy (8bit):	4.941493927855892
Encrypted:	false
SSDEEP:	48:Ncz23grQdJs9uCsJsHrNHi5sOh3AsY5ip6PsTMSsDfOIKEXkQEXHXhEpXGXJtHsu:o23gus8CsJsHhHusIQseiMPsTpsDfORl
MD5:	E6E03548F7CD3FF2520E3BE4EB638609
SHA1:	3CFC4AF994DC0440CE658CD1E337DD3D946864F9
SHA-256:	CC6570D3E437B61217958A3591010B60DD964E80A7E06EE5356E1E2D0FB29547
SHA-512:	859A9BA6DA3B06F3D2537DA512E637CE3E7A3EFBB57A9D07DF078A84845662124122C2B468DBAC04087DE25B78AF0EA4DB124373644F0B7C443BB4745AD62C6C
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/dialog.css?sbs84s
Preview:	/!. jQuery UI Dialog 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/dialog/#theming. */..ui-dialog {..position: absolute;..top: 0;..left: 0;..padding: .2em;..outline: 0;.}..ui-dialog .ui-dialog-titlebar {..padding: .4em 1em;..position: relative;.}..ui-dialog .ui-dialog-title {..float: left;..margin: .1em 0;..white-space: nowrap;..width: 90%;..overflow: hidden;..text-overflow: ellipsis;.}..ui-dialog .ui-dialog-titlebar-close {..position: absolute;..right: .3em;..top: 50%;..width: 20px;..margin: -10px 0 0 0;..padding: 1px;..height: 20px;.}..ui-dialog .ui-dialog-content {..position: relative;..border: 0;..padding: .5em 1em;..background: none;..overflow: auto;.}..ui-dialog .ui-dialog-buttonpane {..text-align: left;..border-width: 1px 0 0 0;..background-image: none;..margin-top: .5em;..padding: .3em 1em .5em .4em;.}..ui-dialog .ui-dialog-buttonpane .ui-dia

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	43676
Entropy (8bit):	7.995185340481803
Encrypted:	true
SSDEEP:	768:+F5okevSy+U4vyRUQdmrcol9k2NnfClBES6EaChWSm+lbm2pKGYItm9mOCEP:ylD2HdmIoEufCcfShWS0YNtm9mmP
MD5:	F8B4E25E363E59E7FD30A3850E2DD974
SHA1:	F9036C3E0AD513DBA09630459C7CD2F8181D8C47
SHA-256:	093EF30EB164A3E6FAF746904EE192BD85A6B8C463E181C35E257B444AE493AF
SHA-512:	1CE103DB7938D11B9AFA062CD43D9DCB2D96FDE2046A21292686BA74DA1898ABD0C8998EAFFCCBFA486E5BD7B047B7FCBC29B4C7150ECD208B754017687E47B1
Malicious:	false
URL:	https://reportfraud.ftc.gov/106.f9ef06dce04acc21.js
Preview:	[<.S2..r;...v..F.z.J..\|.......n%B0.@U.H:.am.f...PT.IB5ds..IhL...).y..<.j5/.fa4.....$.....{.....kdY^\|.e.f.,...ao.M^[...u.....x.H{C..>.....w....w. ...O..\..(i.Q2.k....O.l2..L....=...........zZmg1..~=..}.yTB..$..MO.lfQ....y.......$0...d.]..^_..R...G.$.....f]....!.$9...>uV...G..@.........^..k.}.2+..~b..>...!;..VUw+).dJ.S.L8.."~....U..C. ....e.O+.>.Qs .C... .b;.3...&Gz{.Sj..3.Q.r..F._..:....:....f....y...3ex..5].bT...=.`..R]..y.....}9.,7....S...i[....O0d.T...L:..p.R...&.#O.'.....[g..&w....p.}.ST..4pl.......r..pf.W.P..-....w..{R...C..y.c^....).I..ct.-y....2l...%....Y.RW.....Z\.c.nSI..M.{.;.)~. 3.1...6....V.w.{.....:.U...FT...U.R..h:..V..i..Z......0L^..-[}...?I...."...b...5B.nJ...Cv.@....V..Zo..F.3..,...=j...!..%.......6.:.,...TF.7....I.-......I.....ML....f....Mm=.....)....9.c......[...........v.u~EF..8^<..&_....q..W.1.\......%.k/h..`=.....`~..:~y.....O@......xc..z^u!...g.....^....&..]...w.....jm~.g....R.mU..v=...C..:...b..m.....(.Wo.....T...

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5782)
Category:	downloaded
Size (bytes):	5924
Entropy (8bit):	5.185989144737854
Encrypted:	false
SSDEEP:	96:92uXqpNCQ2Ae9SFwzWdsjAWrHXfq7rE9Qn4qlQdETJt24vB1bVbcP+y21bhCQ:FX2ne2CAcPCE9Qn3UQF5bCCbEQ
MD5:	131CA00AF887CB62FA5AE0F6E59F13CA
SHA1:	64D7BFFF7AA34963E588D3D278B806931642BF7D
SHA-256:	A596C0EFA0E4CAEA039FB6907DDE73EDF53D5171217C680A4E5038710A337265
SHA-512:	049AD269111ECABC2FF689C6304F878AA1BB4DC05B57F6E6F6412761D49EB97C13678843C23936BA626A956AA3157C3B61329029BE6201C04238E210382D48F9
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/tabbable/index.umd.min.js?v=6.1.2
Preview:	/!. tabbable 6.1.2.* @license MIT, https://github.com/focus-trap/tabbable/blob/master/LICENSE.*/.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self,function(){var n=t.tabbable,o=t.tabbable={};e(o),o.noConflict=function(){return t.tabbable=n,o}}())}(this,(function(t){"use strict";var e=["input:not([inert])","select:not([inert])","textarea:not([inert])","a[href]:not([inert])","button:not([inert])","[tabindex]:not(slot):not([inert])","audio[controls]:not([inert])","video[controls]:not([inert])",'[contenteditable]:not([contenteditable="false"]):not([inert])',"details>summary:first-of-type:not([inert])","details:not([inert])"],n=e.join(","),o="undefined"==typeof Element,r=o?function(){}:Element.prototype.matches\|\|Element.prototype.msMatchesSelector\|\|Element.prototype.webkitMatchesSelector,i=!o&&Element.prototype.getRootNode?function(t){var e;return n

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	271154
Entropy (8bit):	5.568854890490661
Encrypted:	false
SSDEEP:	3072:sGMcpAZVNSNcMzszFeIxJ8DjCBPIrTWRsYESfhmpt2nBsLqOytXDeltzvsXFohh6:xdAFMgzFeAY0fhmpt+aqOytXDelJsXh
MD5:	492886CCFFD11B4B2F6C2290E6E00CC5
SHA1:	151408DC842C59FFAA63B3471DB8E29E6C7E625E
SHA-256:	2E92331AB067248F484BED8649C5E5C7CDDAC96BFDA327AC04E86325BDC1EFC5
SHA-512:	303E5F6198BFF14D9E5AE84C563B220136982E53ECA4FC5F8E5BFE33E543C40C3ADA623E2011784F8B040EA8C65028DE4DF44C7A8BA41865DD936F11A4EFE1D2
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-B59RVWNH5N&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_email

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (494)
Category:	downloaded
Size (bytes):	726
Entropy (8bit):	5.16198613984709
Encrypted:	false
SSDEEP:	12:UOoa343RkfLhPbC4sKjUMbHxuFTwaArszKJKdk5eXkseJ6qC2J+N9m:NUkzhbOSHxuRbzIuk5eX5eJzCg
MD5:	83E8D6888561D40A9E6B93C140FE9B1A
SHA1:	39831FF7F89DA80F7910CE309822B36BCDA458E5
SHA-256:	841A1F14ED43953DCFA4ABE94978AE9F92116169F8E638B248C091DD5CC84BD3
SHA-512:	1A35086F15DD932F6C45D36ABE4B7A3B0DD60237A24E442EC1662C8D9344F9F5098E8754D9724029FE3A3AD85E5FC01D2CBF2CEED2372A3001D6A8D5C7C2FC89
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/scroll-parent-min.js?v=10.1.8
Preview:	/!. jQuery UI Scroll Parent 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery","./version"],t):t(jQuery)}((function(t){"use strict";return t.fn.scrollParent=function(e){var s=this.css("position"),n="absolute"===s,o=e?/(auto\|scroll\|hidden)/:/(auto\|scroll)/,i=this.parents().filter((function(){var e=t(this);return(!n\|\|"static"!==e.css("position"))&&o.test(e.css("overflow")+e.css("overflow-y")+e.css("overflow-x"))})).eq(0);return"fixed"!==s&&i.length?i:t(this[0].ownerDocument\|\|document)}}));.//# sourceMappingURL=scroll-parent-min.js.map

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1497
Entropy (8bit):	4.962345250034442
Encrypted:	false
SSDEEP:	24:NfkzhbkXkSxkODrtm00QUF1lAeyiAvdXzrMft9jcvAeI/AvtQ8bRfJNC:NMz2XZR2lAFiAvdjrUfjIA9AvGCC
MD5:	1225EE931C347C7A5D671A851F39FEF8
SHA1:	54B65D3B4F4805D9FB49AADC1B011D0D4E6F6E57
SHA-256:	FAB4A6230026F47FFAA9A06474549D62C064DDEE0AE8C532BA30EF51E2511B2C
SHA-512:	824202DA9774AE562D447AF2DAE79246A9CD0FFC9E472B8455A0DA1DF6E71CFEBFFC2F04E732778792670801C34BA0FD97ADBEFF824353225206D4821DFBB0D7
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/button.css?sbdm6u
Preview:	/!. jQuery UI Button 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/button/#theming. /..ui-button {..padding: .4em 1em;..display: inline-block;..position: relative;..line-height: normal;..margin-right: .1em;..cursor: pointer;..vertical-align: middle;..text-align: center;..-webkit-user-select: none;..-moz-user-select: none;..-ms-user-select: none;..user-select: none;.../ Support: IE <= 11 /..overflow: visible;.}...ui-button,..ui-button:link,..ui-button:visited,..ui-button:hover,..ui-button:active {..text-decoration: none;.}../ to make room for the icon, a width needs to be set here /..ui-button-icon-only {..width: 2em;..box-sizing: border-box;..text-indent: -9999px;..white-space: nowrap;.}../ no icon support for input elements /.input.ui-button.ui-button-icon-only {..text-indent: 0;.}../ button icon element(s) */..ui-button-icon-only .ui-icon {

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	12136
Entropy (8bit):	7.985337782571118
Encrypted:	false
SSDEEP:	192:L7XOX6vQmFUmhgZFgHsR7SVeTtogIjuYdRR7dUCuxjvONNs+Cva9hjPPMHHNLxiu:L7XOfyUmhgZmHs4g7KuYdP7CCux6KKP8
MD5:	5854308E49E8749E143DD5A38FFE1A68
SHA1:	F8D7ACF6EE9925EEDB8E3118C370B993780D599D
SHA-256:	59E5DDE457B2852ED0EF49CA2DCA09182FDE5AC6ACA4AB6D94F0EB03BE1D30DC
SHA-512:	4DCD144CF122A85D34ED675F68B448D23642E2D8948F01CBA6BB7D18405F6A57959A6452FB4980E84452EF511702D09B49E1EAD19AC81117F14ECF02C4FDE9D9
Malicious:	false
URL:	https://reportfraud.ftc.gov/836.3a84870d141ed8eb.js
Preview:	[..1..F.jH@`...v.U....6....Z...6F....Z....Tq\|..jE.:.W\...`.8E......^.;..7....3h..Q:.q....h.E.;=.K;>y.T__.D..N."c.2..4 .a......."L#...E.6.<.N...J.M...$l..,.SrQ%&...z.UJ.....^.$..W....nQ&%eN.Xf^..\......M..K.e(Zn.....F..J.....u.m..p.....G.2..y../.......2B..Y..w.BxG._.}I....D.P..X.v\|.oi.[..O.7./...(..9.C.....u.5..4r.xfC.U..z.V..M)..c!...=......C..x.\|.-<.....zC.G.C...'.H(4V..OL.B.;.J..%....V9.....P+..u..q.....~.q.e>7...^..0Z.S...8.5m.B...].]H..{UR.....$(Bd.c6E@..6#...>..p.......p}.k.)..-...}c.zM.....V^r~V.A&S.cO..2..(~...z..]n.q......r.......\Y... .b.I.s7.8?.$.2.....x.9Fq[."\X.....8w..8F...12;...[._..0X...S.......o...%.p.Ad....+$..;.j.4....c.k.8..M.....E._......:.....Obq..?.....YQ..$r{}Z.5.?."..+..F.....(...Q.h.Q...>Q.pd`.x(K.F...b..~B/..d&k....B....A......-......IQ....i...V.e.._Y7Xx.....k.....L.F....f#.k..$X...?..,..4..Z...:...S..=.^..x .r..^.ro.oDT%~...;{H.....O..<T..5..kfkQ...J7.....Q..S^6..'~%}..A. ....C,....<..@.v+.5..'....I3.,..

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2378), with no line terminators
Category:	downloaded
Size (bytes):	2378
Entropy (8bit):	5.184595057376465
Encrypted:	false
SSDEEP:	48:8+jBoyBwW8jg01QmcCAfqXnIKtt6OAcxStM+HHgJsoN/ToR1GE:jtErQLDSXIKPbAXgxTW
MD5:	6041BAA78F8C0BB29752972DAD4C08E9
SHA1:	51A9CFED77FF82336CD2E81FEA04AF8D84653A4D
SHA-256:	7BCF9A34493AA0BFEA5087F0F96FCD49E50214D558126A0F0A557B8A7DE51D54
SHA-512:	A3A5962943EB42D91B859357061AC788F336833FF59AC3D975E8F4AFB882B98C9CFA650B2E07F51A698FD15980F3A315D59A0329D76F3CC70A2C3F5C74A6827D
Malicious:	false
URL:	https://www.donotcall.gov/js/lib/jquery.i18n/jquery.i18n.parser.js
Preview:	!function(n){"use strict";var r=function(r){this.options=n.extend({},n.i18n.parser.defaults,r),this.language=n.i18n.languages[String.locale]\|\|n.i18n.languages.default,this.emitter=n.i18n.parser.emitter};r.prototype={constructor:r,simpleParse:function(n,r){return n.replace(/\$(\d+)/g,function(n,t){var u=parseInt(t,10)-1;return void 0!==r[u]?r[u]:"$"+t})},parse:function(r,t){return r.indexOf("{{")<0?this.simpleParse(r,t):(this.emitter.language=n.i18n.languages[n.i18n().locale]\|\|n.i18n.languages.default,this.emitter.emit(this.ast(r),t))},ast:function(n){var r,t,u,l,e,i,a,o,c,f,s,g,v,h,p,d,m,$,x,C=0;function A(n){return function(){var r,t;for(r=0;r<n.length;r++)if(null!==(t=n[r]()))return t;return null}}function P(n){var r,t,u=C,l=[];for(r=0;r<n.length;r++){if(null===(t=n[r]()))return C=u,null;l.push(t)}return l}function j(n,r){return function(){for(var t=C,u=[],l=r();null!==l;)u.push(l),l=r();return u.length<n?(C=t,null):u}}function w(r){var t=r.length;return function(){var u=null;return

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30676), with no line terminators
Category:	downloaded
Size (bytes):	30676
Entropy (8bit):	5.157967338821392
Encrypted:	false
SSDEEP:	384:L9i/IbUbymQbaHVhW77e72gf9kIanIYEckbqw+F7Q+Qo+CnUM:xCHVrzY9kmFFUR0
MD5:	3594CEDC8510E21BE595CDE30C5C9173
SHA1:	1125655748D1A9DABBD18F832FE76B6098CE4A7B
SHA-256:	7502B227884C7E9F5A5D4BC05658B6FDA6E56014B76B22B4F5D19A84E4CD85EA
SHA-512:	73E6EB8E46838B9026F808AC36C38F0E1BD0471222DA0DB1FE957D663125E7AC055B3A9DC8F775089549DF2BAC98582FCCB4703AAB719825CD718210E4AA57DB
Malicious:	false
URL:	https://www.donotcall.gov/css/styles.css
Preview:	body{margin:0;font-size:87.5%;background:url(../images/background-s.jpg) 0 -35px;background-repeat:repeat-x;background-color:#636363;font-family:Verdana,Geneva,sans-serif}a{color:#0b669f;text-decoration:underline}a:link{color:#0b669f}a:visited{color:#88a0b8}a:hover{color:#129ef7;text-decoration:underline}a:focus{outline:thin dotted}a:active,a:hover{outline:0}.body{margin:0 auto;clear:both}.clear{clear:both}.clear_3a{clear:both;height:20px}.clear_3b{clear:both;height:14px}.clear_3c{clear:both;height:17px}.clear_3d{clear:both;height:20px}.clear_4a{display:none}.mainHeader{width:90%;margin:0 auto}.mainHeader a:active,.mainHeader a:hover,.mainHeader a:link,.mainHeader a:visited{border:0}.mainHeader_img_i a:active,.mainHeader_img_i a:hover,.mainHeader_img_i a:link,.mainHeader_img_i a:visited{border:0}.mainHeader_i img{border:0}.mainHeader img{width:100%;height:auto;margin:0 0;border:0}.mainHeader_img_i img{border:0}.header_nav{color:#90acc3;float:right;font-size:76%;margin:-80px 0 0 870px;p

Chrome Cache Entry: 681

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1575
Entropy (8bit):	4.906161204290858
Encrypted:	false
SSDEEP:	48:YnS7riQg02ouDRl1u2JenEy2ouDRluAmE2ZO:Z7OduUeqmAmfc
MD5:	904ED05D37C9525409F52CF0AA7B5E24
SHA1:	426F70B4F53C84CDA48C68953A18056B1BD1AD98
SHA-256:	4E6B649F7D388E9A8C0F6618861BB4F37E873BF67AACE0D5E9261C216787369B
SHA-512:	366B7BA04024BF9074E27351BED61D27E5A756A6720DDB7E40D9AEF8F2F56713242161EBE5484B3616640917AA3E14BDA009F0CA356F4EC3A802B429FD56E15E
Malicious:	false
URL:	https://gov1.siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=CR_7ZANo3f2eTZGPe6&Version=15&Q_InterceptID=SI_8uImeHqBl1yuGVg&Q_ORIGIN=https://www.ftc.gov&Q_CLIENTVERSION=2.5.0&Q_CLIENTTYPE=web&Q_BRANDTIER=lIjhYuMl2g&Q_ARCACHEVERSION=21
Preview:	{"CreativeDefinition":{"BrandID":"fedtradecommission","CreativeID":"CR_7ZANo3f2eTZGPe6","Revision":"15","Title":"Creative - FTC.gov Feedback","ZoneID":"ZN_9ypT3vNZBT6rVcy","Type":"FeedbackButton","Options":{"Desktop":{"LookAndFeel":{"ButtonPosition":"right","ButtonText":"Give Feedback","ButtonIcon":"speaker","TextColor":"#FFFFFF","ButtonColor":"#5e35b1","BorderRadius":"moderately-rounded","UseCustomButtonPosition":false,"ButtonPositionBottomAdjustment":50,"ButtonPositionLeftAdjustment":0,"CustomButton":{"UseCustomButtonPosition":false,"CustomButtonImageName":"","CustomButtonImageId":"","CustomButtonAltText":"","ResizeImage":true,"ButtonPosition":"left","ButtonPositionBottomAdjustment":50,"ButtonPositionLeftAdjustment":10}},"HowItDisplays":{"DisplayType":"slider","SurveySize":50,"IFrameTitle":"Survey window","OpacityLevel":0.25,"ShowCloseButton":true}},"Mobile":{"LookAndFeel":{"DoNotShow":false,"ButtonText":"Give Feedback","ButtonPosition":"right","ButtonIcon":"speaker","TextColor":"#FF

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.554126181568605
Encrypted:	false
SSDEEP:	3:FIvrhxG6Wbw/MTgYwYvn:yH5Wbw/eB
MD5:	F6E9B393829B1A829280A43870018429
SHA1:	6B09804BD7C8651000F6D0DA6B87AED34ACDA5F4
SHA-256:	749B4AA5AB5415EB842C079FFBE07837C3753A77D049C22AD00AB2567EA32FCA
SHA-512:	8405C1A7BDFCDC63485CC774A1279DB425804CF5A4F5FC57306DB7BB2E3BC7E44BA55157BA799F3C1EA4243FC6DB25762E9148B661A8BFDB60E7F052D5AF920B
Malicious:	false
URL:	https://www.ftc.gov/core/modules/ckeditor5/css/ckeditor5.dialog.fix.css?sbs84s
Preview:	.ui-dialog ~ .ck-body-wrapper {. --ck-z-modal: 1261;.}.

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4305
Entropy (8bit):	4.565502257431684
Encrypted:	false
SSDEEP:	96:+WZMdOYZ7xmSW0mPyhx2soRRoy44lZKDMnAUn4TouX:+UGdxmuiyhYsCyyhiDOAy486
MD5:	355F4F1CEB77743CA3D22BD365A10D2B
SHA1:	3D339F12D7097AA04CBD4AD71528DEDAF7A39EB3
SHA-256:	E4F48E1F5558252EBA1D25BE60A35A35A024390CF4970E0652B9E654F9E0302B
SHA-512:	C2E79CE0BDE097173666F6A2B84D2E9E318CB7B93DEA2DE875056E9E3FD49843415260AF9B48E52B444543042680F53104C49A47268D8BCAF0BAD2DBC0548496
Malicious:	false
URL:	https://www.ftc.gov/core/misc/announce.js?v=10.1.8
Preview:	/*. @file. * Adds an HTML element and method to trigger audio UAs to read system messages.. . Use {@link Drupal.announce} to indicate to screen reader users that an. * element on the page has changed state. For instance, if clicking a link. * loads 10 more items into a list, one might announce the change like this.. . @example. * $('#search-list'). * .on('itemInsert', function (event, data) {. * // Insert the new items.. * $(data.container.el).append(data.items.el);. * // Announce the change to the page contents.. * Drupal.announce(Drupal.t('@count items added to @container',. * {'@count': data.items.length, '@container': data.container.title}. * ));. * });. /..(function (Drupal, debounce) {. let liveElement;. const announcements = [];.. /. Builds a div element with the aria-live attribute and add it to the DOM.. . @type {Drupal~behavior}. . @prop {Drupal~behaviorAttach} attach. * Attaches the behavior for drupalAnnounc

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	354
Entropy (8bit):	4.67404150296403
Encrypted:	false
SSDEEP:	6:Un2y4tiWWkpk0Ek28tuKVF91ybMw1RLqMWlG9cKJLoa48L+w4co8x/LJGDF/FakL:Un4xWCEkb7v94bM+tqMWKMQ4cfNGDNFJ
MD5:	494E321752F0C34D8F262CB2CFAE2738
SHA1:	523C439BC996DD41DEE4D94064F0FCACC0832499
SHA-256:	8A4BA9D92BBFE080721C50075F8AE6318DC17DA0EEFD10CD4D0E715D2ADC5F67
SHA-512:	172488B00F5DB73105F63499323A7FBB61B99A89CD2C41D8AB37F75E59D09E07FC158F4759B62C2B8C8788F56A8CA38BF592A64D85D6A50AFA8B4E0C734A49F3
Malicious:	false
URL:	https://www.ftc.gov/modules/contrib/addtoany/js/addtoany.js?v=10.1.8
Preview:	/* global a2a*/.(function (Drupal) {. 'use strict';.. Drupal.behaviors.addToAny = {. attach: function (context, settings) {. // If not the full document (it's probably AJAX), and window.a2a exists. if (context !== document && window.a2a) {. a2a.init_all(); // Init all uninitiated AddToAny instances. }. }. };..})(Drupal);.

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 182x326, components 3
Category:	dropped
Size (bytes):	7202
Entropy (8bit):	7.534916788713787
Encrypted:	false
SSDEEP:	192:SjZFkDKwi4TCX9w+1owP01uxqiwcadn/hluL2JyuKp:gWKw8X1owGGxWzuuybp
MD5:	B820E1EE464244612E53BEB05F38D5C5
SHA1:	DB0B4C69FDA5DD8EFA036A050134A1F2889CA2DE
SHA-256:	06DBBFA5B9EA8711314B6C7FC89735A97DDB73D6FE88EAB8355A7E5577CCE54B
SHA-512:	718E363909451ADE4B3840917ACF9188122F2653F2ACB64657ABD59ECEC05A1F96946313CA90B72974102F9DAAF49BB1C0179912EF70BC80521B87E725AB57A1
Malicious:	false
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................F...............m...........................................................!1....bA"2RQa..Bqr.....................................?..I....)X.U.=yX...T8T?.`8...?..+......@......0......,.%Ws,<&.0..........?..{...C.!N$.v,.......`".......k...]..<X......`......0......0.S.0...b...(`8...Ri(`>......bj&.X.;..?.....08w..M%..<j...P....Cv,...f.?..@^c7.^..b.n..c....~!.T..Xn...j..X.;...X,wUr~:.D'uO..`GuQ..s............`......`......>boJ.`.'..t.X-H..~H..(`E.;.`..\.J......`...D(..]../p...u`...j[.`s..U~........?...wU.V,..u\;.`.{.U.T'p..X.P}Wc....7?....GuWb.Z..j..]@..%.v,.......T\|A.....f........w5W'....j..L........X...U\.J.!@...~X.:.u^}X.".....P<..u`..wUv:.....f...\|9.....a.f..X3..f.....j..^....C.'.Mv,.......u..?!5....W.X....&..X....]A.....W.....:...j....^..U.:.

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (611)
Category:	downloaded
Size (bytes):	27242
Entropy (8bit):	4.3631679730758375
Encrypted:	false
SSDEEP:	384:6FamwIluB0sJQqCeSQup5szCUXAG0VVi82OgoKACZQQofNJXY3gW3:663Mp5If8WOmgW3
MD5:	DF3D48946E8D3F5A83608308EDBB4B86
SHA1:	47B9C40C97ABF2658DF96B1C06109324E15E1A00
SHA-256:	570A6631252B8A52DF4DE0E953AE77DBDF524DFC3637CDA2840494A0D2B49499
SHA-512:	36EC1CEC72DC3245730C813277C645525473CC5232E85CD23503B8593D90264F335E61A16D364A1E6C41922820B40BA7C0F46B19F4B91DB6A0CF5E31E778DDEA
Malicious:	false
URL:	https://use.fontawesome.com/releases/v5.13.1/js/custom-icons.js
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <meta name="viewport" content="width=device-width, initial-scale=1.0" />. <link rel="icon" href="https://www.cloudflare.com/favicon.ico" />. <title>Not Found</title>. <style>. body {. font-family: system-ui;. font-weight: 300;. font-size: 1.25rem;. color: #36393a;. display: flex;. align-items: center;. justify-content: center;. }. main {. max-width: 1200px;. margin-top: 120px;. display: flex;. flex-wrap: wrap;. align-items: center;. justify-content: center;. }. #text {. max-width: 60%;. margin-left: 1rem;. margin-right: 1rem;. }. main > section > div {. margin-bottom: 3.25rem;. }. svg {. margin-left: 2rem;. }. @keyframes eye-1 {. 0% {. transform: translateX(0);. }. 10%,. 50% {. tr

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1526
Entropy (8bit):	4.90155265256983
Encrypted:	false
SSDEEP:	24:NnkzhbkmQdDTJML9hVoSLbL4/dM4FX3CZiXMLfnCuHrcwxHrcXuGAVxGA1VJsqbn:Nkz2O9j3v4uXZicLfCuLpLQuDaqCs
MD5:	4813C46035061C60856B7766F5302812
SHA1:	466EA8F06F05C913761BE5A42258829E05AA0B70
SHA-256:	8ABD2990CD9C45B48665F4C2090FB8CCC901AA6736B9D8E75C99E6243361B3BB
SHA-512:	E97AD9A1DE31E9C7B9E30055DFD4D1CF80D985B25FD71AEED35F021A9D3981ACBB43AD9C73C389CD69304141B3E91F9FCDAD97B2BF30F2732E718D55956E3160
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/controlgroup.css?sbs84s
Preview:	/!. jQuery UI Controlgroup 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/controlgroup/#theming. */...ui-controlgroup {..vertical-align: middle;..display: inline-block;.}..ui-controlgroup > .ui-controlgroup-item {..float: left;..margin-left: 0;..margin-right: 0;.}..ui-controlgroup > .ui-controlgroup-item:focus,..ui-controlgroup > .ui-controlgroup-item.ui-visual-focus {..z-index: 9999;.}..ui-controlgroup-vertical > .ui-controlgroup-item {..display: block;..float: none;..width: 100%;..margin-top: 0;..margin-bottom: 0;..text-align: left;.}..ui-controlgroup-vertical .ui-controlgroup-item {..box-sizing: border-box;.}..ui-controlgroup .ui-controlgroup-label {..padding: .4em 1em;.}..ui-controlgroup .ui-controlgroup-label span {..font-size: 80%;.}..ui-controlgroup-horizontal .ui-controlgroup-label + .ui-controlgroup-item {..border-left: none;.}..ui-controlgro

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	121060
Entropy (8bit):	4.221823243480417
Encrypted:	false
SSDEEP:	3072:DfD3EqDTF3/m9zzbIp+Pfuryr/igqg0t4uXLb96VB2saIDYnFScE7b:zjMo4AO3
MD5:	7FCBE74CFDD291DC540963E91071CA2E
SHA1:	896C18F426BD075524EA81941DCEC23123B57618
SHA-256:	D60F69AC294F8B7B93E5A7DDB71900D2657F3A15F0A35A8FF57A6115334F1CAF
SHA-512:	B478AA6A559ABC7DE000628899C8CCEB3C7076A8F34992538D431A8E838429DAEB8AD688A9D01FE67EB773E912992C71D966116207DA9EAE6BBA1ACF3D158CEC
Malicious:	false
URL:	https://reportfraud.ftc.gov/assets/images/RF-Logo-Seal-NEW-01.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 495.7 117.9"><defs><style>.cls-1{fill:#fff;}.cls-1,.cls-4{fill-rule:evenodd;}.cls-2,.cls-4{fill:#244873;}.cls-3{fill:#231f20;}</style></defs><path class="cls-1" d="M62,108A49.1,49.1,0,1,0,12.9,58.9,49.12,49.12,0,0,0,62,108Z"/><path class="cls-2" d="M92.5,44.2a41.49,41.49,0,0,1-.5,5.4m3.5,6.8-3.3,4.2m-2-.1c.2-.7,3.9-5.1,4.2-7.2M82.8,71.6s4.5-4,6.5-4.5a14,14,0,0,0,5.9-4.2m-7.7,9.2s-.4,2.3-6.7,4.7m1.7-.3-3.7.7m13.7-.5s-3.8,4-12.7,4.7m13.8-8.7c-.9.3-5.8,4.2-6.3,3.8,0,0-.5.7-3.5,2.1s-7.1,5-8,5.6c-1,.8,3.7-.5,6.1,0s5.4-1.9,5.4-1.9m-4.7,3.8a13,13,0,0,0-4.2.7c-1.7.8-5.4,1-6.4,1.2-3.1.7,3.1-3.8,3.8-3.8M61.7,94.9a36,36,0,1,0-35.9-36,36,36,0,0,0,35.9,36Z"/><path class="cls-2" d="M61.7,95.1A36.2,36.2,0,1,1,97.9,58.9,36.25,36.25,0,0,1,61.7,95.1Zm0-71.9A35.75,35.75,0,1,0,92.5,77.1c-.9.8-4.8,3.9-12.6,4.6v-.3c-1.3.9-2.4,1.9-3.2,2.5-.2.2-.4.3-.5.4.3,0,.8-.1,1.3-.1a13.71,13.71,0,0,1,4.5-.1c2.2.4,5.2-1.8,5.2-1.8l.3.4c-.

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.673822201987808
Encrypted:	false
SSDEEP:	3:1QWMMIQBREHqeHUJRE/2TyDE7kidJ0A:1XIQEKtREW5zf
MD5:	7967AE2C4E4FA4FAB1D9C1C0D7BA83FF
SHA1:	10A0950BBC8A781C8C9CC0AC2ACBFBB5CF713C2D
SHA-256:	D86AAC0900E93F64FC5BD4B329D1367C3677736C2B3678938C458C50E3A3D180
SHA-512:	F78125A8BDEAD9856C379DDA07ADD7437F845F74F9B4DD0C5DBA2C84B9AC27B74B8F28BC112C3B3F71E1458D6EC27D499A992B5149B575A9D04FF18ECEC52ACA
Malicious:	false
URL:	https://www.ftc.gov/modules/contrib/responsive_table_filter/css/responsive-table-filter.css?sbdm6u
Preview:	.responsive-figure-table {. max-width: 100%;. overflow-x: auto;. margin: 0;.}

Chrome Cache Entry: 690

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1489), with no line terminators
Category:	dropped
Size (bytes):	1492
Entropy (8bit):	5.025182151297007
Encrypted:	false
SSDEEP:	24:Qmi996/YDgM2YDWYgqYdLY0OqYFoxZoA7kbfZ7:Q59tExOq377Wl
MD5:	CDB2EBC24F4185F59C43BF81F6021318
SHA1:	D02BCD6ADFD3F1D55B74531DF88A34E6B3EAB1E2
SHA-256:	68699B3F3B3177A58AD27F814E4870D7E9098CEC48D02836C078CADBBEC7054C
SHA-512:	481C533CEC74295E8CF94524D90DF4C20ADC191CCE39E983B53F00DB3923B38D3275A7056517614B83F30CF5DF27B095330F40F4A8DFA7BBB216D4E6FF9AFC29
Malicious:	false
Preview:	<div class="sp_c"> <div data-i18n="[html]verify.Step1Content" id="verify_step1_instr"> </div> <div class="error_mess_c"><span id="error_msg" class="errorMessage"></span></div> <div class="s_form_cont"> <div class="form_line_s"> <div class="form_text_left"> <label for="VerifyPhoneNumberTextBox1" data-i18n="verify.PhoneText"></label> </div> <div class="form_field_right"><input type="text" maxlength="14" id="VerifyPhoneNumberTextBox1"> </div> </div> <div class="form_line_s"> <div class="form_text_left"><label for="VerifyPhoneNumberTextBox2" data-i18n="verify.PhoneText2">Phone Number2 (Optional)</label></div> <div class="form_field_right"> <input type="text" maxlength="14" id="VerifyPhoneNumberTextBox2"> </div> </div> <div class="form_line_s"> <div class="form_text_left"><label for="VerifyPhoneNumberTextBox3" data-i18n="verify.PhoneText3">Phone Number3 (Optional)</label></div> <div class="form_field_right"> <input type="text" maxlength="14" id="VerifyPhoneNumberTextBox3"> </div> </div> <di

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 123 x 28, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3986
Entropy (8bit):	7.913926400206518
Encrypted:	false
SSDEEP:	96:gSDZ/I09Da01l+gmkyTt6Hk8nTF4VNHc2BnzT4Ud:gSDS0tKg9E05TIHc2Bnw8
MD5:	11D6193C4EF59D5C88D205B3C767A8DE
SHA1:	4FFEDF770690D1255EFD567137F09DAB91184E1A
SHA-256:	10AA04A7120AE5D75BFAE6C6DF8247CF697D9F3A8FB818416A7723C9D32CED74
SHA-512:	D4D04AF64714AFAE69BE877BCBACA65418D0524B68D6089030D74A355FCA8C9FBE854F8D2AA8D25107936623C59E345B7D0BAF9E80A6C0559C636BD2CB2DF910
Malicious:	false
Preview:	.PNG........IHDR...{.........A6......pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	20942
Entropy (8bit):	4.808295534533685
Encrypted:	false
SSDEEP:	384:0OKQzI0dRvbr7wUbu19QmAMwDQsv63TYt:PzISRB66Dfvkct
MD5:	FA17E6E5F6CF3EEEBBAA6FA93D65180F
SHA1:	52336D3B5B3BEEF44D6DF249078022E084D1DDAD
SHA-256:	9D1AE71A704E9F75F86BFAC7933B98AC66DC1FD8595D9D6B299F0EB121785816
SHA-512:	94D934CA108694C945D99E77BD399C09B588927E4E8EC28F1164A7E2629ECB7729E84158A0FC7B772B03AAD7E442A8F5AE618BCDF1ECBB02F0B9371250B2DFCA
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 1200 467" style="enable-background:new 0 0 1200 467;" xml:space="preserve">..<style type="text/css">....st0{fill:#ABE2F7;}....st1{fill:#7ED3F3;}....st2{fill:#BEE9F9;}....st3{fill:#9EDEF6;}....st4{fill:#ECA986;}....st5{fill:#5C7295;}....st6{fill:#DFF4FC;}....st7{fill:#C75410;}....st8{fill:#FFD28B;}....st9{fill:#244974;}....st10{fill:#943E17;}....st11{fill:#C6CDDA;}....st12{fill:#69481C;}....st13{fill:#F5A800;}....st14{fill:#919EB7;}....st15{fill:#FDBD50;}....st16{fill:#4E5156;}..</style>..<path class="st0" d="M735-83.5l-130.4-5.2l-94-90.5c-1.3-1.2-2.9-1.9-4.6-1.9c-1.7,0-3.3,0.6-4.6,1.8L407-88.6l-130.4,5.4...c-3.6,0.1-6.4,3.1-6.4,6.6v199c0,35.1,6.9,68.9,20.5,100.5c13.6,31.5,33.3,59.6,58.7,83.8c35.7,33.9,75.2,51.9,9

Chrome Cache Entry: 693

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1509
Entropy (8bit):	7.876764529436842
Encrypted:	false
SSDEEP:	24:n184i07UfSDW7qM6BdRfYNUjl4q9yQlK929iDRcKD/TunOKhVd40FQQTRDlO8KL:184iCUfSS7qM6NkU+q9jlxeNjiVCERWL
MD5:	2258558D1B2ACAE2374B74A4830D0494
SHA1:	FB881B1B88F3714AD30504A054F5E3DBFA9CAB06
SHA-256:	DFA5C465EA8AC9E0B5B6787509B4F9BE8DB57291AF784544538A30DC36C3A871
SHA-512:	6ECBFA833953024A9870FA8ED7C6B1621410C1BFC6458C9F785ACD0B119C4A898A881FDA9BFBA24B83FCA36219E8BF769A1618ABB1061D2C106194055682DE49
Malicious:	false
URL:	https://reportfraud.ftc.gov/runtime.4facd336c6fc7187.js
Preview:	.-.Q.0.,...9..y.4..$\ED\|.....;.2B..k...Z..fIE.N...W.T...O..,.d........V.L.A.R&G...R.M..1.1.w.jMm.T......<%\|A, :.6...d+L...r[..W0g.5..ZQ....'.A..fh....%:........=.G..5..I.......Z.Ihh.........^.%...%.j...m:f...<}{..[.&...?...... L..c.~g...Y..6.i...7.P.S_....I...............".`..cG..g..Fd..<.s..O`.{...#...q.s.....m..".^q.Lq..[..S0..Tr.^I.Um...W.....o-v[..c.q.......@.nV....I........~w.%...~..h..m..%..<...^...X!.-.k.sc.gFe.D...-.....Ax.......{.S\.N.Y(..Z.........3.kt..uCA.>....,$.....Xr...K.?...~.K.._.....`.p..6. ...C....P..eY..WA......A.q....yk.Y.;..S......(.+.N5..../...aS...`........{.~.$.].......A{H..h...I.6.b....Y6..R.N.M._H8....R..O.4.E..7.R...."...[t_@....._`q..{S.{..F...0.:.....u..'I.....`.....I..../.y...'.\|sfPh...?......K9.W0Bz.^H=.l..-.(:..&..e.0.....a.6:#.....dx..EK"..~.5.mh."f..uCx_.1..jUh1.Q8?\|........_@}[n.~_..1.B..._J.P&9u.e>C....).....>......9.[....@.b......}.......k1.N]"...Q`...B...2.~.{..u..VS...GiH.........=..6...._.-.

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	757
Entropy (8bit):	6.916926599457542
Encrypted:	false
SSDEEP:	12:6v/7N6bp92cDPuY1qHlnv/pebLaeMUN53v1GKmRWTGTy87FCYkkWY/ieKYGFI:nYWuqylnv/pe3aMZv1hO4GTjRCJaimoI
MD5:	2380931290AEEA9096404EE72A7B7984
SHA1:	903D4C43FED535FB4D325B1612C605E48417DC74
SHA-256:	28D780F5E175239904DF4AEBF3980D6FDDE24B2722B41C34D73BD09DA20237F0
SHA-512:	5E511795D535F77D1BFB61246657AB40CD0047C86421DC2CEEB10528F590FC216072E6FB9C9B531CB08DA16448BC6B2ECD69444977E9E72E4E4D9B3D9603FD23
Malicious:	false
Preview:	.PNG........IHDR...$...$.............sRGB........YiTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.4.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>.L.'Y...JIDATX..Q.. .D..O....x...2.4.... ....+...e.....=.k.......i.K.}....[.#...m....v.w1.'{C.0..f..u\|.F/......6.....U..'..V.@.....k.^tkv.DLnZ.B...}..P3V.s,WS.0$S..5...-.-s..s.j....\|w.k.X[V...i..5....PCaZ.$..].5N..V....2.............;U..y-sK.1.+....<....Y.r..=.=4.`...P..$...)/..s...t...}J.C..........$.e.>...qT.6<.9..e(..-a..2S......IEND.B`.

Chrome Cache Entry: 695

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (853)
Category:	downloaded
Size (bytes):	1091
Entropy (8bit):	5.019143842258388
Encrypted:	false
SSDEEP:	24:Nfkzhb7SHOu/0W7IXnHLZkwM7IOxb7zZWIoPu7IOG6lko+HSqm:NMzxSHr0IcLCpdhXoI/D6Sn
MD5:	9DCE0722DBC9B5595AEFFB85E8EEC589
SHA1:	D58A80F34289735E71EE66CCAC8230892AC5D138
SHA-256:	0CA79566D7B5CA51FD495B2383D964FE917BD2B9FC901A009FB2B45BB3FBBDE6
SHA-512:	BD9653FB79D30F9A4B0F0F0A679C6BD80EFE99BBEE828F749460DF89559C9467C82C65F13D60150BD70D98A572C1A96FEE3595D8F79B19FF99F553116E457888
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/form-reset-mixin-min.js?v=10.1.8
Preview:	/!. jQuery UI Form Reset Mixin 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","./form","./version"],e):e(jQuery)}((function(e){"use strict";return e.ui.formResetMixin={_formResetHandler:function(){var t=e(this);setTimeout((function(){var r=t.data("ui-form-reset-instances");e.each(r,(function(){this.refresh()}))}))},_bindFormResetHandler:function(){if(this.form=this.element._form(),this.form.length){var e=this.form.data("ui-form-reset-instances")\|\|[];e.length\|\|this.form.on("reset.ui-form-reset",this._formResetHandler),e.push(this),this.form.data("ui-form-reset-instances",e)}},_unbindFormResetHandler:function(){if(this.form.length){var t=this.form.data("ui-form-reset-instances");t.splice(e.inArray(this,t),1),t.length?this.form.data("ui-form-reset-instances",t):this.form.removeData("ui-form-reset-ins

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1581
Entropy (8bit):	4.969030599428063
Encrypted:	false
SSDEEP:	48:N5Bz20sDfRrk+rzzSr4VccK/OiAwKrhF6mG:p23Jfy8C/OitK1FY
MD5:	694D2F642B4066B577CB1015190481F1
SHA1:	FD80C02B616158E15119912A53ECA28F3C998B41
SHA-256:	8E58D519637D5290C10E194EBE26D51D20318C2399A27BAF4F5B4979615B9076
SHA-512:	0B43DCEB8C715065B60E8CCDBE87E04BCC390CE4622B645F3EC1FFECAFE9AE2B7536D199E2E8E00DE7FB9C3B4832B5F1ABE245460B0CE3E773E4909F9C4DADAA
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/core.css?sbs84s
Preview:	/!. jQuery UI CSS Framework 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/category/theming/. /../ Layout helpers.----------------------------------/..ui-helper-hidden {..display: none;.}..ui-helper-hidden-accessible {..border: 0;..clip: rect(0 0 0 0);..height: 1px;..margin: -1px;..overflow: hidden;..padding: 0;..position: absolute;..width: 1px;.}..ui-helper-reset {..margin: 0;..padding: 0;..border: 0;..outline: 0;..line-height: 1.3;..text-decoration: none;..font-size: 100%;..list-style: none;.}..ui-helper-clearfix:before,..ui-helper-clearfix:after {..content: "";..display: table;..border-collapse: collapse;.}..ui-helper-clearfix:after {..clear: both;.}..ui-helper-zfix {..width: 100%;..height: 100%;..top: 0;..left: 0;..position: absolute;..opacity: 0;..-ms-filter: "alpha(opacity=0)"; / support: IE8 /.}...ui-front {..z-index: 100;.}.../ Interacti

Chrome Cache Entry: 697

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7761
Entropy (8bit):	4.5390256508175195
Encrypted:	false
SSDEEP:	192:SJqwEGJQq6+xZFVpgy8zuI9UpjDC8EgZ0ZjL5sy1bH9xF3U39EjdVx69:SJZEmrp38qp/BQjLt1Bn5Ve
MD5:	06355838702A8B2062A0BE24C093CE9A
SHA1:	1ECD2981C327533828CDD0C3BEAA5DAFF793D5B8
SHA-256:	FE67142643048E5F9523CAF341FE9F3E8253508C038B40B3D91B0E80F347B40F
SHA-512:	6190C06B82724A71C249B016322655239E0B579914D13ED41BFABFC0FF5C0DACFE6E4BB897B0CD57A34125F4CEE61DAED7FFA9CB2E5946DDEAABC0C849D1FB1E
Malicious:	false
URL:	https://www.ftc.gov/core/misc/message.js?v=10.1.8
Preview:	/*. @file. * Message API.. /.((Drupal) => {. /. @typedef {class} Drupal.Message~messageDefinition. /.. /. Constructs a new instance of the Drupal.Message class.. . This provides a uniform interface for adding and removing messages to a. * specific location on the page.. . @param {HTMLElement} messageWrapper. * The zone where to add messages. If no element is provided an attempt is. * made to determine a default location.. . @return {Drupal.Message~messageDefinition}. * Class to add and remove messages.. /. Drupal.Message = class {. constructor(messageWrapper = null) {. if (!messageWrapper) {. this.messageWrapper = Drupal.Message.defaultWrapper();. } else {. this.messageWrapper = messageWrapper;. }. }.. /. Attempt to determine the default location for. * inserting JavaScript messages or create one if needed.. . @return {HTMLElement}. * The default destination fo

Chrome Cache Entry: 698

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1837
Entropy (8bit):	7.8832708663783295
Encrypted:	false
SSDEEP:	24:M9+v+yoFkh0tNsVTaBWWl+AqxNhUkMc0vwB8f5e2qTN0wEmjD6T/FqDpP/OsWVvG:2+vF0/ATakjxg/cb2qT93CLosY7L6Ike
MD5:	93A14BFD0E07029EACB78FB7B9F38DAB
SHA1:	B75C751993600FE1AE3CAE583B13DFC38BE6BBD0
SHA-256:	D8C63344EE526A3C0FD3B47242E029B97D84D3FE17832D01EE48B955E2716663
SHA-512:	F64AAD0078840C584CC064EEC9DA0ED567D4FBEDBBA92DD72C7B7462131404255896BA3672BD5EED91F987A405C72041BAF9AB71B5D1D5C6B9934E6999872161
Malicious:	false
URL:	https://reportfraud.ftc.gov/common.86b9d51e0bdd16a1.js
Preview:	.,....v..Om..........(.M..5;7.D....D).S.,..'DK.O.lU}.....z..X]..h.O.{..\:aD9A`.y.P..?..J........d...d.PV.....%.10.p.4g......+..)..".{..I]G..5....L\g........??...._.y.....m.[7.R.].~.Q.nTj...r..C5J..n.A.........M.x......th..j+.....0...]..`UE5p.T.....D..}..i5....`q/d..C;c.1n_.H?..<...@p.......$\|....6..K.....T^...nr.n...r....t......%.=O..+.[.DD.r.&.n).1zj...?n^y.`.5..g..k.@.."....P.[f$n..B.TE....PqR.E...^^.O.....B..1...P$.JJO..pp......A..(`.L.f.9F.-6R..b$..JZ.A..sQ)..bG+H...".;.......+..`.....S.Q.Pe.L.=....,t..>T.L\d2.......?.[/.t....E..n..G.9....E.......r..U..._.j...Ih....6+.N%.j.O.w..OmO..'....].`....t....G.}.......=.@.:./........`..U....[.<.)+.....c...qN.!..&.k.^...\...t..:zO..s....R....7/......K.._..8...U.c..nbQ..s...{.....Cx>...gp......$`k..$.f\(V.!..3...g..G....Dzi!.up.....A...Hz. .Ee..WA..0...%.+\....e....a..K..75.W...........:...EePB...im..0..v..b;..(e...>...\...j...L...a.)eJ=i...6.gX.T........P....*>\|t"s.i.\u.Rb.K...0$.

Chrome Cache Entry: 699

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=166, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=962], baseline, precision 8, 883x42, components 3
Category:	downloaded
Size (bytes):	27527
Entropy (8bit):	6.795433962868685
Encrypted:	false
SSDEEP:	384:HuA7inuVZsnJB9xcyMgCxAFaEjJyXco+b8pVpVNVdt/UagsfjLDShBsP:D73ZspxcyMzwp8GhB8
MD5:	F5A158AB25272C4220112AEDA74F9836
SHA1:	D9D0554EA04F45B271CE5E3B4E288C563DE525B5
SHA-256:	8CDBB3423A2AE916CF59FB5FF4E7D7D2B3A9AC729010D53BA71122A9EC8F85FA
SHA-512:	5C4E4006888C8CC4479CEBEED8B6C27D6B808D0AF567C57F456754EFE892064113506433B210947D784897EB9E96282D360F19159FC9F423933FDC0D7C61020E
Malicious:	false
URL:	https://www.donotcall.gov/images/Header_generic_moreinfo.jpg
Preview:	......Exif..MM........................................................................................................(...........1..... .....2..........i............. ............'.......'.Adobe Photoshop CS6 (Macintosh).2013:07:31 07:51:06...........0221.......................s..........................................n...........v.(.....................~...........(.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..y-....,s...A$..if...7z......Q.G...v.=.d......5..o..?.[.....s7t.px.jmF+.#u..C.

Chrome Cache Entry: 700

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1900
Entropy (8bit):	5.228625815310242
Encrypted:	false
SSDEEP:	24:2dVA6LfEHPrtLmVRzt53LhFZYgT+hL3fLTptBbTUGnCbKngbTuGCdK:cVA+fEvr1mHz7bhFZYnRfLTpXgLkeTBd
MD5:	6F91EA52570E7D8B5D683D2F8C01F8DE
SHA1:	E104E72D39FD9159E3EECB514AF56ECE74DA1506
SHA-256:	9269538ECE58CED5852C3E10929EDD7B07702AF290A21ADE34707DDF9E700DF5
SHA-512:	06B3A12733D1798336396A79EEAD32292A7F04AE8568B3F6385EB06BC650C16374280B26B59C0B0504580A01FE5BB4A1E7E0B9F04007807F5051B800F3B8D2F3
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 1080 938" style="enable-background:new 0 0 1080 938;" xml:space="preserve">..<style type="text/css">....st0{fill:#7ED3F3;}....st1{fill:#244974;}....st2{fill:#F5A800;}..</style>..<title>Report-Fraud-Illos</title>..<path class="st0" d="M517.1,559.7L511,553c-32.1-35.1-49.1-76.7-49.1-120.4c0-111.8,112.6-202.8,251.1-202.8s251.1,91,251.1,202.8...S851.5,635.4,713,635.4c-29.9,0.1-59.7-4.3-88.4-13l-3.8-1.1l-152.1,40L517.1,559.7z"/>..<path class="st1" d="M414.8,640.3l4.1-4.5c21.5-23.5,32.9-51.3,32.9-80.5c0-74.8-75.3-135.6-167.9-135.6s-167.9,60.8-167.9,135.6...S191.2,691,283.8,691c20,0,39.9-2.9,59.1-8.7l2.5-0.8l101.7,26.7L414.8,640.3z"/>..<path class="st2" d="M269.7,568c0-22.2,29.3-24.6,29.3-40.1c0-7.1-5.5-13.1-17.3-13.1c-1

Chrome Cache Entry: 701

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 363x49, components 3
Category:	dropped
Size (bytes):	2485
Entropy (8bit):	7.462830568745297
Encrypted:	false
SSDEEP:	48:qKytKy0znXWhWn36S3NLx2pR9zQ6z2WYJRr8ZZrZAFlkwWBsLWb:6jMXDnqa8pHU6CWYHEeIBsLWb
MD5:	7CF1136441AD08A8A847E5B6F74063BF
SHA1:	686C1719DC7FCA6A4DD88556B7D36FC3265AFE29
SHA-256:	B2628BD5186A452AEB6D62A6D5E5D2D952C1CC6D07C91EB42E289EA84A8DC2EC
SHA-512:	68B522D9059260C0DD62093620F6F08D387A9A573413DF747D543F10B89F6F7AEB7A9170D3C2BE34562495F3BF043CA416DAE912BC617A28C724D24186E259E1
Malicious:	false
Preview:	......JFIF..............................................%.".....".%.8.(.+.(.+.(.8.U.5.>.5.5.>.5.U.K.[.J.E.J.[.K...j.^.^.j.......\|...................7.7..................................%.".....".%.8.(.+.(.+.(.8.U.5.>.5.5.>.5.U.K.[.J.E.J.[.K...j.^.^.j.......\|...................7.7........1.k.."................................................@.*^........1.t.............kMe.......s[g.........xL...e..`.7.....i0o"D..l..#L..u.V.3;..V.........9Z.x.y_....X..y..n...7...y..y....................................................c....M..]r.....h.......................................Y...........y;w\|y:....h......@.........................!.1..."2AQq. #$35PRat...&46.`bcdrs...........?..<..g'..6.>...._..4..c:.h.T'..O....N..?T.0.q....,.E.....g..t.L<.t.....k.......A8.b..2.dA.Z...Nq.d..~...u......n....9i...Co)(.:...,FP.....=......B...I.s.G..... .......l..."...T>.....D..........+...c.c..?'...Z.mC3...,..e....$.x..W.....z ..%Cs...3....9c.)<.AQ...:.....E..-..u..tN..\|..k.f..HWh...

Chrome Cache Entry: 702

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8406)
Category:	downloaded
Size (bytes):	8624
Entropy (8bit):	5.094257113055752
Encrypted:	false
SSDEEP:	192:cUb1dEz359Z7trpq2zOD9YOiXR6ktdCmDnA7sP:cIdst5pbkzJanAo
MD5:	D95AF8372A58687DCA7DA511AC356FA8
SHA1:	DF8E39D9818A0E4F851F25026B4F1D9A98E9828C
SHA-256:	140B2C57862ED9966E95D9EAC31C2D31AFF551B60E4C4869F15014094F1B4F57
SHA-512:	3BB072140C7C787CA088A0104D17064B954CC64FB233EE608BBD5CFA4C86B902C7997AD06065AB3189F8D2771AA4EB3E1F578B98279E0C8233C14A1458B8A3BB
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/widget-min.js?v=10.1.8
Preview:	/!. jQuery UI Widget 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery","./version"],t):t(jQuery)}((function(t){"use strict";var e,i=0,s=Array.prototype.hasOwnProperty,n=Array.prototype.slice;return t.cleanData=(e=t.cleanData,function(i){var s,n,o;for(o=0;null!=(n=i[o]);o++)(s=t._data(n,"events"))&&s.remove&&t(n).triggerHandler("remove");e(i)}),t.widget=function(e,i,s){var n,o,a,r={},l=e.split(".")[0],u=l+"-"+(e=e.split(".")[1]);return s\|\|(s=i,i=t.Widget),Array.isArray(s)&&(s=t.extend.apply(null,[{}].concat(s))),t.expr.pseudos[u.toLowerCase()]=function(e){return!!t.data(e,u)},t[l]=t[l]\|\|{},n=t[l][e],o=t[l][e]=function(t,e){if(!this\|\|!this._createWidget)return new o(t,e);arguments.length&&this._createWidget(t,e)},t.extend(o,n,{version:s.version,_proto:t.extend({},s),_childConstructors:[]}),(a=new i).op

Chrome Cache Entry: 703

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	174423
Entropy (8bit):	7.998655796884996
Encrypted:	true
SSDEEP:	3072:29zXkvn/zr4R2TxnDN7uFFoS9H29GlCI3jp4aca4aS37FbzpA+bHqeZu41ts:21UKSnDN7u0a3Kza4a4FbqMZDk
MD5:	1BAEE692B838A7A0207F43F1831FD597
SHA1:	C3C6DE3DD96942BF8AD48E6AD9A3891924C0BD82
SHA-256:	0976251FB4753DE105BE2FE2BEB0DCAAB6EF50070ECE7F69E4E95B7B188CCF4A
SHA-512:	033240ECE1B7AD937878C267D682B784D155E8E97E253783B3988ADDFB6E827C64330EB96C0232C6C4CE195E054C14BA147225D380C0C430F8E3B38E6EC9C78F
Malicious:	false
URL:	https://reportfraud.ftc.gov/main.cba37e78289a564b.js
Preview:	[Z..F.c..U#..ee.f~.H.mr.&C.....T..<..P......nC8..Z.S..........E.k.nw...P.U...@-.i.J..2.rU.rBU...FH.zu....h-U.'..p>..Eb.:C...+Z.U.}.R&.....4.......E:.O....2sC...-.`.P.q...(F...g.....o.^.QCyk{.Glt_5..\........rx..B.2.,..[XB. ....f....T.\|..O..W........0........`P..~..../t._uL..."..J...x..z.t..vQ`,..8/0.S..x.h.A..qV4.ASX.QL.6...........].<. W...#[.\|.;W.:....X.".B!.......hy..k.-...2..Q.W..Y....I......O......N....n....T.[.....=e...>O.....zNsCc...t.L\#...(..[s.+.[..;.".^`[...orD.t..X..tP.s....5...;^n76.R.A..D.......w.z.s...w.....S......L.SEif.77t...caqD...f4....P...Rq.;.l......n.....1G~9"$.Y....1....X.U.%;.c%.B..B..ttx.l...f"..\....}..s=<j..Av$..s..qj......>.....d 7..`.m....U..C....x.\|.....oj../..F.W..W....bhY.b.-..d-..&-@2m..! .".^u_.H..w......4.y.h.:..&.%}....~..0......i.V............V...:.Q.......<.....QY.....#.{S....0...v.K.e..Z.M.K.xe^.m.8......B.Nz....HQ.g...z..3+..r......r._..^._....S/..@.x.c2.....2.!\|..q..?.^.R5...?....$..{.

Chrome Cache Entry: 704

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 360, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	238299
Entropy (8bit):	7.990520645781686
Encrypted:	true
SSDEEP:	6144:Y8u3JsWke1/R/SarVgJ0fZyQEI15vk+/3JVxMe3eGB:O35zR/S5WfZwYvb/JztL
MD5:	781E6E55D581FAB3A0D9908F45084848
SHA1:	F702AD1F44F3BECC017D259E8EFD6700E2CD1643
SHA-256:	8C0BC92EF15B78478EA279600D14569E51187890865E1D8664C7BB9B31EB97B1
SHA-512:	AA738F6311B3BBE120BB7B7D4DD8D14C6C34119B119EFDC7DD03E6B3ACFCB925101D7123788C7239C69BF291521EEC0439D535B9A35B30B9F1A5B85BE56A33D5
Malicious:	false
Preview:	.PNG........IHDR.......h......2JQ....pHYs..........+.... .IDATx....$..'..I3s......z.....}.}.y.y..ig4-.Ku..........=.R..5..f<@..@...........<!3.f...`fL{....sBf.;...1f.....F..~@...83.. B.....og8..at....`.9'.A ...<..c...9,......%....@.d......... .,9...7G.6.....v#....w...!....w..q...6.#.... N....Z..6.D....L3.>....r\...r.....YH.e<s.H)!....j....i......@. ........^........,@..c0\|..a...."G... '.P.H....s.pl....@BO. ......,.#......+.../...L.^V..U....j...+.J..f...3R.........q9..h%...w...8G..9....U.<.E..O3......1....i...K..M...X.O`b.._.9.....Y................/.Aa....}..s.>.\30.;......p..vd.J...l.-..........x....W.@..R.-~...)]syO..R[.....F.8..K..{8.@.W9..Ae...V.....i.?...Z...9#..9%dMo...)&Df.bBfFf...i..w .*?...b .=._.Fdf...~......9pf8.......S......Bh..o\|......"..j..G....g<.R...=..................?...'......w.Z.<.}.....1N.~..F...z....V.Q..o.....v.Ev.3~..\|..O...a.f..................Z.g...........+_YL......O.+..Pa.)3...>.......<..!FF..C...X..)%...dR....

Chrome Cache Entry: 705

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 182x326, components 3
Category:	downloaded
Size (bytes):	7202
Entropy (8bit):	7.534916788713787
Encrypted:	false
SSDEEP:	192:SjZFkDKwi4TCX9w+1owP01uxqiwcadn/hluL2JyuKp:gWKw8X1owGGxWzuuybp
MD5:	B820E1EE464244612E53BEB05F38D5C5
SHA1:	DB0B4C69FDA5DD8EFA036A050134A1F2889CA2DE
SHA-256:	06DBBFA5B9EA8711314B6C7FC89735A97DDB73D6FE88EAB8355A7E5577CCE54B
SHA-512:	718E363909451ADE4B3840917ACF9188122F2653F2ACB64657ABD59ECEC05A1F96946313CA90B72974102F9DAAF49BB1C0179912EF70BC80521B87E725AB57A1
Malicious:	false
URL:	https://www.donotcall.gov/images/foooter_background_gr.jpg
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................F...............m...........................................................!1....bA"2RQa..Bqr.....................................?..I....)X.U.=yX...T8T?.`8...?..+......@......0......,.%Ws,<&.0..........?..{...C.!N$.v,.......`".......k...]..<X......`......0......0.S.0...b...(`8...Ri(`>......bj&.X.;..?.....08w..M%..<j...P....Cv,...f.?..@^c7.^..b.n..c....~!.T..Xn...j..X.;...X,wUr~:.D'uO..`GuQ..s............`......`......>boJ.`.'..t.X-H..~H..(`E.;.`..\.J......`...D(..]../p...u`...j[.`s..U~........?...wU.V,..u\;.`.{.U.T'p..X.P}Wc....7?....GuWb.Z..j..]@..%.v,.......T\|A.....f........w5W'....j..L........X...U\.J.!@...~X.:.u^}X.".....P<..u`..wUv:.....f...\|9.....a.f..X3..f.....j..^....C.'.Mv,.......u..?!5....W.X....&..X....]A.....W.....:...j....^..U.:.

Chrome Cache Entry: 706

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65350)
Category:	downloaded
Size (bytes):	103386
Entropy (8bit):	4.237400766586683
Encrypted:	false
SSDEEP:	3072:ZSx1tmcLKc2Dnio/NULoCivDtRtKBRzFHSs:wV2Dnio/NULo9tRtKes
MD5:	F27E85A0E876E3CFB982C78AC329E58D
SHA1:	770F6DE8E1ADFEC29EB1893D103B3D5973FA8B61
SHA-256:	E2363FB9AB62781E85BD6D31C786081E3C2D4F0564542E0CC10DC374BE8A993A
SHA-512:	27E135FB83B6AFFFA8B7881A850EDE8571E948CCDF40D88425D7E2DDB9FB1A0A375D8AAAE7D541CB6109FB944A98E1909CF32A9757455C74E49E6D8A6375B03D
Malicious:	false
URL:	https://use.fontawesome.com/releases/v5.13.1/js/regular.js
Preview:	/!. Font Awesome Free 5.13.1 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.!function(){"use strict";var c={},z={};try{"undefined"!=typeof window&&(c=window),"undefined"!=typeof document&&(z=document)}catch(c){}var h=(c.navigator\|\|{}).userAgent,l=void 0===h?"":h,v=c,m=z,s=(v.document,!!m.documentElement&&!!m.head&&"function"==typeof m.addEventListener&&m.createElement,~l.indexOf("MSIE")\|\|l.indexOf("Trident/"),"___FONT_AWESOME___"),M=function(){try{return!0}catch(c){return!1}}();var a=v\|\|{};a[s]\|\|(a[s]={}),a[s].styles\|\|(a[s].styles={}),a[s].hooks\|\|(a[s].hooks={}),a[s].shims\|\|(a[s].shims=[]);var H=a[s];function V(c,l){var z=(2<arguments.length&&void 0!==arguments[2]?arguments[2]:{}).skipHooks,h=void 0!==z&&z,v=Object.keys(l).reduce(function(c,z){var h=l[z];return!!h.icon?c[h.iconName]=h.icon:c[z]=h,c},{});"function"!=typeof H.hooks.addPack\|\|h?H.styles[c]=function(v){for(var c=1;c

Chrome Cache Entry: 707

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1581
Entropy (8bit):	4.969030599428063
Encrypted:	false
SSDEEP:	48:N5Bz20sDfRrk+rzzSr4VccK/OiAwKrhF6mG:p23Jfy8C/OitK1FY
MD5:	694D2F642B4066B577CB1015190481F1
SHA1:	FD80C02B616158E15119912A53ECA28F3C998B41
SHA-256:	8E58D519637D5290C10E194EBE26D51D20318C2399A27BAF4F5B4979615B9076
SHA-512:	0B43DCEB8C715065B60E8CCDBE87E04BCC390CE4622B645F3EC1FFECAFE9AE2B7536D199E2E8E00DE7FB9C3B4832B5F1ABE245460B0CE3E773E4909F9C4DADAA
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/core.css?scewfd
Preview:	/!. jQuery UI CSS Framework 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/category/theming/. /../ Layout helpers.----------------------------------/..ui-helper-hidden {..display: none;.}..ui-helper-hidden-accessible {..border: 0;..clip: rect(0 0 0 0);..height: 1px;..margin: -1px;..overflow: hidden;..padding: 0;..position: absolute;..width: 1px;.}..ui-helper-reset {..margin: 0;..padding: 0;..border: 0;..outline: 0;..line-height: 1.3;..text-decoration: none;..font-size: 100%;..list-style: none;.}..ui-helper-clearfix:before,..ui-helper-clearfix:after {..content: "";..display: table;..border-collapse: collapse;.}..ui-helper-clearfix:after {..clear: both;.}..ui-helper-zfix {..width: 100%;..height: 100%;..top: 0;..left: 0;..position: absolute;..opacity: 0;..-ms-filter: "alpha(opacity=0)"; / support: IE8 /.}...ui-front {..z-index: 100;.}.../ Interacti

Chrome Cache Entry: 708

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	980
Entropy (8bit):	7.432281965818854
Encrypted:	false
SSDEEP:	24:hD2sK8Fkpcdm34uXyoKT0t6Q7Y7Pix8s3j8FCptgrD9sPzcX57:hSsHA34uXyoKgMhWYCpSv9sM57
MD5:	5191CBE73D48EDD009A122354A6E86F6
SHA1:	652793FE60FCEA523EBC30E1ED28AA19DD7C48EA
SHA-256:	B904CF8A29D9E2A2E04D6FC4DDBEAC66F811D9E6AF0C13B2C34CEC0DDE4DEEA5
SHA-512:	2E4F0E0992AC6075A7FD2411EA02FAF83D01460C915AB9594595330CAB1A5B8BCF56F650F2C53EA40117A4347A4E537EEB1AD9690E361F5A14C9A5CD331D810B
Malicious:	false
Preview:	.PNG........IHDR...P...P.............sRGB........8eXIfMM........i...........................P...........P.....(nu...WPLTE... p. x. u. y. x. w.#v.#y.#x."w."v."x."x."w."w."x.#x.#w.#w.#x.#x."w."w."x."x."w."w.#x..,.....tRNS.. 0?@OP_`op................B.......IDATX..X..0.l....!........{..7.w.M....T...M....=.4.`.\|........R.0.......16.t...$&.....Mw7.S...L......M..k.L_\|.....$.LSD.g.#..3/...Pj..]V.....6.x...b...#V..k..W.`....'@.]./v.....=.GT...+..E...rW{.,...G.7^>.\|D8w.NA..\|.=?G...n.@'1.........B..zw...2.Q$. ._.l.....E.G......\|.,.\|Z...sF&...)#.........FJ.F5.H\.L.D..},$...c...p..HB......l...iU.b[P.H.d..`..M...."bu]W....gU..;,FR..."..D.S..o...LW...........^.....a"...b...#..].\|.q..^..%.X....+.[.%}.=....mR.:..&.n..z..OW... Shn."....3.E.DV^C(.O]8/..%........e?7..-..h.Q....x.x{..N...B.'......p....+...N./...GVU:...m.B.<...Y..l....R.....)_`.V..K.5.../u%lq.e.....w...-~k....t..3_L....$..^.~:.2.Q...s...,%...`.....`..;.;...H`.^(.!....IEND.B`.

Chrome Cache Entry: 709

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (5516), with no line terminators
Category:	downloaded
Size (bytes):	7356
Entropy (8bit):	5.744227595629957
Encrypted:	false
SSDEEP:	96:nxhp8JSpTJ13USBvlDg49ghDn3adtaJr831Aho9ppD8kbiXRNvFXlvpad0MCEuzr:nuJSpTDtlP9WD3adoQFAhmyO6h
MD5:	AF4AC7CCB2BB06B575756335C6DCEEA7
SHA1:	2431414CECB58459305D29AA96B58B1862BC6FA4
SHA-256:	6929654355DCF3B70DD326A39230C8AC0817F43A4C884D1E9207C91692EDD8A5
SHA-512:	C8C4A548C4810511400F695B488DBEC392D9FCA6B360A3D3D6750D0628779E8B77118180FBED17B91357FD99003F93BFDDD929BE9C9CE746EF4DB4FB2BF2A2A4
Malicious:	false
URL:	https://www.donotcall.gov/js/lib/jquery.i18n/jquery.i18n.emitter.bidi.js
Preview:	!function(d){"use strict";var u;u=new RegExp("(?:([A-Za-z....-..-..-..-....-...-....-....-...-..-..-..-..-..-..-...-...-..-..-..-..-....-....-..-...-..-..........-..-..-...-....-..-........-..-...-..-...-..-..-..-....-..-........-.....-....-..-....-............-..-...-..-..-.........-..-......-..-....-..-..-..-..-..-...-..-....-.....-..-..-..-..-..-..-.........-......-..-..-..-..-..-....-..-..-....-..-..-...-..-..-..-..-..-....-..-.........-..-.

Chrome Cache Entry: 710

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.094598809273928
Encrypted:	false
SSDEEP:	3:5mf6pP5DdVdaF+SXlx6IUARiM+LzNIl9nB4NYkANVtC6pP5DdVdqBANROCKgO1dF:EfijEF7XliARG3ANvCijnNeVesn
MD5:	012B9F126C9B5B2E2D90C98C26F0E6BD
SHA1:	52835EDEF886BBE4403FC974D6ED5E227B092246
SHA-256:	679FFC845F3C4FB15985F9E61562B99EB1B6342C6C44A9AD79700F86AD30EA96
SHA-512:	1915A27DBEE48E0171584E4D884BE398897852BE0EDA8807C9B34A96A72C9549C68E926E64B648701706638BF52137AE525FC9BC606AA127993C5AE49320F0B2
Malicious:	false
URL:	https://www.donotcall.gov/css/faq.css
Preview:	.rnl_hp .rightNavLinks{margin-top:40px}@media only screen and (max-width:768px) and (min-width:481px){body:nth-of-type(1) .rnl_hp .rightNavLinks{margin-top:40px}}.form_field_right{margin:-27px 0 0 220px;width:250px;clear:both}

Chrome Cache Entry: 711

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	3560
Entropy (8bit):	7.951298281946221
Encrypted:	false
SSDEEP:	48:KiRVQjW+fsDEMB9Up/Q2AttX8PlA0xTIGbtZwdTaHItTMCAWcrXDQpY+huu2knl0:52sDjDUa2AtIdhIjdMNW6XDn+1r5X7c
MD5:	11491B578124FD49948D2AD81B1621EF
SHA1:	031172C3797639C754633FCACE40357BC7FD2DCF
SHA-256:	CB648CBD289F501DCA531D83DFEB58B07692224753C902674AD4FD93154B04BF
SHA-512:	48C3B556592C62223768820C72F13F01B97529AEFA62B4F1D0179BD1A976C049F0293FFF6A6AE8FFD90837C39FBDB5EBC0B01D647161F3FB18360E00140E08CE
Malicious:	false
URL:	https://reportfraud.ftc.gov/189.55854287e34e0293.js
Preview:	..C#.......>.Z..d8,....cG...^t,vL.....#<............:B.....~.........7s..dQ..[.O.l#jMT>&9.Bu.@..>..-....}..K...b.5.NZYjl.......O.....d..4.U.0.]k.r......t.&.3.....R..]...........$.uw.<..$.t....`. ....jRtv.@(w.......i._.e.!JHp._....c.2.haTr.....n[...N>iD....<.]!................3%kp..-s.[.D.......K.PQ......TEX...+.6..'.z.S.).m....E.{@..E.<.e.5)..c#.FIC..+z8..N.!...7L....G...y..QY.1........,G..h.!uR..Q...1uS..P..&......C....#(.-(..(..2..:$C..#2...m...h./.G....Z.)..i.4...H..h....VH.zh5....P.ZG...B..F..G.5..}P#q.'5...-i..]...y.DV.....K.@...{6.....@..y.k...H.J........].J0$....M.^/..X..-..G.I...i....a.8O.&'.1...;.x.!..AQ......M{..L..xL%>...N.../=.......J".W.....B*LFUFA..~\..S..f.......g....,...".W<.$"...Tfe...;.e..3..]...D,v.#P...<y.._r.........y..O.U...q...q..;...b.%2..EJ$5.U..0.2E..0..#D.)R.V.......j._Cgo6...C...yq..D.[..OYa$.....n.96...\|...St..;......p...y.....7G.......[.q..1.._1.U.....Cu..m..._/LsC.-.O...d...m........m.1[...y.........-fq

Chrome Cache Entry: 712

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1489), with no line terminators
Category:	downloaded
Size (bytes):	1492
Entropy (8bit):	5.025182151297007
Encrypted:	false
SSDEEP:	24:Qmi996/YDgM2YDWYgqYdLY0OqYFoxZoA7kbfZ7:Q59tExOq377Wl
MD5:	CDB2EBC24F4185F59C43BF81F6021318
SHA1:	D02BCD6ADFD3F1D55B74531DF88A34E6B3EAB1E2
SHA-256:	68699B3F3B3177A58AD27F814E4870D7E9098CEC48D02836C078CADBBEC7054C
SHA-512:	481C533CEC74295E8CF94524D90DF4C20ADC191CCE39E983B53F00DB3923B38D3275A7056517614B83F30CF5DF27B095330F40F4A8DFA7BBB216D4E6FF9AFC29
Malicious:	false
URL:	https://www.donotcall.gov/partials/verify/step1.html
Preview:	<div class="sp_c"> <div data-i18n="[html]verify.Step1Content" id="verify_step1_instr"> </div> <div class="error_mess_c"><span id="error_msg" class="errorMessage"></span></div> <div class="s_form_cont"> <div class="form_line_s"> <div class="form_text_left"> <label for="VerifyPhoneNumberTextBox1" data-i18n="verify.PhoneText"></label> </div> <div class="form_field_right"><input type="text" maxlength="14" id="VerifyPhoneNumberTextBox1"> </div> </div> <div class="form_line_s"> <div class="form_text_left"><label for="VerifyPhoneNumberTextBox2" data-i18n="verify.PhoneText2">Phone Number2 (Optional)</label></div> <div class="form_field_right"> <input type="text" maxlength="14" id="VerifyPhoneNumberTextBox2"> </div> </div> <div class="form_line_s"> <div class="form_text_left"><label for="VerifyPhoneNumberTextBox3" data-i18n="verify.PhoneText3">Phone Number3 (Optional)</label></div> <div class="form_field_right"> <input type="text" maxlength="14" id="VerifyPhoneNumberTextBox3"> </div> </div> <di

Chrome Cache Entry: 713

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1198
Entropy (8bit):	4.988546801404346
Encrypted:	false
SSDEEP:	24:N+kzhb89r+QivhRTYL1t4vK12bBcl+c5MPK2+5NSWlvZlt:Npz+9rvohJYX4vldb8Mn+Jlhlt
MD5:	DC99B95399BA62F36606B5FC6FFCF847
SHA1:	CFB345B16F90679AFFB7C4EEE43D897A215E8F89
SHA-256:	3B2465A6276A826E023962C086D403D674349EA7EC8CBA16339A7F8292BC85B7
SHA-512:	17C56BC3AFA4688EC0A94E9599D4AFE76DFF4DD443E80514915DAB492CE737632346C8F4721E4A8B7DD7AAEF821D42F9B3D213826D37A88A50F527512F9133E2
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/themes/base/resizable.css?scewfd
Preview:	/!. jQuery UI Resizable 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */..ui-resizable {..position: relative;.}..ui-resizable-handle {..position: absolute;..font-size: 0.1px;..display: block;..-ms-touch-action: none;..touch-action: none;.}..ui-resizable-disabled .ui-resizable-handle,..ui-resizable-autohide .ui-resizable-handle {..display: none;.}..ui-resizable-n {..cursor: n-resize;..height: 7px;..width: 100%;..top: -5px;..left: 0;.}..ui-resizable-s {..cursor: s-resize;..height: 7px;..width: 100%;..bottom: -5px;..left: 0;.}..ui-resizable-e {..cursor: e-resize;..width: 7px;..right: -5px;..top: 0;..height: 100%;.}..ui-resizable-w {..cursor: w-resize;..width: 7px;..left: -5px;..top: 0;..height: 100%;.}..ui-resizable-se {..cursor: se-resize;..width: 12px;..height: 12px;..right: 1px;..bottom: 1px;.}..ui-resizable-sw {..cursor: sw-resize;..width: 9px;..height: 9px;..left: -5px;..botto

Chrome Cache Entry: 714

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1600x1248, components 3
Category:	dropped
Size (bytes):	114310
Entropy (8bit):	7.701673230837779
Encrypted:	false
SSDEEP:	3072:Tjhc1T1BMNQkpZsRCfCx6P3h6K3Q6aq1UC8wT/b33m:TjheYNB1JnQ6NAWT33m
MD5:	6D409FC6EC54E36ABE0C33AB849966F5
SHA1:	189D89B2387B1CD4C13F5F479383C5FB1C2667B0
SHA-256:	ECA10A5DF4B175FE289F8FDF148F7CDCC6CF7809E046C737AEC42229D4591A0C
SHA-512:	737037C15960E80319A2C9E14F38F8A0AFC7F5566BF9C7F3CB160664A76937F1972914DDC20C770254CC9BA191E69252E2B50888A28AE147B1F4D743077CDE1D
Malicious:	false
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...................................................................................................................................................@.................................................................................!.1AQaq........"2..R...B.3.b#...Ur..4..$DT..5E.C.Ss.%....................!Q....A..1q............?.....0H.'.a..I....4. ......;..\...e..N....EE....}X.{..xV0@jr..;........ ....E...P..H...=..S......W.....`C`....P...@...T.2....i.0.%]..P.........H.........b........`+......... .......=...N.2#~.'v@t.p..6..b3".r..^..E.@O...."Uh.......fEf4Q..i..1P.b..H......I.6.X..;}+:is9....Xf.z.F...&\Z..h.......35..t...L...&]/j......7\|F%.g...9.....(..r.. ...C$ .. .F...p...+.@..0....d.G...xd.I....#V...........mA)......=.....j.../I....{.p..... ..V.N...#..`...}....).... ....F...8vp......T.f.2..0...e...O..'q...............7.......\....2._ 'p.._h.p.X.J0..r.... .@P..J...`T........@(.(..... @...QP.....r.........^).d.eE

Chrome Cache Entry: 715

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (6283), with no line terminators
Category:	downloaded
Size (bytes):	6285
Entropy (8bit):	5.121946787747159
Encrypted:	false
SSDEEP:	96:lKrpq4fjy7STjL7CkWQe1zvQe+Usck+skmZ1gucY5l0tT5gOH4bIU5gOH4bIp:l2dWWTjCkWNv8A9uB720
MD5:	0832EF1E4B15991FC88318041FA3FD7A
SHA1:	487141C50B89504CA436F559182F3C4A53FA63E8
SHA-256:	081EC4530BA98B81F1FB9DA0665542D0A295489EE02B9E124BEF44A9FB3089EA
SHA-512:	CA612F461F94A24CB19B3658ED80266FEB6CEBCDED40143873F8A7A0F059663D58D01412B58A8D3B4006029404E61E3094677537151D4A6B434C05920094C881
Malicious:	false
URL:	https://www.donotcall.gov/index.html
Preview:	<!doctype html> <head> <script async src="https://www.googletagmanager.com/gtag/js?id=G-X2KH68RJRQ"></script> <script type="text/javascript" src="/js/gafourprod.js"></script> <title data-i18n="sitewide.page-title">National Do Not Call Registry</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1"> <meta name="msapplication-TileColor" content="#ffffff"> <meta name="msapplication-TileImage" content="/images/ms-icon-144x144.png"> <meta name="theme-color" content="#ffffff"> <meta name="description" content="Register your phone number to report stop or block unwanted, annoying,telemarketing, spam calls, robocalls to the FTC"> <meta name="keywords" content="Annoying, Block unwanted calls, Report annoying calls, Robocalls, Telemarketers, Avoid unwanted calls, Spam calls, Stop spam calls"> <link rel="apple-touch-icon" sizes="57x57" href="/images/apple-icon-57x57.png"> <link rel="apple-touch-icon" sizes="60x60" href="/images/apple-icon-60x60.png"> <li

Chrome Cache Entry: 716

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2306
Entropy (8bit):	5.165366851933223
Encrypted:	false
SSDEEP:	48:cVA+fEvr1wkPFxwpE1oodJ5NFtZt2/NJwrxwrVT:3+fWrdtYwrxwrt
MD5:	1E0055EEE1B9B68B2D7988A65842810A
SHA1:	7E3D2016AA89DB37A3FEE1E7630F51F76DEEFDA9
SHA-256:	5D915569D7068200A8E936A9EB614DBA2C7F5DEB63C8A483A9C12C0CB86E4DDE
SHA-512:	5861EA4BA947BB2B5A8F332141B840BEE37A315D14A21F71A7749AB1F93415F6D4719F8BCBF37B1CFF1FCB3A9EBD24C3D85D84496CDDB6E53F3FF091EF6ED07A
Malicious:	false
URL:	https://reportfraud.ftc.gov/assets/images/To-Do.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 1080 938" style="enable-background:new 0 0 1080 938;" xml:space="preserve">..<style type="text/css">....st0{fill:#7ED3F3;}....st1{fill:#244974;}....st2{enable-background:new ;}..</style>..<title>Report-Fraud-Illos</title>..<rect x="251" y="146" class="st0" width="522" height="646"/>..<path class="st1" d="M338.5,648.5L338.5,648.5c18.2,0,33,14.8,33,33l0,0c0,18.2-14.8,33-33,33l0,0c-18.2,0-33-14.8-33-33l0,0...C305.5,663.2,320.3,648.5,338.5,648.5z"/>..<path class="st1" d="M338.5,361.5L338.5,361.5c18.2,0,33,14.8,33,33l0,0c0,18.2-14.8,33-33,33l0,0c-18.2,0-33-14.8-33-33l0,0...C305.5,376.2,320.3,361.5,338.5,361.5z"/>..<rect x="399.5" y="361.5" class="st1" width="319" height="66"/>..<path class="st1" d="M338.5,504.5L338

Chrome Cache Entry: 717

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3265)
Category:	downloaded
Size (bytes):	3481
Entropy (8bit):	5.056469140618176
Encrypted:	false
SSDEEP:	48:NPzxSHe/dYaMBW8c68tGhn+Ppy0RTxRr9BFRClQvfxtheEeSrSpS7b:Rx7/dYX/cR0mpD3rPyevfH
MD5:	0BBD932438D01236D3DD5FFAAE565BC0
SHA1:	CC3C6520C7AA280ACD6A5333CE7FE1125A7FC9FC
SHA-256:	E232FE3128C175FC69B85FE26A10F6AFA25ED7948C724A55717C3246F071061C
SHA-512:	8E5998845577C716EA6C01652FE9D2E21D6D1D24A2F6737498B40645949131F9A8E3E8C3CEEBF74CD36F5005B4AE64FBA9B6E209A985619DFF4194790E714475
Malicious:	false
URL:	https://www.ftc.gov/core/assets/vendor/jquery.ui/ui/widgets/mouse-min.js?v=10.1.8
Preview:	/!. jQuery UI Mouse 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","../ie","../version","../widget"],e):e(jQuery)}((function(e){"use strict";var t=!1;return e(document).on("mouseup",(function(){t=!1})),e.widget("ui.mouse",{version:"1.13.2",options:{cancel:"input, textarea, button, select, option",distance:1,delay:0},_mouseInit:function(){var t=this;this.element.on("mousedown."+this.widgetName,(function(e){return t._mouseDown(e)})).on("click."+this.widgetName,(function(i){if(!0===e.data(i.target,t.widgetName+".preventClickEvent"))return e.removeData(i.target,t.widgetName+".preventClickEvent"),i.stopImmediatePropagation(),!1})),this.started=!1},_mouseDestroy:function(){this.element.off("."+this.widgetName),this._mouseMoveDelegate&&this.document.off("mousemove."+this.widgetName,this._mouseMoveDelegat

Static File Info

General

File type:	PDF document, version 1.4, 1 pages
Entropy (8bit):	7.964856307543714
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	DNCREGCONF.pdf
File size:	55'132 bytes
MD5:	4a6d9fb8596f837cb35ed914327738c4
SHA1:	4190bfda8800e53bef0bc9c5a03f3d8dfa7820bc
SHA256:	9ecb8f7f10a9126329195e55192126f20cab5beeafbd29d046beadca721c7ee0
SHA512:	13c447bf42e73c8921631066f173dcc04312f9eac98e24c467203561f190d6cea49c1d5d44c4222e34d4df11ccf5f23bed2dcac10943f71a4e8c574a60bd6aac
SSDEEP:	768:P6AuCN7DCBJJZUcPvVaehVyBhn5+fd2Mlxyvmp0v3P0m62fBGF+Queh2EtAyOB3G:xpaAp+fswovmpMM7FvXEEtckJPmKL0sn
TLSH:	1133F1A6A6D8190CD1D6C807CB3D729509DCF14BBBC449E502709780BC4ABFAFA609F6
File Content Preview:	%PDF-1.4.%.....1 0 obj.<</Creator (Mozilla/5.0 $Windows NT 10.0; Win64; x64$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/92.0.4515.159 Safari/537.36)./Producer (Skia/PDF m92)./CreationDate (D:20210909092515+00'00')./ModDate (D:20210909092515+00'00')

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.4
Total Entropy:	7.964856
Total Bytes:	55132
Stream Entropy:	7.993615
Stream Bytes:	51083
Entropy outside Streams:	5.230753
Bytes outside Streams:	4049
Number of EOF found:	1
Bytes after EOF:

Keywords Statistics

Name	Count
obj	19
endobj	19
stream	7
endstream	7
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	2
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5	Preview
6	9248529694564010	70f8eca3e40674e4f3941b4304d782a1
7	9208529a9e564034	d7a21e5d6e225b7baaec2db34089eb41

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 23, 2024 22:31:34.338655949 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 23, 2024 22:31:43.942544937 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 23, 2024 22:31:45.874543905 CEST	49738	443	192.168.2.4	23.36.68.63
Apr 23, 2024 22:31:45.874610901 CEST	443	49738	23.36.68.63	192.168.2.4
Apr 23, 2024 22:31:45.874696970 CEST	49738	443	192.168.2.4	23.36.68.63
Apr 23, 2024 22:31:45.876574993 CEST	49738	443	192.168.2.4	23.36.68.63
Apr 23, 2024 22:31:45.876625061 CEST	443	49738	23.36.68.63	192.168.2.4
Apr 23, 2024 22:31:46.098819971 CEST	443	49738	23.36.68.63	192.168.2.4
Apr 23, 2024 22:31:46.098901987 CEST	49738	443	192.168.2.4	23.36.68.63
Apr 23, 2024 22:31:46.102894068 CEST	49738	443	192.168.2.4	23.36.68.63
Apr 23, 2024 22:31:46.102914095 CEST	443	49738	23.36.68.63	192.168.2.4
Apr 23, 2024 22:31:46.103269100 CEST	443	49738	23.36.68.63	192.168.2.4
Apr 23, 2024 22:31:46.146081924 CEST	49738	443	192.168.2.4	23.36.68.63
Apr 23, 2024 22:31:46.150471926 CEST	49738	443	192.168.2.4	23.36.68.63
Apr 23, 2024 22:31:46.196130037 CEST	443	49738	23.36.68.63	192.168.2.4
Apr 23, 2024 22:31:46.300319910 CEST	443	49738	23.36.68.63	192.168.2.4
Apr 23, 2024 22:31:46.300396919 CEST	443	49738	23.36.68.63	192.168.2.4
Apr 23, 2024 22:31:46.300452948 CEST	49738	443	192.168.2.4	23.36.68.63
Apr 23, 2024 22:31:46.300515890 CEST	49738	443	192.168.2.4	23.36.68.63
Apr 23, 2024 22:31:46.300534010 CEST	443	49738	23.36.68.63	192.168.2.4
Apr 23, 2024 22:31:46.300549984 CEST	49738	443	192.168.2.4	23.36.68.63
Apr 23, 2024 22:31:46.300556898 CEST	443	49738	23.36.68.63	192.168.2.4
Apr 23, 2024 22:31:46.339206934 CEST	49739	443	192.168.2.4	23.36.68.63
Apr 23, 2024 22:31:46.339260101 CEST	443	49739	23.36.68.63	192.168.2.4
Apr 23, 2024 22:31:46.339327097 CEST	49739	443	192.168.2.4	23.36.68.63
Apr 23, 2024 22:31:46.339596033 CEST	49739	443	192.168.2.4	23.36.68.63
Apr 23, 2024 22:31:46.339613914 CEST	443	49739	23.36.68.63	192.168.2.4
Apr 23, 2024 22:31:46.555356026 CEST	443	49739	23.36.68.63	192.168.2.4
Apr 23, 2024 22:31:46.555423021 CEST	49739	443	192.168.2.4	23.36.68.63
Apr 23, 2024 22:31:46.558129072 CEST	49739	443	192.168.2.4	23.36.68.63
Apr 23, 2024 22:31:46.558139086 CEST	443	49739	23.36.68.63	192.168.2.4
Apr 23, 2024 22:31:46.558487892 CEST	443	49739	23.36.68.63	192.168.2.4
Apr 23, 2024 22:31:46.560509920 CEST	49739	443	192.168.2.4	23.36.68.63
Apr 23, 2024 22:31:46.604115009 CEST	443	49739	23.36.68.63	192.168.2.4
Apr 23, 2024 22:31:46.764352083 CEST	443	49739	23.36.68.63	192.168.2.4
Apr 23, 2024 22:31:46.764456034 CEST	443	49739	23.36.68.63	192.168.2.4
Apr 23, 2024 22:31:46.764504910 CEST	49739	443	192.168.2.4	23.36.68.63
Apr 23, 2024 22:31:46.807466030 CEST	49739	443	192.168.2.4	23.36.68.63
Apr 23, 2024 22:31:46.807492018 CEST	443	49739	23.36.68.63	192.168.2.4
Apr 23, 2024 22:31:46.807506084 CEST	49739	443	192.168.2.4	23.36.68.63
Apr 23, 2024 22:31:46.807514906 CEST	443	49739	23.36.68.63	192.168.2.4
Apr 23, 2024 22:31:56.800076008 CEST	49741	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:31:56.800168991 CEST	443	49741	20.114.59.183	192.168.2.4
Apr 23, 2024 22:31:56.800263882 CEST	49741	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:31:56.801928043 CEST	49741	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:31:56.801964998 CEST	443	49741	20.114.59.183	192.168.2.4
Apr 23, 2024 22:31:57.314620972 CEST	443	49741	20.114.59.183	192.168.2.4
Apr 23, 2024 22:31:57.315934896 CEST	49741	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:31:57.317570925 CEST	49741	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:31:57.317583084 CEST	443	49741	20.114.59.183	192.168.2.4
Apr 23, 2024 22:31:57.317908049 CEST	443	49741	20.114.59.183	192.168.2.4
Apr 23, 2024 22:31:57.367516041 CEST	49741	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:31:57.706613064 CEST	49741	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:31:57.748127937 CEST	443	49741	20.114.59.183	192.168.2.4
Apr 23, 2024 22:31:58.038511992 CEST	443	49741	20.114.59.183	192.168.2.4
Apr 23, 2024 22:31:58.038544893 CEST	443	49741	20.114.59.183	192.168.2.4
Apr 23, 2024 22:31:58.038557053 CEST	443	49741	20.114.59.183	192.168.2.4
Apr 23, 2024 22:31:58.038573027 CEST	443	49741	20.114.59.183	192.168.2.4
Apr 23, 2024 22:31:58.038618088 CEST	49741	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:31:58.038645029 CEST	443	49741	20.114.59.183	192.168.2.4
Apr 23, 2024 22:31:58.038669109 CEST	443	49741	20.114.59.183	192.168.2.4
Apr 23, 2024 22:31:58.038686991 CEST	443	49741	20.114.59.183	192.168.2.4
Apr 23, 2024 22:31:58.038783073 CEST	443	49741	20.114.59.183	192.168.2.4
Apr 23, 2024 22:31:58.038836002 CEST	49741	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:31:58.038836002 CEST	49741	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:31:58.038836956 CEST	49741	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:31:58.038836956 CEST	49741	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:31:58.039743900 CEST	49741	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:31:58.051312923 CEST	49741	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:31:58.051358938 CEST	443	49741	20.114.59.183	192.168.2.4
Apr 23, 2024 22:31:58.051387072 CEST	49741	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:31:58.051403046 CEST	443	49741	20.114.59.183	192.168.2.4
Apr 23, 2024 22:32:04.786340952 CEST	49748	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:04.786386013 CEST	443	49748	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:04.786436081 CEST	49748	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:04.787974119 CEST	49748	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:04.787988901 CEST	443	49748	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.182313919 CEST	443	49748	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.182779074 CEST	49748	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.182807922 CEST	443	49748	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.184570074 CEST	443	49748	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.184637070 CEST	49748	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.185758114 CEST	49748	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.185904026 CEST	443	49748	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.186026096 CEST	49748	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.186038017 CEST	443	49748	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.229548931 CEST	49748	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.428024054 CEST	443	49748	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.428128004 CEST	443	49748	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.428172112 CEST	443	49748	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.428209066 CEST	49748	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.428240061 CEST	443	49748	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.428263903 CEST	443	49748	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.428292036 CEST	49748	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.428318024 CEST	49748	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.428889036 CEST	49748	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.428903103 CEST	443	49748	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.449632883 CEST	49750	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.449676037 CEST	443	49750	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.449743032 CEST	49750	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.450195074 CEST	49751	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.450237989 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.450319052 CEST	49751	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.451190948 CEST	49752	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.451221943 CEST	443	49752	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.451276064 CEST	49752	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.451404095 CEST	49753	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.451435089 CEST	443	49753	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.451479912 CEST	49753	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.451653957 CEST	49752	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.451668978 CEST	443	49752	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.451787949 CEST	49751	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.451807022 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.451915979 CEST	49750	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.451935053 CEST	443	49750	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.452161074 CEST	49753	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.452171087 CEST	443	49753	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.556864977 CEST	49755	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:05.556938887 CEST	443	49755	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:05.557014942 CEST	49755	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:05.557182074 CEST	49755	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:05.557219028 CEST	443	49755	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:05.783704042 CEST	443	49755	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:05.800404072 CEST	49755	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:05.800455093 CEST	443	49755	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:05.804539919 CEST	443	49755	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:05.804605007 CEST	49755	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:05.808244944 CEST	49755	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:05.808409929 CEST	443	49755	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:05.808733940 CEST	49755	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:05.808752060 CEST	443	49755	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:05.824342012 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.824933052 CEST	443	49752	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.828078032 CEST	443	49750	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.828140020 CEST	443	49753	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.836760044 CEST	49753	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.836791992 CEST	443	49753	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.837014914 CEST	49750	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.837044001 CEST	443	49750	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.837618113 CEST	49752	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.837634087 CEST	443	49752	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.838025093 CEST	49751	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.838057041 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.838816881 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.838984966 CEST	443	49752	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.840590954 CEST	443	49753	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.840658903 CEST	49753	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.841423988 CEST	443	49750	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.841516972 CEST	49750	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.842128038 CEST	49751	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.842392921 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.842415094 CEST	49752	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.842664003 CEST	49753	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.842730999 CEST	443	49752	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.842844963 CEST	443	49753	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.842916965 CEST	49750	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.843149900 CEST	49751	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.843158960 CEST	443	49750	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.843198061 CEST	49752	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.843305111 CEST	49753	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.843312025 CEST	443	49753	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.843386889 CEST	49750	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.843395948 CEST	443	49750	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.856225967 CEST	49755	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:05.886889935 CEST	49753	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.887008905 CEST	49750	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:05.888125896 CEST	443	49752	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:05.888132095 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.000591040 CEST	443	49755	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:06.000648975 CEST	443	49755	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:06.000672102 CEST	443	49755	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:06.000711918 CEST	443	49755	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:06.000731945 CEST	443	49755	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:06.000740051 CEST	49755	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:06.000751019 CEST	443	49755	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:06.000778913 CEST	49755	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:06.000778913 CEST	49755	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:06.000808954 CEST	443	49755	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:06.000843048 CEST	49755	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:06.000864029 CEST	49755	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:06.016556025 CEST	443	49755	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:06.016685963 CEST	443	49755	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:06.016732931 CEST	49755	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:06.016771078 CEST	443	49755	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:06.016803026 CEST	49755	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:06.016822100 CEST	49755	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:06.016833067 CEST	443	49755	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:06.016896963 CEST	49755	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:06.017112970 CEST	49755	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:06.017143011 CEST	443	49755	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:06.081805944 CEST	443	49750	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.081993103 CEST	443	49750	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.082012892 CEST	443	49750	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.082076073 CEST	443	49750	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.082104921 CEST	49750	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.082185984 CEST	443	49750	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.082231045 CEST	49750	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.084059954 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.084095955 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.084155083 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.084176064 CEST	49751	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.084203959 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.084220886 CEST	49751	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.090859890 CEST	443	49753	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.091012955 CEST	443	49753	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.091033936 CEST	443	49753	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.091082096 CEST	49753	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.091115952 CEST	443	49753	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.091154099 CEST	49753	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.096813917 CEST	443	49752	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.097141981 CEST	443	49752	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.097224951 CEST	49752	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.097582102 CEST	49752	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.097611904 CEST	443	49752	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.131197929 CEST	49751	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.131197929 CEST	49753	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.131207943 CEST	49750	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.131222963 CEST	443	49753	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.181394100 CEST	49753	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.199718952 CEST	443	49750	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.199783087 CEST	443	49750	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.199883938 CEST	49750	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.199934959 CEST	443	49750	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.199964046 CEST	443	49750	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.200022936 CEST	49750	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.200417995 CEST	49750	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.200448036 CEST	443	49750	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.203680992 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.203720093 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.203787088 CEST	49751	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.203833103 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.203854084 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.203890085 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.203895092 CEST	49751	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.203921080 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.203923941 CEST	49751	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.203947067 CEST	49751	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.204154968 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.204227924 CEST	49751	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.204240084 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.204356909 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.204410076 CEST	49751	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.205188036 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.205209970 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.205276966 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.206295967 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.206311941 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.206415892 CEST	49751	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.206430912 CEST	443	49751	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.210457087 CEST	443	49753	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.210489988 CEST	443	49753	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.210510015 CEST	443	49753	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.210541964 CEST	49753	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.210587025 CEST	49753	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.210597038 CEST	443	49753	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.210850954 CEST	443	49753	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.210905075 CEST	49753	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.211137056 CEST	49753	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.211149931 CEST	443	49753	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.224838972 CEST	49757	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.224859953 CEST	443	49757	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.224925041 CEST	49757	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.225322962 CEST	49758	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.225363970 CEST	443	49758	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.225419044 CEST	49758	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.225696087 CEST	49759	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.225790977 CEST	443	49759	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.225855112 CEST	49759	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.226072073 CEST	49760	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.226082087 CEST	443	49760	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.226145029 CEST	49760	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.226428032 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.226448059 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.226505995 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.227547884 CEST	49757	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.227562904 CEST	443	49757	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.227684975 CEST	49758	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.227704048 CEST	443	49758	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.227806091 CEST	49760	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.227818012 CEST	443	49760	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.227945089 CEST	49759	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.227996111 CEST	443	49759	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.228722095 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.228746891 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.315329075 CEST	49763	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.315368891 CEST	443	49763	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.315443993 CEST	49763	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.315464973 CEST	49764	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.315495968 CEST	443	49764	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.315546036 CEST	49764	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.315696955 CEST	49763	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.315712929 CEST	443	49763	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.315845013 CEST	49764	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.315862894 CEST	443	49764	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.582911015 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.583365917 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.583425045 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.584944010 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.585237980 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.585342884 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.585484982 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.595314980 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.595554113 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.595577002 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.597255945 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.597335100 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.597625017 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.597722054 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.597728968 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.599205971 CEST	443	49758	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.599380016 CEST	49758	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.599409103 CEST	443	49758	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.603101015 CEST	443	49758	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.603286982 CEST	49758	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.603657961 CEST	443	49757	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.603717089 CEST	49758	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.603863001 CEST	443	49758	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.603872061 CEST	49757	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.603900909 CEST	443	49757	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.603930950 CEST	49758	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.603945017 CEST	443	49758	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.605398893 CEST	443	49757	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.605660915 CEST	49757	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.605732918 CEST	49757	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.606121063 CEST	443	49757	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.606951952 CEST	443	49760	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.607198954 CEST	49760	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.607228041 CEST	443	49760	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.608733892 CEST	443	49760	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.608798981 CEST	49760	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.609019995 CEST	49760	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.609100103 CEST	443	49760	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.609106064 CEST	49760	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.611258984 CEST	443	49759	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.611430883 CEST	49759	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.611445904 CEST	443	49759	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.615545988 CEST	443	49759	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.615679979 CEST	49759	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.615921021 CEST	49759	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.615986109 CEST	49759	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.615997076 CEST	443	49759	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.616436958 CEST	443	49759	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.633454084 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.644124031 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.649331093 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.649347067 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.649410009 CEST	49757	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.649440050 CEST	49758	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.649440050 CEST	49760	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.649471998 CEST	443	49760	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.664411068 CEST	49759	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.664426088 CEST	443	49759	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.685678959 CEST	443	49763	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.685887098 CEST	49763	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.685906887 CEST	443	49763	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.687347889 CEST	443	49763	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.687416077 CEST	49763	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.687693119 CEST	49763	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.687767982 CEST	443	49763	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.687802076 CEST	49763	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.689589977 CEST	443	49764	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.689753056 CEST	49764	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.689765930 CEST	443	49764	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.693312883 CEST	443	49764	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.693381071 CEST	49764	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.693672895 CEST	49764	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.693769932 CEST	49764	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.693850994 CEST	443	49764	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.695463896 CEST	49760	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.695872068 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.710767031 CEST	49759	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.728122950 CEST	443	49763	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.728977919 CEST	49763	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.728996038 CEST	443	49763	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.745086908 CEST	49764	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.745095968 CEST	443	49764	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.776299000 CEST	49763	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.792215109 CEST	49764	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.846518040 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.846579075 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.846600056 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.846669912 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.846700907 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.846776009 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.846776009 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.846776009 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.846776009 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.846807957 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.846857071 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.855833054 CEST	443	49758	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.855891943 CEST	443	49758	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.856070995 CEST	49758	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.856072903 CEST	443	49758	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.856080055 CEST	443	49757	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.856148958 CEST	49758	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.856311083 CEST	443	49757	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.856364965 CEST	49757	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.856384993 CEST	443	49757	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.856426954 CEST	49757	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.856430054 CEST	443	49757	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.856494904 CEST	443	49757	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.856539965 CEST	49757	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.856899977 CEST	49758	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.856916904 CEST	443	49758	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.857263088 CEST	49768	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.857311010 CEST	443	49768	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.857376099 CEST	49768	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.858231068 CEST	49768	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.858247995 CEST	443	49768	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.858402014 CEST	49757	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.858412027 CEST	443	49757	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.862205029 CEST	49769	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.862216949 CEST	443	49769	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.862293005 CEST	49769	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.862462044 CEST	49769	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.862473011 CEST	443	49769	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.863132000 CEST	443	49760	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.863183022 CEST	443	49760	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.863248110 CEST	49760	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.863256931 CEST	443	49760	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.863297939 CEST	49760	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.863305092 CEST	443	49760	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.863365889 CEST	443	49760	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.863413095 CEST	49760	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.863574982 CEST	49770	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.863595009 CEST	443	49770	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.863641977 CEST	49770	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.864207029 CEST	49770	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.864223003 CEST	443	49770	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.864531040 CEST	49771	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.864558935 CEST	443	49771	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.864619970 CEST	49771	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.865140915 CEST	49771	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.865166903 CEST	443	49771	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.865591049 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.865627050 CEST	49760	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.865636110 CEST	443	49760	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.867589951 CEST	49772	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.867665052 CEST	443	49772	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.867732048 CEST	49772	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.868151903 CEST	49772	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.868186951 CEST	443	49772	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.874519110 CEST	443	49759	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.874567986 CEST	443	49759	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.874633074 CEST	49759	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.874658108 CEST	443	49759	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.874735117 CEST	443	49759	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.874795914 CEST	49759	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.875212908 CEST	49759	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.875236988 CEST	443	49759	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.880927086 CEST	49773	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.880964994 CEST	443	49773	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.881035089 CEST	49773	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.881443024 CEST	49773	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.881453991 CEST	443	49773	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.906260967 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.944927931 CEST	443	49764	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.944983006 CEST	443	49764	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.945003986 CEST	443	49764	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.945024014 CEST	443	49764	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.945049047 CEST	49764	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.945067883 CEST	443	49764	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.945075035 CEST	49764	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.948880911 CEST	443	49763	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.948908091 CEST	443	49763	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.948919058 CEST	443	49763	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.948951006 CEST	443	49763	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.948961973 CEST	443	49763	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.948977947 CEST	49763	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.949003935 CEST	443	49763	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.949019909 CEST	49763	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.949019909 CEST	49763	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.966316938 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.966362953 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.966423988 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.966439009 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.966455936 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.966486931 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.983105898 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.983117104 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.983136892 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.983150005 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.983164072 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.983175993 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.983222961 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.983249903 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.983251095 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.983280897 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.984252930 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.984266043 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.984285116 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.984317064 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.984342098 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.984360933 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:06.984385014 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.984406948 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.999849081 CEST	49763	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.999850035 CEST	49764	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:06.999859095 CEST	443	49764	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.041910887 CEST	49764	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.062475920 CEST	443	49764	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.062505007 CEST	443	49764	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.062531948 CEST	443	49764	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.062542915 CEST	49764	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.062556028 CEST	49764	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.062580109 CEST	49764	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.062592983 CEST	443	49764	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.062937021 CEST	443	49764	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.062980890 CEST	49764	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.063174009 CEST	49764	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.063198090 CEST	443	49764	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.067914963 CEST	443	49763	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.067924023 CEST	443	49763	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.067985058 CEST	49763	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.067992926 CEST	443	49763	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.068033934 CEST	49763	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.068038940 CEST	443	49763	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.068048954 CEST	443	49763	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.068083048 CEST	49763	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.070169926 CEST	49763	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.070177078 CEST	443	49763	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.085752010 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.085824013 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.085848093 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.085859060 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.085886955 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.085903883 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.086308002 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.086357117 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.086373091 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.086380005 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.086415052 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.086426020 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.101022005 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.101047993 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.101095915 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.101140976 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.101145029 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.101183891 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.102560997 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.102579117 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.102627039 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.102643967 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.102669001 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.102688074 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.103408098 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.103436947 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.103478909 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.103492022 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.103516102 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.103533030 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.205095053 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.205168962 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.205324888 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.205324888 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.205353975 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.205398083 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.206012011 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.206090927 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.206099033 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.206235886 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.206291914 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.219005108 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.219037056 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.219126940 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.219126940 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.219145060 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.219211102 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.221184015 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.221226931 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.221241951 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.221256018 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.221280098 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.221282959 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.221304893 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.221324921 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.237818956 CEST	443	49769	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.239383936 CEST	443	49770	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.241235971 CEST	443	49768	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.244924068 CEST	443	49771	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.246764898 CEST	443	49772	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.258302927 CEST	443	49773	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.260395050 CEST	49773	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.260421038 CEST	443	49773	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.261919975 CEST	49772	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.261960030 CEST	443	49772	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.262051105 CEST	49771	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.262068033 CEST	443	49771	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.262231112 CEST	49768	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.262244940 CEST	443	49768	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.262736082 CEST	443	49768	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.263293982 CEST	443	49771	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.264231920 CEST	443	49773	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.264306068 CEST	49773	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.265686989 CEST	443	49772	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.265770912 CEST	49772	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.283143044 CEST	49769	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.283771038 CEST	49770	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.302726984 CEST	49768	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.319088936 CEST	49771	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.328311920 CEST	49770	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.328349113 CEST	443	49770	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.328442097 CEST	49769	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.328461885 CEST	443	49769	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.329607964 CEST	49772	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.329792976 CEST	443	49769	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.329883099 CEST	443	49770	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.329974890 CEST	49773	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.330073118 CEST	443	49772	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.330188036 CEST	443	49773	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.330224991 CEST	49771	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.330388069 CEST	443	49771	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.330475092 CEST	49768	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.330579996 CEST	443	49768	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.331197023 CEST	49769	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.331386089 CEST	443	49769	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.331470966 CEST	49770	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.331665039 CEST	49772	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.331684113 CEST	443	49772	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.331684113 CEST	443	49770	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.331857920 CEST	49773	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.331876040 CEST	443	49773	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.331901073 CEST	49771	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.331970930 CEST	49768	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.332132101 CEST	49769	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.332180977 CEST	49770	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.338871002 CEST	49761	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.338896036 CEST	443	49761	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.339467049 CEST	49756	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.339479923 CEST	443	49756	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.349545956 CEST	49777	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.349581957 CEST	443	49777	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.349638939 CEST	49777	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.349838972 CEST	49777	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.349845886 CEST	443	49777	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.352189064 CEST	49778	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.352216005 CEST	443	49778	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.352298021 CEST	49778	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.352731943 CEST	49778	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.352747917 CEST	443	49778	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.372158051 CEST	443	49771	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.376025915 CEST	49773	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.376029015 CEST	49772	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.376137018 CEST	443	49768	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.376137018 CEST	443	49770	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.376144886 CEST	443	49769	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.414645910 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.414685965 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.414762974 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.415093899 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.415117025 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.490967989 CEST	443	49770	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.490998983 CEST	443	49770	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.491072893 CEST	49770	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.491079092 CEST	443	49770	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.491127968 CEST	49770	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.491857052 CEST	49770	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.491873980 CEST	443	49770	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.495389938 CEST	443	49769	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.495414972 CEST	443	49769	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.495482922 CEST	49769	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.495491982 CEST	443	49769	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.495533943 CEST	49769	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.498390913 CEST	49769	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.498410940 CEST	443	49769	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.498652935 CEST	443	49772	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.498842955 CEST	443	49768	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.498876095 CEST	443	49768	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.498874903 CEST	443	49772	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.498886108 CEST	443	49768	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.498939037 CEST	49772	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.498950958 CEST	49768	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.498967886 CEST	443	49768	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.499006987 CEST	49768	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.499027014 CEST	443	49768	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.499094963 CEST	49768	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.503110886 CEST	443	49771	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.503150940 CEST	443	49771	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.503277063 CEST	49771	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.503310919 CEST	443	49771	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.503340006 CEST	443	49771	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.503391981 CEST	49771	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.503743887 CEST	49781	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.503767014 CEST	443	49781	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.503820896 CEST	49781	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.504023075 CEST	49781	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.504038095 CEST	443	49781	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.506772041 CEST	49772	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.506819010 CEST	443	49772	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.507865906 CEST	49771	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.507885933 CEST	443	49771	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.509259939 CEST	49768	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.509277105 CEST	443	49768	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.511934996 CEST	443	49773	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.511972904 CEST	443	49773	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.512039900 CEST	49773	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.512059927 CEST	443	49773	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.512128115 CEST	443	49773	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.512176037 CEST	49773	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.527678967 CEST	49782	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.527703047 CEST	443	49782	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.527782917 CEST	49782	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.527985096 CEST	49782	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.527997017 CEST	443	49782	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.530283928 CEST	49783	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.530323982 CEST	443	49783	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.530406952 CEST	49783	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.530893087 CEST	49783	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.530920029 CEST	443	49783	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.531338930 CEST	49773	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.531352043 CEST	443	49773	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.551517010 CEST	49786	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:32:07.551539898 CEST	443	49786	3.217.69.59	192.168.2.4
Apr 23, 2024 22:32:07.551595926 CEST	49786	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:32:07.551791906 CEST	49786	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:32:07.551805019 CEST	443	49786	3.217.69.59	192.168.2.4
Apr 23, 2024 22:32:07.717226982 CEST	443	49778	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.717526913 CEST	49778	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.717555046 CEST	443	49778	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.718029022 CEST	443	49778	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.718482018 CEST	49778	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.718569994 CEST	443	49778	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.718662977 CEST	49778	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.720737934 CEST	443	49777	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.721096039 CEST	49777	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.721108913 CEST	443	49777	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.721563101 CEST	443	49777	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.721877098 CEST	49777	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.721967936 CEST	443	49777	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.722031116 CEST	49777	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.764117002 CEST	443	49778	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.764166117 CEST	443	49777	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.792377949 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.792607069 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.792639971 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.793100119 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.793453932 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.793539047 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.793633938 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.836159945 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.873847008 CEST	443	49781	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.879980087 CEST	49781	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.880009890 CEST	443	49781	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.881462097 CEST	443	49781	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.881524086 CEST	49781	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.881824017 CEST	49781	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.881906033 CEST	443	49781	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.881997108 CEST	49781	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.882006884 CEST	443	49781	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.898502111 CEST	443	49782	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.898752928 CEST	49782	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.898772001 CEST	443	49782	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.901848078 CEST	443	49783	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.902033091 CEST	49783	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.902061939 CEST	443	49783	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.902986050 CEST	443	49782	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.903065920 CEST	49782	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.903357029 CEST	49782	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.903522015 CEST	49782	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.903529882 CEST	443	49782	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.905783892 CEST	443	49783	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.905852079 CEST	49783	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.906100035 CEST	49783	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.906191111 CEST	49783	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.906198978 CEST	443	49783	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.906218052 CEST	443	49783	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.926215887 CEST	49781	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.933876991 CEST	443	49786	3.217.69.59	192.168.2.4
Apr 23, 2024 22:32:07.934096098 CEST	49786	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:32:07.934137106 CEST	443	49786	3.217.69.59	192.168.2.4
Apr 23, 2024 22:32:07.935815096 CEST	443	49786	3.217.69.59	192.168.2.4
Apr 23, 2024 22:32:07.935888052 CEST	49786	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:32:07.936770916 CEST	49786	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:32:07.936855078 CEST	443	49786	3.217.69.59	192.168.2.4
Apr 23, 2024 22:32:07.936974049 CEST	49786	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:32:07.936983109 CEST	443	49786	3.217.69.59	192.168.2.4
Apr 23, 2024 22:32:07.936999083 CEST	49786	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:32:07.948111057 CEST	443	49782	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.953140020 CEST	49783	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.953154087 CEST	443	49783	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.953330040 CEST	49782	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.953346968 CEST	443	49782	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.970012903 CEST	443	49778	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.970141888 CEST	443	49778	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.970237970 CEST	49778	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.970942020 CEST	49778	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.970956087 CEST	443	49778	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.978709936 CEST	49786	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:32:07.978718042 CEST	443	49786	3.217.69.59	192.168.2.4
Apr 23, 2024 22:32:07.984847069 CEST	443	49777	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.984905958 CEST	443	49777	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.985048056 CEST	49777	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.985060930 CEST	443	49777	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.985084057 CEST	443	49777	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.985150099 CEST	49777	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.985852957 CEST	49777	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.985872984 CEST	443	49777	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:07.994277954 CEST	49782	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:07.994364977 CEST	49783	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.130532980 CEST	443	49781	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.130620003 CEST	443	49781	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.130708933 CEST	49781	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.131800890 CEST	49781	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.131812096 CEST	443	49781	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.153702974 CEST	443	49782	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.153754950 CEST	443	49782	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.153774977 CEST	443	49782	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.153834105 CEST	49782	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.153866053 CEST	443	49782	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.153882027 CEST	49782	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.153948069 CEST	443	49782	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.154001951 CEST	49782	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.154484034 CEST	49782	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.154499054 CEST	443	49782	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.161957026 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.161986113 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.162086010 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.162446022 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.162458897 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.162817001 CEST	49788	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.162838936 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.162897110 CEST	49788	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.163152933 CEST	49788	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.163166046 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.165230989 CEST	443	49783	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.165287971 CEST	443	49783	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.165308952 CEST	443	49783	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.165347099 CEST	49783	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.165366888 CEST	443	49783	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.165381908 CEST	49783	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.165409088 CEST	49783	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.165416002 CEST	443	49783	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.165463924 CEST	443	49783	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.165508032 CEST	49783	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.167196035 CEST	443	49786	3.217.69.59	192.168.2.4
Apr 23, 2024 22:32:08.167275906 CEST	443	49786	3.217.69.59	192.168.2.4
Apr 23, 2024 22:32:08.167346954 CEST	49786	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:32:08.167653084 CEST	49786	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:32:08.167665005 CEST	443	49786	3.217.69.59	192.168.2.4
Apr 23, 2024 22:32:08.167929888 CEST	49783	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.167943001 CEST	443	49783	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.171209097 CEST	49789	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.171228886 CEST	443	49789	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.171286106 CEST	49789	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.171468973 CEST	49789	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.171494961 CEST	443	49789	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.191740990 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.191797972 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.191843033 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.191910028 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.191981077 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.192018032 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.192042112 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.192265034 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.192295074 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.192333937 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.192368984 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.192399979 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.192420959 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.194958925 CEST	49790	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.195019960 CEST	443	49790	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.195095062 CEST	49790	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.195473909 CEST	49791	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.195513010 CEST	443	49791	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.195583105 CEST	49791	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.195589066 CEST	49790	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.195619106 CEST	443	49790	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.195729971 CEST	49791	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.195749998 CEST	443	49791	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.312199116 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.312221050 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.312352896 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.312419891 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.312499046 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.312896967 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.312916994 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.312968969 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.312983990 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.313013077 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.313031912 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.433101892 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.433124065 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.433263063 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.433331013 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.433397055 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.433865070 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.433907032 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.433964968 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.433980942 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.434015989 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.434052944 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.434545994 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.434566975 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.434614897 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.434627056 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.434653997 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.434674978 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.434685946 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.434705019 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.434750080 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.434844017 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.434880972 CEST	443	49780	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.434906006 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.434925079 CEST	49780	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.529593945 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.529917002 CEST	49788	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.529944897 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.530636072 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.530930996 CEST	49788	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.531078100 CEST	49788	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.531084061 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.531160116 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.549860954 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.550122976 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.550146103 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.550961018 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.551249981 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.551373005 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.551378965 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.551496983 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.551702023 CEST	443	49789	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.551986933 CEST	49789	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.552015066 CEST	443	49789	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.553617001 CEST	443	49789	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.554024935 CEST	49789	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.554024935 CEST	49789	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.554224968 CEST	443	49789	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.571937084 CEST	49788	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.572335005 CEST	443	49790	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.572663069 CEST	49790	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.572731972 CEST	443	49790	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.575033903 CEST	443	49791	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.575305939 CEST	49791	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.575335979 CEST	443	49791	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.576514006 CEST	443	49790	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.576611996 CEST	49790	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.576951027 CEST	49790	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.577100039 CEST	49790	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.577224970 CEST	443	49790	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.578500986 CEST	443	49791	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.578571081 CEST	49791	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.578816891 CEST	49791	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.578927040 CEST	49791	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.578934908 CEST	443	49791	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.579055071 CEST	443	49791	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.603066921 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.603184938 CEST	49789	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.618758917 CEST	49790	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.618818045 CEST	443	49790	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.618957996 CEST	49791	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.618984938 CEST	443	49791	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.665683985 CEST	49791	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.665810108 CEST	49790	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.788357973 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.788387060 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.788537025 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.788657904 CEST	49788	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.788687944 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.788739920 CEST	49788	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.809580088 CEST	443	49789	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.809737921 CEST	443	49789	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.809781075 CEST	443	49789	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.809921026 CEST	49789	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.809926987 CEST	443	49789	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.810116053 CEST	49789	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.810542107 CEST	49789	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.810560942 CEST	443	49789	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.829360962 CEST	443	49790	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.829549074 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.829556942 CEST	443	49790	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.829633951 CEST	49790	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.829696894 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.829721928 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.829741001 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.829754114 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.829771042 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.829782009 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.829782009 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.829786062 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.829822063 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.829828978 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.830456972 CEST	49790	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.830502033 CEST	443	49790	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.844485998 CEST	443	49791	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.844537973 CEST	443	49791	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.844712019 CEST	443	49791	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.844719887 CEST	49791	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.844772100 CEST	49791	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.845897913 CEST	49791	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.845916033 CEST	443	49791	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.851403952 CEST	49793	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.851423979 CEST	443	49793	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.851486921 CEST	49793	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.851690054 CEST	49793	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.851707935 CEST	443	49793	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.884377003 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.906424046 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.906439066 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.906482935 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.906541109 CEST	49788	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.906574011 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.906593084 CEST	49788	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.906610012 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.906652927 CEST	49788	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.906660080 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.949013948 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.949047089 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.949064970 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.949094057 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.949140072 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.949146032 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.949171066 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.949192047 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.949201107 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.949218988 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.949220896 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.949263096 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.949345112 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.949400902 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.949867010 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.949903965 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.949933052 CEST	49788	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.949940920 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:08.949956894 CEST	49788	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:08.993768930 CEST	49788	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.025206089 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.025299072 CEST	49788	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.025353909 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.025562048 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.025614023 CEST	49788	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.025875092 CEST	49788	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.025888920 CEST	443	49788	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.030746937 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.030788898 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.030873060 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.031080961 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.031092882 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.068886042 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.068923950 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.069061995 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.069114923 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.069190025 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.069204092 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.069329977 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.069420099 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.069420099 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.070358992 CEST	49787	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.070373058 CEST	443	49787	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.079560041 CEST	49795	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.079583883 CEST	443	49795	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.079670906 CEST	49795	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.079821110 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.079862118 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.079925060 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.080245018 CEST	49797	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.080332041 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.080430984 CEST	49797	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.080712080 CEST	49798	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.080754042 CEST	443	49798	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.080805063 CEST	49798	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.081207991 CEST	49799	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.081247091 CEST	443	49799	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.081304073 CEST	49799	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.081626892 CEST	49800	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.081638098 CEST	443	49800	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.081682920 CEST	49800	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.082194090 CEST	49795	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.082206011 CEST	443	49795	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.082540035 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.082559109 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.082847118 CEST	49797	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.082921982 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.082988977 CEST	49798	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.083005905 CEST	443	49798	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.083141088 CEST	49799	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.083163977 CEST	443	49799	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.083283901 CEST	49800	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.083292961 CEST	443	49800	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.084515095 CEST	49801	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.084523916 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.084580898 CEST	49801	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.084755898 CEST	49801	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.084765911 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.226974964 CEST	443	49793	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.228302956 CEST	49793	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.228338957 CEST	443	49793	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.228837967 CEST	443	49793	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.230241060 CEST	49793	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.230330944 CEST	443	49793	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.230362892 CEST	49793	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.275454044 CEST	49793	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.275473118 CEST	443	49793	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.406052113 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.406296015 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.406316996 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.407010078 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.407284021 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.407381058 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.407412052 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.413660049 CEST	49802	443	192.168.2.4	142.250.105.103
Apr 23, 2024 22:32:09.413701057 CEST	443	49802	142.250.105.103	192.168.2.4
Apr 23, 2024 22:32:09.413853884 CEST	49802	443	192.168.2.4	142.250.105.103
Apr 23, 2024 22:32:09.413985968 CEST	49802	443	192.168.2.4	142.250.105.103
Apr 23, 2024 22:32:09.413995028 CEST	443	49802	142.250.105.103	192.168.2.4
Apr 23, 2024 22:32:09.447344065 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.447380066 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.456190109 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.457309008 CEST	443	49799	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.462430954 CEST	443	49795	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.463300943 CEST	443	49800	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.463336945 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.465043068 CEST	49801	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.465055943 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.465109110 CEST	49800	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.465131044 CEST	443	49800	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.465246916 CEST	49795	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.465253115 CEST	443	49795	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.465296030 CEST	49799	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.465317011 CEST	443	49799	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.465399027 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.465425968 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.466310024 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.466553926 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.466630936 CEST	49801	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.466686964 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.466722012 CEST	443	49800	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.466736078 CEST	443	49795	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.466778040 CEST	49800	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.466917992 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.466974020 CEST	49801	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.467071056 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.467247963 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.467317104 CEST	49800	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.467411995 CEST	443	49800	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.467822075 CEST	49795	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.467912912 CEST	443	49795	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.467915058 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.468048096 CEST	49797	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.468136072 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.468143940 CEST	49801	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.468152046 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.468213081 CEST	49800	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.468230009 CEST	443	49800	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.468264103 CEST	49795	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.469675064 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.469691038 CEST	443	49798	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.469763994 CEST	49797	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.469914913 CEST	49798	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.469933987 CEST	443	49798	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.470144987 CEST	49797	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.470221996 CEST	49797	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.470235109 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.470249891 CEST	443	49799	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.470259905 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.470315933 CEST	49799	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.470592022 CEST	49799	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.470670938 CEST	49799	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.470676899 CEST	443	49799	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.470768929 CEST	443	49799	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.473629951 CEST	443	49798	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.473699093 CEST	49798	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.473942041 CEST	49798	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.474014044 CEST	49798	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.474020004 CEST	443	49798	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.474112988 CEST	443	49798	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.482311010 CEST	443	49793	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.482357979 CEST	443	49793	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.482422113 CEST	49793	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.482449055 CEST	443	49793	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.482582092 CEST	443	49793	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.482652903 CEST	49793	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.483377934 CEST	49793	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.483396053 CEST	443	49793	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.508155107 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.509618044 CEST	49800	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.509619951 CEST	49801	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.512145996 CEST	443	49795	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.525300980 CEST	49798	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.525310993 CEST	443	49798	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.525310040 CEST	49797	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.525367022 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.525418997 CEST	49799	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.525438070 CEST	443	49799	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.572129965 CEST	49799	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.572129965 CEST	49797	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.572134018 CEST	49798	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.642685890 CEST	443	49802	142.250.105.103	192.168.2.4
Apr 23, 2024 22:32:09.642978907 CEST	49802	443	192.168.2.4	142.250.105.103
Apr 23, 2024 22:32:09.642991066 CEST	443	49802	142.250.105.103	192.168.2.4
Apr 23, 2024 22:32:09.644608974 CEST	443	49802	142.250.105.103	192.168.2.4
Apr 23, 2024 22:32:09.644697905 CEST	49802	443	192.168.2.4	142.250.105.103
Apr 23, 2024 22:32:09.645772934 CEST	49802	443	192.168.2.4	142.250.105.103
Apr 23, 2024 22:32:09.645855904 CEST	443	49802	142.250.105.103	192.168.2.4
Apr 23, 2024 22:32:09.668931007 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.669003010 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.669013023 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.669063091 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.669123888 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.669171095 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.669203997 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.697202921 CEST	49802	443	192.168.2.4	142.250.105.103
Apr 23, 2024 22:32:09.697211981 CEST	443	49802	142.250.105.103	192.168.2.4
Apr 23, 2024 22:32:09.709300041 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.709435940 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.709527969 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.709558964 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.709584951 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.709633112 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.712724924 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.718538046 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.718579054 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.718589067 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.718625069 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.718643904 CEST	49801	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.718656063 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.718784094 CEST	49801	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.719610929 CEST	443	49800	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.719636917 CEST	443	49800	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.719647884 CEST	443	49800	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.719707966 CEST	49800	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.719732046 CEST	443	49800	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.724159002 CEST	443	49799	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.724208117 CEST	443	49799	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.724277973 CEST	49799	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.724298954 CEST	443	49799	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.724344015 CEST	49799	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.724455118 CEST	443	49799	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.724504948 CEST	49799	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.725611925 CEST	49799	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.725620985 CEST	443	49799	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.728066921 CEST	443	49798	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.728167057 CEST	443	49798	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.728245020 CEST	49798	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.728261948 CEST	443	49798	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.728310108 CEST	49798	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.728341103 CEST	443	49798	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.728387117 CEST	49798	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.729497910 CEST	49803	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.729552984 CEST	443	49803	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.729686022 CEST	49803	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.729909897 CEST	49803	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.729940891 CEST	443	49803	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.730559111 CEST	49804	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.730590105 CEST	443	49804	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.730650902 CEST	49804	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.730823994 CEST	49804	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.730838060 CEST	443	49804	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.731406927 CEST	443	49795	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.731476068 CEST	443	49795	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.731523037 CEST	49798	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.731537104 CEST	443	49798	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.731544971 CEST	49795	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.731554031 CEST	443	49795	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.732758999 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.732822895 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.732842922 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.732862949 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.732897043 CEST	49797	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.732956886 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.732994080 CEST	49797	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.734623909 CEST	49805	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.734638929 CEST	443	49805	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.734693050 CEST	49805	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.735001087 CEST	49805	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.735016108 CEST	443	49805	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.736890078 CEST	49802	443	192.168.2.4	142.250.105.103
Apr 23, 2024 22:32:09.760309935 CEST	49800	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.776300907 CEST	49795	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.776316881 CEST	49797	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.776372910 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.787929058 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.787959099 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.788024902 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.788032055 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.788067102 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.788089037 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.788136005 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.788264990 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.788314104 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.788345098 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.788361073 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.788393974 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.821985960 CEST	49797	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.827013016 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.827122927 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.827406883 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.827450037 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.827471018 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.827488899 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.827511072 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.836739063 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.837652922 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.837683916 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.837722063 CEST	49801	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.837748051 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.837764025 CEST	49801	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.837790966 CEST	49801	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.838083982 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.838155985 CEST	49801	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.838907003 CEST	443	49800	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.838937998 CEST	443	49800	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.838977098 CEST	443	49800	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.838982105 CEST	49800	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.839018106 CEST	49800	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.839037895 CEST	443	49800	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.839062929 CEST	49800	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.839193106 CEST	443	49800	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.839253902 CEST	49800	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.839299917 CEST	49800	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.839299917 CEST	49800	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.839332104 CEST	443	49800	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.839385986 CEST	49800	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.843928099 CEST	49806	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.843952894 CEST	443	49806	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.844038010 CEST	49806	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.844242096 CEST	49806	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.844259977 CEST	443	49806	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.848920107 CEST	443	49795	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.848948002 CEST	443	49795	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.848999023 CEST	49795	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.849014044 CEST	443	49795	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.849035025 CEST	49795	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.849087000 CEST	443	49795	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.849090099 CEST	49795	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.849289894 CEST	443	49795	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.849356890 CEST	49795	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.849396944 CEST	49795	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.849411964 CEST	443	49795	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.849445105 CEST	49795	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.849479914 CEST	49795	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.851783991 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.851819992 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.851838112 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.851861000 CEST	49797	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.851898909 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.851919889 CEST	49797	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.851927042 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.851960897 CEST	49797	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.851967096 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.852354050 CEST	49807	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.852377892 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.852435112 CEST	49807	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.852473974 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.852520943 CEST	49797	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.852771997 CEST	49807	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.852782011 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.852849007 CEST	49797	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.852858067 CEST	443	49797	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.870706081 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.870723963 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.906930923 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.906945944 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.907016993 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.907018900 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.907037973 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.907078028 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.907084942 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.907100916 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.907138109 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.907278061 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.907289982 CEST	443	49794	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.907313108 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.907329082 CEST	49794	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.907650948 CEST	49808	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.907727957 CEST	443	49808	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.907807112 CEST	49808	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.908227921 CEST	49808	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.908261061 CEST	443	49808	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.916394949 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.944730997 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.944756031 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.944798946 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.944819927 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.944869041 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.944880962 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.944897890 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.945102930 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.945143938 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.945178032 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.945184946 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.945194006 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.945209026 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.945224047 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.956674099 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.956707954 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.956736088 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.956753969 CEST	49801	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.956777096 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.956808090 CEST	49801	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.956826925 CEST	49801	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.956831932 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:09.956907988 CEST	49801	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.963568926 CEST	49801	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:09.963584900 CEST	443	49801	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.062309980 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.062375069 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.062407970 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.062419891 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.062442064 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.062464952 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.062597036 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.062649012 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.062776089 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.062817097 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.062838078 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.062849998 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.062863111 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.062886953 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.062895060 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.062926054 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.062948942 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.062973976 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.063015938 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.063065052 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.063152075 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.063352108 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.063360929 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.063378096 CEST	443	49796	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.063406944 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.063426971 CEST	49796	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.082727909 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.082748890 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.082813978 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.083019972 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.083035946 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.105691910 CEST	443	49803	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.105962992 CEST	49803	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.106029034 CEST	443	49803	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.106815100 CEST	443	49803	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.107121944 CEST	49803	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.107219934 CEST	443	49803	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.107249022 CEST	49803	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.107290030 CEST	49803	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.108088970 CEST	443	49804	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.108269930 CEST	49804	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.108302116 CEST	443	49804	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.109047890 CEST	443	49804	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.109313011 CEST	49804	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.109404087 CEST	49804	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.109410048 CEST	443	49804	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.109549046 CEST	443	49804	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.111893892 CEST	443	49805	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.112073898 CEST	49805	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.112087011 CEST	443	49805	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.113528967 CEST	443	49805	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.113800049 CEST	49805	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.113884926 CEST	49805	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.113987923 CEST	443	49805	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.148122072 CEST	443	49803	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.150310040 CEST	49804	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.165957928 CEST	49805	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.217911959 CEST	443	49806	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.218192101 CEST	49806	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.218206882 CEST	443	49806	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.219619036 CEST	443	49806	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.219686031 CEST	49806	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.219978094 CEST	49806	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.220052958 CEST	443	49806	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.220155954 CEST	49806	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.220163107 CEST	443	49806	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.226646900 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.226815939 CEST	49807	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.226874113 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.228377104 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.228451014 CEST	49807	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.259706974 CEST	49806	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.276633978 CEST	443	49808	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.278140068 CEST	49807	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.278296947 CEST	49808	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.278328896 CEST	443	49808	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.278414965 CEST	49807	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.278426886 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.278605938 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.280213118 CEST	443	49808	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.280318975 CEST	49808	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.280560970 CEST	49808	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.280641079 CEST	443	49808	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.280662060 CEST	49808	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.322324991 CEST	49807	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.322381973 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.322576046 CEST	49808	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.322593927 CEST	443	49808	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.365223885 CEST	443	49803	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.365396023 CEST	443	49803	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.365490913 CEST	49803	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.365535975 CEST	443	49803	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.365569115 CEST	443	49803	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.365597963 CEST	49803	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.365624905 CEST	49803	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.365886927 CEST	443	49804	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.365942001 CEST	443	49804	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.365994930 CEST	49804	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.366014004 CEST	443	49804	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.366055012 CEST	49804	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.366063118 CEST	443	49804	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.366127014 CEST	443	49804	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.366170883 CEST	49804	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.367789030 CEST	49803	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.367820024 CEST	443	49803	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.369083881 CEST	49807	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.369083881 CEST	49808	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.376497030 CEST	443	49805	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.376549959 CEST	443	49805	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.376617908 CEST	49805	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.376631021 CEST	443	49805	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.376673937 CEST	49805	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.376681089 CEST	443	49805	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.376775026 CEST	443	49805	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.376817942 CEST	49805	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.380311966 CEST	49804	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.380346060 CEST	443	49804	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.382735014 CEST	49805	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.382740974 CEST	443	49805	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.386697054 CEST	49810	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.386709929 CEST	443	49810	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.386786938 CEST	49810	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.386986971 CEST	49810	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.387001991 CEST	443	49810	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.452975988 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.453228951 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.453258991 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.456969023 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.457039118 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.457324982 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.457443953 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.457449913 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.457496881 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.477704048 CEST	443	49806	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.477771044 CEST	443	49806	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.477792025 CEST	443	49806	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.477894068 CEST	49806	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.477904081 CEST	443	49806	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.489737988 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.489799976 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.489821911 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.489840984 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.489885092 CEST	49807	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.489950895 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.489984035 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.489988089 CEST	49807	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.490034103 CEST	49807	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.490050077 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.509680033 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.509690046 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.525388002 CEST	49806	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.546083927 CEST	443	49808	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.546116114 CEST	443	49808	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.546125889 CEST	443	49808	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.546180964 CEST	443	49808	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.546207905 CEST	49808	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.546243906 CEST	443	49808	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.546281099 CEST	49807	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.546281099 CEST	49808	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.556565046 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.587935925 CEST	49808	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.587995052 CEST	443	49808	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.597218990 CEST	443	49806	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.597248077 CEST	443	49806	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.597335100 CEST	443	49806	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.597351074 CEST	49806	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.597379923 CEST	49806	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.597392082 CEST	443	49806	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.597408056 CEST	49806	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.597502947 CEST	443	49806	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.597557068 CEST	49806	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.601645947 CEST	49806	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.601660013 CEST	443	49806	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.608887911 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.608925104 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.608972073 CEST	49807	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.609031916 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.609051943 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.609072924 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.609087944 CEST	49807	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.609102964 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.609121084 CEST	49807	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.609349966 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.609396935 CEST	49807	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.609724045 CEST	49807	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.609736919 CEST	443	49807	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.634701967 CEST	49808	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.665530920 CEST	443	49808	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.665548086 CEST	443	49808	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.665605068 CEST	443	49808	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.665623903 CEST	443	49808	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.665641069 CEST	49808	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.665663004 CEST	49808	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.665690899 CEST	49808	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.665695906 CEST	443	49808	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.665725946 CEST	443	49808	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.665776014 CEST	49808	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.717758894 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.717957973 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.717983007 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.718003035 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.718038082 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.718039989 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.718067884 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.718072891 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.718084097 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.728387117 CEST	49808	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.728421926 CEST	443	49808	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.759690046 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.762505054 CEST	443	49810	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.762897968 CEST	49810	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.762911081 CEST	443	49810	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.764061928 CEST	443	49810	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.764363050 CEST	49810	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.764482975 CEST	49810	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.764487982 CEST	443	49810	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.764532089 CEST	443	49810	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.806591988 CEST	49810	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.835504055 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.835534096 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.835576057 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.835596085 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.835624933 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.835681915 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.835731983 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.952898026 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.952924013 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.952963114 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.953047991 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.953072071 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.953088045 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.953097105 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.953157902 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.953167915 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.953260899 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.953318119 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.953325033 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.953344107 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.953361988 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.953376055 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.953387022 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.953469038 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.953533888 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:10.953542948 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:10.994088888 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:11.018074989 CEST	443	49810	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:11.018160105 CEST	443	49810	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:11.018230915 CEST	49810	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:11.018240929 CEST	443	49810	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:11.018285036 CEST	49810	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:11.018345118 CEST	443	49810	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:11.018409967 CEST	49810	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:11.022610903 CEST	49810	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:11.022618055 CEST	443	49810	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:11.070724964 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:11.070832968 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:11.071055889 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:11.071098089 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:11.071116924 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:11.071146965 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:11.071166039 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:11.071271896 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:11.071324110 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:11.071336985 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:11.071378946 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:11.071424007 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:11.071433067 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:11.119091034 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:11.188373089 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:11.188388109 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:11.188476086 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:11.188544035 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:11.188623905 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:11.188623905 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:11.188625097 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:11.188884020 CEST	49809	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:11.188904047 CEST	443	49809	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:13.766819000 CEST	80	49724	69.164.42.0	192.168.2.4
Apr 23, 2024 22:32:13.767005920 CEST	49724	80	192.168.2.4	69.164.42.0
Apr 23, 2024 22:32:13.767117023 CEST	49724	80	192.168.2.4	69.164.42.0
Apr 23, 2024 22:32:13.871768951 CEST	80	49724	69.164.42.0	192.168.2.4
Apr 23, 2024 22:32:17.370346069 CEST	49813	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:32:17.370877028 CEST	49814	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:32:17.527156115 CEST	49815	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:32:17.535780907 CEST	80	49814	104.101.144.188	192.168.2.4
Apr 23, 2024 22:32:17.535892963 CEST	49814	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:32:17.536063910 CEST	49814	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:32:17.536911964 CEST	80	49813	104.101.144.188	192.168.2.4
Apr 23, 2024 22:32:17.536981106 CEST	49813	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:32:17.695494890 CEST	80	49815	104.101.144.188	192.168.2.4
Apr 23, 2024 22:32:17.695557117 CEST	49815	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:32:17.700150967 CEST	80	49814	104.101.144.188	192.168.2.4
Apr 23, 2024 22:32:17.704786062 CEST	80	49814	104.101.144.188	192.168.2.4
Apr 23, 2024 22:32:17.746392965 CEST	49814	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:32:19.203579903 CEST	49842	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:19.203593016 CEST	443	49842	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:19.203644991 CEST	49842	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:19.203907013 CEST	49842	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:19.203917027 CEST	443	49842	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:19.227119923 CEST	49844	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:32:19.227205038 CEST	443	49844	35.190.80.1	192.168.2.4
Apr 23, 2024 22:32:19.227272034 CEST	49844	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:32:19.227448940 CEST	49844	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:32:19.227482080 CEST	443	49844	35.190.80.1	192.168.2.4
Apr 23, 2024 22:32:19.433161974 CEST	443	49842	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:19.433433056 CEST	49842	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:19.433439016 CEST	443	49842	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:19.435129881 CEST	443	49842	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:19.435192108 CEST	49842	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:19.436216116 CEST	49842	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:19.436315060 CEST	443	49842	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:19.436391115 CEST	49842	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:19.436395884 CEST	443	49842	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:19.449518919 CEST	443	49844	35.190.80.1	192.168.2.4
Apr 23, 2024 22:32:19.449673891 CEST	49844	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:32:19.449696064 CEST	443	49844	35.190.80.1	192.168.2.4
Apr 23, 2024 22:32:19.451111078 CEST	443	49844	35.190.80.1	192.168.2.4
Apr 23, 2024 22:32:19.451169014 CEST	49844	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:32:19.451977015 CEST	49844	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:32:19.452069044 CEST	443	49844	35.190.80.1	192.168.2.4
Apr 23, 2024 22:32:19.452095032 CEST	49844	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:32:19.478172064 CEST	49842	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:19.493616104 CEST	49844	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:32:19.493639946 CEST	443	49844	35.190.80.1	192.168.2.4
Apr 23, 2024 22:32:19.543026924 CEST	49844	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:32:19.637782097 CEST	443	49802	142.250.105.103	192.168.2.4
Apr 23, 2024 22:32:19.637923002 CEST	443	49802	142.250.105.103	192.168.2.4
Apr 23, 2024 22:32:19.638022900 CEST	49802	443	192.168.2.4	142.250.105.103
Apr 23, 2024 22:32:19.663901091 CEST	49851	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:19.663945913 CEST	443	49851	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:19.664011955 CEST	49851	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:19.664227009 CEST	49851	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:19.664257050 CEST	443	49851	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:19.683593035 CEST	443	49844	35.190.80.1	192.168.2.4
Apr 23, 2024 22:32:19.683660030 CEST	443	49844	35.190.80.1	192.168.2.4
Apr 23, 2024 22:32:19.683722973 CEST	49844	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:32:19.683847904 CEST	49844	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:32:19.683865070 CEST	443	49844	35.190.80.1	192.168.2.4
Apr 23, 2024 22:32:19.684118032 CEST	49802	443	192.168.2.4	142.250.105.103
Apr 23, 2024 22:32:19.684129000 CEST	443	49802	142.250.105.103	192.168.2.4
Apr 23, 2024 22:32:19.684335947 CEST	49853	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:32:19.684350014 CEST	443	49853	35.190.80.1	192.168.2.4
Apr 23, 2024 22:32:19.684453964 CEST	49853	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:32:19.684643030 CEST	49853	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:32:19.684654951 CEST	443	49853	35.190.80.1	192.168.2.4
Apr 23, 2024 22:32:19.690220118 CEST	443	49842	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:19.690370083 CEST	443	49842	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:19.690416098 CEST	49842	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:19.690422058 CEST	443	49842	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:19.690675974 CEST	443	49842	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:19.690728903 CEST	49842	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:19.690877914 CEST	49842	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:19.690884113 CEST	443	49842	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:19.884962082 CEST	443	49851	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:19.896013975 CEST	49851	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:19.896042109 CEST	443	49851	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:19.899492979 CEST	443	49851	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:19.899561882 CEST	49851	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:19.900197983 CEST	443	49853	35.190.80.1	192.168.2.4
Apr 23, 2024 22:32:19.900475025 CEST	49853	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:32:19.900491953 CEST	443	49853	35.190.80.1	192.168.2.4
Apr 23, 2024 22:32:19.900877953 CEST	49851	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:19.900984049 CEST	443	49853	35.190.80.1	192.168.2.4
Apr 23, 2024 22:32:19.901072025 CEST	443	49851	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:19.901473045 CEST	49853	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:32:19.901573896 CEST	443	49853	35.190.80.1	192.168.2.4
Apr 23, 2024 22:32:19.901595116 CEST	49851	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:19.901611090 CEST	443	49851	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:19.901963949 CEST	49853	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:32:19.948117971 CEST	443	49853	35.190.80.1	192.168.2.4
Apr 23, 2024 22:32:19.956233025 CEST	49851	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:20.107969046 CEST	443	49851	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:20.108009100 CEST	443	49851	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:20.108022928 CEST	443	49851	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:20.108052015 CEST	443	49851	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:20.108071089 CEST	443	49851	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:20.108079910 CEST	443	49851	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:20.108094931 CEST	49851	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:20.108141899 CEST	443	49851	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:20.108203888 CEST	49851	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:20.108203888 CEST	49851	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:20.123832941 CEST	443	49851	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:20.123883009 CEST	443	49851	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:20.123933077 CEST	49851	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:20.123955965 CEST	443	49851	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:20.123980999 CEST	443	49851	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:20.123980999 CEST	49851	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:20.124079943 CEST	49851	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:20.127939939 CEST	49851	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:20.127960920 CEST	443	49851	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:20.140645981 CEST	443	49853	35.190.80.1	192.168.2.4
Apr 23, 2024 22:32:20.140721083 CEST	443	49853	35.190.80.1	192.168.2.4
Apr 23, 2024 22:32:20.140785933 CEST	49853	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:32:20.141112089 CEST	49853	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:32:20.141120911 CEST	443	49853	35.190.80.1	192.168.2.4
Apr 23, 2024 22:32:24.073539019 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.073564053 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.073632002 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.073898077 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.073925018 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.176480055 CEST	49917	443	192.168.2.4	172.67.39.148
Apr 23, 2024 22:32:24.176492929 CEST	443	49917	172.67.39.148	192.168.2.4
Apr 23, 2024 22:32:24.176549911 CEST	49917	443	192.168.2.4	172.67.39.148
Apr 23, 2024 22:32:24.176826954 CEST	49917	443	192.168.2.4	172.67.39.148
Apr 23, 2024 22:32:24.176841974 CEST	443	49917	172.67.39.148	192.168.2.4
Apr 23, 2024 22:32:24.289628029 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.289863110 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.289922953 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.290951014 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.291013956 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.292979956 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.293055058 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.293138981 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.293155909 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.341700077 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.397085905 CEST	443	49917	172.67.39.148	192.168.2.4
Apr 23, 2024 22:32:24.402180910 CEST	49917	443	192.168.2.4	172.67.39.148
Apr 23, 2024 22:32:24.402187109 CEST	443	49917	172.67.39.148	192.168.2.4
Apr 23, 2024 22:32:24.403729916 CEST	443	49917	172.67.39.148	192.168.2.4
Apr 23, 2024 22:32:24.403800964 CEST	49917	443	192.168.2.4	172.67.39.148
Apr 23, 2024 22:32:24.407747984 CEST	49917	443	192.168.2.4	172.67.39.148
Apr 23, 2024 22:32:24.407869101 CEST	49917	443	192.168.2.4	172.67.39.148
Apr 23, 2024 22:32:24.407874107 CEST	443	49917	172.67.39.148	192.168.2.4
Apr 23, 2024 22:32:24.407922029 CEST	443	49917	172.67.39.148	192.168.2.4
Apr 23, 2024 22:32:24.461852074 CEST	49917	443	192.168.2.4	172.67.39.148
Apr 23, 2024 22:32:24.461858034 CEST	443	49917	172.67.39.148	192.168.2.4
Apr 23, 2024 22:32:24.507783890 CEST	49917	443	192.168.2.4	172.67.39.148
Apr 23, 2024 22:32:24.554264069 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.554321051 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.554353952 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.554383039 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.554387093 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.554413080 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.554424047 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.554438114 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.554471016 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.554498911 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.554768085 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.554816008 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.554831982 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.554877996 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.554909945 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.554924011 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.554940939 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.554992914 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.555006027 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.555615902 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.555646896 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.555669069 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.555670023 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.555680990 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.555716038 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.556317091 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.556365967 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.556372881 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.556382895 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.556431055 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.556437016 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.556452990 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.556507111 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.557166100 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.557228088 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.557255983 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.557274103 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.557287931 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.557328939 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.557341099 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.557354927 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.557410955 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.557972908 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.558022976 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.558052063 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.558069944 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.558084011 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.558137894 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.558151007 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.558896065 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.558953047 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.558959961 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.558971882 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.559015989 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.559021950 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.559030056 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.559072971 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.559086084 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.559823990 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.559854984 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.559880972 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.559897900 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.559948921 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.560607910 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.560672045 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.658663034 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.658760071 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.659070969 CEST	443	49917	172.67.39.148	192.168.2.4
Apr 23, 2024 22:32:24.659106016 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.659275055 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.659326077 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.659373045 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.659410000 CEST	443	49917	172.67.39.148	192.168.2.4
Apr 23, 2024 22:32:24.659415007 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.659415007 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.659451008 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.659461021 CEST	49917	443	192.168.2.4	172.67.39.148
Apr 23, 2024 22:32:24.659480095 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.659519911 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.666533947 CEST	49915	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:32:24.666593075 CEST	443	49915	104.22.71.197	192.168.2.4
Apr 23, 2024 22:32:24.677769899 CEST	49917	443	192.168.2.4	172.67.39.148
Apr 23, 2024 22:32:24.677791119 CEST	443	49917	172.67.39.148	192.168.2.4
Apr 23, 2024 22:32:26.736535072 CEST	49935	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:26.736589909 CEST	443	49935	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:26.736700058 CEST	49935	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:26.736851931 CEST	49936	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:26.736936092 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:26.737004042 CEST	49936	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:26.737066031 CEST	49935	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:26.737083912 CEST	443	49935	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:26.737215996 CEST	49936	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:26.737248898 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:26.954674959 CEST	443	49935	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:26.954946041 CEST	49935	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:26.954977989 CEST	443	49935	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:26.955312967 CEST	443	49935	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:26.955373049 CEST	49935	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:26.955912113 CEST	443	49935	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:26.955952883 CEST	49935	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:26.957052946 CEST	49935	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:26.957109928 CEST	443	49935	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:26.957226992 CEST	49935	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:26.957237005 CEST	443	49935	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.002662897 CEST	49935	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.058655977 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:27.059050083 CEST	49936	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:27.059096098 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:27.060029984 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:27.060106039 CEST	49936	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:27.060879946 CEST	49936	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:27.060949087 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:27.061124086 CEST	49936	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:27.061145067 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:27.110675097 CEST	49936	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:27.167717934 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:27.167764902 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:27.167788029 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:27.167818069 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:27.167845964 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:27.167937040 CEST	49936	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:27.167937040 CEST	49936	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:27.167970896 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:27.168019056 CEST	49936	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:27.171200991 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:27.174740076 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:27.174806118 CEST	49936	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:27.174823999 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:27.178229094 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:27.178289890 CEST	49936	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:27.178303957 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:27.181382895 CEST	443	49935	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.181636095 CEST	443	49935	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.181680918 CEST	49935	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.181745052 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:27.181793928 CEST	49936	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:27.181807041 CEST	49935	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.181808949 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:27.181826115 CEST	443	49935	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.181844950 CEST	49935	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.181876898 CEST	49935	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.183365107 CEST	49941	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.183388948 CEST	443	49941	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.183463097 CEST	49941	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.183655024 CEST	49941	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.183665991 CEST	443	49941	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.185257912 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:27.185314894 CEST	49936	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:27.185542107 CEST	49936	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:27.185568094 CEST	443	49936	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:27.397294044 CEST	443	49941	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.397648096 CEST	49941	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.397675037 CEST	443	49941	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.398068905 CEST	443	49941	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.398328066 CEST	49941	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.398413897 CEST	443	49941	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.398485899 CEST	49941	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.444118023 CEST	443	49941	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.645418882 CEST	443	49941	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.645442963 CEST	443	49941	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.645509005 CEST	49941	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.645525932 CEST	443	49941	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.645535946 CEST	443	49941	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.645574093 CEST	49941	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.646183968 CEST	49941	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.646197081 CEST	443	49941	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.650645018 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.650690079 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.650755882 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.651154041 CEST	49943	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.651232004 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.651240110 CEST	443	49943	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.651247978 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.651329994 CEST	49943	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.651561022 CEST	49943	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.651597977 CEST	443	49943	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.864828110 CEST	443	49943	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.865196943 CEST	49943	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.865236998 CEST	443	49943	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.865663052 CEST	443	49943	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.865931988 CEST	49943	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.866002083 CEST	443	49943	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.866050959 CEST	49943	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.868801117 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.868983030 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.869025946 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.870290995 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.870541096 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.870608091 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.870728016 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.907669067 CEST	49943	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:27.907727957 CEST	443	49943	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:27.923151970 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.105540991 CEST	443	49943	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.105566978 CEST	443	49943	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.105575085 CEST	443	49943	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.105792999 CEST	49943	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.105849981 CEST	443	49943	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.110151052 CEST	443	49943	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.110219002 CEST	49943	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.110239983 CEST	443	49943	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.110508919 CEST	49943	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.110567093 CEST	443	49943	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.110632896 CEST	49943	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.111778975 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.111845016 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.111865997 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.111886024 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.111912966 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.111957073 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.111985922 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.129101038 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.129127026 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.129194975 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.129214048 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.129239082 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.129259109 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.129364014 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.129364014 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.129364014 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.129390001 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.137856960 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.137947083 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.137964010 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.189738989 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.213084936 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.213177919 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.213219881 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.213347912 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.213347912 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.223221064 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.223254919 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.223305941 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.223371983 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.223387003 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.242198944 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.242255926 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.242273092 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.242294073 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.242301941 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.242327929 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.242479086 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.242479086 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.259797096 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.259859085 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.259897947 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.259913921 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.259942055 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.278455973 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.278517962 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.278553009 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.278568029 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.278704882 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.330265045 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.330307961 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.330509901 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.330509901 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.330575943 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.343343973 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.343390942 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.343410969 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.343561888 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:28.343564987 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.343564987 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.343564987 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.343626976 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.343928099 CEST	49942	443	192.168.2.4	54.230.253.105
Apr 23, 2024 22:32:28.343959093 CEST	443	49942	54.230.253.105	192.168.2.4
Apr 23, 2024 22:32:32.828593016 CEST	80	49813	104.101.144.188	192.168.2.4
Apr 23, 2024 22:32:32.828644991 CEST	49813	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:32:32.833699942 CEST	49961	443	192.168.2.4	104.22.70.197
Apr 23, 2024 22:32:32.833728075 CEST	443	49961	104.22.70.197	192.168.2.4
Apr 23, 2024 22:32:32.833869934 CEST	49961	443	192.168.2.4	104.22.70.197
Apr 23, 2024 22:32:32.834090948 CEST	49961	443	192.168.2.4	104.22.70.197
Apr 23, 2024 22:32:32.834108114 CEST	443	49961	104.22.70.197	192.168.2.4
Apr 23, 2024 22:32:32.835189104 CEST	49962	443	192.168.2.4	54.230.253.13
Apr 23, 2024 22:32:32.835222006 CEST	443	49962	54.230.253.13	192.168.2.4
Apr 23, 2024 22:32:32.835283041 CEST	49962	443	192.168.2.4	54.230.253.13
Apr 23, 2024 22:32:32.835541964 CEST	49962	443	192.168.2.4	54.230.253.13
Apr 23, 2024 22:32:32.835557938 CEST	443	49962	54.230.253.13	192.168.2.4
Apr 23, 2024 22:32:32.920097113 CEST	80	49815	104.101.144.188	192.168.2.4
Apr 23, 2024 22:32:32.920181990 CEST	49815	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:32:33.055423975 CEST	443	49961	104.22.70.197	192.168.2.4
Apr 23, 2024 22:32:33.055603981 CEST	49961	443	192.168.2.4	104.22.70.197
Apr 23, 2024 22:32:33.055619955 CEST	443	49961	104.22.70.197	192.168.2.4
Apr 23, 2024 22:32:33.057053089 CEST	443	49962	54.230.253.13	192.168.2.4
Apr 23, 2024 22:32:33.057284117 CEST	49962	443	192.168.2.4	54.230.253.13
Apr 23, 2024 22:32:33.057296991 CEST	443	49962	54.230.253.13	192.168.2.4
Apr 23, 2024 22:32:33.057965994 CEST	443	49962	54.230.253.13	192.168.2.4
Apr 23, 2024 22:32:33.058037043 CEST	49962	443	192.168.2.4	54.230.253.13
Apr 23, 2024 22:32:33.058897972 CEST	443	49961	104.22.70.197	192.168.2.4
Apr 23, 2024 22:32:33.058993101 CEST	49961	443	192.168.2.4	104.22.70.197
Apr 23, 2024 22:32:33.059039116 CEST	443	49962	54.230.253.13	192.168.2.4
Apr 23, 2024 22:32:33.059092045 CEST	49962	443	192.168.2.4	54.230.253.13
Apr 23, 2024 22:32:33.059278965 CEST	49961	443	192.168.2.4	104.22.70.197
Apr 23, 2024 22:32:33.059364080 CEST	443	49961	104.22.70.197	192.168.2.4
Apr 23, 2024 22:32:33.059391022 CEST	49962	443	192.168.2.4	54.230.253.13
Apr 23, 2024 22:32:33.059473991 CEST	443	49962	54.230.253.13	192.168.2.4
Apr 23, 2024 22:32:33.108867884 CEST	49962	443	192.168.2.4	54.230.253.13
Apr 23, 2024 22:32:33.108870983 CEST	49961	443	192.168.2.4	104.22.70.197
Apr 23, 2024 22:32:33.108876944 CEST	443	49962	54.230.253.13	192.168.2.4
Apr 23, 2024 22:32:33.108890057 CEST	443	49961	104.22.70.197	192.168.2.4
Apr 23, 2024 22:32:33.155482054 CEST	49961	443	192.168.2.4	104.22.70.197
Apr 23, 2024 22:32:33.155486107 CEST	49962	443	192.168.2.4	54.230.253.13
Apr 23, 2024 22:32:33.670358896 CEST	49977	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:33.670413017 CEST	443	49977	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:33.670532942 CEST	49977	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:33.670700073 CEST	49977	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:33.670717955 CEST	443	49977	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:33.891422033 CEST	443	49977	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:33.891825914 CEST	49977	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:33.891855001 CEST	443	49977	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:33.893388987 CEST	443	49977	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:33.895035982 CEST	49977	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:33.895195007 CEST	49977	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:33.895210981 CEST	443	49977	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:33.895462990 CEST	443	49977	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:33.937443972 CEST	49977	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:34.099792004 CEST	443	49977	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:34.099939108 CEST	443	49977	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:34.100007057 CEST	49977	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:34.102443933 CEST	49977	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:34.102478981 CEST	443	49977	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:34.102503061 CEST	49977	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:34.102545023 CEST	49977	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:34.356514931 CEST	49988	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:32:34.356578112 CEST	443	49988	20.114.59.183	192.168.2.4
Apr 23, 2024 22:32:34.356689930 CEST	49988	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:32:34.357230902 CEST	49988	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:32:34.357259035 CEST	443	49988	20.114.59.183	192.168.2.4
Apr 23, 2024 22:32:34.876641989 CEST	443	49988	20.114.59.183	192.168.2.4
Apr 23, 2024 22:32:34.876743078 CEST	49988	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:32:34.882244110 CEST	49988	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:32:34.882261038 CEST	443	49988	20.114.59.183	192.168.2.4
Apr 23, 2024 22:32:34.883254051 CEST	443	49988	20.114.59.183	192.168.2.4
Apr 23, 2024 22:32:34.898230076 CEST	49988	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:32:34.940140009 CEST	443	49988	20.114.59.183	192.168.2.4
Apr 23, 2024 22:32:35.365605116 CEST	443	49988	20.114.59.183	192.168.2.4
Apr 23, 2024 22:32:35.365670919 CEST	443	49988	20.114.59.183	192.168.2.4
Apr 23, 2024 22:32:35.365724087 CEST	443	49988	20.114.59.183	192.168.2.4
Apr 23, 2024 22:32:35.365750074 CEST	49988	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:32:35.365797997 CEST	443	49988	20.114.59.183	192.168.2.4
Apr 23, 2024 22:32:35.365834951 CEST	49988	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:32:35.365864038 CEST	49988	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:32:35.365915060 CEST	443	49988	20.114.59.183	192.168.2.4
Apr 23, 2024 22:32:35.365963936 CEST	443	49988	20.114.59.183	192.168.2.4
Apr 23, 2024 22:32:35.365991116 CEST	49988	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:32:35.366004944 CEST	443	49988	20.114.59.183	192.168.2.4
Apr 23, 2024 22:32:35.366056919 CEST	49988	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:32:35.366089106 CEST	443	49988	20.114.59.183	192.168.2.4
Apr 23, 2024 22:32:35.366218090 CEST	443	49988	20.114.59.183	192.168.2.4
Apr 23, 2024 22:32:35.366278887 CEST	49988	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:32:35.371345997 CEST	49988	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:32:35.371385098 CEST	443	49988	20.114.59.183	192.168.2.4
Apr 23, 2024 22:32:35.371409893 CEST	49988	443	192.168.2.4	20.114.59.183
Apr 23, 2024 22:32:35.371424913 CEST	443	49988	20.114.59.183	192.168.2.4
Apr 23, 2024 22:32:36.533099890 CEST	49999	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:36.533149958 CEST	443	49999	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:36.533330917 CEST	49999	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:36.533437014 CEST	49999	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:36.533447981 CEST	443	49999	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:36.747585058 CEST	443	49999	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:36.750667095 CEST	49999	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:36.750679970 CEST	443	49999	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:36.751179934 CEST	443	49999	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:36.751513958 CEST	49999	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:36.751737118 CEST	49999	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:36.751754999 CEST	443	49999	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:36.791584015 CEST	49999	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:36.791596889 CEST	443	49999	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:36.957643986 CEST	443	49999	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:36.957803011 CEST	443	49999	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:36.957969904 CEST	49999	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:36.957989931 CEST	443	49999	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:36.958004951 CEST	49999	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:36.958034992 CEST	49999	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:40.941167116 CEST	50014	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:40.941221952 CEST	443	50014	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:40.941277981 CEST	50015	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:40.941304922 CEST	50014	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:40.941323996 CEST	443	50015	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:40.941376925 CEST	50015	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:40.942435026 CEST	50015	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:40.942457914 CEST	443	50015	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:40.942593098 CEST	50014	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:40.942614079 CEST	443	50014	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:41.311167002 CEST	443	50014	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:41.311440945 CEST	50014	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:41.311479092 CEST	443	50014	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:41.311831951 CEST	443	50014	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:41.312118053 CEST	50014	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:41.312184095 CEST	443	50014	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:41.312274933 CEST	50014	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:41.313884020 CEST	443	50015	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:41.314122915 CEST	50015	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:41.314157009 CEST	443	50015	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:41.315337896 CEST	443	50015	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:41.317229986 CEST	50015	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:41.317332029 CEST	443	50015	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:41.360127926 CEST	443	50014	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:41.368948936 CEST	50015	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:41.613403082 CEST	443	50014	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:41.613471985 CEST	443	50014	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:41.613564014 CEST	50014	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:41.613567114 CEST	443	50014	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:41.613607883 CEST	50014	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:41.614588022 CEST	50014	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:41.614612103 CEST	443	50014	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:41.632689953 CEST	50015	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:41.676162004 CEST	443	50015	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:41.772255898 CEST	443	50015	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:41.772500038 CEST	443	50015	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:41.772682905 CEST	50015	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:41.774188995 CEST	50015	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:41.774234056 CEST	443	50015	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:41.930679083 CEST	50020	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:41.930716991 CEST	443	50020	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:41.930809975 CEST	50020	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:41.931091070 CEST	50020	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:41.931118965 CEST	443	50020	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:42.304534912 CEST	443	50020	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:42.305032015 CEST	50020	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:42.305068016 CEST	443	50020	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:42.306185961 CEST	443	50020	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:42.306472063 CEST	50020	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:42.306561947 CEST	443	50020	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:42.306948900 CEST	50020	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:42.352128029 CEST	443	50020	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:42.557689905 CEST	443	50020	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:42.557750940 CEST	443	50020	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:42.557800055 CEST	443	50020	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:42.557904005 CEST	50020	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:42.557904959 CEST	50020	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:42.557943106 CEST	443	50020	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:42.604114056 CEST	50020	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:42.676851034 CEST	443	50020	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:42.676876068 CEST	443	50020	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:42.676919937 CEST	443	50020	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:42.676949978 CEST	50020	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:42.676975012 CEST	443	50020	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:42.677010059 CEST	50020	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:42.677031994 CEST	50020	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:42.677062035 CEST	443	50020	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:42.677284956 CEST	443	50020	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:42.677340031 CEST	50020	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:42.752147913 CEST	50020	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:42.752190113 CEST	443	50020	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:42.895210028 CEST	50021	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:42.895288944 CEST	443	50021	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:42.895395041 CEST	50021	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:42.895596027 CEST	50021	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:42.895612955 CEST	443	50021	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:43.275890112 CEST	443	50021	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:43.276336908 CEST	50021	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:43.276387930 CEST	443	50021	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:43.277190924 CEST	443	50021	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:43.277509928 CEST	50021	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:43.277775049 CEST	443	50021	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:43.283967972 CEST	50021	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:43.328118086 CEST	443	50021	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:43.539841890 CEST	443	50021	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:43.539868116 CEST	443	50021	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:43.539885044 CEST	443	50021	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:43.539933920 CEST	50021	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:43.540020943 CEST	443	50021	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:43.540059090 CEST	50021	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:43.540082932 CEST	50021	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:43.659468889 CEST	443	50021	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:43.659534931 CEST	443	50021	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:43.659574032 CEST	50021	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:43.659611940 CEST	443	50021	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:43.659630060 CEST	443	50021	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:43.659632921 CEST	50021	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:43.659670115 CEST	50021	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:43.660113096 CEST	50021	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:43.660130978 CEST	443	50021	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:45.250529051 CEST	50022	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:45.250571966 CEST	443	50022	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:45.250660896 CEST	50022	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:45.250709057 CEST	50023	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:45.250808954 CEST	443	50023	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:45.250875950 CEST	50023	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:45.250986099 CEST	50022	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:45.250998974 CEST	443	50022	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:45.251432896 CEST	50024	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:45.251481056 CEST	443	50024	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:45.251543999 CEST	50023	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:45.251590967 CEST	443	50023	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:45.251738071 CEST	50024	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:45.252188921 CEST	50024	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:45.252223969 CEST	443	50024	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:45.477251053 CEST	443	50024	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:45.477766037 CEST	50024	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:45.477798939 CEST	443	50024	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:45.478331089 CEST	443	50024	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:45.479301929 CEST	50024	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:45.479402065 CEST	443	50024	3.161.136.81	192.168.2.4
Apr 23, 2024 22:32:45.526899099 CEST	50024	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:32:45.619424105 CEST	443	50022	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:45.619793892 CEST	50022	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:45.619807005 CEST	443	50022	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:45.620486975 CEST	443	50022	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:45.620893002 CEST	50022	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:45.621076107 CEST	50022	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:45.621083021 CEST	443	50022	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:45.621157885 CEST	443	50022	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:45.626904964 CEST	443	50023	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:45.632725954 CEST	50023	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:45.632761002 CEST	443	50023	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:45.633440971 CEST	443	50023	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:45.639374971 CEST	50023	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:45.639729977 CEST	443	50023	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:45.669179916 CEST	50022	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:45.682893991 CEST	50023	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:45.884387970 CEST	443	50022	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:45.884443998 CEST	443	50022	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:45.884516001 CEST	443	50022	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:45.884622097 CEST	50022	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:45.884634972 CEST	443	50022	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:45.884664059 CEST	443	50022	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:45.884778976 CEST	50022	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:45.923854113 CEST	50022	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:32:45.923882961 CEST	443	50022	52.23.29.251	192.168.2.4
Apr 23, 2024 22:32:48.046231031 CEST	443	49961	104.22.70.197	192.168.2.4
Apr 23, 2024 22:32:48.046343088 CEST	443	49961	104.22.70.197	192.168.2.4
Apr 23, 2024 22:32:48.046433926 CEST	49961	443	192.168.2.4	104.22.70.197
Apr 23, 2024 22:32:48.852916956 CEST	49723	80	192.168.2.4	23.45.13.162
Apr 23, 2024 22:32:48.957536936 CEST	80	49723	23.45.13.162	192.168.2.4
Apr 23, 2024 22:32:48.957674980 CEST	49723	80	192.168.2.4	23.45.13.162
Apr 23, 2024 22:32:49.214466095 CEST	49961	443	192.168.2.4	104.22.70.197
Apr 23, 2024 22:32:49.214509010 CEST	443	49961	104.22.70.197	192.168.2.4
Apr 23, 2024 22:32:52.995677948 CEST	80	49813	104.101.144.188	192.168.2.4
Apr 23, 2024 22:32:52.995697975 CEST	80	49813	104.101.144.188	192.168.2.4
Apr 23, 2024 22:32:52.995824099 CEST	49813	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:32:53.089493036 CEST	80	49815	104.101.144.188	192.168.2.4
Apr 23, 2024 22:32:53.089525938 CEST	80	49815	104.101.144.188	192.168.2.4
Apr 23, 2024 22:32:53.089646101 CEST	49815	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:32:56.971040010 CEST	50036	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:56.971091032 CEST	443	50036	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:56.971178055 CEST	50036	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:56.973120928 CEST	50036	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:56.973148108 CEST	443	50036	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:57.187767982 CEST	443	50036	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:57.188432932 CEST	50036	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:57.188468933 CEST	443	50036	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:57.189619064 CEST	443	50036	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:57.190494061 CEST	50036	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:57.190669060 CEST	443	50036	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:57.190936089 CEST	50036	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:57.236116886 CEST	443	50036	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:57.400862932 CEST	443	50036	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:57.401035070 CEST	443	50036	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:57.401138067 CEST	50036	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:57.401535988 CEST	50036	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:57.401561022 CEST	443	50036	151.101.14.109	192.168.2.4
Apr 23, 2024 22:32:57.401575089 CEST	50036	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:32:57.401659966 CEST	50036	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:01.761162996 CEST	50047	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:01.761246920 CEST	443	50047	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:01.761358976 CEST	50047	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:01.761571884 CEST	50047	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:01.761604071 CEST	443	50047	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:01.977057934 CEST	443	50047	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:01.977824926 CEST	50047	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:01.977880955 CEST	443	50047	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:01.978423119 CEST	443	50047	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:01.990343094 CEST	50047	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:01.990480900 CEST	443	50047	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:01.990761995 CEST	50047	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:02.036117077 CEST	443	50047	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:02.187536955 CEST	443	50047	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:02.187650919 CEST	443	50047	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:02.187722921 CEST	50047	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:02.188695908 CEST	50047	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:02.188736916 CEST	443	50047	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:02.713052988 CEST	49814	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:33:02.877161980 CEST	80	49814	104.101.144.188	192.168.2.4
Apr 23, 2024 22:33:03.045911074 CEST	443	49962	54.230.253.13	192.168.2.4
Apr 23, 2024 22:33:03.046101093 CEST	443	49962	54.230.253.13	192.168.2.4
Apr 23, 2024 22:33:03.046189070 CEST	49962	443	192.168.2.4	54.230.253.13
Apr 23, 2024 22:33:03.075073004 CEST	49962	443	192.168.2.4	54.230.253.13
Apr 23, 2024 22:33:03.075123072 CEST	443	49962	54.230.253.13	192.168.2.4
Apr 23, 2024 22:33:03.723800898 CEST	50053	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:03.723841906 CEST	443	50053	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:03.723912001 CEST	50053	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:03.732527018 CEST	50053	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:03.732566118 CEST	443	50053	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:04.108315945 CEST	443	50053	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:04.108793020 CEST	50053	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:04.108823061 CEST	443	50053	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:04.109543085 CEST	443	50053	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:04.110158920 CEST	50053	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:04.110438108 CEST	443	50053	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:04.153064966 CEST	50053	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:05.533664942 CEST	50064	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.533791065 CEST	443	50064	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.533916950 CEST	50064	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.534708023 CEST	50065	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.534746885 CEST	443	50065	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.534821987 CEST	50065	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.535393953 CEST	50066	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.535437107 CEST	443	50066	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.535506964 CEST	50066	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.535918951 CEST	50067	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.535959005 CEST	443	50067	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.536026001 CEST	50067	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.536604881 CEST	50068	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.536638021 CEST	443	50068	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.536691904 CEST	50068	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.538182974 CEST	50068	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.538199902 CEST	443	50068	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.538337946 CEST	50067	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.538357019 CEST	443	50067	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.538746119 CEST	50066	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.538769960 CEST	443	50066	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.539110899 CEST	50065	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.539144039 CEST	443	50065	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.539319992 CEST	50064	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.539391994 CEST	443	50064	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.542100906 CEST	50069	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.542151928 CEST	443	50069	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.542320013 CEST	50069	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.542578936 CEST	50069	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.542614937 CEST	443	50069	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.911086082 CEST	443	50065	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.911353111 CEST	50065	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.911374092 CEST	443	50065	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.912556887 CEST	443	50065	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.912620068 CEST	443	50068	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.912628889 CEST	50065	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.912837982 CEST	50068	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.912858009 CEST	443	50068	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.913090944 CEST	50065	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.913206100 CEST	50065	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.913207054 CEST	443	50065	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.913228989 CEST	50065	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.913268089 CEST	443	50065	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.914470911 CEST	443	50067	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.914519072 CEST	443	50068	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.914645910 CEST	50067	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.914658070 CEST	443	50067	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.914860010 CEST	50068	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.914943933 CEST	50068	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.914952040 CEST	443	50068	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.914963007 CEST	50068	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.915318012 CEST	443	50068	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.916244984 CEST	443	50067	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.916532040 CEST	50067	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.916626930 CEST	50067	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.916631937 CEST	443	50067	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.916657925 CEST	50067	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.916846991 CEST	443	50067	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.919439077 CEST	443	50066	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.919614077 CEST	50066	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.919646978 CEST	443	50066	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.922736883 CEST	443	50064	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.923238039 CEST	50064	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.923269033 CEST	443	50064	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.923301935 CEST	443	50066	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.923451900 CEST	50066	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.924041986 CEST	50066	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.924213886 CEST	50066	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.924238920 CEST	443	50066	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.924256086 CEST	50066	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.924279928 CEST	443	50066	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.924912930 CEST	443	50064	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.924990892 CEST	50064	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.925972939 CEST	50064	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.926084042 CEST	443	50064	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.926603079 CEST	50064	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.926645041 CEST	443	50064	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.926690102 CEST	50064	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.927073002 CEST	443	50069	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.927742004 CEST	50069	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.927763939 CEST	443	50069	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.929431915 CEST	443	50069	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.929516077 CEST	50069	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.929966927 CEST	50069	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.930216074 CEST	443	50069	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.930607080 CEST	50069	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.930628061 CEST	443	50069	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.930665016 CEST	50069	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.962393999 CEST	50067	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.962413073 CEST	50065	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.962420940 CEST	50068	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.962430954 CEST	443	50065	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.968190908 CEST	443	50064	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.976119995 CEST	443	50069	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:05.978022099 CEST	50069	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.978029966 CEST	50064	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.978044033 CEST	50066	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:05.978081942 CEST	443	50066	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:06.009377956 CEST	50065	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:06.025002956 CEST	50066	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:06.149625063 CEST	443	50068	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:06.149888039 CEST	443	50068	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:06.150131941 CEST	50068	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:06.150707960 CEST	50068	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:06.150723934 CEST	443	50068	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:06.150768995 CEST	50068	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:06.150818110 CEST	50068	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:06.152074099 CEST	443	50065	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:06.152168989 CEST	443	50065	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:06.152271986 CEST	50065	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:06.152312994 CEST	443	50067	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:06.152483940 CEST	443	50067	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:06.152569056 CEST	50067	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:06.154861927 CEST	50065	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:06.154881001 CEST	443	50065	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:06.156039953 CEST	50067	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:06.156068087 CEST	443	50067	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:06.157444000 CEST	443	50066	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:06.157628059 CEST	443	50066	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:06.157687902 CEST	50066	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:06.157994032 CEST	50066	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:06.158014059 CEST	443	50066	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:06.158029079 CEST	50066	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:06.158066988 CEST	50066	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:06.163572073 CEST	443	50064	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:06.163755894 CEST	443	50064	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:06.163898945 CEST	50064	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:06.163898945 CEST	50064	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:06.163898945 CEST	50064	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:06.168557882 CEST	443	50069	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:06.168729067 CEST	443	50069	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:06.168801069 CEST	50069	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:06.168872118 CEST	50069	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:06.168872118 CEST	50069	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:06.168908119 CEST	443	50069	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:06.168976068 CEST	50069	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:07.356030941 CEST	50023	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.396142006 CEST	443	50023	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.499723911 CEST	443	50023	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.499785900 CEST	443	50023	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.499809980 CEST	443	50023	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.499866009 CEST	50023	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.499924898 CEST	443	50023	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.499958992 CEST	50023	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.499980927 CEST	50023	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.500193119 CEST	443	50023	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.500305891 CEST	50023	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.502991915 CEST	50023	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.503020048 CEST	443	50023	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.520416975 CEST	50053	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.520953894 CEST	50074	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.520984888 CEST	443	50074	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.521058083 CEST	50074	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.521248102 CEST	50074	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.521262884 CEST	443	50074	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.564160109 CEST	443	50053	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.626323938 CEST	50075	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.626389980 CEST	443	50075	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.626492023 CEST	50075	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.628618002 CEST	50075	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.628654003 CEST	443	50075	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.662084103 CEST	443	50053	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.662115097 CEST	443	50053	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.662125111 CEST	443	50053	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.662168980 CEST	443	50053	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.662175894 CEST	50053	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.662209034 CEST	443	50053	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.662225962 CEST	50053	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.662225962 CEST	50053	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.714570999 CEST	50053	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.781764030 CEST	443	50053	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.781779051 CEST	443	50053	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.781841993 CEST	443	50053	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.781903982 CEST	443	50053	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.781908035 CEST	50053	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.781939030 CEST	443	50053	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.781960964 CEST	50053	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.781991959 CEST	50053	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.782027960 CEST	443	50053	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.782092094 CEST	50053	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.788747072 CEST	50053	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.788777113 CEST	443	50053	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.897430897 CEST	443	50074	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.897874117 CEST	50074	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.897903919 CEST	443	50074	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.898586035 CEST	443	50074	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.898904085 CEST	50074	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.899044991 CEST	50074	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.899051905 CEST	443	50074	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.899171114 CEST	443	50074	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:07.947732925 CEST	50074	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:07.999820948 CEST	443	50075	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.000165939 CEST	50075	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.000199080 CEST	443	50075	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.001739979 CEST	443	50075	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.002083063 CEST	50075	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.002243996 CEST	50075	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.002257109 CEST	443	50075	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.002505064 CEST	443	50075	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.056641102 CEST	50075	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.160725117 CEST	443	50074	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.160789967 CEST	443	50074	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.160811901 CEST	443	50074	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.160881996 CEST	50074	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.160916090 CEST	443	50074	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.160942078 CEST	50074	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.160965919 CEST	50074	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.255413055 CEST	443	50075	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.255475044 CEST	443	50075	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.255497932 CEST	443	50075	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.255515099 CEST	443	50075	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.255573988 CEST	50075	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.255614042 CEST	443	50075	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.255642891 CEST	50075	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.279941082 CEST	443	50074	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.280097008 CEST	50074	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.280164957 CEST	443	50074	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.280222893 CEST	50074	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.280292034 CEST	443	50074	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.280339956 CEST	443	50074	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.280355930 CEST	50074	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.280364037 CEST	443	50074	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.280384064 CEST	50074	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.280603886 CEST	443	50074	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.280667067 CEST	50074	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.280822992 CEST	50074	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.280833960 CEST	443	50074	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.290141106 CEST	50077	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.290230036 CEST	443	50077	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.290376902 CEST	50077	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.290966034 CEST	50077	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.291002989 CEST	443	50077	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.304775953 CEST	50075	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.373423100 CEST	443	50075	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.373459101 CEST	443	50075	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.373519897 CEST	50075	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.373541117 CEST	443	50075	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.373584986 CEST	443	50075	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.373625040 CEST	50075	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.373625994 CEST	443	50075	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.373625040 CEST	50075	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.373694897 CEST	50075	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.373694897 CEST	50075	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.373725891 CEST	443	50075	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.373786926 CEST	50075	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.399619102 CEST	50075	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.399652958 CEST	443	50075	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.425879955 CEST	50081	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.425940037 CEST	443	50081	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.426013947 CEST	50081	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.426564932 CEST	50081	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.426585913 CEST	443	50081	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.428525925 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.428561926 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.428627014 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.428775072 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.428790092 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.515711069 CEST	50083	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.515777111 CEST	443	50083	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.515851021 CEST	50083	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.516057014 CEST	50083	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.516077042 CEST	443	50083	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.666491032 CEST	443	50077	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.666790009 CEST	50077	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.666853905 CEST	443	50077	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.667558908 CEST	443	50077	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.667918921 CEST	50077	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.668035030 CEST	443	50077	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.668039083 CEST	50077	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.708112955 CEST	443	50077	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.711040974 CEST	50077	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.794732094 CEST	443	50081	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.797620058 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.819231033 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.819252014 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.819402933 CEST	50081	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.819430113 CEST	443	50081	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.820066929 CEST	443	50081	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.820759058 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.820816040 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.821038961 CEST	50081	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.821276903 CEST	443	50081	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.821324110 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.821403980 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.823251009 CEST	50081	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.823421001 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.823427916 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.826173067 CEST	50084	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:08.826258898 CEST	443	50084	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:08.826351881 CEST	50084	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:08.826673985 CEST	50084	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:08.826700926 CEST	443	50084	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:08.864118099 CEST	443	50081	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.869704962 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.886851072 CEST	443	50083	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.887061119 CEST	50083	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.887085915 CEST	443	50083	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.888586998 CEST	443	50083	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.888644934 CEST	50083	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.888901949 CEST	50083	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.888983011 CEST	443	50083	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.889013052 CEST	50083	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.925019026 CEST	443	50077	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.925075054 CEST	443	50077	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.925096035 CEST	443	50077	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.925160885 CEST	50077	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.925182104 CEST	443	50077	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.925196886 CEST	50077	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.925254107 CEST	50077	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.925261974 CEST	443	50077	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.925297976 CEST	50077	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.925316095 CEST	443	50077	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.925365925 CEST	50077	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.925796986 CEST	50077	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.925815105 CEST	443	50077	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.932254076 CEST	50083	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:08.932266951 CEST	443	50083	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:08.977967024 CEST	50083	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.051409006 CEST	50087	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.051448107 CEST	443	50087	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.051506042 CEST	443	50081	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.051564932 CEST	50087	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.051811934 CEST	443	50081	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.051939964 CEST	50081	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.052640915 CEST	50087	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.052659035 CEST	443	50087	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.054127932 CEST	50081	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.054150105 CEST	443	50081	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.060036898 CEST	50088	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.060064077 CEST	443	50088	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.060113907 CEST	50088	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.060376883 CEST	50088	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.060390949 CEST	443	50088	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.093662024 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.093799114 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.093818903 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.093842030 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.093914986 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.093925953 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.093950033 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.094054937 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.094060898 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.139403105 CEST	443	50083	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.139473915 CEST	443	50083	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.139496088 CEST	443	50083	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.139554024 CEST	50083	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.139591932 CEST	443	50083	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.139606953 CEST	50083	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.139620066 CEST	443	50083	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.139651060 CEST	50083	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.139713049 CEST	443	50083	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.139763117 CEST	50083	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.139791965 CEST	443	50083	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.145725965 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.183290958 CEST	50083	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.198076963 CEST	443	50084	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:09.201813936 CEST	50084	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:09.201852083 CEST	443	50084	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:09.202222109 CEST	443	50084	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:09.203275919 CEST	50084	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:09.203347921 CEST	443	50084	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:09.203716993 CEST	50084	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:09.203780890 CEST	50084	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:09.203794003 CEST	443	50084	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:09.212734938 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.213021994 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.213057041 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.213108063 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.213143110 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.213151932 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.213165998 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.213200092 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.213257074 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.213260889 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.256982088 CEST	443	50083	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.257006884 CEST	443	50083	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.257044077 CEST	443	50083	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.257179022 CEST	443	50083	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.257282019 CEST	50083	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.257313967 CEST	50083	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.258038044 CEST	50083	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.258076906 CEST	443	50083	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.258871078 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.266967058 CEST	50089	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.267015934 CEST	443	50089	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.267108917 CEST	50089	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.267294884 CEST	50089	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.267324924 CEST	443	50089	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.332317114 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.332349062 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.332392931 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.332470894 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.332750082 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.332758904 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.332782030 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.332789898 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.332844019 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.332848072 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.332932949 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.333097935 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.333106995 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.333163977 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.333172083 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.333177090 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.333233118 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.333236933 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.333259106 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.333292007 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.333404064 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.334233999 CEST	50082	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.334247112 CEST	443	50082	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.379987001 CEST	50090	443	192.168.2.4	142.250.105.103
Apr 23, 2024 22:33:09.380058050 CEST	443	50090	142.250.105.103	192.168.2.4
Apr 23, 2024 22:33:09.380136013 CEST	50090	443	192.168.2.4	142.250.105.103
Apr 23, 2024 22:33:09.380347967 CEST	50090	443	192.168.2.4	142.250.105.103
Apr 23, 2024 22:33:09.380381107 CEST	443	50090	142.250.105.103	192.168.2.4
Apr 23, 2024 22:33:09.428189993 CEST	443	50087	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.428592920 CEST	50087	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.428612947 CEST	443	50087	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.430058002 CEST	443	50087	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.430460930 CEST	50087	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.430644035 CEST	443	50087	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.430646896 CEST	50087	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.437064886 CEST	443	50088	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.440642118 CEST	443	50084	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:09.440733910 CEST	443	50084	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:09.440814972 CEST	50084	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:09.444423914 CEST	50084	443	192.168.2.4	3.217.69.59
Apr 23, 2024 22:33:09.444463015 CEST	443	50084	3.217.69.59	192.168.2.4
Apr 23, 2024 22:33:09.446383953 CEST	50088	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.446409941 CEST	443	50088	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.447889090 CEST	443	50088	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.449404001 CEST	50088	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.449706078 CEST	443	50088	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.450158119 CEST	50088	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.472136974 CEST	443	50087	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.472506046 CEST	50087	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.496124983 CEST	443	50088	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.595994949 CEST	443	50090	142.250.105.103	192.168.2.4
Apr 23, 2024 22:33:09.596302032 CEST	50090	443	192.168.2.4	142.250.105.103
Apr 23, 2024 22:33:09.596333981 CEST	443	50090	142.250.105.103	192.168.2.4
Apr 23, 2024 22:33:09.597131014 CEST	443	50090	142.250.105.103	192.168.2.4
Apr 23, 2024 22:33:09.597450018 CEST	50090	443	192.168.2.4	142.250.105.103
Apr 23, 2024 22:33:09.597580910 CEST	443	50090	142.250.105.103	192.168.2.4
Apr 23, 2024 22:33:09.638473034 CEST	443	50089	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.638729095 CEST	50089	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.638756037 CEST	443	50089	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.642354012 CEST	443	50089	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.642493010 CEST	50089	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.642796993 CEST	50089	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.642926931 CEST	50089	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.642932892 CEST	443	50089	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.642967939 CEST	443	50089	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.650862932 CEST	50090	443	192.168.2.4	142.250.105.103
Apr 23, 2024 22:33:09.683861971 CEST	50089	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.683887959 CEST	443	50089	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.685940027 CEST	443	50087	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.685997963 CEST	443	50087	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.686018944 CEST	443	50087	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.686067104 CEST	443	50087	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.686084986 CEST	50087	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.686116934 CEST	443	50087	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.686135054 CEST	50087	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.686250925 CEST	443	50087	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.686306000 CEST	50087	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.686825991 CEST	50087	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.686841011 CEST	443	50087	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.701451063 CEST	443	50088	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.701663017 CEST	443	50088	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.701725960 CEST	50088	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.702243090 CEST	50088	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.702258110 CEST	443	50088	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.730448008 CEST	50089	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.894078970 CEST	443	50089	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.894146919 CEST	443	50089	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.894166946 CEST	443	50089	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.894182920 CEST	443	50089	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.894256115 CEST	50089	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.894287109 CEST	443	50089	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:09.894413948 CEST	50089	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:09.947866917 CEST	50089	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:10.011840105 CEST	443	50089	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:10.011882067 CEST	443	50089	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:10.011902094 CEST	443	50089	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:10.011975050 CEST	50089	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:10.012061119 CEST	50089	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:10.012075901 CEST	443	50089	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:10.012168884 CEST	443	50089	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:10.012217999 CEST	50089	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:10.012536049 CEST	50089	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:10.012556076 CEST	443	50089	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:11.264555931 CEST	50095	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:11.264621019 CEST	443	50095	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:11.264702082 CEST	50096	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:11.264728069 CEST	443	50096	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:11.264751911 CEST	50095	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:11.264810085 CEST	50096	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:11.267400980 CEST	50096	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:11.267427921 CEST	443	50096	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:11.267566919 CEST	50095	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:11.267594099 CEST	443	50095	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:11.635768890 CEST	443	50096	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:11.638267040 CEST	50096	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:11.638303995 CEST	443	50096	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:11.638632059 CEST	443	50096	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:11.639035940 CEST	50096	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:11.639132977 CEST	443	50096	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:11.639235020 CEST	50096	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:11.642838955 CEST	443	50095	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:11.643066883 CEST	50095	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:11.643084049 CEST	443	50095	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:11.644257069 CEST	443	50095	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:11.644599915 CEST	50095	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:11.644781113 CEST	443	50095	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:11.684127092 CEST	443	50096	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:11.698200941 CEST	50095	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:11.895838022 CEST	443	50096	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:11.895859003 CEST	443	50096	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:11.895931959 CEST	443	50096	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:11.896003962 CEST	50096	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:11.896044970 CEST	50096	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:11.899148941 CEST	50096	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:11.899167061 CEST	443	50096	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:11.915119886 CEST	50095	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:11.960119963 CEST	443	50095	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.011073112 CEST	50098	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.011118889 CEST	443	50098	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.011265039 CEST	50098	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.011409998 CEST	50098	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.011428118 CEST	443	50098	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.054517984 CEST	443	50095	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.054723024 CEST	443	50095	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.054841995 CEST	50095	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.055440903 CEST	50095	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.055469036 CEST	443	50095	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.277407885 CEST	50102	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.277456999 CEST	443	50102	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.277549028 CEST	50102	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.277730942 CEST	50102	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.277750015 CEST	443	50102	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.385533094 CEST	443	50098	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.385821104 CEST	50098	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.385840893 CEST	443	50098	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.386637926 CEST	443	50098	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.386946917 CEST	50098	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.387025118 CEST	443	50098	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.387079000 CEST	50098	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.432111979 CEST	443	50098	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.432255030 CEST	50098	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.644038916 CEST	443	50098	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.644134045 CEST	443	50098	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.644156933 CEST	443	50098	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.644191980 CEST	443	50098	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.644243956 CEST	50098	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.644258022 CEST	443	50098	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.644340038 CEST	443	50098	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.644391060 CEST	50098	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.644398928 CEST	443	50098	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.644453049 CEST	50098	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.644469976 CEST	443	50098	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.644542933 CEST	50098	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.644548893 CEST	443	50098	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.644639015 CEST	443	50098	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.644711971 CEST	50098	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.645454884 CEST	50098	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.645469904 CEST	443	50098	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.645482063 CEST	50098	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.645559072 CEST	50098	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.653542042 CEST	50103	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.653579950 CEST	443	50103	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.653753996 CEST	50103	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.653927088 CEST	50103	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.653932095 CEST	443	50103	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.653934002 CEST	443	50102	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.654510975 CEST	50102	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.654572964 CEST	443	50102	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.655740976 CEST	443	50102	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.656116009 CEST	50102	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.656224012 CEST	50102	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.656256914 CEST	443	50102	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.656373978 CEST	443	50102	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.698385000 CEST	50102	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.911571026 CEST	443	50102	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.911623955 CEST	443	50102	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.911767960 CEST	50102	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.911799908 CEST	443	50102	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.911844015 CEST	443	50102	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.911979914 CEST	50102	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.913266897 CEST	50102	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.913291931 CEST	443	50102	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.982850075 CEST	50105	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.982928991 CEST	443	50105	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:12.983028889 CEST	50105	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.983813047 CEST	50105	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:12.983849049 CEST	443	50105	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.029624939 CEST	443	50103	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.029934883 CEST	50103	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:13.029957056 CEST	443	50103	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.031409979 CEST	443	50103	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.031743050 CEST	50103	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:13.031869888 CEST	50103	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:13.032203913 CEST	443	50103	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.073362112 CEST	50103	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:13.289058924 CEST	443	50103	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.289113045 CEST	443	50103	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.289134979 CEST	443	50103	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.289205074 CEST	50103	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:13.289227962 CEST	443	50103	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.289247036 CEST	443	50103	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.289313078 CEST	50103	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:13.289319992 CEST	443	50103	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.289536953 CEST	443	50103	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.289592981 CEST	50103	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:13.290275097 CEST	50103	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:13.290288925 CEST	443	50103	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.351603985 CEST	443	50105	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.352000952 CEST	50105	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:13.352046967 CEST	443	50105	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.352767944 CEST	443	50105	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.353069067 CEST	50105	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:13.353172064 CEST	50105	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:13.353193045 CEST	443	50105	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.353214979 CEST	443	50105	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.405093908 CEST	50105	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:13.625590086 CEST	443	50105	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.625634909 CEST	443	50105	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.625744104 CEST	50105	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:13.625758886 CEST	443	50105	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.625832081 CEST	443	50105	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.625920057 CEST	50105	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:13.637128115 CEST	50105	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:13.637139082 CEST	443	50105	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.647228003 CEST	50106	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:13.647315979 CEST	443	50106	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:13.647418022 CEST	50106	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:13.647705078 CEST	50106	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:13.647738934 CEST	443	50106	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:14.023729086 CEST	443	50106	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:14.024065018 CEST	50106	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:14.024096966 CEST	443	50106	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:14.025280952 CEST	443	50106	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:14.025840998 CEST	50106	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:14.025922060 CEST	50106	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:14.025933027 CEST	443	50106	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:14.026030064 CEST	443	50106	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:14.072088003 CEST	50106	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:14.277517080 CEST	443	50106	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:14.277560949 CEST	443	50106	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:14.277645111 CEST	50106	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:14.277672052 CEST	443	50106	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:14.277735949 CEST	443	50106	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:14.277793884 CEST	50106	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:14.278467894 CEST	50106	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:14.278489113 CEST	443	50106	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:15.248876095 CEST	50109	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:15.248965025 CEST	443	50109	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:15.249082088 CEST	50110	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:15.249161959 CEST	443	50110	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:15.249212980 CEST	50109	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:15.249238968 CEST	50110	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:15.250592947 CEST	50110	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:15.250627041 CEST	443	50110	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:15.251974106 CEST	50109	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:15.252013922 CEST	443	50109	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:15.465703964 CEST	443	50024	3.161.136.81	192.168.2.4
Apr 23, 2024 22:33:15.465806961 CEST	443	50024	3.161.136.81	192.168.2.4
Apr 23, 2024 22:33:15.465888023 CEST	50024	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:33:15.621298075 CEST	443	50110	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:15.622653961 CEST	50110	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:15.622716904 CEST	443	50110	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:15.623107910 CEST	443	50110	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:15.624144077 CEST	50110	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:15.624226093 CEST	443	50110	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:15.624670029 CEST	50110	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:15.627846956 CEST	443	50109	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:15.628245115 CEST	50109	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:15.628268003 CEST	443	50109	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:15.628730059 CEST	443	50109	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:15.629195929 CEST	50109	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:15.629277945 CEST	443	50109	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:15.668128967 CEST	443	50110	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:15.679322004 CEST	50109	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:15.883573055 CEST	443	50110	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:15.883594036 CEST	443	50110	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:15.883672953 CEST	443	50110	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:15.883680105 CEST	50110	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:15.883745909 CEST	50110	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:15.970796108 CEST	50110	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:15.970854044 CEST	443	50110	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:15.974654913 CEST	50024	443	192.168.2.4	3.161.136.81
Apr 23, 2024 22:33:15.974689960 CEST	443	50024	3.161.136.81	192.168.2.4
Apr 23, 2024 22:33:15.975781918 CEST	50109	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:16.016129971 CEST	443	50109	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:16.116420031 CEST	443	50109	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:16.116693020 CEST	443	50109	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:16.116785049 CEST	50109	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:16.244595051 CEST	50109	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:16.244628906 CEST	443	50109	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:16.630156040 CEST	50114	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:16.630248070 CEST	443	50114	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:16.630336046 CEST	50114	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:16.632237911 CEST	50114	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:16.632273912 CEST	443	50114	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:17.003117085 CEST	443	50114	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:17.003482103 CEST	50114	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:17.003551960 CEST	443	50114	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:17.004686117 CEST	443	50114	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:17.005147934 CEST	50114	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:17.005326033 CEST	50114	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:17.005331993 CEST	443	50114	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:17.052119017 CEST	443	50114	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:17.053757906 CEST	50114	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:17.257895947 CEST	443	50114	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:17.257951975 CEST	443	50114	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:17.258019924 CEST	50114	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:17.258044958 CEST	443	50114	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:17.258116007 CEST	443	50114	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:17.258163929 CEST	50114	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:17.264048100 CEST	50114	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:17.264069080 CEST	443	50114	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:17.533799887 CEST	50116	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:17.533844948 CEST	443	50116	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:17.533926964 CEST	50116	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:17.534159899 CEST	50116	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:17.534172058 CEST	443	50116	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:17.629740953 CEST	49813	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:33:17.629833937 CEST	49813	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:33:17.795484066 CEST	80	49813	104.101.144.188	192.168.2.4
Apr 23, 2024 22:33:17.795640945 CEST	49813	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:33:17.826817989 CEST	49815	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:33:17.826862097 CEST	49815	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:33:17.904130936 CEST	443	50116	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:17.904810905 CEST	50116	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:17.904828072 CEST	443	50116	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:17.905282974 CEST	443	50116	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:17.906162977 CEST	50116	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:17.906232119 CEST	443	50116	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:17.906707048 CEST	50116	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:17.948118925 CEST	443	50116	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:17.995400906 CEST	80	49815	104.101.144.188	192.168.2.4
Apr 23, 2024 22:33:17.995537996 CEST	49815	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:33:18.168576002 CEST	443	50116	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.168615103 CEST	443	50116	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.168661118 CEST	443	50116	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.168804884 CEST	50116	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:18.168804884 CEST	50116	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:18.168823004 CEST	443	50116	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.168874025 CEST	50116	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:18.168881893 CEST	443	50116	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.168921947 CEST	50116	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:18.168927908 CEST	443	50116	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.168970108 CEST	443	50116	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.169011116 CEST	50116	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:18.191580057 CEST	50116	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:18.191612005 CEST	443	50116	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.198266029 CEST	50119	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:18.198304892 CEST	443	50119	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.198383093 CEST	50119	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:18.198580027 CEST	50119	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:18.198595047 CEST	443	50119	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.573201895 CEST	443	50119	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.573965073 CEST	50119	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:18.573993921 CEST	443	50119	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.575735092 CEST	443	50119	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.576153040 CEST	50119	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:18.576351881 CEST	443	50119	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.576390982 CEST	50119	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:18.620146990 CEST	443	50119	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.620202065 CEST	50119	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:18.826555014 CEST	443	50119	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.826616049 CEST	443	50119	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.826637983 CEST	443	50119	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.826674938 CEST	443	50119	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.826694965 CEST	50119	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:18.826728106 CEST	443	50119	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.826852083 CEST	50119	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:18.826909065 CEST	443	50119	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.826963902 CEST	50119	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:18.826972008 CEST	443	50119	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.827083111 CEST	443	50119	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:18.827142000 CEST	50119	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:18.831228018 CEST	50119	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:18.831243038 CEST	443	50119	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:19.133436918 CEST	50120	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:19.133506060 CEST	443	50120	35.190.80.1	192.168.2.4
Apr 23, 2024 22:33:19.133589983 CEST	50120	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:19.134110928 CEST	50120	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:19.134135962 CEST	443	50120	35.190.80.1	192.168.2.4
Apr 23, 2024 22:33:19.354734898 CEST	443	50120	35.190.80.1	192.168.2.4
Apr 23, 2024 22:33:19.355607033 CEST	50120	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:19.355670929 CEST	443	50120	35.190.80.1	192.168.2.4
Apr 23, 2024 22:33:19.356888056 CEST	443	50120	35.190.80.1	192.168.2.4
Apr 23, 2024 22:33:19.359285116 CEST	50120	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:19.359421968 CEST	50120	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:19.359540939 CEST	443	50120	35.190.80.1	192.168.2.4
Apr 23, 2024 22:33:19.401380062 CEST	50120	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:19.592730045 CEST	443	50120	35.190.80.1	192.168.2.4
Apr 23, 2024 22:33:19.592928886 CEST	443	50120	35.190.80.1	192.168.2.4
Apr 23, 2024 22:33:19.593051910 CEST	50120	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:19.593142033 CEST	50120	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:19.593167067 CEST	443	50120	35.190.80.1	192.168.2.4
Apr 23, 2024 22:33:19.593180895 CEST	50120	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:19.593241930 CEST	50120	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:19.594331026 CEST	50121	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:19.594364882 CEST	443	50121	35.190.80.1	192.168.2.4
Apr 23, 2024 22:33:19.594469070 CEST	50121	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:19.594815969 CEST	50121	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:19.594831944 CEST	443	50121	35.190.80.1	192.168.2.4
Apr 23, 2024 22:33:19.597434998 CEST	443	50090	142.250.105.103	192.168.2.4
Apr 23, 2024 22:33:19.597589016 CEST	443	50090	142.250.105.103	192.168.2.4
Apr 23, 2024 22:33:19.597687006 CEST	50090	443	192.168.2.4	142.250.105.103
Apr 23, 2024 22:33:19.813323021 CEST	443	50121	35.190.80.1	192.168.2.4
Apr 23, 2024 22:33:19.814044952 CEST	50121	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:19.814071894 CEST	443	50121	35.190.80.1	192.168.2.4
Apr 23, 2024 22:33:19.814565897 CEST	443	50121	35.190.80.1	192.168.2.4
Apr 23, 2024 22:33:19.828716993 CEST	50121	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:19.828809023 CEST	443	50121	35.190.80.1	192.168.2.4
Apr 23, 2024 22:33:19.828851938 CEST	50121	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:19.828875065 CEST	50121	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:19.828919888 CEST	443	50121	35.190.80.1	192.168.2.4
Apr 23, 2024 22:33:20.049777031 CEST	443	50121	35.190.80.1	192.168.2.4
Apr 23, 2024 22:33:20.049988985 CEST	443	50121	35.190.80.1	192.168.2.4
Apr 23, 2024 22:33:20.050182104 CEST	50121	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:20.050182104 CEST	50121	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:20.050182104 CEST	50121	443	192.168.2.4	35.190.80.1
Apr 23, 2024 22:33:21.215792894 CEST	50090	443	192.168.2.4	142.250.105.103
Apr 23, 2024 22:33:21.215867043 CEST	443	50090	142.250.105.103	192.168.2.4
Apr 23, 2024 22:33:21.361074924 CEST	50125	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:33:21.361160040 CEST	443	50125	104.22.71.197	192.168.2.4
Apr 23, 2024 22:33:21.361294985 CEST	50125	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:33:21.362116098 CEST	50125	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:33:21.362155914 CEST	443	50125	104.22.71.197	192.168.2.4
Apr 23, 2024 22:33:21.373668909 CEST	50126	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:33:21.540751934 CEST	80	50126	104.101.144.188	192.168.2.4
Apr 23, 2024 22:33:21.541071892 CEST	50126	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:33:21.576677084 CEST	443	50125	104.22.71.197	192.168.2.4
Apr 23, 2024 22:33:21.576935053 CEST	50125	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:33:21.576951981 CEST	443	50125	104.22.71.197	192.168.2.4
Apr 23, 2024 22:33:21.577315092 CEST	443	50125	104.22.71.197	192.168.2.4
Apr 23, 2024 22:33:21.577697039 CEST	50125	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:33:21.577780962 CEST	443	50125	104.22.71.197	192.168.2.4
Apr 23, 2024 22:33:21.619268894 CEST	50125	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:33:25.099148989 CEST	50149	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:25.099232912 CEST	443	50149	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:25.099396944 CEST	50149	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:25.099813938 CEST	50149	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:25.099833965 CEST	443	50149	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:25.314932108 CEST	443	50149	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:25.315325975 CEST	50149	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:25.315347910 CEST	443	50149	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:25.316510916 CEST	443	50149	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:25.316994905 CEST	50149	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:25.317080021 CEST	50149	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:25.317087889 CEST	443	50149	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:25.317166090 CEST	443	50149	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:25.368985891 CEST	50149	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:25.524944067 CEST	443	50149	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:25.525212049 CEST	443	50149	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:25.525382042 CEST	50149	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:25.525634050 CEST	50149	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:25.525645971 CEST	443	50149	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:25.525662899 CEST	50149	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:25.525693893 CEST	50149	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:28.800663948 CEST	50159	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:28.800693989 CEST	443	50159	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:28.800753117 CEST	50159	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:28.801073074 CEST	50159	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:28.801093102 CEST	443	50159	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:29.019303083 CEST	443	50159	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:29.019834042 CEST	50159	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:29.019850969 CEST	443	50159	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:29.021079063 CEST	443	50159	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:29.022304058 CEST	50159	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:29.022470951 CEST	443	50159	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:29.022979975 CEST	50159	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:29.064147949 CEST	443	50159	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:29.228564024 CEST	443	50159	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:29.228830099 CEST	443	50159	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:29.228939056 CEST	50159	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:29.229273081 CEST	50159	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:29.229284048 CEST	443	50159	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:29.229325056 CEST	50159	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:29.229403973 CEST	50159	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:31.267517090 CEST	50166	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:31.267576933 CEST	443	50166	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:31.267700911 CEST	50167	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:31.267736912 CEST	443	50167	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:31.267748117 CEST	50166	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:31.267780066 CEST	50167	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:31.268806934 CEST	50168	443	192.168.2.4	3.161.136.111
Apr 23, 2024 22:33:31.268822908 CEST	443	50168	3.161.136.111	192.168.2.4
Apr 23, 2024 22:33:31.268891096 CEST	50168	443	192.168.2.4	3.161.136.111
Apr 23, 2024 22:33:31.269026995 CEST	50167	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:31.269047022 CEST	443	50167	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:31.269159079 CEST	50166	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:31.269176960 CEST	443	50166	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:31.269284010 CEST	50168	443	192.168.2.4	3.161.136.111
Apr 23, 2024 22:33:31.269295931 CEST	443	50168	3.161.136.111	192.168.2.4
Apr 23, 2024 22:33:31.484097958 CEST	443	50168	3.161.136.111	192.168.2.4
Apr 23, 2024 22:33:31.488940001 CEST	50168	443	192.168.2.4	3.161.136.111
Apr 23, 2024 22:33:31.488961935 CEST	443	50168	3.161.136.111	192.168.2.4
Apr 23, 2024 22:33:31.489471912 CEST	443	50168	3.161.136.111	192.168.2.4
Apr 23, 2024 22:33:31.492813110 CEST	50168	443	192.168.2.4	3.161.136.111
Apr 23, 2024 22:33:31.492914915 CEST	443	50168	3.161.136.111	192.168.2.4
Apr 23, 2024 22:33:31.543421984 CEST	50168	443	192.168.2.4	3.161.136.111
Apr 23, 2024 22:33:31.641791105 CEST	443	50166	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:31.642046928 CEST	50166	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:31.642102003 CEST	443	50166	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:31.642422915 CEST	443	50166	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:31.642723083 CEST	50166	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:31.642791986 CEST	443	50166	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:31.644490004 CEST	443	50167	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:31.644676924 CEST	50167	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:31.644690037 CEST	443	50167	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:31.645248890 CEST	443	50167	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:31.645730019 CEST	50167	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:31.645808935 CEST	443	50167	52.23.29.251	192.168.2.4
Apr 23, 2024 22:33:31.682468891 CEST	50166	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:31.697976112 CEST	50167	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:33:36.319690943 CEST	80	50126	104.101.144.188	192.168.2.4
Apr 23, 2024 22:33:36.319879055 CEST	50126	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:33:36.573364973 CEST	443	50125	104.22.71.197	192.168.2.4
Apr 23, 2024 22:33:36.573435068 CEST	443	50125	104.22.71.197	192.168.2.4
Apr 23, 2024 22:33:36.573564053 CEST	50125	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:33:36.829296112 CEST	50125	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:33:36.829361916 CEST	443	50125	104.22.71.197	192.168.2.4
Apr 23, 2024 22:33:45.272686958 CEST	50185	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:33:45.272798061 CEST	443	50185	104.22.71.197	192.168.2.4
Apr 23, 2024 22:33:45.272881031 CEST	50185	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:33:45.273098946 CEST	50185	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:33:45.273134947 CEST	443	50185	104.22.71.197	192.168.2.4
Apr 23, 2024 22:33:45.490956068 CEST	443	50185	104.22.71.197	192.168.2.4
Apr 23, 2024 22:33:45.491497993 CEST	50185	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:33:45.491516113 CEST	443	50185	104.22.71.197	192.168.2.4
Apr 23, 2024 22:33:45.491980076 CEST	443	50185	104.22.71.197	192.168.2.4
Apr 23, 2024 22:33:45.492311001 CEST	50185	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:33:45.492393970 CEST	443	50185	104.22.71.197	192.168.2.4
Apr 23, 2024 22:33:45.542783022 CEST	50185	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:33:46.789658070 CEST	50189	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:46.789736032 CEST	443	50189	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:46.789985895 CEST	50189	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:46.790307045 CEST	50189	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:46.790342093 CEST	443	50189	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:47.002129078 CEST	443	50189	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:47.002469063 CEST	50189	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:47.002528906 CEST	443	50189	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:47.003035069 CEST	443	50189	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:47.003328085 CEST	50189	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:47.003423929 CEST	443	50189	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:47.003443003 CEST	50189	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:47.044159889 CEST	443	50189	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:47.058037996 CEST	50189	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:47.213464022 CEST	443	50189	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:47.213579893 CEST	443	50189	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:47.213834047 CEST	50189	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:47.213927031 CEST	50189	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:47.213927984 CEST	50189	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:47.213967085 CEST	443	50189	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:47.214063883 CEST	50189	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:47.884730101 CEST	49814	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:33:48.048823118 CEST	80	49814	104.101.144.188	192.168.2.4
Apr 23, 2024 22:33:51.570775032 CEST	50201	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:51.570790052 CEST	443	50201	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:51.570873976 CEST	50201	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:51.575232029 CEST	50201	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:51.575242043 CEST	443	50201	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:51.789940119 CEST	443	50201	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:51.790277004 CEST	50201	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:51.790285110 CEST	443	50201	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:51.791378975 CEST	443	50201	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:51.791795969 CEST	50201	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:51.791917086 CEST	50201	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:51.791922092 CEST	443	50201	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:51.792004108 CEST	443	50201	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:51.840682983 CEST	50201	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:52.000513077 CEST	443	50201	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:52.000689030 CEST	443	50201	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:52.000799894 CEST	50201	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:52.001207113 CEST	50201	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:52.001213074 CEST	443	50201	151.101.14.109	192.168.2.4
Apr 23, 2024 22:33:52.001221895 CEST	50201	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:52.001322985 CEST	50201	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:33:56.487004995 CEST	80	50126	104.101.144.188	192.168.2.4
Apr 23, 2024 22:33:56.487056971 CEST	80	50126	104.101.144.188	192.168.2.4
Apr 23, 2024 22:33:56.487139940 CEST	50126	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:34:00.483552933 CEST	443	50185	104.22.71.197	192.168.2.4
Apr 23, 2024 22:34:00.483735085 CEST	443	50185	104.22.71.197	192.168.2.4
Apr 23, 2024 22:34:00.483859062 CEST	50185	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:34:00.828845978 CEST	50185	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:34:00.828891993 CEST	443	50185	104.22.71.197	192.168.2.4
Apr 23, 2024 22:34:01.479075909 CEST	443	50168	3.161.136.111	192.168.2.4
Apr 23, 2024 22:34:01.479296923 CEST	443	50168	3.161.136.111	192.168.2.4
Apr 23, 2024 22:34:01.479441881 CEST	50168	443	192.168.2.4	3.161.136.111
Apr 23, 2024 22:34:01.520126104 CEST	50168	443	192.168.2.4	3.161.136.111
Apr 23, 2024 22:34:01.520190001 CEST	443	50168	3.161.136.111	192.168.2.4
Apr 23, 2024 22:34:09.553813934 CEST	50236	443	192.168.2.4	74.125.136.103
Apr 23, 2024 22:34:09.553893089 CEST	443	50236	74.125.136.103	192.168.2.4
Apr 23, 2024 22:34:09.553980112 CEST	50236	443	192.168.2.4	74.125.136.103
Apr 23, 2024 22:34:09.554393053 CEST	50236	443	192.168.2.4	74.125.136.103
Apr 23, 2024 22:34:09.554425955 CEST	443	50236	74.125.136.103	192.168.2.4
Apr 23, 2024 22:34:09.769534111 CEST	443	50236	74.125.136.103	192.168.2.4
Apr 23, 2024 22:34:09.770065069 CEST	50236	443	192.168.2.4	74.125.136.103
Apr 23, 2024 22:34:09.770129919 CEST	443	50236	74.125.136.103	192.168.2.4
Apr 23, 2024 22:34:09.770606995 CEST	443	50236	74.125.136.103	192.168.2.4
Apr 23, 2024 22:34:09.771083117 CEST	50236	443	192.168.2.4	74.125.136.103
Apr 23, 2024 22:34:09.771169901 CEST	443	50236	74.125.136.103	192.168.2.4
Apr 23, 2024 22:34:09.824043036 CEST	50236	443	192.168.2.4	74.125.136.103
Apr 23, 2024 22:34:11.287652016 CEST	50239	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:34:11.287693024 CEST	443	50239	104.22.71.197	192.168.2.4
Apr 23, 2024 22:34:11.287779093 CEST	50239	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:34:11.288026094 CEST	50239	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:34:11.288043022 CEST	443	50239	104.22.71.197	192.168.2.4
Apr 23, 2024 22:34:11.510906935 CEST	443	50239	104.22.71.197	192.168.2.4
Apr 23, 2024 22:34:11.511405945 CEST	50239	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:34:11.511439085 CEST	443	50239	104.22.71.197	192.168.2.4
Apr 23, 2024 22:34:11.512341022 CEST	443	50239	104.22.71.197	192.168.2.4
Apr 23, 2024 22:34:11.512758970 CEST	50239	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:34:11.512963057 CEST	443	50239	104.22.71.197	192.168.2.4
Apr 23, 2024 22:34:11.556667089 CEST	50239	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:34:12.841161966 CEST	50242	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:34:12.841221094 CEST	443	50242	151.101.14.109	192.168.2.4
Apr 23, 2024 22:34:12.841299057 CEST	50242	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:34:12.841566086 CEST	50242	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:34:12.841578960 CEST	443	50242	151.101.14.109	192.168.2.4
Apr 23, 2024 22:34:13.056952953 CEST	443	50242	151.101.14.109	192.168.2.4
Apr 23, 2024 22:34:13.057763100 CEST	50242	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:34:13.057790995 CEST	443	50242	151.101.14.109	192.168.2.4
Apr 23, 2024 22:34:13.058933973 CEST	443	50242	151.101.14.109	192.168.2.4
Apr 23, 2024 22:34:13.059256077 CEST	50242	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:34:13.059386015 CEST	50242	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:34:13.059395075 CEST	443	50242	151.101.14.109	192.168.2.4
Apr 23, 2024 22:34:13.059432983 CEST	443	50242	151.101.14.109	192.168.2.4
Apr 23, 2024 22:34:13.103533030 CEST	50242	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:34:13.270977020 CEST	443	50242	151.101.14.109	192.168.2.4
Apr 23, 2024 22:34:13.271065950 CEST	443	50242	151.101.14.109	192.168.2.4
Apr 23, 2024 22:34:13.271215916 CEST	50242	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:34:13.271883011 CEST	50242	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:34:13.271908998 CEST	443	50242	151.101.14.109	192.168.2.4
Apr 23, 2024 22:34:14.430967093 CEST	49814	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:34:14.431057930 CEST	50126	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:34:14.431057930 CEST	50126	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:34:14.431462049 CEST	50239	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:34:14.431576967 CEST	443	50239	104.22.71.197	192.168.2.4
Apr 23, 2024 22:34:14.431714058 CEST	50239	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:34:14.431794882 CEST	50166	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:34:14.431822062 CEST	50167	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:34:14.431889057 CEST	443	50167	52.23.29.251	192.168.2.4
Apr 23, 2024 22:34:14.431947947 CEST	50236	443	192.168.2.4	74.125.136.103
Apr 23, 2024 22:34:14.431967974 CEST	443	50166	52.23.29.251	192.168.2.4
Apr 23, 2024 22:34:14.432022095 CEST	50167	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:34:14.432043076 CEST	50166	443	192.168.2.4	52.23.29.251
Apr 23, 2024 22:34:14.432043076 CEST	443	50236	74.125.136.103	192.168.2.4
Apr 23, 2024 22:34:14.432133913 CEST	50236	443	192.168.2.4	74.125.136.103
Apr 23, 2024 22:34:14.595276117 CEST	80	49814	104.101.144.188	192.168.2.4
Apr 23, 2024 22:34:14.595355034 CEST	49814	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:34:14.598118067 CEST	80	50126	104.101.144.188	192.168.2.4
Apr 23, 2024 22:34:14.598170996 CEST	50126	80	192.168.2.4	104.101.144.188
Apr 23, 2024 22:34:15.243307114 CEST	50256	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:34:15.243340969 CEST	443	50256	104.22.71.197	192.168.2.4
Apr 23, 2024 22:34:15.243398905 CEST	50256	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:34:15.244277000 CEST	50256	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:34:15.244287014 CEST	443	50256	104.22.71.197	192.168.2.4
Apr 23, 2024 22:34:15.468328953 CEST	443	50256	104.22.71.197	192.168.2.4
Apr 23, 2024 22:34:15.468561888 CEST	50256	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:34:15.468575001 CEST	443	50256	104.22.71.197	192.168.2.4
Apr 23, 2024 22:34:15.470001936 CEST	443	50256	104.22.71.197	192.168.2.4
Apr 23, 2024 22:34:15.470112085 CEST	50256	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:34:15.470441103 CEST	50256	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:34:15.470520973 CEST	443	50256	104.22.71.197	192.168.2.4
Apr 23, 2024 22:34:15.512191057 CEST	50256	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:34:15.512198925 CEST	443	50256	104.22.71.197	192.168.2.4
Apr 23, 2024 22:34:15.558526993 CEST	50256	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:34:16.772360086 CEST	50260	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:34:16.772447109 CEST	443	50260	151.101.14.109	192.168.2.4
Apr 23, 2024 22:34:16.772599936 CEST	50260	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:34:16.773380995 CEST	50260	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:34:16.773416996 CEST	443	50260	151.101.14.109	192.168.2.4
Apr 23, 2024 22:34:16.985418081 CEST	443	50260	151.101.14.109	192.168.2.4
Apr 23, 2024 22:34:16.985997915 CEST	50260	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:34:16.986052036 CEST	443	50260	151.101.14.109	192.168.2.4
Apr 23, 2024 22:34:16.987221003 CEST	443	50260	151.101.14.109	192.168.2.4
Apr 23, 2024 22:34:16.987608910 CEST	50260	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:34:16.987732887 CEST	50260	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:34:16.987746000 CEST	443	50260	151.101.14.109	192.168.2.4
Apr 23, 2024 22:34:16.987811089 CEST	443	50260	151.101.14.109	192.168.2.4
Apr 23, 2024 22:34:17.029597998 CEST	50260	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:34:17.197983027 CEST	443	50260	151.101.14.109	192.168.2.4
Apr 23, 2024 22:34:17.198132038 CEST	443	50260	151.101.14.109	192.168.2.4
Apr 23, 2024 22:34:17.198244095 CEST	50260	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:34:17.199424982 CEST	50260	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:34:17.199424982 CEST	50260	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:34:17.199479103 CEST	443	50260	151.101.14.109	192.168.2.4
Apr 23, 2024 22:34:17.199624062 CEST	50260	443	192.168.2.4	151.101.14.109
Apr 23, 2024 22:34:19.352224112 CEST	50269	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:19.352279902 CEST	443	50269	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:19.352381945 CEST	50269	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:19.352691889 CEST	50270	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:19.352718115 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:19.352782965 CEST	50270	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:19.352900982 CEST	50269	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:19.352926016 CEST	443	50269	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:19.353136063 CEST	50270	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:19.353152990 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:19.727209091 CEST	443	50269	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:19.727695942 CEST	50269	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:19.727757931 CEST	443	50269	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:19.728775978 CEST	443	50269	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:19.728883982 CEST	50269	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:19.730506897 CEST	50269	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:19.730564117 CEST	443	50269	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:19.730696917 CEST	50269	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:19.730714083 CEST	443	50269	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:19.733695030 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:19.733936071 CEST	50270	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:19.733948946 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:19.735532045 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:19.735658884 CEST	50270	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:19.736850023 CEST	50270	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:19.736937046 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:19.777398109 CEST	50270	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:19.777405977 CEST	50269	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:19.777411938 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:19.830790043 CEST	50270	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:19.980160952 CEST	443	50269	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:19.980180979 CEST	443	50269	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:19.980285883 CEST	443	50269	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:19.980443954 CEST	50269	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:19.980642080 CEST	50269	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:19.993016958 CEST	50269	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:19.993057966 CEST	443	50269	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.011080027 CEST	50272	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.011128902 CEST	443	50272	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.011192083 CEST	50272	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.011497974 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.011522055 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.011584044 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.011789083 CEST	50274	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.011873960 CEST	443	50274	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.011945009 CEST	50274	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.012154102 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.012188911 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.012243032 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.012408018 CEST	50276	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.012451887 CEST	443	50276	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.012523890 CEST	50276	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.012751102 CEST	50270	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.013068914 CEST	50272	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.013082981 CEST	443	50272	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.013392925 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.013410091 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.014015913 CEST	50274	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.014045954 CEST	443	50274	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.014493942 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.014523983 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.014744043 CEST	50276	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.014761925 CEST	443	50276	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.056123018 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.120446920 CEST	50278	443	192.168.2.4	3.222.198.52
Apr 23, 2024 22:34:20.120496988 CEST	443	50278	3.222.198.52	192.168.2.4
Apr 23, 2024 22:34:20.120630026 CEST	50278	443	192.168.2.4	3.222.198.52
Apr 23, 2024 22:34:20.120943069 CEST	50278	443	192.168.2.4	3.222.198.52
Apr 23, 2024 22:34:20.120960951 CEST	443	50278	3.222.198.52	192.168.2.4
Apr 23, 2024 22:34:20.152461052 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.152532101 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.152554035 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.152592897 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.152611971 CEST	50270	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.152633905 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.152693987 CEST	50270	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.196238041 CEST	50270	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.196245909 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.246957064 CEST	50270	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.270319939 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.270349026 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.270386934 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.270405054 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.270448923 CEST	50270	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.270575047 CEST	50270	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.270586014 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.270708084 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.270790100 CEST	50270	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.271286964 CEST	50270	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.271316051 CEST	443	50270	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.271323919 CEST	50270	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.271394968 CEST	50270	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.271841049 CEST	50279	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.271882057 CEST	443	50279	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.272011995 CEST	50279	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.272639036 CEST	50279	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.272660971 CEST	443	50279	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.381016970 CEST	443	50272	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.381331921 CEST	50272	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.381345034 CEST	443	50272	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.381688118 CEST	443	50272	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.381972075 CEST	50272	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.382021904 CEST	443	50272	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.382116079 CEST	50272	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.389127970 CEST	443	50276	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.389372110 CEST	50276	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.389400005 CEST	443	50276	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.390405893 CEST	443	50274	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.390626907 CEST	50274	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.390670061 CEST	443	50274	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.390950918 CEST	443	50276	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.391026020 CEST	50276	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.391400099 CEST	50276	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.391478062 CEST	443	50276	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.391702890 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.391782045 CEST	50280	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.391844988 CEST	443	50280	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.391927958 CEST	50280	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.392028093 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.392065048 CEST	50276	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.392075062 CEST	443	50276	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.392076969 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.392170906 CEST	443	50274	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.392222881 CEST	50280	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.392256021 CEST	443	50280	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.392278910 CEST	50274	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.392532110 CEST	50274	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.392602921 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.392626047 CEST	443	50274	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.392631054 CEST	50274	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.392879963 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.392971039 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.392982960 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.405497074 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.405801058 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.405848980 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.407303095 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.407496929 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.407869101 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.407959938 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.407999992 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.424122095 CEST	443	50272	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.433589935 CEST	50276	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.433605909 CEST	50274	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.433640957 CEST	443	50274	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.433687925 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.433718920 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.447432041 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.447455883 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.482640982 CEST	50274	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.494888067 CEST	443	50278	3.222.198.52	192.168.2.4
Apr 23, 2024 22:34:20.497848034 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.505055904 CEST	50278	443	192.168.2.4	3.222.198.52
Apr 23, 2024 22:34:20.505084038 CEST	443	50278	3.222.198.52	192.168.2.4
Apr 23, 2024 22:34:20.506730080 CEST	443	50278	3.222.198.52	192.168.2.4
Apr 23, 2024 22:34:20.506838083 CEST	50278	443	192.168.2.4	3.222.198.52
Apr 23, 2024 22:34:20.507802010 CEST	50278	443	192.168.2.4	3.222.198.52
Apr 23, 2024 22:34:20.507895947 CEST	443	50278	3.222.198.52	192.168.2.4
Apr 23, 2024 22:34:20.508002996 CEST	50278	443	192.168.2.4	3.222.198.52
Apr 23, 2024 22:34:20.508011103 CEST	443	50278	3.222.198.52	192.168.2.4
Apr 23, 2024 22:34:20.558737993 CEST	50278	443	192.168.2.4	3.222.198.52
Apr 23, 2024 22:34:20.631289959 CEST	443	50278	3.222.198.52	192.168.2.4
Apr 23, 2024 22:34:20.631354094 CEST	443	50278	3.222.198.52	192.168.2.4
Apr 23, 2024 22:34:20.631375074 CEST	443	50278	3.222.198.52	192.168.2.4
Apr 23, 2024 22:34:20.631437063 CEST	50278	443	192.168.2.4	3.222.198.52
Apr 23, 2024 22:34:20.631470919 CEST	443	50278	3.222.198.52	192.168.2.4
Apr 23, 2024 22:34:20.631488085 CEST	50278	443	192.168.2.4	3.222.198.52
Apr 23, 2024 22:34:20.644032001 CEST	443	50279	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.644334078 CEST	50279	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.644359112 CEST	443	50279	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.645801067 CEST	443	50279	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.645873070 CEST	50279	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.646197081 CEST	50279	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.646277905 CEST	443	50279	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.646328926 CEST	50279	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.648199081 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.648226023 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.648236036 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.648274899 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.648304939 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.648339987 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.648386955 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.652776957 CEST	443	50276	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.652801037 CEST	443	50276	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.652859926 CEST	50276	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.652890921 CEST	443	50276	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.652931929 CEST	443	50276	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.652985096 CEST	50276	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.653634071 CEST	50276	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.653650045 CEST	443	50276	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.654409885 CEST	443	50274	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.654438019 CEST	443	50274	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.654444933 CEST	443	50274	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.654459953 CEST	443	50274	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.654465914 CEST	443	50274	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.654500008 CEST	50274	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.654517889 CEST	443	50274	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.654541016 CEST	50274	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.654596090 CEST	443	50274	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.654644966 CEST	50274	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.657543898 CEST	50274	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.657565117 CEST	443	50274	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.668044090 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.668118954 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.668140888 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.668159008 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.668193102 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.668206930 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.668253899 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.668286085 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.668286085 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.682617903 CEST	50278	443	192.168.2.4	3.222.198.52
Apr 23, 2024 22:34:20.688126087 CEST	443	50279	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.697726965 CEST	50279	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.697742939 CEST	443	50279	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.712913990 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.745918036 CEST	50279	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.750313997 CEST	443	50278	3.222.198.52	192.168.2.4
Apr 23, 2024 22:34:20.750348091 CEST	443	50278	3.222.198.52	192.168.2.4
Apr 23, 2024 22:34:20.750406981 CEST	443	50278	3.222.198.52	192.168.2.4
Apr 23, 2024 22:34:20.750543118 CEST	50278	443	192.168.2.4	3.222.198.52
Apr 23, 2024 22:34:20.750543118 CEST	50278	443	192.168.2.4	3.222.198.52
Apr 23, 2024 22:34:20.750576973 CEST	443	50278	3.222.198.52	192.168.2.4
Apr 23, 2024 22:34:20.750605106 CEST	443	50278	3.222.198.52	192.168.2.4
Apr 23, 2024 22:34:20.750710011 CEST	50278	443	192.168.2.4	3.222.198.52
Apr 23, 2024 22:34:20.751117945 CEST	50278	443	192.168.2.4	3.222.198.52
Apr 23, 2024 22:34:20.751137018 CEST	443	50278	3.222.198.52	192.168.2.4
Apr 23, 2024 22:34:20.751148939 CEST	50278	443	192.168.2.4	3.222.198.52
Apr 23, 2024 22:34:20.751190901 CEST	50278	443	192.168.2.4	3.222.198.52
Apr 23, 2024 22:34:20.762759924 CEST	443	50272	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.762788057 CEST	443	50272	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.762820959 CEST	443	50272	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.762893915 CEST	50272	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.762901068 CEST	443	50272	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.762963057 CEST	50272	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.763156891 CEST	443	50272	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.763191938 CEST	443	50272	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.763214111 CEST	50272	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.763217926 CEST	443	50272	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.763256073 CEST	50272	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.763267040 CEST	443	50272	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.763313055 CEST	50272	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.763717890 CEST	50272	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.763726950 CEST	443	50272	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.767488956 CEST	443	50280	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.767694950 CEST	50280	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.767726898 CEST	443	50280	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.769217968 CEST	443	50280	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.769294977 CEST	50280	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.769543886 CEST	50280	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.769627094 CEST	443	50280	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.769998074 CEST	50280	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.770006895 CEST	443	50280	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.773907900 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.773962021 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.774032116 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.774046898 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.774100065 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.786915064 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.786941051 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.787015915 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.787033081 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.787064075 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.787081957 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.787283897 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.787302971 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.787338972 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.787343979 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.787365913 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.787379026 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.787395954 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.787417889 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.787441969 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.817466974 CEST	50280	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.893093109 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.893126011 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.893198013 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.893204927 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.893229961 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.893251896 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.893270969 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.893318892 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.893332005 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.906605959 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.906688929 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.906758070 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.906793118 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.906812906 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.906972885 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.907032967 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.907046080 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.907126904 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.907135010 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.907150984 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.907196999 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.907797098 CEST	50275	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:20.907814026 CEST	443	50275	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:20.939922094 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.012979031 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.013079882 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.013101101 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.013137102 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.013216972 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.013238907 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.013430119 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.013474941 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.013494015 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.013513088 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.013557911 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.013983011 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.014049053 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.014084101 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.014098883 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.014131069 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.014606953 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.014647961 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.014672041 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.014687061 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.014717102 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.018961906 CEST	443	50279	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.018994093 CEST	443	50279	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.019004107 CEST	443	50279	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.019059896 CEST	50279	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.019064903 CEST	443	50279	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.019087076 CEST	443	50279	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.019121885 CEST	443	50279	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.019154072 CEST	443	50279	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.019171000 CEST	443	50279	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.019177914 CEST	50279	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.019177914 CEST	50279	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.019179106 CEST	50279	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.019197941 CEST	50279	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.019202948 CEST	443	50279	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.019227982 CEST	50279	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.019279003 CEST	443	50279	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.019341946 CEST	50279	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.020678043 CEST	50279	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.020694971 CEST	443	50279	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.021720886 CEST	443	50280	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.021869898 CEST	443	50280	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.021879911 CEST	443	50280	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.021944046 CEST	50280	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.021958113 CEST	443	50280	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.054179907 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.054342985 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.054368019 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.073564053 CEST	50280	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.104321957 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.136236906 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.136331081 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.136465073 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.136483908 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.136590958 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.136677027 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.136729956 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.136734009 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.136765003 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.136794090 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.136842966 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.136898041 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.136914015 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.136997938 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.141385078 CEST	443	50280	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.141400099 CEST	443	50280	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.141429901 CEST	443	50280	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.141489029 CEST	443	50280	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.141549110 CEST	50280	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.141562939 CEST	443	50280	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.141591072 CEST	443	50280	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.141690016 CEST	50280	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.144916058 CEST	50280	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.144933939 CEST	443	50280	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.174217939 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.174278021 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.174325943 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.174354076 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.174400091 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.174421072 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.255188942 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.255263090 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.255311012 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.255351067 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.255381107 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.256323099 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.256416082 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.256433964 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.256652117 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.256735086 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.257863045 CEST	50273	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.257882118 CEST	443	50273	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.361072063 CEST	50281	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.361183882 CEST	443	50281	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.361294985 CEST	50281	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.361521959 CEST	50281	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.361558914 CEST	443	50281	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.385667086 CEST	50282	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.385710955 CEST	443	50282	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.385790110 CEST	50282	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.386178017 CEST	50282	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.386189938 CEST	443	50282	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.736253023 CEST	443	50281	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.736630917 CEST	50281	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.736690998 CEST	443	50281	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.737442970 CEST	443	50281	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.737782001 CEST	50281	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.737927914 CEST	50281	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.737940073 CEST	443	50281	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.738025904 CEST	443	50281	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.750314951 CEST	443	50282	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.750562906 CEST	50282	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.750574112 CEST	443	50282	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.750890017 CEST	443	50282	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.751211882 CEST	50282	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.751260042 CEST	443	50282	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.751351118 CEST	50282	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.791130066 CEST	50281	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.796109915 CEST	443	50282	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.994570017 CEST	443	50281	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.994623899 CEST	443	50281	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.994788885 CEST	50281	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.994807959 CEST	443	50281	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:21.994904041 CEST	50281	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.996192932 CEST	50281	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:21.996225119 CEST	443	50281	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.003635883 CEST	50285	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.003700972 CEST	443	50285	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.003844976 CEST	50285	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.004728079 CEST	50285	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.004749060 CEST	443	50285	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.018811941 CEST	443	50282	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.018836021 CEST	443	50282	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.018897057 CEST	443	50282	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.018922091 CEST	50282	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.018932104 CEST	443	50282	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.018989086 CEST	50282	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.053323984 CEST	50286	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.053378105 CEST	443	50286	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.053466082 CEST	50286	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.053704977 CEST	50286	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.053719044 CEST	443	50286	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.113389015 CEST	50287	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.113461018 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.113544941 CEST	50287	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.114615917 CEST	50289	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.114676952 CEST	443	50289	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.114743948 CEST	50289	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.116177082 CEST	50290	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.116187096 CEST	443	50290	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.116255045 CEST	50290	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.116396904 CEST	50291	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.116471052 CEST	443	50291	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.116544962 CEST	50291	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.116993904 CEST	50287	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.117027998 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.117918015 CEST	50289	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.117952108 CEST	443	50289	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.120742083 CEST	50290	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.120762110 CEST	443	50290	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.121182919 CEST	50291	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.121217012 CEST	443	50291	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.136465073 CEST	443	50282	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.136548042 CEST	443	50282	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.136599064 CEST	50282	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.139426947 CEST	50282	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.139444113 CEST	443	50282	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.155462027 CEST	50292	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.155524015 CEST	443	50292	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.155622005 CEST	50292	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.156306982 CEST	50292	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.156342030 CEST	443	50292	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.159425020 CEST	50293	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.159445047 CEST	443	50293	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.159532070 CEST	50293	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.159702063 CEST	50293	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.159713030 CEST	443	50293	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.379954100 CEST	443	50285	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.380769014 CEST	50285	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.380805016 CEST	443	50285	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.382083893 CEST	443	50285	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.382510900 CEST	50285	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.382682085 CEST	443	50285	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.382709026 CEST	50285	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.422812939 CEST	443	50286	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.428121090 CEST	443	50285	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.433453083 CEST	50285	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.464370966 CEST	50286	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.479708910 CEST	50286	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.479728937 CEST	443	50286	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.480211020 CEST	443	50286	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.484170914 CEST	50286	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.484262943 CEST	443	50286	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.485790968 CEST	50286	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.490748882 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.491029978 CEST	50287	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.491089106 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.492842913 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.493427038 CEST	50287	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.493671894 CEST	443	50289	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.493678093 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.493681908 CEST	50287	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.493943930 CEST	50289	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.493952990 CEST	443	50289	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.495480061 CEST	443	50289	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.495568991 CEST	50289	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.496184111 CEST	443	50291	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.497322083 CEST	443	50290	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.530144930 CEST	443	50292	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.532124996 CEST	443	50286	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.536303043 CEST	443	50293	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.540118933 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.541938066 CEST	50290	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.557542086 CEST	50287	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.557554960 CEST	50291	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.573185921 CEST	50292	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.588792086 CEST	50293	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.675540924 CEST	443	50285	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.675594091 CEST	443	50285	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.675678015 CEST	50285	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.675729036 CEST	443	50285	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.675800085 CEST	50285	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.675812006 CEST	443	50285	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.675950050 CEST	443	50285	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.676004887 CEST	50285	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.683139086 CEST	443	50286	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.683173895 CEST	443	50286	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.683203936 CEST	443	50286	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.683243036 CEST	50286	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.683269024 CEST	443	50286	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.683285952 CEST	50286	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.683315992 CEST	50286	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.683321953 CEST	443	50286	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.683343887 CEST	443	50286	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.683381081 CEST	50286	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.744362116 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.744438887 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.744460106 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.744478941 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.744513035 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.744514942 CEST	50287	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.744560957 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.744591951 CEST	50287	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.744591951 CEST	50287	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.798367023 CEST	50287	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.865789890 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.865823984 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.865840912 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.865931988 CEST	50287	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.865995884 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.866005898 CEST	50287	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.866027117 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.866044998 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.866060972 CEST	50287	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.866086960 CEST	50287	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.866337061 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.866403103 CEST	50287	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.975085974 CEST	50293	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.975106001 CEST	443	50293	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.975251913 CEST	50292	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.975281954 CEST	443	50292	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.975478888 CEST	50290	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.975495100 CEST	443	50290	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.975709915 CEST	50291	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.975784063 CEST	443	50291	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.976126909 CEST	50289	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.976406097 CEST	443	50289	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.976495981 CEST	443	50292	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.976547956 CEST	50292	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.977078915 CEST	443	50290	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.977137089 CEST	50290	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.977221012 CEST	443	50293	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.977478027 CEST	443	50291	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.977489948 CEST	443	50291	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.977538109 CEST	50291	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.982163906 CEST	50292	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.982242107 CEST	443	50292	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.982789993 CEST	50290	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.982934952 CEST	443	50290	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.983239889 CEST	50293	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.983422041 CEST	443	50293	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.983603001 CEST	50291	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.983716011 CEST	443	50291	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.984940052 CEST	50289	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.984966993 CEST	443	50289	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.985702991 CEST	50292	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.985717058 CEST	443	50292	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.985804081 CEST	50290	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.985811949 CEST	443	50290	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:22.985882998 CEST	50293	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.985976934 CEST	50291	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:22.986013889 CEST	443	50291	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.025891066 CEST	50289	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.025896072 CEST	50292	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.025903940 CEST	50290	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.026966095 CEST	50291	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.032066107 CEST	50285	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.032084942 CEST	443	50285	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.032114029 CEST	443	50293	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.039455891 CEST	50287	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.039484978 CEST	443	50287	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.039834023 CEST	50297	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.039916992 CEST	443	50297	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.040088892 CEST	50297	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.045114040 CEST	50286	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.045130014 CEST	443	50286	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.045483112 CEST	50298	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.045515060 CEST	443	50298	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.045583010 CEST	50298	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.066308975 CEST	50297	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.066350937 CEST	443	50297	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.067408085 CEST	50298	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.067459106 CEST	443	50298	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.125693083 CEST	443	50292	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.125777006 CEST	443	50292	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.126005888 CEST	50292	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.128777981 CEST	443	50289	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.128853083 CEST	443	50289	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.128916025 CEST	50289	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.135699034 CEST	443	50293	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.135760069 CEST	443	50293	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.135828018 CEST	443	50293	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.135860920 CEST	443	50293	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.135888100 CEST	50293	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.135900974 CEST	443	50293	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.135956049 CEST	50293	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.154190063 CEST	443	50290	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.154438019 CEST	443	50290	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.154509068 CEST	50290	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.154521942 CEST	443	50290	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.154573917 CEST	443	50290	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.154628992 CEST	50290	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.166176081 CEST	443	50291	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.166322947 CEST	443	50291	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.166400909 CEST	50291	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.257534027 CEST	443	50293	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.257783890 CEST	50293	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.257800102 CEST	443	50293	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.257875919 CEST	443	50293	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.257932901 CEST	50293	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.437716961 CEST	443	50297	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.451699018 CEST	443	50298	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.480032921 CEST	50297	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.483449936 CEST	50297	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.483469963 CEST	443	50297	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.483850956 CEST	50298	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.483915091 CEST	443	50298	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.484155893 CEST	443	50297	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.485222101 CEST	443	50298	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.526618958 CEST	50297	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.526634932 CEST	50298	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.532130957 CEST	50298	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.532243967 CEST	443	50298	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.532680035 CEST	50297	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.532929897 CEST	443	50297	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.537476063 CEST	50298	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.537695885 CEST	50297	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.580131054 CEST	443	50298	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.580136061 CEST	443	50297	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.703512907 CEST	443	50297	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.703649998 CEST	443	50297	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.703759909 CEST	50297	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:23.710836887 CEST	443	50298	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.710995913 CEST	443	50298	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:23.711074114 CEST	50298	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.456911087 CEST	50256	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:34:24.457673073 CEST	443	50256	104.22.71.197	192.168.2.4
Apr 23, 2024 22:34:24.457741976 CEST	50256	443	192.168.2.4	104.22.71.197
Apr 23, 2024 22:34:24.484749079 CEST	50289	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.484775066 CEST	443	50289	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.485265017 CEST	50301	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.485328913 CEST	443	50301	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.485410929 CEST	50301	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.488969088 CEST	50301	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.489002943 CEST	443	50301	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.490665913 CEST	50292	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.490689039 CEST	443	50292	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.491031885 CEST	50302	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.491054058 CEST	443	50302	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.491126060 CEST	50302	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.492825985 CEST	50302	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.492850065 CEST	443	50302	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.493081093 CEST	50291	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.493120909 CEST	443	50291	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.493505955 CEST	50303	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.493529081 CEST	443	50303	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.493592024 CEST	50303	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.494601011 CEST	50303	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.494611979 CEST	443	50303	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.495553017 CEST	50290	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.495611906 CEST	443	50290	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.495887041 CEST	50304	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.495939016 CEST	443	50304	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.496012926 CEST	50304	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.497013092 CEST	50304	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.497047901 CEST	443	50304	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.497273922 CEST	50298	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.497328997 CEST	443	50298	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.497643948 CEST	50305	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.497688055 CEST	443	50305	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.497771025 CEST	50305	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.498662949 CEST	50305	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.498691082 CEST	443	50305	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.498884916 CEST	50297	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.498899937 CEST	443	50297	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.499221087 CEST	50306	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.499264002 CEST	443	50306	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.499325037 CEST	50306	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.564987898 CEST	50306	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.565025091 CEST	443	50306	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.828238010 CEST	50293	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.828258991 CEST	443	50293	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.865536928 CEST	443	50305	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.865866899 CEST	443	50301	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.867052078 CEST	50305	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.867084980 CEST	443	50305	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.867311001 CEST	50301	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.867332935 CEST	443	50301	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.867719889 CEST	443	50302	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.868139029 CEST	50302	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.868155003 CEST	443	50302	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.868218899 CEST	443	50301	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.868308067 CEST	443	50305	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.868330956 CEST	443	50303	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.868366957 CEST	50305	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.868622065 CEST	443	50302	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.870042086 CEST	50301	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.870176077 CEST	443	50301	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.870476961 CEST	50305	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.870564938 CEST	443	50305	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.870682955 CEST	50303	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.870695114 CEST	443	50303	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.870996952 CEST	50302	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.871078968 CEST	443	50302	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.871238947 CEST	50301	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.871306896 CEST	50305	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.871318102 CEST	443	50305	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.871423006 CEST	50302	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.872143030 CEST	443	50303	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.872216940 CEST	50303	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.876394987 CEST	443	50304	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.882314920 CEST	50303	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.882400036 CEST	443	50303	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.882510900 CEST	50304	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.882541895 CEST	443	50304	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.882672071 CEST	50303	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.882684946 CEST	443	50303	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.883606911 CEST	443	50304	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.883675098 CEST	50304	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.912142992 CEST	443	50302	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.912154913 CEST	443	50301	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.917429924 CEST	50305	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.932063103 CEST	50303	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:24.935028076 CEST	443	50306	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:24.978698969 CEST	50306	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.029452085 CEST	50304	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.029653072 CEST	443	50304	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.029675007 CEST	50306	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.029723883 CEST	443	50306	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.033226013 CEST	50304	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.033266068 CEST	443	50304	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.033934116 CEST	443	50306	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.034017086 CEST	50306	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.034548998 CEST	50306	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.034689903 CEST	50306	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.034703970 CEST	443	50306	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.034750938 CEST	443	50306	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.075576067 CEST	50304	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.075642109 CEST	50306	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.075675011 CEST	443	50306	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.120484114 CEST	50306	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.123254061 CEST	443	50305	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.123276949 CEST	443	50305	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.123284101 CEST	443	50305	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.123367071 CEST	50305	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.123397112 CEST	443	50305	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.124085903 CEST	443	50305	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.124140978 CEST	50305	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.124160051 CEST	443	50305	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.124253988 CEST	443	50305	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.124356985 CEST	50305	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.127612114 CEST	443	50303	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.127660990 CEST	443	50303	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.127751112 CEST	50303	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.127768993 CEST	443	50303	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.127834082 CEST	443	50303	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.127882957 CEST	50303	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.128565073 CEST	50305	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.128598928 CEST	443	50305	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.128901005 CEST	50310	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.128921986 CEST	443	50310	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.128993988 CEST	50310	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.129389048 CEST	443	50301	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.129415035 CEST	443	50301	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.129514933 CEST	443	50301	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.129595995 CEST	50301	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.129595995 CEST	50301	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.132822990 CEST	50310	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.132838964 CEST	443	50310	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.134517908 CEST	443	50302	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.134670973 CEST	443	50302	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.134748936 CEST	50302	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.134759903 CEST	443	50302	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.134804964 CEST	50302	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.134849072 CEST	443	50302	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.134905100 CEST	50302	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.142158031 CEST	50303	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.142175913 CEST	443	50303	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.142565966 CEST	50311	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.142587900 CEST	443	50311	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.142651081 CEST	50311	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.144176006 CEST	50311	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.144186974 CEST	443	50311	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.145118952 CEST	50301	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.145148993 CEST	443	50301	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.145435095 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.145476103 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.145540953 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.147372961 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.147401094 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.153561115 CEST	50302	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.153570890 CEST	443	50302	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.153944016 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.153970003 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.154036999 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.155231953 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.155244112 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.168395996 CEST	50314	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.168472052 CEST	443	50314	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.168584108 CEST	50314	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.168781042 CEST	50314	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.168797970 CEST	443	50314	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.170751095 CEST	50315	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.170788050 CEST	443	50315	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.170864105 CEST	50315	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.171636105 CEST	50315	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.171658993 CEST	443	50315	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.172000885 CEST	443	50304	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.172023058 CEST	443	50304	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.172048092 CEST	443	50304	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.172072887 CEST	443	50304	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.172118902 CEST	50304	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.172128916 CEST	443	50304	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.172175884 CEST	443	50304	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.172188044 CEST	50304	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.172224998 CEST	50304	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.178881884 CEST	50304	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.178894043 CEST	443	50304	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.179210901 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.179231882 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.179313898 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.180471897 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.180481911 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.187129021 CEST	50317	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.187155008 CEST	443	50317	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.187231064 CEST	50317	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.190382957 CEST	443	50306	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.190438986 CEST	443	50306	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.190484047 CEST	443	50306	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.190501928 CEST	443	50306	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.190527916 CEST	50306	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.190534115 CEST	443	50306	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.190562010 CEST	443	50306	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.190573931 CEST	50306	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.190634966 CEST	50306	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.190650940 CEST	443	50306	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.190687895 CEST	50317	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.190704107 CEST	443	50317	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.190732956 CEST	443	50306	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.190781116 CEST	50306	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.223191023 CEST	50306	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.223232031 CEST	443	50306	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.223612070 CEST	50318	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.223659039 CEST	443	50318	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.223731995 CEST	50318	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.224709034 CEST	50318	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.224728107 CEST	443	50318	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.235436916 CEST	50319	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.235519886 CEST	443	50319	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.235769987 CEST	50319	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.236572027 CEST	50320	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.236622095 CEST	443	50320	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.236700058 CEST	50320	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.237066984 CEST	50319	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.237101078 CEST	443	50319	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.237451077 CEST	50320	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.237473011 CEST	443	50320	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.503422022 CEST	443	50310	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.503884077 CEST	50310	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.503907919 CEST	443	50310	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.504405022 CEST	443	50310	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.505033970 CEST	50310	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.505126953 CEST	443	50310	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.505615950 CEST	50310	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.519444942 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.519833088 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.519891977 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.521359921 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.521459103 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.521977901 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.522067070 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.522603989 CEST	443	50311	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.525603056 CEST	50311	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.525619030 CEST	443	50311	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.526077986 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.526097059 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.526245117 CEST	443	50311	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.526810884 CEST	50311	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.526892900 CEST	443	50311	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.527338982 CEST	50311	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.529025078 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.529362917 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.529386997 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.530827045 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.530949116 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.531619072 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.531693935 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.532105923 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.532111883 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.539987087 CEST	443	50314	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.540446043 CEST	50314	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.540502071 CEST	443	50314	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.541512012 CEST	443	50315	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.541714907 CEST	443	50314	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.541903973 CEST	50315	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.541960955 CEST	443	50315	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.542265892 CEST	50314	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.542468071 CEST	443	50315	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.542499065 CEST	443	50314	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.543198109 CEST	50314	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.545289993 CEST	50315	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.545387030 CEST	443	50315	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.545741081 CEST	50315	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.552112103 CEST	443	50310	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.554970026 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.555247068 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.555255890 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.558270931 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.558367968 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.559279919 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.559340000 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.559880972 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.559887886 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.568124056 CEST	443	50311	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.568567991 CEST	443	50317	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.568981886 CEST	50317	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.568994999 CEST	443	50317	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.572685003 CEST	443	50317	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.572787046 CEST	50317	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.572954893 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.574784994 CEST	50317	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.574968100 CEST	443	50317	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.575052977 CEST	50317	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.584155083 CEST	443	50314	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.588121891 CEST	443	50315	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.602072954 CEST	443	50318	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.602448940 CEST	50318	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.602507114 CEST	443	50318	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.603055000 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.606549025 CEST	443	50318	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.606601954 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.606650114 CEST	50318	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.607279062 CEST	50318	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.607458115 CEST	443	50318	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.607494116 CEST	50318	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.607738018 CEST	443	50320	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.608051062 CEST	50320	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.608088017 CEST	443	50320	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.609580040 CEST	443	50320	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.609684944 CEST	50320	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.610116959 CEST	50320	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.610227108 CEST	443	50320	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.610337019 CEST	50320	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.610348940 CEST	443	50320	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.611613035 CEST	443	50319	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.611897945 CEST	50319	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.611910105 CEST	443	50319	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.613378048 CEST	443	50319	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.613464117 CEST	50319	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.613810062 CEST	50319	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.613903999 CEST	443	50319	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.613953114 CEST	50319	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.616127014 CEST	443	50317	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.620686054 CEST	50317	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.620701075 CEST	443	50317	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.648133993 CEST	443	50318	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.650969982 CEST	50318	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.651005983 CEST	443	50318	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.656131983 CEST	443	50319	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.670793056 CEST	50317	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.693197966 CEST	50318	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.757740974 CEST	50320	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.757740974 CEST	50319	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.757771969 CEST	443	50319	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.758867979 CEST	443	50310	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.758939028 CEST	443	50310	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.759006023 CEST	50310	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.759021997 CEST	443	50310	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.759790897 CEST	443	50310	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.759854078 CEST	50310	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.759864092 CEST	443	50310	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.775660992 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.775787115 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.775806904 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.775840044 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.775866032 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.775934935 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.775975943 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.780000925 CEST	443	50311	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.780047894 CEST	443	50311	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.780127048 CEST	50311	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.780139923 CEST	443	50311	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.780450106 CEST	443	50311	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.780503035 CEST	50311	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.786680937 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.786704063 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.786711931 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.786763906 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.786780119 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.786809921 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.786813974 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.786828995 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.786830902 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.786854029 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.795190096 CEST	443	50314	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.795279980 CEST	443	50314	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.795336008 CEST	50314	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.797138929 CEST	50311	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.797158003 CEST	443	50311	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.798185110 CEST	50323	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.798234940 CEST	443	50323	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.798315048 CEST	50323	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.801304102 CEST	443	50315	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.801515102 CEST	443	50315	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.801573038 CEST	50315	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.802871943 CEST	50323	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.802901983 CEST	443	50323	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.811738014 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.811763048 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.811769962 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.811819077 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.811840057 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.811892033 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.811920881 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.811920881 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.817547083 CEST	50314	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.817589045 CEST	443	50314	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.821388006 CEST	50315	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.821422100 CEST	443	50315	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.823848009 CEST	443	50317	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.824181080 CEST	443	50317	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.824239016 CEST	50317	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.830698967 CEST	50317	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.830713034 CEST	443	50317	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.860569000 CEST	443	50318	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.860625029 CEST	443	50318	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.860806942 CEST	443	50318	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.860840082 CEST	50318	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.860932112 CEST	50318	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.870883942 CEST	443	50319	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.871104002 CEST	50319	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.877979994 CEST	443	50310	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.878058910 CEST	50310	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.878084898 CEST	443	50310	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.878108025 CEST	443	50310	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.878155947 CEST	50310	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.886682987 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.886744976 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.892080069 CEST	443	50320	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.892297983 CEST	443	50320	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.892373085 CEST	50320	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.893465996 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.893495083 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.893552065 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.893570900 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.893601894 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.893815994 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.893842936 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.893861055 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.893891096 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.893910885 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.893933058 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.893937111 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.893955946 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.893975019 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.893980980 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.893996000 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.894016027 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.903682947 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.903702974 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.906698942 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.906737089 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.906802893 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.906810999 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.906820059 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.906871080 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.906873941 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.906939030 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.906949043 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.906992912 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.906999111 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.907041073 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.926148891 CEST	50310	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.926171064 CEST	443	50310	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.926609039 CEST	50324	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.926695108 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.926783085 CEST	50324	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.927702904 CEST	50324	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.927731991 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.931658030 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.931673050 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.931730986 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.931747913 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.931775093 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.931807995 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.931819916 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.931840897 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.931863070 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.931884050 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.931900024 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.932018995 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.932030916 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.932092905 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:25.975750923 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.975769997 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:25.975828886 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.011974096 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.012042999 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.012064934 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.012181997 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.012181997 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.012214899 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.012257099 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.012275934 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.012310982 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.012312889 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.012331009 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.012351990 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.012377977 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.012384892 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.012428999 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.027112007 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.027126074 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.027215958 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.027229071 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.027237892 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.027335882 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.027386904 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.027388096 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.027410030 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.027440071 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.027717113 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.027728081 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.027775049 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.027781010 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.027805090 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.027837038 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.028112888 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.028192043 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.028201103 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.028223038 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.028251886 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.028275013 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.051556110 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.051660061 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.051727057 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.076041937 CEST	50318	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.076076984 CEST	443	50318	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.076492071 CEST	50325	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.076528072 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.076590061 CEST	50325	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.077475071 CEST	50319	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.077502012 CEST	443	50319	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.078269958 CEST	50325	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.078280926 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.084770918 CEST	50320	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.084780931 CEST	443	50320	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.096714020 CEST	50316	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.096733093 CEST	443	50316	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.097312927 CEST	50326	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.097337008 CEST	443	50326	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.097393990 CEST	50326	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.100152016 CEST	50326	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.100163937 CEST	443	50326	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.130489111 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.130523920 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.130573988 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.130588055 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.130656958 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.130692959 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.130693913 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.130701065 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.130721092 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.130748987 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.130763054 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.130784035 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.130785942 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.130822897 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.130839109 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.130887985 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.130896091 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.130916119 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.130956888 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.130995035 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.131006956 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.131243944 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.131299973 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.133054018 CEST	50312	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.133090973 CEST	443	50312	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.133431911 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.133475065 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.133553028 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.137358904 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.137396097 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.146018028 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.146101952 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.147315025 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.147416115 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.147464991 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.147792101 CEST	50313	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.147800922 CEST	443	50313	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.156004906 CEST	50328	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.156035900 CEST	443	50328	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.156107903 CEST	50328	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.156559944 CEST	50328	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.156578064 CEST	443	50328	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.172607899 CEST	443	50323	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.172907114 CEST	50323	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.172938108 CEST	443	50323	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.173470974 CEST	443	50323	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.173865080 CEST	50323	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.173954964 CEST	443	50323	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.174050093 CEST	50323	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.216126919 CEST	443	50323	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.302020073 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.302786112 CEST	50324	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.302808046 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.303951025 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.304950953 CEST	50324	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.305139065 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.305152893 CEST	50324	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.352121115 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.385760069 CEST	50324	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.429179907 CEST	443	50323	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.429203033 CEST	443	50323	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.429265022 CEST	50323	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.429281950 CEST	443	50323	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.429294109 CEST	443	50323	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.429400921 CEST	50323	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.430895090 CEST	50323	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.430907965 CEST	443	50323	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.434786081 CEST	50330	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.434847116 CEST	443	50330	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.434926033 CEST	50330	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.435285091 CEST	50330	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.435302973 CEST	443	50330	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.447259903 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.447695971 CEST	50325	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.447755098 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.448781967 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.448860884 CEST	50325	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.449311972 CEST	50325	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.449385881 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.449430943 CEST	50325	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.470356941 CEST	443	50326	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.471009970 CEST	50326	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.471024036 CEST	443	50326	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.474615097 CEST	443	50326	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.474699974 CEST	50326	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.475009918 CEST	50326	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.475188017 CEST	443	50326	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.475265980 CEST	50326	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.475272894 CEST	443	50326	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.492116928 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.509865046 CEST	50325	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.509886026 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.514704943 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.514919996 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.514951944 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.518492937 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.518563032 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.519012928 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.519102097 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.519273996 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.519293070 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.528614998 CEST	443	50328	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.528872013 CEST	50328	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.528888941 CEST	443	50328	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.530440092 CEST	443	50328	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.530555964 CEST	50328	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.530868053 CEST	50328	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.530967951 CEST	443	50328	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.530993938 CEST	50328	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.571726084 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.571775913 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.571795940 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.571830034 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.571847916 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.571847916 CEST	50324	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.571898937 CEST	50324	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.571903944 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.571950912 CEST	50324	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.572118044 CEST	443	50328	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.591073036 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.678884029 CEST	50326	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.679078102 CEST	50328	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.679079056 CEST	50325	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.679096937 CEST	443	50328	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.689457893 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.689551115 CEST	50324	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.689593077 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.689655066 CEST	50324	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.690295935 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.690306902 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.690339088 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.690350056 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.690361977 CEST	50324	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.690366030 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.690393925 CEST	50324	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.690417051 CEST	50324	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.690437078 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.690542936 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.690596104 CEST	50324	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.695046902 CEST	50324	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.695085049 CEST	443	50324	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.699359894 CEST	50332	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.699383020 CEST	443	50332	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.699443102 CEST	50332	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.699678898 CEST	50332	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.699690104 CEST	443	50332	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.713541985 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.713566065 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.713573933 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.713613987 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.713643074 CEST	50325	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.713684082 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.713735104 CEST	50325	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.732636929 CEST	443	50326	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.732733011 CEST	443	50326	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.732789040 CEST	50326	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.733392954 CEST	50326	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.733402967 CEST	443	50326	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.736080885 CEST	50333	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.736181021 CEST	443	50333	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.736243963 CEST	50333	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.736507893 CEST	50333	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.736542940 CEST	443	50333	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.772465944 CEST	50334	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.772521973 CEST	443	50334	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.772607088 CEST	50334	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.772979021 CEST	50335	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.773030996 CEST	443	50335	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.773113012 CEST	50335	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.773448944 CEST	50334	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.773482084 CEST	443	50334	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.773674965 CEST	50335	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.773706913 CEST	443	50335	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.790776968 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.790857077 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.790884018 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.790915012 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.790940046 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.790952921 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.790978909 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.790987015 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.791100025 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.791171074 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.791193008 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.791263103 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.793776989 CEST	443	50328	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.793847084 CEST	50328	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.796019077 CEST	50328	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.796036959 CEST	443	50328	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.799752951 CEST	50336	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.799787045 CEST	443	50336	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.799953938 CEST	50336	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.800149918 CEST	50336	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.800184965 CEST	443	50336	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.806197882 CEST	443	50330	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.806427956 CEST	50330	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.806457043 CEST	443	50330	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.806942940 CEST	443	50330	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.807286978 CEST	50330	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.807409048 CEST	50330	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.807420969 CEST	443	50330	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.807439089 CEST	443	50330	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.832756042 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.832783937 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.832828045 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.832828045 CEST	50325	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.832847118 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.832869053 CEST	50325	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.832874060 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.832885027 CEST	50325	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.832891941 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.832907915 CEST	50325	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.832935095 CEST	50325	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.832935095 CEST	50325	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.832997084 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.833326101 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.833399057 CEST	50325	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.833853960 CEST	50325	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.833874941 CEST	443	50325	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.838517904 CEST	50337	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.838546038 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.838637114 CEST	50337	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.838784933 CEST	50337	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.838812113 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.884393930 CEST	50330	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.918437004 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.918462038 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.918509960 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.918539047 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.918591976 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.918667078 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:26.918703079 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:26.918754101 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.037803888 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.037836075 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.037889004 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.037894011 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.037930965 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.037945032 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.037945032 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.037976027 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.080912113 CEST	443	50332	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.081202030 CEST	50332	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.081222057 CEST	443	50332	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.082499027 CEST	443	50332	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.083122969 CEST	50332	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.083300114 CEST	443	50332	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.086798906 CEST	50332	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.104476929 CEST	443	50330	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.104501963 CEST	443	50330	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.104583025 CEST	50330	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.104592085 CEST	443	50330	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.104650974 CEST	50330	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.112222910 CEST	443	50333	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.130260944 CEST	50333	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.130299091 CEST	443	50333	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.130950928 CEST	443	50333	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.132116079 CEST	443	50332	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.147093058 CEST	443	50334	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.150815964 CEST	443	50335	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.156815052 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.156877995 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.156900883 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.156925917 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.156959057 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.156979084 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.157057047 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.157109022 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.157216072 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.157268047 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.157274961 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.157303095 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.157329082 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.157349110 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.157439947 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.157500982 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.169958115 CEST	443	50336	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.205602884 CEST	50333	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.206775904 CEST	50334	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.209937096 CEST	50333	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.210098982 CEST	443	50333	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.210320950 CEST	50335	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.210369110 CEST	443	50335	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.210639954 CEST	50334	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.210668087 CEST	443	50334	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.210768938 CEST	50336	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.210784912 CEST	443	50336	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.211224079 CEST	50333	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.211776972 CEST	443	50335	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.212275982 CEST	443	50334	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.212999105 CEST	50335	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.213188887 CEST	443	50335	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.214143991 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.214744091 CEST	443	50336	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.214812040 CEST	50336	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.215533018 CEST	50334	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.215713024 CEST	443	50334	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.220663071 CEST	50337	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.220684052 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.221014023 CEST	50336	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.221189022 CEST	443	50336	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.221549034 CEST	50335	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.221610069 CEST	50334	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.221713066 CEST	50336	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.221728086 CEST	443	50336	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.222204924 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.222280979 CEST	50337	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.222681999 CEST	50330	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.222721100 CEST	443	50330	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.223825932 CEST	50337	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.223926067 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.226190090 CEST	50337	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.226207018 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.256124020 CEST	443	50333	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.264148951 CEST	443	50335	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.268114090 CEST	443	50334	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.276846886 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.276906967 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.276925087 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.276948929 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.276977062 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.277026892 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.277076960 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.277090073 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.277142048 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.277304888 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.277468920 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.277533054 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.290677071 CEST	50327	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.290690899 CEST	443	50327	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.291153908 CEST	50336	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.306447029 CEST	50337	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.335275888 CEST	443	50332	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.335298061 CEST	443	50332	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.335370064 CEST	50332	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.335385084 CEST	443	50332	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.335396051 CEST	443	50332	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.335448980 CEST	50332	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.336514950 CEST	50332	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.336524963 CEST	443	50332	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.367863894 CEST	443	50333	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.367888927 CEST	443	50333	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.367949009 CEST	50333	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.367971897 CEST	443	50333	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.367991924 CEST	443	50333	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.368050098 CEST	50333	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.375554085 CEST	50333	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.375579119 CEST	443	50333	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.396136045 CEST	50340	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.396174908 CEST	443	50340	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.396245003 CEST	50340	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.396580935 CEST	50340	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.396608114 CEST	443	50340	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.397952080 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.397983074 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.398066044 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.398427010 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.398444891 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.409771919 CEST	443	50334	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.410048008 CEST	443	50334	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.410109043 CEST	50334	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.411533117 CEST	50334	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.411564112 CEST	443	50334	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.411847115 CEST	50343	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.411938906 CEST	443	50343	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.412034035 CEST	50343	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.412508965 CEST	50343	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.412547112 CEST	443	50343	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.424062014 CEST	443	50336	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.424247026 CEST	443	50336	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.424309015 CEST	50336	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.425035000 CEST	50336	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.425048113 CEST	443	50336	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.425240040 CEST	50344	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.425256968 CEST	443	50344	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.426333904 CEST	50344	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.426537991 CEST	50344	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.426553011 CEST	443	50344	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.470506907 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.470566988 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.470586061 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.470603943 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.470633984 CEST	50337	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.470637083 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.470664024 CEST	50337	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.470693111 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.470717907 CEST	50337	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.534657955 CEST	443	50335	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.534686089 CEST	443	50335	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.534694910 CEST	443	50335	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.534712076 CEST	443	50335	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.534720898 CEST	443	50335	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.534728050 CEST	443	50335	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.534758091 CEST	50335	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.534780025 CEST	443	50335	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.534811020 CEST	50335	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.534827948 CEST	443	50335	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.534831047 CEST	50335	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.534842968 CEST	443	50335	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.534858942 CEST	443	50335	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.534897089 CEST	50335	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.534915924 CEST	443	50335	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.534940958 CEST	50335	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.534953117 CEST	443	50335	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.535005093 CEST	50335	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.536401987 CEST	50335	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.536427021 CEST	443	50335	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.589679003 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.589703083 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.589740992 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.589776039 CEST	50337	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.589786053 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.589834929 CEST	50337	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.589874983 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.589931011 CEST	50337	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.589973927 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.590104103 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.590168953 CEST	50337	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.590647936 CEST	50337	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.590652943 CEST	443	50337	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.772872925 CEST	443	50340	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.773189068 CEST	50340	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.773215055 CEST	443	50340	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.774485111 CEST	443	50340	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.774797916 CEST	50340	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.774916887 CEST	50340	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.774926901 CEST	443	50340	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.775008917 CEST	443	50340	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.775500059 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.775959015 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.775973082 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.776464939 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.776827097 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.776918888 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.777014017 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.786982059 CEST	443	50343	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.787496090 CEST	50343	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.787539959 CEST	443	50343	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.789058924 CEST	443	50343	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.789133072 CEST	50343	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.789452076 CEST	50343	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.789530993 CEST	443	50343	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.789566040 CEST	50343	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.796588898 CEST	443	50344	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.796785116 CEST	50344	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.796807051 CEST	443	50344	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.798223019 CEST	443	50344	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.798281908 CEST	50344	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.798563957 CEST	50344	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.798645020 CEST	443	50344	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.798676968 CEST	50344	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.824120045 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.836114883 CEST	443	50343	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.840162992 CEST	443	50344	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.885137081 CEST	50344	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.885148048 CEST	443	50344	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.980145931 CEST	443	50340	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:27.980221033 CEST	50340	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.988142014 CEST	50343	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:27.988164902 CEST	443	50343	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.034444094 CEST	443	50340	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.034487009 CEST	443	50340	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.034563065 CEST	50340	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.034580946 CEST	443	50340	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.034712076 CEST	443	50340	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.034917116 CEST	50340	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.035223007 CEST	50340	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.035242081 CEST	443	50340	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.037319899 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.037347078 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.037380934 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.037409067 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.037422895 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.037441969 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.056351900 CEST	443	50343	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.056411028 CEST	50343	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.056421041 CEST	443	50343	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.056457043 CEST	443	50343	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.056524992 CEST	50343	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.056988001 CEST	50343	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.056998968 CEST	443	50343	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.064799070 CEST	443	50344	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.064851046 CEST	50344	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.064867020 CEST	443	50344	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.064908028 CEST	443	50344	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.065108061 CEST	50344	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.068392038 CEST	50344	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.068402052 CEST	443	50344	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.083120108 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.156323910 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.156385899 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.156402111 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.156451941 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.156454086 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.156475067 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.156513929 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.276057959 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.276082039 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.276112080 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.276123047 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.276155949 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.276173115 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.276489019 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.276498079 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.276524067 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.276547909 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.276554108 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.276591063 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.277283907 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.277292967 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.277309895 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.277332067 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.277338982 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.277368069 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.277374983 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.277607918 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.396723032 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.396770954 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.396801949 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.396810055 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.396847010 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.396939039 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.396974087 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.396994114 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.396998882 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.397032976 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.397209883 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.397232056 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.397273064 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.397279024 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.397289991 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.397304058 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.397322893 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.397330046 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.397346973 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.397376060 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.397391081 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.397397041 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.397433996 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.397439957 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.397461891 CEST	443	50342	107.21.11.164	192.168.2.4
Apr 23, 2024 22:34:28.397506952 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.398272991 CEST	50342	443	192.168.2.4	107.21.11.164
Apr 23, 2024 22:34:28.398288965 CEST	443	50342	107.21.11.164	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 23, 2024 22:32:00.436007023 CEST	138	138	192.168.2.4	192.168.2.255
Apr 23, 2024 22:32:04.617048979 CEST	55350	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:04.617217064 CEST	59702	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:04.721164942 CEST	53	61133	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:04.723046064 CEST	53	59702	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:04.744148970 CEST	53	55350	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:04.763243914 CEST	53	50825	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:05.387707949 CEST	53	63585	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:05.450800896 CEST	53024	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:05.450937033 CEST	56478	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:05.554511070 CEST	53	63196	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:05.556057930 CEST	53	56478	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:05.556397915 CEST	53	53024	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:06.205713987 CEST	54581	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:06.205871105 CEST	62843	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:06.313317060 CEST	53	62843	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:06.314860106 CEST	53	54581	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:06.331767082 CEST	53	62894	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:07.442540884 CEST	62505	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:07.442764044 CEST	52257	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:07.548337936 CEST	53	62505	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:07.549626112 CEST	53	64120	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:07.551223040 CEST	53	52257	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:09.307529926 CEST	58551	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:09.307677984 CEST	51547	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:09.412568092 CEST	53	51547	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:09.412743092 CEST	53	58551	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:17.231787920 CEST	55226	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:17.231914043 CEST	55300	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:17.338238001 CEST	53	55226	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:17.408163071 CEST	53	55300	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:17.693819046 CEST	53	50299	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:17.706806898 CEST	59723	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:17.706861973 CEST	59848	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:18.522826910 CEST	51345	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:18.522943020 CEST	51782	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:18.627481937 CEST	53	54102	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:18.628927946 CEST	53	56846	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:19.097691059 CEST	49811	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:19.097824097 CEST	52058	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:19.120332003 CEST	51222	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:19.120475054 CEST	54509	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:19.202611923 CEST	53	52058	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:19.203102112 CEST	53	49811	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:19.214592934 CEST	53	59844	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:19.225943089 CEST	53	51222	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:19.226700068 CEST	53	54509	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:19.558361053 CEST	59825	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:19.558490038 CEST	51238	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:19.663427114 CEST	53	59825	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:19.663470030 CEST	53	51238	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:20.247056007 CEST	53	57698	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:20.695791006 CEST	51332	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:20.696115017 CEST	49884	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:22.319526911 CEST	53	57502	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:24.071170092 CEST	49193	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:24.071315050 CEST	58144	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:24.175904989 CEST	53	49193	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:24.176012993 CEST	53	58144	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:26.529978037 CEST	56368	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:26.530127048 CEST	60158	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:26.530658960 CEST	61731	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:26.530781984 CEST	54213	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:26.635621071 CEST	53	61731	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:26.635977030 CEST	53	60158	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:26.636598110 CEST	53	56368	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:26.637006998 CEST	53	54213	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:28.356635094 CEST	51756	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:28.357045889 CEST	56244	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:29.029849052 CEST	57124	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:29.030006886 CEST	50113	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:30.943861008 CEST	63957	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:30.944006920 CEST	50684	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:32.610184908 CEST	65202	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:32.610316992 CEST	62624	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:32.610491037 CEST	56115	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:32.610594034 CEST	63931	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:32.720809937 CEST	53	57225	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:32.724278927 CEST	60487	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:32.724396944 CEST	60449	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:32.725505114 CEST	50442	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:32.725713015 CEST	58571	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:32:32.829941988 CEST	53	60487	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:32.830271006 CEST	53	60449	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:32.831001043 CEST	53	50442	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:32.831034899 CEST	53	58571	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:32.835607052 CEST	53	49872	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:36.653815031 CEST	53	56125	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:41.047707081 CEST	53	51141	1.1.1.1	192.168.2.4
Apr 23, 2024 22:32:58.023577929 CEST	53	61765	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:03.686326981 CEST	53	51067	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:04.649235964 CEST	53	52916	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:05.249149084 CEST	54466	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:33:05.249629021 CEST	59960	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:33:05.355638027 CEST	53	59960	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:05.370532036 CEST	53	54466	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:07.331532955 CEST	65457	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:33:07.333249092 CEST	62504	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:33:07.438255072 CEST	53	65457	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:07.438354015 CEST	53	62504	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:07.700051069 CEST	53	58082	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:08.928735018 CEST	61657	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:33:08.928858042 CEST	57808	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:33:08.933424950 CEST	53	63773	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:09.035202026 CEST	53	57808	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:09.050280094 CEST	53	61657	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:13.868668079 CEST	53	56023	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:21.237139940 CEST	64619	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:33:21.237198114 CEST	64074	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:33:21.237375021 CEST	55499	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:33:21.237504959 CEST	51407	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:33:21.343493938 CEST	53	64619	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:21.343996048 CEST	53	63110	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:21.393536091 CEST	53	64074	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:21.451703072 CEST	53	60651	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:22.230540037 CEST	53	53131	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:27.248419046 CEST	61924	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:33:27.248553991 CEST	62453	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:33:27.354233980 CEST	53	61924	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:27.354525089 CEST	53	62453	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:28.685389042 CEST	53198	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:33:28.685513973 CEST	65228	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:33:28.791568995 CEST	53	65228	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:28.791589975 CEST	53	53198	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:29.268776894 CEST	52023	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:33:29.268913031 CEST	62911	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:33:29.368392944 CEST	53	63196	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:32.279597044 CEST	53	61407	1.1.1.1	192.168.2.4
Apr 23, 2024 22:33:48.103279114 CEST	54368	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:33:48.103415966 CEST	61827	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:33:49.245471954 CEST	55606	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:33:49.245661020 CEST	65515	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:34:09.434401035 CEST	57017	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:34:09.434626102 CEST	57958	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:34:09.539743900 CEST	53	57958	1.1.1.1	192.168.2.4
Apr 23, 2024 22:34:09.539799929 CEST	53	57017	1.1.1.1	192.168.2.4
Apr 23, 2024 22:34:13.566436052 CEST	53884	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:34:13.566585064 CEST	63304	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:34:13.895672083 CEST	53	56607	1.1.1.1	192.168.2.4
Apr 23, 2024 22:34:16.226162910 CEST	53	52744	1.1.1.1	192.168.2.4
Apr 23, 2024 22:34:19.231992960 CEST	55313	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:34:19.232156992 CEST	58991	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:34:19.349596024 CEST	53	55313	1.1.1.1	192.168.2.4
Apr 23, 2024 22:34:19.351568937 CEST	53	58991	1.1.1.1	192.168.2.4
Apr 23, 2024 22:34:20.010328054 CEST	63325	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:34:20.010615110 CEST	53168	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:34:20.115991116 CEST	53	63325	1.1.1.1	192.168.2.4
Apr 23, 2024 22:34:20.119647980 CEST	53	53168	1.1.1.1	192.168.2.4
Apr 23, 2024 22:34:20.282078028 CEST	53425	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:34:20.282218933 CEST	57976	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:34:20.388515949 CEST	53	53425	1.1.1.1	192.168.2.4
Apr 23, 2024 22:34:20.391030073 CEST	53	57976	1.1.1.1	192.168.2.4
Apr 23, 2024 22:34:22.359950066 CEST	60585	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:34:22.360162020 CEST	59991	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:34:22.593298912 CEST	53	51478	1.1.1.1	192.168.2.4
Apr 23, 2024 22:34:24.010394096 CEST	53	58688	1.1.1.1	192.168.2.4
Apr 23, 2024 22:34:24.564711094 CEST	53	55378	1.1.1.1	192.168.2.4
Apr 23, 2024 22:34:24.829066992 CEST	58588	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:34:24.829368114 CEST	59042	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:34:25.166769028 CEST	59691	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:34:25.167160034 CEST	58272	53	192.168.2.4	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 23, 2024 22:32:17.408283949 CEST	192.168.2.4	1.1.1.1	c224	(Port unreachable)	Destination Unreachable
Apr 23, 2024 22:33:21.393677950 CEST	192.168.2.4	1.1.1.1	c224	(Port unreachable)	Destination Unreachable
Apr 23, 2024 22:34:24.563528061 CEST	192.168.2.4	1.1.1.1	c24e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 23, 2024 22:32:04.617048979 CEST	192.168.2.4	1.1.1.1	0xaf1f	Standard query (0)	www.donotcall.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:04.617217064 CEST	192.168.2.4	1.1.1.1	0xc7f	Standard query (0)	www.donotcall.gov	65	IN (0x0001)	false
Apr 23, 2024 22:32:05.450800896 CEST	192.168.2.4	1.1.1.1	0x3de	Standard query (0)	dap.digitalgov.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:05.450937033 CEST	192.168.2.4	1.1.1.1	0xa7b5	Standard query (0)	dap.digitalgov.gov	65	IN (0x0001)	false
Apr 23, 2024 22:32:06.205713987 CEST	192.168.2.4	1.1.1.1	0x13f0	Standard query (0)	www.donotcall.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:06.205871105 CEST	192.168.2.4	1.1.1.1	0xef05	Standard query (0)	www.donotcall.gov	65	IN (0x0001)	false
Apr 23, 2024 22:32:07.442540884 CEST	192.168.2.4	1.1.1.1	0x21e0	Standard query (0)	telemetry.consumersentinel.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:07.442764044 CEST	192.168.2.4	1.1.1.1	0x5bf6	Standard query (0)	telemetry.consumersentinel.gov	65	IN (0x0001)	false
Apr 23, 2024 22:32:09.307529926 CEST	192.168.2.4	1.1.1.1	0x6489	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:09.307677984 CEST	192.168.2.4	1.1.1.1	0x2c8a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 23, 2024 22:32:17.231787920 CEST	192.168.2.4	1.1.1.1	0x976b	Standard query (0)	ftc.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:17.231914043 CEST	192.168.2.4	1.1.1.1	0x8cd1	Standard query (0)	ftc.gov	65	IN (0x0001)	false
Apr 23, 2024 22:32:17.706806898 CEST	192.168.2.4	1.1.1.1	0x8b0	Standard query (0)	www.ftc.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:17.706861973 CEST	192.168.2.4	1.1.1.1	0x6139	Standard query (0)	www.ftc.gov	65	IN (0x0001)	false
Apr 23, 2024 22:32:18.522826910 CEST	192.168.2.4	1.1.1.1	0xb9b8	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:18.522943020 CEST	192.168.2.4	1.1.1.1	0x28d4	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Apr 23, 2024 22:32:19.097691059 CEST	192.168.2.4	1.1.1.1	0xba90	Standard query (0)	static.addtoany.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:19.097824097 CEST	192.168.2.4	1.1.1.1	0x3bfb	Standard query (0)	static.addtoany.com	65	IN (0x0001)	false
Apr 23, 2024 22:32:19.120332003 CEST	192.168.2.4	1.1.1.1	0xb012	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:19.120475054 CEST	192.168.2.4	1.1.1.1	0xb395	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 23, 2024 22:32:19.558361053 CEST	192.168.2.4	1.1.1.1	0xce74	Standard query (0)	dap.digitalgov.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:19.558490038 CEST	192.168.2.4	1.1.1.1	0xb950	Standard query (0)	dap.digitalgov.gov	65	IN (0x0001)	false
Apr 23, 2024 22:32:20.695791006 CEST	192.168.2.4	1.1.1.1	0x7b81	Standard query (0)	www.ftc.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:20.696115017 CEST	192.168.2.4	1.1.1.1	0x8422	Standard query (0)	www.ftc.gov	65	IN (0x0001)	false
Apr 23, 2024 22:32:24.071170092 CEST	192.168.2.4	1.1.1.1	0xb2f8	Standard query (0)	static.addtoany.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:24.071315050 CEST	192.168.2.4	1.1.1.1	0x2beb	Standard query (0)	static.addtoany.com	65	IN (0x0001)	false
Apr 23, 2024 22:32:26.529978037 CEST	192.168.2.4	1.1.1.1	0xed58	Standard query (0)	search.usa.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:26.530127048 CEST	192.168.2.4	1.1.1.1	0x9172	Standard query (0)	search.usa.gov	65	IN (0x0001)	false
Apr 23, 2024 22:32:26.530658960 CEST	192.168.2.4	1.1.1.1	0xb52e	Standard query (0)	extend.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:26.530781984 CEST	192.168.2.4	1.1.1.1	0x80c9	Standard query (0)	extend.vimeocdn.com	65	IN (0x0001)	false
Apr 23, 2024 22:32:28.356635094 CEST	192.168.2.4	1.1.1.1	0x4d3f	Standard query (0)	zn9ypt3vnzbt6rvcy-fedtradecommission.gov1.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:28.357045889 CEST	192.168.2.4	1.1.1.1	0x9a92	Standard query (0)	zn9ypt3vnzbt6rvcy-fedtradecommission.gov1.siteintercept.qualtrics.com	65	IN (0x0001)	false
Apr 23, 2024 22:32:29.029849052 CEST	192.168.2.4	1.1.1.1	0x7a3f	Standard query (0)	gov1.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:29.030006886 CEST	192.168.2.4	1.1.1.1	0xcc16	Standard query (0)	gov1.siteintercept.qualtrics.com	65	IN (0x0001)	false
Apr 23, 2024 22:32:30.943861008 CEST	192.168.2.4	1.1.1.1	0xc1a	Standard query (0)	gov1.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:30.944006920 CEST	192.168.2.4	1.1.1.1	0x5ce2	Standard query (0)	gov1.siteintercept.qualtrics.com	65	IN (0x0001)	false
Apr 23, 2024 22:32:32.610184908 CEST	192.168.2.4	1.1.1.1	0xbb63	Standard query (0)	www.ftc.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:32.610316992 CEST	192.168.2.4	1.1.1.1	0x205	Standard query (0)	www.ftc.gov	65	IN (0x0001)	false
Apr 23, 2024 22:32:32.610491037 CEST	192.168.2.4	1.1.1.1	0x6a9f	Standard query (0)	www.ftc.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:32.610594034 CEST	192.168.2.4	1.1.1.1	0x6441	Standard query (0)	www.ftc.gov	65	IN (0x0001)	false
Apr 23, 2024 22:32:32.724278927 CEST	192.168.2.4	1.1.1.1	0xa5ad	Standard query (0)	static.addtoany.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:32.724396944 CEST	192.168.2.4	1.1.1.1	0xf909	Standard query (0)	static.addtoany.com	65	IN (0x0001)	false
Apr 23, 2024 22:32:32.725505114 CEST	192.168.2.4	1.1.1.1	0x6198	Standard query (0)	search.usa.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:32.725713015 CEST	192.168.2.4	1.1.1.1	0x514e	Standard query (0)	search.usa.gov	65	IN (0x0001)	false
Apr 23, 2024 22:33:05.249149084 CEST	192.168.2.4	1.1.1.1	0x8e6	Standard query (0)	www.donotcall.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:05.249629021 CEST	192.168.2.4	1.1.1.1	0x5c17	Standard query (0)	www.donotcall.gov	65	IN (0x0001)	false
Apr 23, 2024 22:33:07.331532955 CEST	192.168.2.4	1.1.1.1	0x2646	Standard query (0)	dap.digitalgov.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:07.333249092 CEST	192.168.2.4	1.1.1.1	0x8b55	Standard query (0)	dap.digitalgov.gov	65	IN (0x0001)	false
Apr 23, 2024 22:33:08.928735018 CEST	192.168.2.4	1.1.1.1	0x7efb	Standard query (0)	www.donotcall.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:08.928858042 CEST	192.168.2.4	1.1.1.1	0x42fb	Standard query (0)	www.donotcall.gov	65	IN (0x0001)	false
Apr 23, 2024 22:33:21.237139940 CEST	192.168.2.4	1.1.1.1	0x6cac	Standard query (0)	ftc.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:21.237198114 CEST	192.168.2.4	1.1.1.1	0x248	Standard query (0)	ftc.gov	65	IN (0x0001)	false
Apr 23, 2024 22:33:21.237375021 CEST	192.168.2.4	1.1.1.1	0xd52	Standard query (0)	www.ftc.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:21.237504959 CEST	192.168.2.4	1.1.1.1	0x34f	Standard query (0)	www.ftc.gov	65	IN (0x0001)	false
Apr 23, 2024 22:33:27.248419046 CEST	192.168.2.4	1.1.1.1	0x5d99	Standard query (0)	search.usa.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:27.248553991 CEST	192.168.2.4	1.1.1.1	0x47c4	Standard query (0)	search.usa.gov	65	IN (0x0001)	false
Apr 23, 2024 22:33:28.685389042 CEST	192.168.2.4	1.1.1.1	0x8c1a	Standard query (0)	extend.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:28.685513973 CEST	192.168.2.4	1.1.1.1	0xd597	Standard query (0)	extend.vimeocdn.com	65	IN (0x0001)	false
Apr 23, 2024 22:33:29.268776894 CEST	192.168.2.4	1.1.1.1	0x38a0	Standard query (0)	gov1.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:29.268913031 CEST	192.168.2.4	1.1.1.1	0xe541	Standard query (0)	gov1.siteintercept.qualtrics.com	65	IN (0x0001)	false
Apr 23, 2024 22:33:48.103279114 CEST	192.168.2.4	1.1.1.1	0x2470	Standard query (0)	gov1.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:48.103415966 CEST	192.168.2.4	1.1.1.1	0x6e80	Standard query (0)	gov1.siteintercept.qualtrics.com	65	IN (0x0001)	false
Apr 23, 2024 22:33:49.245471954 CEST	192.168.2.4	1.1.1.1	0xb63	Standard query (0)	www.ftc.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:49.245661020 CEST	192.168.2.4	1.1.1.1	0x4386	Standard query (0)	www.ftc.gov	65	IN (0x0001)	false
Apr 23, 2024 22:34:09.434401035 CEST	192.168.2.4	1.1.1.1	0x5898	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:34:09.434626102 CEST	192.168.2.4	1.1.1.1	0xc123	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 23, 2024 22:34:13.566436052 CEST	192.168.2.4	1.1.1.1	0xd60b	Standard query (0)	www.ftc.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:34:13.566585064 CEST	192.168.2.4	1.1.1.1	0xc357	Standard query (0)	www.ftc.gov	65	IN (0x0001)	false
Apr 23, 2024 22:34:19.231992960 CEST	192.168.2.4	1.1.1.1	0x5c	Standard query (0)	reportfraud.ftc.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:34:19.232156992 CEST	192.168.2.4	1.1.1.1	0xa8e6	Standard query (0)	reportfraud.ftc.gov	65	IN (0x0001)	false
Apr 23, 2024 22:34:20.010328054 CEST	192.168.2.4	1.1.1.1	0x5848	Standard query (0)	home-c72.niceincontact.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:34:20.010615110 CEST	192.168.2.4	1.1.1.1	0x76f6	Standard query (0)	home-c72.niceincontact.com	65	IN (0x0001)	false
Apr 23, 2024 22:34:20.282078028 CEST	192.168.2.4	1.1.1.1	0x6b47	Standard query (0)	reportfraud.ftc.gov	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:34:20.282218933 CEST	192.168.2.4	1.1.1.1	0xe08b	Standard query (0)	reportfraud.ftc.gov	65	IN (0x0001)	false
Apr 23, 2024 22:34:22.359950066 CEST	192.168.2.4	1.1.1.1	0xeb19	Standard query (0)	dc.services.visualstudio.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:34:22.360162020 CEST	192.168.2.4	1.1.1.1	0xfd30	Standard query (0)	dc.services.visualstudio.com	65	IN (0x0001)	false
Apr 23, 2024 22:34:24.829066992 CEST	192.168.2.4	1.1.1.1	0x1ed2	Standard query (0)	zn9fzsuvvwkc6nzfq-fedtradecommission.gov1.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:34:24.829368114 CEST	192.168.2.4	1.1.1.1	0x3d90	Standard query (0)	zn9fzsuvvwkc6nzfq-fedtradecommission.gov1.siteintercept.qualtrics.com	65	IN (0x0001)	false
Apr 23, 2024 22:34:25.166769028 CEST	192.168.2.4	1.1.1.1	0xd55e	Standard query (0)	dc.services.visualstudio.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:34:25.167160034 CEST	192.168.2.4	1.1.1.1	0x5e79	Standard query (0)	dc.services.visualstudio.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 23, 2024 22:32:04.744148970 CEST	1.1.1.1	192.168.2.4	0xaf1f	No error (0)	www.donotcall.gov		52.23.29.251	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:05.556057930 CEST	1.1.1.1	192.168.2.4	0xa7b5	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:05.556397915 CEST	1.1.1.1	192.168.2.4	0x3de	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:05.556397915 CEST	1.1.1.1	192.168.2.4	0x3de	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.161.136.81	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:05.556397915 CEST	1.1.1.1	192.168.2.4	0x3de	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.161.136.28	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:05.556397915 CEST	1.1.1.1	192.168.2.4	0x3de	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.161.136.111	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:05.556397915 CEST	1.1.1.1	192.168.2.4	0x3de	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.161.136.58	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:06.314860106 CEST	1.1.1.1	192.168.2.4	0x13f0	No error (0)	www.donotcall.gov		52.23.29.251	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:07.548337936 CEST	1.1.1.1	192.168.2.4	0x21e0	No error (0)	telemetry.consumersentinel.gov		3.217.69.59	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:09.412568092 CEST	1.1.1.1	192.168.2.4	0x2c8a	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 23, 2024 22:32:09.412743092 CEST	1.1.1.1	192.168.2.4	0x6489	No error (0)	www.google.com		142.250.105.103	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:09.412743092 CEST	1.1.1.1	192.168.2.4	0x6489	No error (0)	www.google.com		142.250.105.99	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:09.412743092 CEST	1.1.1.1	192.168.2.4	0x6489	No error (0)	www.google.com		142.250.105.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:09.412743092 CEST	1.1.1.1	192.168.2.4	0x6489	No error (0)	www.google.com		142.250.105.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:09.412743092 CEST	1.1.1.1	192.168.2.4	0x6489	No error (0)	www.google.com		142.250.105.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:09.412743092 CEST	1.1.1.1	192.168.2.4	0x6489	No error (0)	www.google.com		142.250.105.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:17.338238001 CEST	1.1.1.1	192.168.2.4	0x976b	No error (0)	ftc.gov		104.101.144.188	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:17.814371109 CEST	1.1.1.1	192.168.2.4	0x8b0	No error (0)	www.ftc.gov	www.ftc.gov.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:17.819206953 CEST	1.1.1.1	192.168.2.4	0x6139	No error (0)	www.ftc.gov	www.ftc.gov.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:18.627696991 CEST	1.1.1.1	192.168.2.4	0xb9b8	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:18.627957106 CEST	1.1.1.1	192.168.2.4	0x28d4	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:19.202611923 CEST	1.1.1.1	192.168.2.4	0x3bfb	No error (0)	static.addtoany.com			65	IN (0x0001)	false
Apr 23, 2024 22:32:19.203102112 CEST	1.1.1.1	192.168.2.4	0xba90	No error (0)	static.addtoany.com		104.22.71.197	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:19.203102112 CEST	1.1.1.1	192.168.2.4	0xba90	No error (0)	static.addtoany.com		104.22.70.197	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:19.203102112 CEST	1.1.1.1	192.168.2.4	0xba90	No error (0)	static.addtoany.com		172.67.39.148	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:19.225943089 CEST	1.1.1.1	192.168.2.4	0xb012	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:19.663427114 CEST	1.1.1.1	192.168.2.4	0xce74	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:19.663427114 CEST	1.1.1.1	192.168.2.4	0xce74	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.161.136.81	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:19.663427114 CEST	1.1.1.1	192.168.2.4	0xce74	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.161.136.111	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:19.663427114 CEST	1.1.1.1	192.168.2.4	0xce74	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.161.136.58	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:19.663427114 CEST	1.1.1.1	192.168.2.4	0xce74	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.161.136.28	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:19.663470030 CEST	1.1.1.1	192.168.2.4	0xb950	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:20.801614046 CEST	1.1.1.1	192.168.2.4	0x8422	No error (0)	www.ftc.gov	www.ftc.gov.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:20.802966118 CEST	1.1.1.1	192.168.2.4	0x7b81	No error (0)	www.ftc.gov	www.ftc.gov.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:24.175904989 CEST	1.1.1.1	192.168.2.4	0xb2f8	No error (0)	static.addtoany.com		172.67.39.148	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:24.175904989 CEST	1.1.1.1	192.168.2.4	0xb2f8	No error (0)	static.addtoany.com		104.22.70.197	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:24.175904989 CEST	1.1.1.1	192.168.2.4	0xb2f8	No error (0)	static.addtoany.com		104.22.71.197	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:24.176012993 CEST	1.1.1.1	192.168.2.4	0x2beb	No error (0)	static.addtoany.com			65	IN (0x0001)	false
Apr 23, 2024 22:32:26.635621071 CEST	1.1.1.1	192.168.2.4	0xb52e	No error (0)	extend.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:26.635621071 CEST	1.1.1.1	192.168.2.4	0xb52e	No error (0)	vimeo-video.map.fastly.net		151.101.14.109	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:26.636598110 CEST	1.1.1.1	192.168.2.4	0xed58	No error (0)	search.usa.gov		54.230.253.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:26.636598110 CEST	1.1.1.1	192.168.2.4	0xed58	No error (0)	search.usa.gov		54.230.253.13	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:26.636598110 CEST	1.1.1.1	192.168.2.4	0xed58	No error (0)	search.usa.gov		54.230.253.63	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:26.636598110 CEST	1.1.1.1	192.168.2.4	0xed58	No error (0)	search.usa.gov		54.230.253.50	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:26.637006998 CEST	1.1.1.1	192.168.2.4	0x80c9	No error (0)	extend.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:28.463033915 CEST	1.1.1.1	192.168.2.4	0x9a92	No error (0)	zn9ypt3vnzbt6rvcy-fedtradecommission.gov1.siteintercept.qualtrics.com	wildcard.qualtrics.new.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:28.463960886 CEST	1.1.1.1	192.168.2.4	0x4d3f	No error (0)	zn9ypt3vnzbt6rvcy-fedtradecommission.gov1.siteintercept.qualtrics.com	wildcard.qualtrics.new.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:29.134799004 CEST	1.1.1.1	192.168.2.4	0xcc16	No error (0)	gov1.siteintercept.qualtrics.com	wildcard.qualtrics.new.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:29.135488987 CEST	1.1.1.1	192.168.2.4	0x7a3f	No error (0)	gov1.siteintercept.qualtrics.com	wildcard.qualtrics.new.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:31.048826933 CEST	1.1.1.1	192.168.2.4	0xc1a	No error (0)	gov1.siteintercept.qualtrics.com	wildcard.qualtrics.new.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:31.050636053 CEST	1.1.1.1	192.168.2.4	0x5ce2	No error (0)	gov1.siteintercept.qualtrics.com	wildcard.qualtrics.new.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:32.716072083 CEST	1.1.1.1	192.168.2.4	0xbb63	No error (0)	www.ftc.gov	www.ftc.gov.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:32.716537952 CEST	1.1.1.1	192.168.2.4	0x205	No error (0)	www.ftc.gov	www.ftc.gov.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:32.717902899 CEST	1.1.1.1	192.168.2.4	0x6441	No error (0)	www.ftc.gov	www.ftc.gov.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:32.718564987 CEST	1.1.1.1	192.168.2.4	0x6a9f	No error (0)	www.ftc.gov	www.ftc.gov.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:32:32.829941988 CEST	1.1.1.1	192.168.2.4	0xa5ad	No error (0)	static.addtoany.com		104.22.70.197	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:32.829941988 CEST	1.1.1.1	192.168.2.4	0xa5ad	No error (0)	static.addtoany.com		172.67.39.148	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:32.829941988 CEST	1.1.1.1	192.168.2.4	0xa5ad	No error (0)	static.addtoany.com		104.22.71.197	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:32.830271006 CEST	1.1.1.1	192.168.2.4	0xf909	No error (0)	static.addtoany.com			65	IN (0x0001)	false
Apr 23, 2024 22:32:32.831001043 CEST	1.1.1.1	192.168.2.4	0x6198	No error (0)	search.usa.gov		54.230.253.13	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:32.831001043 CEST	1.1.1.1	192.168.2.4	0x6198	No error (0)	search.usa.gov		54.230.253.50	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:32.831001043 CEST	1.1.1.1	192.168.2.4	0x6198	No error (0)	search.usa.gov		54.230.253.63	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:32:32.831001043 CEST	1.1.1.1	192.168.2.4	0x6198	No error (0)	search.usa.gov		54.230.253.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:05.370532036 CEST	1.1.1.1	192.168.2.4	0x8e6	No error (0)	www.donotcall.gov		52.23.29.251	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:07.438255072 CEST	1.1.1.1	192.168.2.4	0x2646	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:33:07.438255072 CEST	1.1.1.1	192.168.2.4	0x2646	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.161.136.111	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:07.438255072 CEST	1.1.1.1	192.168.2.4	0x2646	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.161.136.58	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:07.438255072 CEST	1.1.1.1	192.168.2.4	0x2646	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.161.136.81	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:07.438255072 CEST	1.1.1.1	192.168.2.4	0x2646	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.161.136.28	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:07.438354015 CEST	1.1.1.1	192.168.2.4	0x8b55	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:33:09.050280094 CEST	1.1.1.1	192.168.2.4	0x7efb	No error (0)	www.donotcall.gov		52.23.29.251	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:21.343236923 CEST	1.1.1.1	192.168.2.4	0x34f	No error (0)	www.ftc.gov	www.ftc.gov.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:33:21.343493938 CEST	1.1.1.1	192.168.2.4	0x6cac	No error (0)	ftc.gov		104.101.144.188	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:21.358947039 CEST	1.1.1.1	192.168.2.4	0xd52	No error (0)	www.ftc.gov	www.ftc.gov.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:33:27.354233980 CEST	1.1.1.1	192.168.2.4	0x5d99	No error (0)	search.usa.gov		54.230.253.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:27.354233980 CEST	1.1.1.1	192.168.2.4	0x5d99	No error (0)	search.usa.gov		54.230.253.63	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:27.354233980 CEST	1.1.1.1	192.168.2.4	0x5d99	No error (0)	search.usa.gov		54.230.253.13	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:27.354233980 CEST	1.1.1.1	192.168.2.4	0x5d99	No error (0)	search.usa.gov		54.230.253.50	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:28.791568995 CEST	1.1.1.1	192.168.2.4	0xd597	No error (0)	extend.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:33:28.791589975 CEST	1.1.1.1	192.168.2.4	0x8c1a	No error (0)	extend.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:33:28.791589975 CEST	1.1.1.1	192.168.2.4	0x8c1a	No error (0)	vimeo-video.map.fastly.net		151.101.14.109	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:33:29.373887062 CEST	1.1.1.1	192.168.2.4	0xe541	No error (0)	gov1.siteintercept.qualtrics.com	wildcard.qualtrics.new.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:33:29.374810934 CEST	1.1.1.1	192.168.2.4	0x38a0	No error (0)	gov1.siteintercept.qualtrics.com	wildcard.qualtrics.new.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:33:48.208139896 CEST	1.1.1.1	192.168.2.4	0x2470	No error (0)	gov1.siteintercept.qualtrics.com	wildcard.qualtrics.new.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:33:48.208214045 CEST	1.1.1.1	192.168.2.4	0x6e80	No error (0)	gov1.siteintercept.qualtrics.com	wildcard.qualtrics.new.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:33:49.351205111 CEST	1.1.1.1	192.168.2.4	0x4386	No error (0)	www.ftc.gov	www.ftc.gov.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:33:49.353858948 CEST	1.1.1.1	192.168.2.4	0xb63	No error (0)	www.ftc.gov	www.ftc.gov.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:09.539743900 CEST	1.1.1.1	192.168.2.4	0xc123	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 23, 2024 22:34:09.539799929 CEST	1.1.1.1	192.168.2.4	0x5898	No error (0)	www.google.com		74.125.136.103	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:34:09.539799929 CEST	1.1.1.1	192.168.2.4	0x5898	No error (0)	www.google.com		74.125.136.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:34:09.539799929 CEST	1.1.1.1	192.168.2.4	0x5898	No error (0)	www.google.com		74.125.136.99	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:34:09.539799929 CEST	1.1.1.1	192.168.2.4	0x5898	No error (0)	www.google.com		74.125.136.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:34:09.539799929 CEST	1.1.1.1	192.168.2.4	0x5898	No error (0)	www.google.com		74.125.136.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:34:09.539799929 CEST	1.1.1.1	192.168.2.4	0x5898	No error (0)	www.google.com		74.125.136.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:34:13.672668934 CEST	1.1.1.1	192.168.2.4	0xd60b	No error (0)	www.ftc.gov	www.ftc.gov.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:13.673985958 CEST	1.1.1.1	192.168.2.4	0xc357	No error (0)	www.ftc.gov	www.ftc.gov.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:19.349596024 CEST	1.1.1.1	192.168.2.4	0x5c	No error (0)	reportfraud.ftc.gov		107.21.11.164	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:34:20.115991116 CEST	1.1.1.1	192.168.2.4	0x5848	No error (0)	home-c72.niceincontact.com	cluster-alb-1630272095.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:20.115991116 CEST	1.1.1.1	192.168.2.4	0x5848	No error (0)	cluster-alb-1630272095.us-east-1.elb.amazonaws.com		3.222.198.52	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:34:20.115991116 CEST	1.1.1.1	192.168.2.4	0x5848	No error (0)	cluster-alb-1630272095.us-east-1.elb.amazonaws.com		34.234.19.139	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:34:20.119647980 CEST	1.1.1.1	192.168.2.4	0x76f6	No error (0)	home-c72.niceincontact.com	cluster-alb-1630272095.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:20.388515949 CEST	1.1.1.1	192.168.2.4	0x6b47	No error (0)	reportfraud.ftc.gov		107.21.11.164	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:34:22.465112925 CEST	1.1.1.1	192.168.2.4	0xfd30	No error (0)	dc.services.visualstudio.com	dc.applicationinsights.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:22.465112925 CEST	1.1.1.1	192.168.2.4	0xfd30	No error (0)	dc.applicationinsights.azure.com	global.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:22.465112925 CEST	1.1.1.1	192.168.2.4	0xfd30	No error (0)	global.in.ai.monitor.azure.com	global.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:22.465112925 CEST	1.1.1.1	192.168.2.4	0xfd30	No error (0)	global.in.ai.privatelink.monitor.azure.com	dc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:22.465112925 CEST	1.1.1.1	192.168.2.4	0xfd30	No error (0)	eastus-global.in.applicationinsights.azure.com	gig-ai-prod-eastus-global.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:22.465801954 CEST	1.1.1.1	192.168.2.4	0xeb19	No error (0)	dc.services.visualstudio.com	dc.applicationinsights.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:22.465801954 CEST	1.1.1.1	192.168.2.4	0xeb19	No error (0)	dc.applicationinsights.azure.com	global.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:22.465801954 CEST	1.1.1.1	192.168.2.4	0xeb19	No error (0)	global.in.ai.monitor.azure.com	global.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:22.465801954 CEST	1.1.1.1	192.168.2.4	0xeb19	No error (0)	global.in.ai.privatelink.monitor.azure.com	dc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:22.465801954 CEST	1.1.1.1	192.168.2.4	0xeb19	No error (0)	eastus-global.in.applicationinsights.azure.com	gig-ai-prod-eastus-global.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:24.962074041 CEST	1.1.1.1	192.168.2.4	0x3d90	No error (0)	zn9fzsuvvwkc6nzfq-fedtradecommission.gov1.siteintercept.qualtrics.com	wildcard.qualtrics.new.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:24.977216959 CEST	1.1.1.1	192.168.2.4	0x1ed2	No error (0)	zn9fzsuvvwkc6nzfq-fedtradecommission.gov1.siteintercept.qualtrics.com	wildcard.qualtrics.new.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:25.273137093 CEST	1.1.1.1	192.168.2.4	0xd55e	No error (0)	dc.services.visualstudio.com	dc.applicationinsights.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:25.273137093 CEST	1.1.1.1	192.168.2.4	0xd55e	No error (0)	dc.applicationinsights.azure.com	global.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:25.273137093 CEST	1.1.1.1	192.168.2.4	0xd55e	No error (0)	global.in.ai.monitor.azure.com	global.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:25.273137093 CEST	1.1.1.1	192.168.2.4	0xd55e	No error (0)	global.in.ai.privatelink.monitor.azure.com	dc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:25.273137093 CEST	1.1.1.1	192.168.2.4	0xd55e	No error (0)	eastus-global.in.applicationinsights.azure.com	gig-ai-prod-eastus-global.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:25.275682926 CEST	1.1.1.1	192.168.2.4	0x5e79	No error (0)	dc.services.visualstudio.com	dc.applicationinsights.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:25.275682926 CEST	1.1.1.1	192.168.2.4	0x5e79	No error (0)	dc.applicationinsights.azure.com	global.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:25.275682926 CEST	1.1.1.1	192.168.2.4	0x5e79	No error (0)	global.in.ai.monitor.azure.com	global.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:25.275682926 CEST	1.1.1.1	192.168.2.4	0x5e79	No error (0)	global.in.ai.privatelink.monitor.azure.com	dc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:34:25.275682926 CEST	1.1.1.1	192.168.2.4	0x5e79	No error (0)	eastus-global.in.applicationinsights.azure.com	gig-ai-prod-eastus-global.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

slscr.update.microsoft.com

www.donotcall.gov

https:

dap.digitalgov.gov

telemetry.consumersentinel.gov

static.addtoany.com

search.usa.gov

extend.vimeocdn.com

reportfraud.ftc.gov

home-c72.niceincontact.com

a.nel.cloudflare.com

ftc.gov

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49814	104.101.144.188	80	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 23, 2024 22:32:17.536063910 CEST	422	OUT	GET / HTTP/1.1 Host: ftc.gov Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 23, 2024 22:32:17.704786062 CEST	167	IN	HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://www.ftc.gov/ Date: Tue, 23 Apr 2024 20:32:17 GMT Connection: keep-alive
Apr 23, 2024 22:33:02.713052988 CEST	6	OUT	Data Raw: 00 Data Ascii:
Apr 23, 2024 22:33:47.884730101 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49813	104.101.144.188	80	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 23, 2024 22:32:52.995677948 CEST	510	IN	HTTP/1.0 408 Request Time-out Server: AkamaiGHost Mime-Version: 1.0 Date: Tue, 23 Apr 2024 20:32:52 GMT Content-Type: text/html Content-Length: 314 Expires: Tue, 23 Apr 2024 20:32:52 GMT Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 52 65 71 75 65 73 74 20 54 69 6d 65 6f 75 74 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 52 65 71 75 65 73 74 20 54 69 6d 65 6f 75 74 3c 2f 48 31 3e 0a 54 68 65 20 73 65 72 76 65 72 20 74 69 6d 65 64 20 6f 75 74 20 77 68 69 6c 65 20 77 61 69 74 69 6e 67 20 66 6f 72 20 74 68 65 20 62 72 6f 77 73 65 72 27 73 20 72 65 71 75 65 73 74 2e 3c 50 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 32 26 23 34 36 3b 39 64 36 63 64 33 31 37 26 23 34 36 3b 31 37 31 33 39 30 34 33 37 32 26 23 34 36 3b 30 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 32 26 23 34 36 3b 39 64 36 63 64 33 31 37 26 23 34 36 3b 31 37 31 33 39 30 34 33 37 32 26 23 34 36 3b 30 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Request Timeout</TITLE></HEAD><BODY><H1>Request Timeout</H1>The server timed out while waiting for the browser's request.<P>Reference #2.9d6cd317.1713904372.0<P>https://errors.edgesuite.net/2.9d6cd317.1713904372.0</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49815	104.101.144.188	80	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 23, 2024 22:32:53.089493036 CEST	510	IN	HTTP/1.0 408 Request Time-out Server: AkamaiGHost Mime-Version: 1.0 Date: Tue, 23 Apr 2024 20:32:52 GMT Content-Type: text/html Content-Length: 314 Expires: Tue, 23 Apr 2024 20:32:52 GMT Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 52 65 71 75 65 73 74 20 54 69 6d 65 6f 75 74 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 52 65 71 75 65 73 74 20 54 69 6d 65 6f 75 74 3c 2f 48 31 3e 0a 54 68 65 20 73 65 72 76 65 72 20 74 69 6d 65 64 20 6f 75 74 20 77 68 69 6c 65 20 77 61 69 74 69 6e 67 20 66 6f 72 20 74 68 65 20 62 72 6f 77 73 65 72 27 73 20 72 65 71 75 65 73 74 2e 3c 50 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 32 26 23 34 36 3b 34 65 36 63 64 33 31 37 26 23 34 36 3b 31 37 31 33 39 30 34 33 37 32 26 23 34 36 3b 30 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 32 26 23 34 36 3b 34 65 36 63 64 33 31 37 26 23 34 36 3b 31 37 31 33 39 30 34 33 37 32 26 23 34 36 3b 30 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Request Timeout</TITLE></HEAD><BODY><H1>Request Timeout</H1>The server timed out while waiting for the browser's request.<P>Reference #2.4e6cd317.1713904372.0<P>https://errors.edgesuite.net/2.4e6cd317.1713904372.0</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	50126	104.101.144.188	80	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 23, 2024 22:33:56.487004995 CEST	510	IN	HTTP/1.0 408 Request Time-out Server: AkamaiGHost Mime-Version: 1.0 Date: Tue, 23 Apr 2024 20:33:56 GMT Content-Type: text/html Content-Length: 314 Expires: Tue, 23 Apr 2024 20:33:56 GMT Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 52 65 71 75 65 73 74 20 54 69 6d 65 6f 75 74 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 52 65 71 75 65 73 74 20 54 69 6d 65 6f 75 74 3c 2f 48 31 3e 0a 54 68 65 20 73 65 72 76 65 72 20 74 69 6d 65 64 20 6f 75 74 20 77 68 69 6c 65 20 77 61 69 74 69 6e 67 20 66 6f 72 20 74 68 65 20 62 72 6f 77 73 65 72 27 73 20 72 65 71 75 65 73 74 2e 3c 50 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 32 26 23 34 36 3b 39 64 36 63 64 33 31 37 26 23 34 36 3b 31 37 31 33 39 30 34 34 33 36 26 23 34 36 3b 30 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 32 26 23 34 36 3b 39 64 36 63 64 33 31 37 26 23 34 36 3b 31 37 31 33 39 30 34 34 33 36 26 23 34 36 3b 30 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Request Timeout</TITLE></HEAD><BODY><H1>Request Timeout</H1>The server timed out while waiting for the browser's request.<P>Reference #2.9d6cd317.1713904436.0<P>https://errors.edgesuite.net/2.9d6cd317.1713904436.0</P></BODY></HTML>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	23.36.68.63	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:31:46 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-23 20:31:46 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=37926 Date: Tue, 23 Apr 2024 20:31:46 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	23.36.68.63	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:31:46 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-23 20:31:46 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=37926 Date: Tue, 23 Apr 2024 20:31:46 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-23 20:31:46 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:31:57 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=LLG371WrZXc8zOU&MD=REaeMeof HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-23 20:31:58 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: ff6730fd-ddee-4b6b-b395-dd85885a7a78 MS-RequestId: cd288450-76c7-464e-b546-7a62ffc22295 MS-CV: api4ITyi1EeiX3Zn.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 23 Apr 2024 20:31:57 GMT Connection: close Content-Length: 24490
2024-04-23 20:31:58 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-23 20:31:58 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49748	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:05 UTC	660	OUT	GET / HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:05 UTC	821	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:06 GMT Last-Modified: Wed, 30 Nov 2022 19:34:19 GMT Content-Type: text/html Content-Length: 6285 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:05 UTC	6285	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 47 2d 58 32 4b 48 36 38 52 4a 52 51 22 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 6a 73 2f 67 61 66 6f 75 72 70 72 6f 64 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 74 69 74 6c 65 20 64 61 74 61 2d 69 31 38 6e 3d 22 73 69 74 65 77 69 64 65 2e 70 61 67 65 2d 74 69 74 6c 65 22 3e 4e 61 74 69 6f 6e 61 6c 20 44 6f 20 4e 6f 74 20 43 61 6c 6c 20 52 65 67 69 73 74 72 79 3c 2f 74 69 74 6c 65 3e 20 3c 6d 65 Data Ascii: <!doctype html> <head> <script async src="https://www.googletagmanager.com/gtag/js?id=G-X2KH68RJRQ"></script> <script type="text/javascript" src="/js/gafourprod.js"></script> <title data-i18n="sitewide.page-title">National Do Not Call Registry</title> <me

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49755	3.161.136.81	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:05 UTC	584	OUT	GET /Universal-Federated-Analytics-Min.js?agency=FTC&pua=UA-36365578-3 HTTP/1.1 Host: dap.digitalgov.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:05 UTC	652	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 28851 Connection: close Date: Tue, 23 Apr 2024 11:59:18 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 18 Apr 2024 15:08:41 GMT ETag: "26433217e805a89cf41adac58221316e" x-amz-server-side-encryption: AES256 x-amz-version-id: 39DeP5oo.f2rQ6hItN1skmgkaQ0kloSX Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7b3fb4ffb47262e20c0ec753e26fc5ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: cLaqlSqhaFKLcWvLYrfAMNbUYwvrUUqgzFL1XWOsLyFRj9wsOkEy2Q== Age: 30768
2024-04-23 20:32:05 UTC	15732	IN	Data Raw: 76 61 72 20 74 4f 62 6a 65 63 74 43 68 65 63 6b 2c 5f 61 6c 6c 6f 77 65 64 51 75 65 72 79 73 74 72 69 6e 67 73 3d 5b 5d 2c 69 73 53 65 61 72 63 68 3d 21 31 2c 6f 43 4f 4e 46 49 47 3d 7b 47 57 54 5f 55 41 49 44 3a 5b 22 55 41 2d 33 33 35 32 33 31 34 35 2d 31 22 5d 2c 47 57 54 5f 47 41 34 49 44 3a 5b 22 47 2d 43 53 4c 4c 34 5a 45 4b 34 4c 22 5d 2c 46 4f 52 43 45 5f 53 53 4c 3a 21 30 2c 41 4e 4f 4e 59 4d 49 5a 45 5f 49 50 3a 21 30 2c 41 47 45 4e 43 59 3a 22 22 2c 53 55 42 5f 41 47 45 4e 43 59 3a 22 22 2c 56 45 52 53 49 4f 4e 3a 22 32 30 32 34 30 34 31 36 20 76 37 2e 30 31 20 2d 20 44 75 61 6c 20 54 72 61 63 6b 69 6e 67 22 2c 53 49 54 45 5f 54 4f 50 49 43 3a 22 22 2c 53 49 54 45 5f 50 4c 41 54 46 4f 52 4d 3a 22 22 2c 53 43 52 49 50 54 5f 53 4f 55 52 43 45 3a Data Ascii: var tObjectCheck,_allowedQuerystrings=[],isSearch=!1,oCONFIG={GWT_UAID:["UA-33523145-1"],GWT_GA4ID:["G-CSLL4ZEK4L"],FORCE_SSL:!0,ANONYMIZE_IP:!0,AGENCY:"",SUB_AGENCY:"",VERSION:"20240416 v7.01 - Dual Tracking",SITE_TOPIC:"",SITE_PLATFORM:"",SCRIPT_SOURCE:
2024-04-23 20:32:06 UTC	13119	IN	Data Raw: 2f 69 67 29 3f 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 67 3a 64 3b 61 3d 5f 55 52 49 48 61 6e 64 6c 65 72 28 5f 73 63 72 75 62 62 65 64 55 52 4c 28 63 29 29 3b 66 6f 72 28 63 3d 30 3b 63 3c 6f 43 4f 4e 46 49 47 2e 47 57 54 5f 47 41 34 49 44 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 30 3d 3d 3d 63 7c 7c 30 3c 63 26 26 6f 43 4f 4e 46 49 47 2e 55 53 45 5f 50 41 52 41 4c 4c 45 4c 5f 43 55 53 54 4f 4d 5f 44 49 4d 45 4e 53 49 4f 4e 53 3f 67 74 61 67 28 22 63 6f 6e 66 69 67 22 2c 6f 43 4f 4e 46 49 47 2e 47 57 54 5f 47 41 34 49 44 5b 63 5d 2c 0d 0a 7b 67 72 6f 75 70 73 3a 6f 43 4f 4e 46 49 47 2e 47 41 34 5f 4e 41 4d 45 2b 63 2c 63 6f Data Ascii: /ig)?document.location.protocol+"//"+document.location.hostname+g:d;a=_URIHandler(_scrubbedURL(c));for(c=0;c<oCONFIG.GWT_GA4ID.length;c++)0===c\|\|0<c&&oCONFIG.USE_PARALLEL_CUSTOM_DIMENSIONS?gtag("config",oCONFIG.GWT_GA4ID[c],{groups:oCONFIG.GA4_NAME+c,co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49751	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:05 UTC	547	OUT	GET /css/styles.css HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:06 UTC	821	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:07 GMT Last-Modified: Wed, 30 Nov 2022 19:09:26 GMT Content-Type: text/css Content-Length: 30676 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:06 UTC	11601	IN	Data Raw: 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 62 61 63 6b 67 72 6f 75 6e 64 2d 73 2e 6a 70 67 29 20 30 20 2d 33 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 36 33 36 33 36 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 47 65 6e 65 76 61 2c 73 61 6e 73 2d 73 65 72 69 66 7d 61 7b 63 6f 6c 6f 72 3a 23 30 62 36 36 39 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 61 3a 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 30 62 36 36 39 66 7d 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 38 38 61 30 Data Ascii: body{margin:0;font-size:87.5%;background:url(../images/background-s.jpg) 0 -35px;background-repeat:repeat-x;background-color:#636363;font-family:Verdana,Geneva,sans-serif}a{color:#0b669f;text-decoration:underline}a:link{color:#0b669f}a:visited{color:#88a0
2024-04-23 20:32:06 UTC	5953	IN	Data Raw: 3a 23 66 66 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 47 65 6e 65 76 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 62 6f 72 64 65 72 3a 31 70 20 73 6f 6c 69 64 20 23 39 39 39 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 69 6e 70 75 74 2e 74 68 5f 73 4f 74 68 5f 63 6f 6d 70 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 7b 77 69 64 74 68 3a 31 35 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 63 63 36 37 Data Ascii: :#fff;font-family:Tahoma,Geneva,sans-serif;height:30px;-webkit-border-radius:15px;-webkit-appearance:none;-moz-border-radius:15px;border-radius:15px;border:1p solid #999;text-transform:uppercase}input.th_sOth_comp[type=submit]{width:150px;background:#cc67
2024-04-23 20:32:06 UTC	11601	IN	Data Raw: 74 3b 6d 61 72 67 69 6e 3a 2d 34 38 70 78 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 2e 66 6f 72 6d 5f 6c 69 6e 65 5f 70 66 66 32 20 2e 66 6f 72 6d 5f 66 69 65 6c 64 5f 72 69 67 68 74 20 2e 66 6f 72 6d 5f 6c 69 6e 65 5f 73 5f 63 68 7b 6d 61 72 67 69 6e 3a 30 7d 2e 73 5f 66 6f 72 6d 5f 63 6f 6e 74 5f 62 74 74 6e 5f 63 66 66 32 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 2e 73 5f 66 6f 72 6d 5f 63 6f 6e 74 5f 62 74 74 6e 5f 63 66 66 32 20 69 6e 70 75 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 66 6f 72 6d 5f 6c 69 6e 65 5f 73 7b 6d 61 72 67 69 6e 3a 30 20 30 20 32 30 70 78 20 30 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 77 69 64 74 68 3a 39 30 25 7d 2e 66 6f Data Ascii: t;margin:-48px 0 0 0;padding-right:0}.form_line_pff2 .form_field_right .form_line_s_ch{margin:0}.s_form_cont_bttn_cff2{float:left;padding-top:0;padding-right:0}.s_form_cont_bttn_cff2 input{float:left}.form_line_s{margin:0 0 20px 0;clear:both;width:90%}.fo
2024-04-23 20:32:06 UTC	1289	IN	Data Raw: 69 6f 6e 3a 6e 6f 6e 65 7d 2e 68 69 64 64 65 6e 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 23 6c 6f 61 64 69 6e 67 2d 6f 76 65 72 6c 61 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 66 64 64 64 64 3b 6f 70 61 63 69 74 79 3a 2e 38 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 35 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 38 30 70 78 29 7b 23 6c 6f 61 64 69 6e 67 2d 73 70 Data Ascii: ion:none}.hidden{visibility:hidden}#loading-overlay{display:none;position:fixed;z-index:1000;top:0;left:0;height:100%;width:100%;background-color:#dfdddd;opacity:.8;overflow:hidden}@media only screen and (min-width:150px) and (max-width:480px){#loading-sp
2024-04-23 20:32:06 UTC	232	IN	Data Raw: 30 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 23 73 69 74 65 42 61 6e 6e 65 72 4d 73 67 7b 63 6f 6c 6f 72 3a 72 65 64 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 25 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 35 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 38 30 70 78 29 7b 23 73 69 74 65 42 61 6e 6e 65 72 4d 73 67 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 39 30 25 7d 7d Data Ascii: 0)}100%{transform:rotate(360deg)}}#siteBannerMsg{color:red;border:1px solid #000;padding:10px;margin-right:10%;display:none}@media only screen and (min-width:150px) and (max-width:480px){#siteBannerMsg{margin-right:0;font-size:90%}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49753	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:05 UTC	598	OUT	GET /images/masthead.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:06 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:07 GMT Last-Modified: Wed, 30 Nov 2022 18:08:24 GMT Content-Type: image/jpeg Content-Length: 19166 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:06 UTC	8553	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 9b 03 c0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 06 07 05 08 ff c4 00 45 10 00 01 02 04 03 04 09 04 01 02 04 04 04 07 01 00 01 00 02 03 11 21 b1 04 05 f1 06 12 31 e1 07 13 41 61 71 81 a1 d1 f0 14 22 51 c1 Data Ascii: JFIFC!"$"$C"E!1Aaq"Q
2024-04-23 20:32:06 UTC	1289	IN	Data Raw: 73 67 c5 ed 6b 8c bf fe 0c 45 94 a5 0d 34 ff 00 d6 df d1 9b 7a 67 a9 35 fe d4 be a8 ab a1 6d 9b c8 f0 5b 19 92 c0 cd 72 ac 16 27 31 cd 9b 17 1a 0c 68 0d 79 10 c6 e8 12 24 4e 5b a6 1f f7 5a a6 cf e5 79 63 fa 1c db ac 53 f2 fc 2b f1 10 33 2c 4b 20 c4 ea 5b be c6 ca 14 83 4c a6 00 9f 62 db f2 5c ce 16 27 a7 f7 64 d8 3d d1 82 c9 b2 63 85 84 d1 c0 19 c3 26 5f dc 0f ff 00 c2 d7 36 7b fe 48 f4 81 ff 00 ed 71 5c 3c 21 22 72 b7 27 ea e2 fe ac cb 8c 74 a8 af 45 25 f4 47 ab 1f 29 89 b1 fb 05 92 62 f6 2b 63 72 fc fe 3c 78 6c 89 8c c4 44 81 d7 44 20 b4 3a 60 03 bc 77 89 a4 8c 87 e1 69 b9 b3 36 2b 6c ba 4c d9 dc 2e 13 29 8d 93 44 8e f3 0f 35 c3 be 08 80 0b 80 0e 00 00 78 b8 cd a4 c8 13 4e d5 b5 40 d9 9d aa ca b2 ac af 1b d1 3e d2 62 31 f9 4c 76 97 44 83 8d 8f 0a 23 5b Data Ascii: sgkE4zg5m[r'1hy$N[ZycS+3,K [Lb\'d=c&_6{Hq\<!"r'tE%G)b+cr<xlDD :`wi6+lL.)D5xN@>b1LvD#[
2024-04-23 20:32:06 UTC	9023	IN	Data Raw: b0 40 27 72 a5 82 34 a5 82 34 a5 82 3b 7d 29 60 80 34 a5 82 47 95 2c 13 d2 96 09 1e ef 0a 58 20 0d 29 60 8d 29 60 8d 29 60 96 94 b0 42 a0 77 2a 58 23 4a 58 23 4e 41 1c 2d 4b 04 41 87 ca 58 21 dc a9 60 8d 29 60 8d 29 60 8c a2 e1 6a 58 23 b7 d2 96 08 d2 96 08 e1 6a 58 23 06 48 e5 4b 04 0e 54 b0 46 94 b0 40 f4 ee b0 54 c9 bc 74 1c e0 de 91 70 15 68 73 8b 18 d9 b0 b8 4c c7 84 38 06 9a 79 b3 ff 00 77 fb 5d df e3 e6 10 62 66 f9 be 19 f9 ae 23 30 c5 bf 22 c4 39 bd 76 1c e1 f7 1b 49 00 c2 00 74 e4 48 20 1a 36 a7 84 fe 5f d8 fc 79 cb 36 97 01 8d 69 68 73 22 0d d2 e7 86 b4 3c 89 36 6e 71 6b 44 8c 89 24 80 3b 68 be ae d9 8c 26 1b 0b 98 65 ce 8b 9c 61 99 0f 30 8b 1e 36 59 84 c1 60 e1 b1 98 88 04 17 0e b5 db 93 9b 58 f1 c0 b4 4c 0e 3c 17 cc eb ea 2d 4b c7 fe 9e ee 89 Data Ascii: @'r44;})`4G,X )`)`)`Bw*X#JX#NA-KAX!`)`)`jX#jX#HKTF@TtphsL8yw]bf#0"9vItH 6_y6ihs"<6nqkD$;h&ea06Y`XL<-K
2024-04-23 20:32:06 UTC	301	IN	Data Raw: 00 e1 da 3f ed 59 8a 2c 8a 9e 6b e9 4b 04 81 95 a9 60 91 56 b0 05 a5 b9 13 a2 88 87 b3 cb 90 55 1f 9c 95 8f 25 52 e5 ce 46 d3 1b 04 cc fb 38 72 56 83 21 3f 2a 58 28 0f e0 99 55 2a 16 32 7e 7e 82 8c fd a9 60 92 8a 01 cf e0 b0 51 27 b0 7c f0 4d 45 65 6e 5b 14 be 7b 28 b8 7e 55 aa b2 8f 63 49 8c 15 29 fc f6 51 4d 6d 19 b2 53 f6 e4 13 07 da 96 0a b5 3f f6 22 20 03 e5 d9 4b 05 29 d3 d2 96 0a b5 2f 65 6c a4 a7 f0 58 23 4a 58 28 a9 7b 2d 51 07 3e c1 e9 60 94 be 0b 04 21 28 04 ff 00 3e 14 b0 4e 7e d4 b0 51 e1 c1 34 a1 64 b8 5a 96 0a 61 df 9f 0a 58 2a 90 a8 32 29 29 8f 0a 58 28 3f 8f a7 20 94 32 91 3f 7a 12 c7 a5 2c 11 a5 2c 12 42 16 c9 69 4b 04 0e 54 b0 51 4d 05 86 94 b0 47 ca 58 24 9a 0b 0f 0f 0a 58 22 9f aa 58 21 24 16 0e e5 4b 04 c7 2a 58 24 84 16 1a 72 09 1e Data Ascii: ?Y,kK`VU%RF8rV!?X(U2~~`Q'\|MEen[{(~UcI)QMmS?" K)/elX#JX({-Q>`!(>N~Q4dZaX2))X(? 2?z,,BiKTQMGX$X"X!$KX$r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49750	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:05 UTC	606	OUT	GET /images/FTC_DNC_masthead.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:06 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:07 GMT Last-Modified: Wed, 30 Nov 2022 18:08:23 GMT Content-Type: image/jpeg Content-Length: 16227 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:06 UTC	10322	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 8f 03 c0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 05 07 04 06 08 03 02 01 09 ff c4 00 5c 10 00 01 03 03 02 02 05 05 0b 06 09 06 0b 09 00 00 01 00 02 03 04 05 11 06 12 07 21 08 13 14 31 41 22 37 51 61 81 15 16 32 52 54 Data Ascii: JFIFC!"$"$C"\!1A"7Qa2RT
2024-04-23 20:32:06 UTC	5156	IN	Data Raw: 3e 04 1c 10 7c 08 0a a3 13 1d 5f 87 ca fc fa 14 78 58 ab 27 03 91 f7 db d7 a9 fc f7 d6 1a a6 e3 aa 5b 67 75 d1 c6 49 ed 96 d6 5b c4 c5 d9 74 ac 64 92 39 ae 77 ac 07 86 fa f6 e7 c5 76 45 98 4c 7a 2c 30 53 6f eb ce 90 7f 57 b0 e1 db bb 29 c6 3d 79 5c 77 c4 5d 27 71 d1 3a be bb 4f 5c 86 5f 4e fc c5 28 18 6c d1 1f 80 f1 f3 8f a8 e4 78 2e e2 e1 1d 34 55 9c 17 d3 54 95 0d df 0c f6 58 63 91 be 96 ba 20 08 fa 8a c3 87 29 3b 26 a5 df 46 ae 13 19 bb ac 8c fb eb 47 37 74 29 d9 f9 57 b8 6f db 9f 71 65 d9 9f 4f 5d 0f 77 b3 2a da e9 96 61 fc 90 c7 d6 ec de 6e 90 f5 5b bb f7 6d 93 bb d7 b7 77 b3 2b 9d ef f6 8d 65 c1 3e 23 36 a6 99 d2 c1 25 3c 8e ec 75 9d 5e 61 ab 84 f8 1f 03 91 c9 cd ef 07 d8 57 c6 bb e2 06 b9 e2 d5 ca df 6c aa a7 64 ee 8d df c1 a8 2d d4 ee 0d 74 87 91 Data Ascii: >\|_xX'[guI[td9wvELz,0SoW)=y\w]'q:O\_N(lx.4UTXc );&FG7t)WoqeO]w*an[mw+e>#6%<u^aWld-t
2024-04-23 20:32:06 UTC	749	IN	Data Raw: 52 bd 2b ad f4 d5 7c e4 60 0f f8 c0 73 f6 fa 54 5c da 76 33 f0 76 95 59 67 0f df 62 ae de 1a 99 47 cd a7 01 ff 00 57 fa 96 2b f4 e7 f3 15 dd 2e 9a cf 73 16 24 9a 68 ff 00 26 7e a5 cd 2e 1e fc 8e 39 70 88 bf 02 96 3a 74 8f cd 2b e4 e9 e7 7c 52 ae 37 e9 b3 fc 9f ea 5e 4e d3 9f cc fd 4b 0f a0 33 4b e0 f0 f2 2a 0f 7b ee f8 ae 5f 4d d3 c7 e2 95 6d fb dd 39 f8 1f a9 7d 37 4e 1f 89 fa 94 7d 05 90 b8 3c 3c 8a 9e 3d 3d cf e0 7e a5 9d 4f 60 03 f3 3f 52 b3 d9 a7 0f f2 7f a9 64 c5 a7 88 ff 00 57 fa 96 71 c0 66 e8 70 a8 af 02 bf a2 b3 6d 23 c8 fd 4b 63 b6 db cb 31 e4 ad aa 0b 01 18 f2 30 b3 e0 b3 ec ef 00 2e ba f0 dc 4e ea b0 79 7c 08 aa 1a 72 d0 39 29 ba 2a 67 3f bf 93 47 79 59 30 51 46 cc 67 9f a9 65 00 00 c0 18 5d f0 ab 5d cb 08 55 ca 18 d0 d0 1a d1 80 17 ea 22 dc Data Ascii: R+\|`sT\v3vYgbGW+.s$h&~.9p:t+\|R7^NK3K{_Mm9}7N}<<==~O`?RdWqfpm#Kc10.Ny\|r9)g?GyY0QFge]]U"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49752	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:05 UTC	535	OUT	GET /js/gafourprod.js HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:06 UTC	833	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:07 GMT Last-Modified: Wed, 30 Nov 2022 18:08:12 GMT Content-Type: application/javascript Content-Length: 130 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:06 UTC	130	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 3d 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 7c 7c 5b 5d 2c 67 74 61 67 28 22 6a 73 22 2c 6e 65 77 20 44 61 74 65 29 2c 67 74 61 67 28 22 63 6f 6e 66 69 67 22 2c 22 47 2d 58 32 4b 48 36 38 52 4a 52 51 22 29 3b Data Ascii: function gtag(){dataLayer.push(arguments)}window.dataLayer=window.dataLayer\|\|[],gtag("js",new Date),gtag("config","G-X2KH68RJRQ");

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49756	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:06 UTC	541	OUT	GET /js/lib/jquery-3.5.0.js HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:06 UTC	835	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:07 GMT Last-Modified: Thu, 14 May 2020 14:46:44 GMT Content-Type: application/javascript Content-Length: 89260 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:06 UTC	15549	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 74 28 65 29 7d 3a 74 28 65 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e Data Ascii: !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?win
2024-04-23 20:32:06 UTC	16384	IN	Data Raw: 2e 73 6c 69 63 65 28 30 2c 33 29 2c 61 3d 22 6c 61 73 74 22 21 3d 3d 65 2e 73 6c 69 63 65 28 2d 34 29 2c 73 3d 22 6f 66 2d 74 79 70 65 22 3d 3d 3d 74 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 72 26 26 30 3d 3d 3d 69 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 75 29 7b 76 61 72 20 6c 2c 63 2c 66 2c 70 2c 64 2c 68 2c 67 3d 6f 21 3d 3d 61 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 76 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 79 3d 73 26 26 74 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6d 3d 21 75 26 26 21 73 2c 78 3d 21 31 3b 69 66 28 76 29 7b 69 66 28 6f 29 7b 66 6f 72 28 3b 67 3b Data Ascii: .slice(0,3),a="last"!==e.slice(-4),s="of-type"===t;return 1===r&&0===i?function(e){return!!e.parentNode}:function(t,n,u){var l,c,f,p,d,h,g=o!==a?"nextSibling":"previousSibling",v=t.parentNode,y=s&&t.nodeName.toLowerCase(),m=!u&&!s,x=!1;if(v){if(o){for(;g;
2024-04-23 20:32:07 UTC	16384	IN	Data Raw: 6e 3d 57 2e 74 68 65 6e 2c 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 76 2e 72 65 61 64 79 53 74 61 74 65 7c 7c 22 6c 6f 61 64 69 6e 67 22 21 3d 3d 76 2e 72 65 61 64 79 53 74 61 74 65 26 26 21 76 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 3f 65 2e 73 65 74 54 69 6d 65 6f 75 74 28 62 2e 72 65 61 64 79 29 3a 28 76 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 46 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 46 29 29 3b 76 61 72 20 42 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d Data Ascii: n=W.then,"complete"===v.readyState\|\|"loading"!==v.readyState&&!v.documentElement.doScroll?e.setTimeout(b.ready):(v.addEventListener("DOMContentLoaded",F),e.addEventListener("load",F));var B=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"=
2024-04-23 20:32:07 UTC	16384	IN	Data Raw: 5b 73 2e 6c 65 6e 67 74 68 2d 31 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 62 2e 6d 61 70 28 73 2c 48 65 29 2c 66 3d 30 3b 66 3c 75 3b 66 2b 2b 29 6c 3d 73 5b 66 5d 2c 68 65 2e 74 65 73 74 28 6c 2e 74 79 70 65 7c 7c 22 22 29 26 26 21 47 2e 61 63 63 65 73 73 28 6c 2c 22 67 6c 6f 62 61 6c 45 76 61 6c 22 29 26 26 62 2e 63 6f 6e 74 61 69 6e 73 28 63 2c 6c 29 26 26 28 6c 2e 73 72 63 26 26 22 6d 6f 64 75 6c 65 22 21 3d 3d 28 6c 2e 74 79 70 65 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3f 62 2e 5f 65 76 61 6c 55 72 6c 26 26 21 6c 2e 6e 6f 4d 6f 64 75 6c 65 26 26 62 2e 5f 65 76 61 6c 55 72 6c 28 6c 2e 73 72 63 2c 7b 6e 6f 6e 63 65 3a 6c 2e 6e 6f 6e 63 65 7c 7c 6c 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 63 29 3a Data Ascii: [s.length-1].ownerDocument,b.map(s,He),f=0;f<u;f++)l=s[f],he.test(l.type\|\|"")&&!G.access(l,"globalEval")&&b.contains(c,l)&&(l.src&&"module"!==(l.type\|\|"").toLowerCase()?b._evalUrl&&!l.noModule&&b._evalUrl(l.src,{nonce:l.nonce\|\|l.getAttribute("nonce")},c):
2024-04-23 20:32:07 UTC	16384	IN	Data Raw: 72 74 3d 6e 75 6c 6c 7d 2c 62 2e 66 78 2e 73 70 65 65 64 73 3d 7b 73 6c 6f 77 3a 36 30 30 2c 66 61 73 74 3a 32 30 30 2c 5f 64 65 66 61 75 6c 74 3a 34 30 30 7d 2c 62 2e 66 6e 2e 64 65 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 62 2e 66 78 26 26 62 2e 66 78 2e 73 70 65 65 64 73 5b 74 5d 7c 7c 74 2c 6e 3d 6e 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 76 61 72 20 69 3d 65 2e 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 74 29 3b 72 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 69 29 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 76 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c Data Ascii: rt=null},b.fx.speeds={slow:600,fast:200,_default:400},b.fn.delay=function(t,n){return t=b.fx&&b.fx.speeds[t]\|\|t,n=n\|\|"fx",this.queue(n,function(n,r){var i=e.setTimeout(n,t);r.stop=function(){e.clearTimeout(i)}})},function(){var e=v.createElement("input"),
2024-04-23 20:32:07 UTC	8175	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 28 65 29 2e 6e 6f 74 28 22 62 6f 64 79 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 62 28 74 68 69 73 29 2e 72 65 70 6c 61 63 65 57 69 74 68 28 74 68 69 73 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7d 29 2c 74 68 69 73 7d 7d 29 2c 62 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 68 69 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 62 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 28 65 29 7d 2c 62 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 Data Ascii: ction(e){return this.parent(e).not("body").each(function(){b(this).replaceWith(this.childNodes)}),this}}),b.expr.pseudos.hidden=function(e){return!b.expr.pseudos.visible(e)},b.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49761	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:06 UTC	616	OUT	GET /images/background-s.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.donotcall.gov/css/styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:06 UTC	801	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:07 GMT Last-Modified: Thu, 26 Dec 2019 17:35:33 GMT Content-Type: image/jpeg Content-Length: 114310 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:06 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 04 e0 06 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 9b 00 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 07 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 Data Ascii: JFIFddDucky<Adobed@
2024-04-23 20:32:06 UTC	16384	IN	Data Raw: 7b 40 96 d0 0b 73 4d a0 1c f9 01 94 e1 c8 17 9a 53 00 ae 54 00 da e6 03 4e ea 01 2c bb 10 33 d4 c1 71 03 a2 03 36 7c cc 0b 7d 15 40 5a e8 06 1f ce 06 b2 60 2d aa 03 33 50 2b a2 00 04 6e a0 54 80 01 18 08 00 ec 58 81 39 57 68 09 7d 80 39 80 aa f0 12 06 95 f7 2c 18 1d 17 dc 5e 80 da fb 8b 1a a8 1a b2 fb 6e 54 60 1a 03 0e da 81 1a 02 40 12 10 11 a8 02 39 80 24 80 86 80 4d c0 47 50 1c a0 48 02 57 10 34 ba 99 30 3a 2b e8 05 57 4d 00 d2 55 80 0d 01 97 40 27 24 81 27 20 25 d6 ce 00 2c ea 3b 6e 86 07 aa c7 cd 54 06 80 a0 00 a0 00 01 18 12 00 40 08 01 00 00 a0 40 00 40 2c 80 90 00 50 00 50 2a 02 80 90 28 00 00 00 a8 0a 06 40 00 00 80 30 20 11 81 00 30 2a 02 01 64 04 80 6c 09 20 40 00 28 01 c0 12 80 20 00 15 20 0d 01 20 08 d0 19 01 00 00 01 60 04 c0 11 62 07 4b 2c Data Ascii: {@sMSTN,3q6\|}@Z`-3P+nTX9Wh}9,^nT`@9$MGPHW40:+WMU@'$' %,;nT@@@,PP(@0 0dl @( `bK,
2024-04-23 20:32:07 UTC	16384	IN	Data Raw: 19 52 fe 54 05 56 5b 32 fe 26 05 77 db 6a 9b dc 2c 90 1e 7e af df db 6a 8b 15 75 03 c9 d4 eb 75 2f f9 9d 34 03 9c 00 03 76 29 be db 77 03 db d0 56 cb ea dc a8 b0 03 29 73 fc 77 cb d2 dd 00 ea ac b3 f7 5d 22 88 0e 17 df 6f 3d ab 4c 40 dd dd 4b ae 9e 4b 52 b7 70 22 e9 73 62 db 7a 2c 00 bf e5 eb 2a d8 60 75 b6 55 b0 e8 06 2f 56 63 75 ff 00 0e 80 79 7e e3 ee b9 d7 d3 b2 96 20 3c d2 c0 48 12 40 34 05 84 04 9a c0 07 68 19 60 00 48 14 08 00 00 00 00 24 00 00 20 1f 63 ed 7f ed ed e0 07 6c 50 00 23 03 2c 0c 3c 40 c3 c0 0c 30 39 5f 98 1c f5 03 8e a0 49 a8 0a 01 97 88 14 00 00 00 00 00 00 00 00 00 00 00 99 81 40 48 16 68 07 d5 fb 45 fd c5 a0 77 40 00 80 46 04 60 72 78 81 8b 80 e5 70 1c de 60 79 6e f9 98 00 10 04 00 00 00 00 00 00 54 0a 80 b1 40 00 54 ea 06 c0 8d d0 Data Ascii: RTV[2&wj,~juu/4v)wV)sw]"o=L@KKRp"sbz,*`uU/Vcuy~ <H@4h`H$ clP#,<@09_I@HhEw@F`rxp`ynT@T
2024-04-23 20:32:07 UTC	16384	IN	Data Raw: 00 0c bc 00 c8 0e 7b 40 ed f6 af fb e4 07 ba 31 00 00 00 19 60 64 09 20 65 b0 39 5e 80 e4 c0 e5 d4 c0 0c 20 28 11 80 03 20 18 19 02 45 40 ed 68 1d 16 20 6c 0a 98 17 30 00 6d 55 01 97 46 04 77 20 30 c0 e3 77 ce 00 0b 00 69 00 40 50 00 22 80 10 14 0a c0 00 00 00 0d 00 00 07 ab a0 ff 00 bb 03 a0 14 0c 80 02 c8 11 80 80 00 24 08 00 00 00 20 10 0b 00 50 00 00 40 14 02 40 50 00 00 40 08 dc 0b 00 40 00 00 35 50 00 50 10 02 00 a0 00 00 02 a0 0c 08 c0 cb 75 03 17 01 cd 81 ca fc 40 9d 2f e7 5b c6 40 fa 2d d6 40 c8 10 0c b6 06 58 18 cc 0e 57 30 30 e8 06 18 19 bb 00 38 bf 98 0e c9 00 b6 df 89 01 f4 ac c1 70 00 f1 80 26 60 6d 20 39 f5 6a ec e2 80 ef 72 ac 81 00 8d 01 96 90 19 60 65 81 96 07 3b 80 e6 04 60 7a 7e cb 0b 80 f4 b7 00 4e 67 38 00 01 20 45 88 19 ea 7c ac 0f Data Ascii: {@1`d e9^ ( E@h l0mUFw 0wi@P"$ P@@P@@5PPu@/[@-@XW008p&`m 9jr`e;`z~Ng8 E\|
2024-04-23 20:32:07 UTC	16384	IN	Data Raw: 69 b6 11 f0 eb a2 02 35 86 79 4a c3 80 08 5c d1 1c b9 42 c7 b0 04 25 75 16 1a 78 6e 01 2c ed 6a 30 51 e0 01 d5 d6 91 45 1d c8 05 61 7a 94 77 20 23 c5 47 05 1d c8 0a dc bc 68 d4 28 cf 6b 40 27 f0 a8 6e db 70 5a 70 5b 80 bb 55 48 a7 ec 01 fb 2b dc 80 a9 ac b8 53 b9 00 ae 0f 87 b9 01 38 6b 14 ee 40 12 7c 8f 1a d1 47 72 02 bc 92 ab 8e 59 b7 ff 00 2a 00 9c 44 51 60 a3 27 a2 dc 03 74 d7 2a 6a f4 dc 08 be 55 9c 69 97 0d c0 56 30 db f6 6e 02 be 14 ee 40 55 58 5d 8a 3b 90 04 aa a9 ea ee 40 44 a1 44 6d 4e e4 05 85 13 94 47 af 20 26 11 14 85 10 b0 e0 80 56 99 45 21 62 b6 00 e9 76 54 a6 fc 00 2e 56 fd 90 bb 90 0c 62 38 28 ee 40 21 e5 9a 85 1d c8 02 c5 44 4c 72 a6 bf f2 a0 0d c3 d1 60 a3 09 d1 6e 01 60 a1 c6 cb c3 70 0f 28 7e ae e5 b8 13 75 86 14 ee 40 69 46 4a b8 28 Data Ascii: i5yJ\B%uxn,j0QEazw #Gh(k@'npZp[UH+S8k@\|GrYDQ`'tjUiV0n@UX];@DDmNG &VE!bvT.Vb8(@!DLr`n`p(~u@iFJ(
2024-04-23 20:32:07 UTC	16384	IN	Data Raw: eb 1c 75 60 32 74 c1 cf 0f 78 05 11 5c 55 63 1c 7c 40 b3 5f 6b 5c 7c 40 45 a9 70 d7 0a f8 81 2d a6 0f 0c 00 25 f0 cc 55 64 f2 9d 75 00 e1 53 4c 67 2e 3a b0 13 96 11 db 1c 75 60 22 1c aa 35 ad 63 8e e0 21 a7 8f 66 9e f0 25 55 30 73 5c e3 de 06 b9 62 f5 19 7b 3d e0 45 4a d2 77 c1 7b c0 ae 15 3b 56 6d 48 12 23 68 7c 61 ea c0 53 84 3c eb 1c 77 01 45 8e 55 e0 fc c0 92 93 a5 12 ae be 8c 0d 42 c7 25 58 dd f8 80 71 c2 2b eb f1 02 63 f1 76 70 f7 80 c2 33 e5 f6 6e f5 01 e0 f3 ca 75 d4 02 4e 2b 46 9e 75 8e 3a b0 0f d4 95 75 87 e2 c0 52 37 4f 0d 3c d8 16 16 3a 64 02 8a 2b 0d fa 7a c0 89 2b 53 73 11 49 75 4a 7f ea 00 a1 5a f9 67 e1 d7 15 c7 70 0b e5 c2 ab e2 7e 99 b0 2c 5a a8 e8 f1 d7 d7 b8 13 66 a6 2b c3 de 02 21 e3 1e d8 9f 10 1e 7e af 78 04 9a e3 dd ef 00 95 53 4d Data Ascii: u`2tx\Uc\|@_k\\|@Ep-%UduSLg.:u`"5c!f%U0s\b{=EJw{;VmH#h\|aS<wEUB%Xq+cvp3nuN+Fu:uR7O<:d+z+SsIuJZgp~,Zf+!~xSM
2024-04-23 20:32:07 UTC	16006	IN	Data Raw: e6 03 15 b3 ac 3c 00 35 8b cd d5 ce ab 5d c0 3e 68 7b e4 f5 df 70 2b 74 f5 4c eb be e0 4c f7 f4 c7 70 3b 5b d2 b6 65 d1 e8 fc 77 03 6d 43 a6 1e 3e 2c 09 cb 15 74 8a d5 e1 ef 02 b5 2a 12 84 ab 5d 77 01 3e ca b9 d4 09 4e 69 c2 2b db bf 80 1a b9 a9 86 fd 7a bd 40 89 42 7e 3e 3b 81 6e 9c 6a b5 d9 ef b8 11 cb 7e da fa 62 01 c5 5e 0f bb de 02 ae 67 8f c5 97 1d c0 b9 b6 f1 ce 70 ed dc 09 0b 92 5e 36 b9 af 8e e0 2e c3 e2 ce b3 e7 b8 17 0a 47 af c7 70 23 4b 17 d9 c7 cc 0a dc 25 1e 9e f0 24 b8 8c fb b8 80 99 a3 c5 57 64 f7 dc 0a e5 ca 54 8a c3 d7 70 25 6b 38 e7 b3 df c0 06 09 e3 da 02 31 a2 a6 33 e3 b8 07 47 5a 2e ee 3b 80 69 37 4c 72 f4 d4 0b 85 da 2d 74 f7 81 94 92 6b 0d 6b 54 b8 ee 05 c6 16 0a dd 71 ff 00 c5 be 80 30 9f 6c f8 ee 04 71 3e 7a ef b8 1a b9 d7 4c dc Data Ascii: <5]>h{p+tLLp;[ewmC>,t*]w>Ni+z@B~>;nj~b^gp^6.Gp#K%$WdTp%k813GZ.;i7Lr-tkkTq0lq>zL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49758	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:06 UTC	614	OUT	GET /images/mobile_dnc_masthead_sm_3.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:06 UTC	799	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:07 GMT Last-Modified: Wed, 30 Nov 2022 18:08:25 GMT Content-Type: image/jpeg Content-Length: 2485 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:06 UTC	2485	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 01 04 10 00 10 00 10 00 10 00 10 00 11 00 10 00 12 00 14 00 14 00 12 00 19 00 1b 00 18 00 1b 00 19 00 25 00 22 00 1f 00 1f 00 22 00 25 00 38 00 28 00 2b 00 28 00 2b 00 28 00 38 00 55 00 35 00 3e 00 35 00 35 00 3e 00 35 00 55 00 4b 00 5b 00 4a 00 45 00 4a 00 5b 00 4b 00 87 00 6a 00 5e 00 5e 00 6a 00 87 00 9c 00 83 00 7c 00 83 00 9c 00 bd 00 a9 00 a9 00 bd 00 ee 00 e2 00 ee 01 37 01 37 01 a2 11 00 10 00 10 00 10 00 10 00 11 00 10 00 12 00 14 00 14 00 12 00 19 00 1b 00 18 00 1b 00 19 00 25 00 22 00 1f 00 1f 00 22 00 25 00 38 00 28 00 2b 00 28 00 2b 00 28 00 38 00 55 00 35 00 3e 00 35 00 35 00 3e 00 35 00 55 00 4b 00 5b 00 4a 00 45 00 4a 00 5b 00 4b 00 87 00 6a 00 5e 00 5e 00 6a 00 87 00 9c 00 Data Ascii: JFIF%""%8(+(+(8U5>55>5UK[JEJ[Kj^^j\|77%""%8(+(+(8U5>55>5UK[JEJ[Kj^^j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49757	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:06 UTC	603	OUT	GET /images/btn_enespanol.png HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:06 UTC	798	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:07 GMT Last-Modified: Thu, 26 Dec 2019 17:35:33 GMT Content-Type: image/png Content-Length: 3986 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:06 UTC	3986	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 7b 00 00 00 1c 08 06 00 00 00 41 36 c0 9d 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR{A6pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49760	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:06 UTC	570	OUT	GET /js/lib/CLDRPluralRuleParser/CLDRPluralRuleParser.js HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:06 UTC	834	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:07 GMT Last-Modified: Thu, 26 Dec 2019 17:35:38 GMT Content-Type: application/javascript Content-Length: 3227 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:06 UTC	3227	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 72 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 72 28 29 3a 6e 2e 70 6c 75 72 61 6c 52 75 6c 65 50 61 72 73 65 72 3d 72 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 21 28 6e 3d 6e 2e 73 70 6c 69 74 28 22 40 22 29 5b 30 5d 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2a 2f 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 2a 24 2f 2c 22 22 29 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 Data Ascii: !function(n,r){"function"==typeof define&&define.amd?define(r):"object"==typeof exports?module.exports=r():n.pluralRuleParser=r()}(this,function(){return function(n,r){"use strict";if(!(n=n.split("@")[0].replace(/^\s/,"").replace(/\s$/,"")).length)retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49759	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:06 UTC	552	OUT	GET /js/lib/jquery.i18n/jquery.i18n.js HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:06 UTC	834	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:07 GMT Last-Modified: Thu, 26 Dec 2019 17:35:38 GMT Content-Type: application/javascript Content-Length: 2379 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:06 UTC	2379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6e 2c 74 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 3b 28 61 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 65 2e 65 78 74 65 6e 64 28 7b 7d 2c 61 2e 64 65 66 61 75 6c 74 73 2c 6e 29 2c 74 68 69 73 2e 70 61 72 73 65 72 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 61 72 73 65 72 2c 74 68 69 73 2e 6c 6f 63 61 6c 65 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6c 6f 63 61 6c 65 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 53 74 6f 72 65 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 65 73 73 61 67 65 53 74 6f 72 65 2c 74 68 69 73 2e 6c 61 6e 67 75 61 67 65 73 3d 7b 7d 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 6c 6f 63 61 Data Ascii: !function(e){"use strict";var a,n,t=Array.prototype.slice;(a=function(n){this.options=e.extend({},a.defaults,n),this.parser=this.options.parser,this.locale=this.options.locale,this.messageStore=this.options.messageStore,this.languages={}}).prototype={loca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49763	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:06 UTC	368	OUT	GET /images/FTC_DNC_masthead.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:06 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:07 GMT Last-Modified: Wed, 30 Nov 2022 18:08:23 GMT Content-Type: image/jpeg Content-Length: 16227 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:06 UTC	11601	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 8f 03 c0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 05 07 04 06 08 03 02 01 09 ff c4 00 5c 10 00 01 03 03 02 02 05 05 0b 06 09 06 0b 09 00 00 01 00 02 03 04 05 11 06 12 07 21 08 13 14 31 41 22 37 51 61 81 15 16 32 52 54 Data Ascii: JFIFC!"$"$C"\!1A"7Qa2RT
2024-04-23 20:32:07 UTC	3867	IN	Data Raw: 75 4b a2 34 97 28 87 2c 4a 1b 87 f2 f0 0e 04 38 7a 9c b9 42 f9 6a d6 7c 0c e2 4f 6e a3 63 d8 c8 de f6 d1 d5 bd 85 d0 55 c2 ec f9 2e c6 01 38 ef 6f 22 08 c8 f0 2a 33 fe b3 ae e4 df 2f 9a f0 23 89 fd 77 55 e9 be 5f 35 dd 13 7a d2 9b a4 1e b2 b4 32 d3 a9 6c d7 7a fa 36 4c 27 6c 66 d9 0c 78 78 04 07 02 c6 03 dc e7 0e ff 00 15 68 70 03 4e 5f b4 d7 04 75 8d 15 fe d7 55 6d 9e 43 53 2c 71 d4 33 69 73 7b 33 46 e1 ed 04 7b 15 61 aa 7a 43 71 0b 52 b6 0b 7d 96 28 2c ef 7b 99 ff 00 10 63 9f 3c af cf 70 2e cf 22 71 e4 81 9f 02 4a ea 0e 1e 4d a9 af dc 39 a7 3a d6 82 3b 7d d2 aa 07 47 34 6c ef 2d 23 01 ce 6f 73 5c 47 32 df 0f 57 70 9c 48 d5 3b 5c a1 26 da 5d d9 38 31 a6 cb dc e1 29 49 a5 dd f6 39 8b a1 89 1f 95 d9 f3 8f f4 4c d8 fe dc 6a d6 e9 b5 8f c9 65 b0 72 cf bb 71 Data Ascii: uK4(,J8zBj\|OncU.8o"*3/#wU_5z2lz6L'lfxxhpN_uUmCS,q3is{3F{azCqR}(,{c<p."qJM9:;}G4l-#os\G2WpH;\&]81)I9Ljerq
2024-04-23 20:32:07 UTC	759	IN	Data Raw: 10 47 30 54 4d 46 9f 27 f3 3f 52 bd 2b ad f4 d5 7c e4 60 0f f8 c0 73 f6 fa 54 5c da 76 33 f0 76 95 59 67 0f df 62 ae de 1a 99 47 cd a7 01 ff 00 57 fa 96 2b f4 e7 f3 15 dd 2e 9a cf 73 16 24 9a 68 ff 00 26 7e a5 cd 2e 1e fc 8e 39 70 88 bf 02 96 3a 74 8f cd 2b e4 e9 e7 7c 52 ae 37 e9 b3 fc 9f ea 5e 4e d3 9f cc fd 4b 0f a0 33 4b e0 f0 f2 2a 0f 7b ee f8 ae 5f 4d d3 c7 e2 95 6d fb dd 39 f8 1f a9 7d 37 4e 1f 89 fa 94 7d 05 90 b8 3c 3c 8a 9e 3d 3d cf e0 7e a5 9d 4f 60 03 f3 3f 52 b3 d9 a7 0f f2 7f a9 64 c5 a7 88 ff 00 57 fa 96 71 c0 66 e8 70 a8 af 02 bf a2 b3 6d 23 c8 fd 4b 63 b6 db cb 31 e4 ad aa 0b 01 18 f2 30 b3 e0 b3 ec ef 00 2e ba f0 dc 4e ea b0 79 7c 08 aa 1a 72 d0 39 29 ba 2a 67 3f bf 93 47 79 59 30 51 46 cc 67 9f a9 65 00 00 c0 18 5d f0 ab 5d cb 08 55 ca Data Ascii: G0TMF'?R+\|`sT\v3vYgbGW+.s$h&~.9p:t+\|R7^NK3K{_Mm9}7N}<<==~O`?RdWqfpm#Kc10.Ny\|r9)g?GyY0QFge]]U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49764	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:06 UTC	360	OUT	GET /images/masthead.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:06 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:07 GMT Last-Modified: Wed, 30 Nov 2022 18:08:24 GMT Content-Type: image/jpeg Content-Length: 19166 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:06 UTC	8553	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 9b 03 c0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 06 07 05 08 ff c4 00 45 10 00 01 02 04 03 04 09 04 01 02 04 04 04 07 01 00 01 00 02 03 11 21 b1 04 05 f1 06 12 31 e1 07 13 41 61 71 81 a1 d1 f0 14 22 51 c1 Data Ascii: JFIFC!"$"$C"E!1Aaq"Q
2024-04-23 20:32:06 UTC	1289	IN	Data Raw: 73 67 c5 ed 6b 8c bf fe 0c 45 94 a5 0d 34 ff 00 d6 df d1 9b 7a 67 a9 35 fe d4 be a8 ab a1 6d 9b c8 f0 5b 19 92 c0 cd 72 ac 16 27 31 cd 9b 17 1a 0c 68 0d 79 10 c6 e8 12 24 4e 5b a6 1f f7 5a a6 cf e5 79 63 fa 1c db ac 53 f2 fc 2b f1 10 33 2c 4b 20 c4 ea 5b be c6 ca 14 83 4c a6 00 9f 62 db f2 5c ce 16 27 a7 f7 64 d8 3d d1 82 c9 b2 63 85 84 d1 c0 19 c3 26 5f dc 0f ff 00 c2 d7 36 7b fe 48 f4 81 ff 00 ed 71 5c 3c 21 22 72 b7 27 ea e2 fe ac cb 8c 74 a8 af 45 25 f4 47 ab 1f 29 89 b1 fb 05 92 62 f6 2b 63 72 fc fe 3c 78 6c 89 8c c4 44 81 d7 44 20 b4 3a 60 03 bc 77 89 a4 8c 87 e1 69 b9 b3 36 2b 6c ba 4c d9 dc 2e 13 29 8d 93 44 8e f3 0f 35 c3 be 08 80 0b 80 0e 00 00 78 b8 cd a4 c8 13 4e d5 b5 40 d9 9d aa ca b2 ac af 1b d1 3e d2 62 31 f9 4c 76 97 44 83 8d 8f 0a 23 5b Data Ascii: sgkE4zg5m[r'1hy$N[ZycS+3,K [Lb\'d=c&_6{Hq\<!"r'tE%G)b+cr<xlDD :`wi6+lL.)D5xN@>b1LvD#[
2024-04-23 20:32:07 UTC	9023	IN	Data Raw: b0 40 27 72 a5 82 34 a5 82 34 a5 82 3b 7d 29 60 80 34 a5 82 47 95 2c 13 d2 96 09 1e ef 0a 58 20 0d 29 60 8d 29 60 8d 29 60 96 94 b0 42 a0 77 2a 58 23 4a 58 23 4e 41 1c 2d 4b 04 41 87 ca 58 21 dc a9 60 8d 29 60 8d 29 60 8c a2 e1 6a 58 23 b7 d2 96 08 d2 96 08 e1 6a 58 23 06 48 e5 4b 04 0e 54 b0 46 94 b0 40 f4 ee b0 54 c9 bc 74 1c e0 de 91 70 15 68 73 8b 18 d9 b0 b8 4c c7 84 38 06 9a 79 b3 ff 00 77 fb 5d df e3 e6 10 62 66 f9 be 19 f9 ae 23 30 c5 bf 22 c4 39 bd 76 1c e1 f7 1b 49 00 c2 00 74 e4 48 20 1a 36 a7 84 fe 5f d8 fc 79 cb 36 97 01 8d 69 68 73 22 0d d2 e7 86 b4 3c 89 36 6e 71 6b 44 8c 89 24 80 3b 68 be ae d9 8c 26 1b 0b 98 65 ce 8b 9c 61 99 0f 30 8b 1e 36 59 84 c1 60 e1 b1 98 88 04 17 0e b5 db 93 9b 58 f1 c0 b4 4c 0e 3c 17 cc eb ea 2d 4b c7 fe 9e ee 89 Data Ascii: @'r44;})`4G,X )`)`)`Bw*X#JX#NA-KAX!`)`)`jX#jX#HKTF@TtphsL8yw]bf#0"9vItH 6_y6ihs"<6nqkD$;h&ea06Y`XL<-K
2024-04-23 20:32:07 UTC	301	IN	Data Raw: 00 e1 da 3f ed 59 8a 2c 8a 9e 6b e9 4b 04 81 95 a9 60 91 56 b0 05 a5 b9 13 a2 88 87 b3 cb 90 55 1f 9c 95 8f 25 52 e5 ce 46 d3 1b 04 cc fb 38 72 56 83 21 3f 2a 58 28 0f e0 99 55 2a 16 32 7e 7e 82 8c fd a9 60 92 8a 01 cf e0 b0 51 27 b0 7c f0 4d 45 65 6e 5b 14 be 7b 28 b8 7e 55 aa b2 8f 63 49 8c 15 29 fc f6 51 4d 6d 19 b2 53 f6 e4 13 07 da 96 0a b5 3f f6 22 20 03 e5 d9 4b 05 29 d3 d2 96 0a b5 2f 65 6c a4 a7 f0 58 23 4a 58 28 a9 7b 2d 51 07 3e c1 e9 60 94 be 0b 04 21 28 04 ff 00 3e 14 b0 4e 7e d4 b0 51 e1 c1 34 a1 64 b8 5a 96 0a 61 df 9f 0a 58 2a 90 a8 32 29 29 8f 0a 58 28 3f 8f a7 20 94 32 91 3f 7a 12 c7 a5 2c 11 a5 2c 12 42 16 c9 69 4b 04 0e 54 b0 51 4d 05 86 94 b0 47 ca 58 24 9a 0b 0f 0f 0a 58 22 9f aa 58 21 24 16 0e e5 4b 04 c7 2a 58 24 84 16 1a 72 09 1e Data Ascii: ?Y,kK`VU%RF8rV!?X(U2~~`Q'\|MEen[{(~UcI)QMmS?" K)/elX#JX({-Q>`!(>N~Q4dZaX2))X(? 2?z,,BiKTQMGX$X"X!$KX$r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49772	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:07 UTC	565	OUT	GET /js/lib/jquery.i18n/jquery.i18n.messagestore.js HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:07 UTC	833	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:08 GMT Last-Modified: Thu, 26 Dec 2019 17:35:38 GMT Content-Type: application/javascript Content-Length: 790 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:07 UTC	790	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6d 65 73 73 61 67 65 73 3d 7b 7d 2c 74 68 69 73 2e 73 6f 75 72 63 65 73 3d 7b 7d 7d 3b 73 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 6c 6f 61 64 3a 66 75 6e 63 74 69 6f 6e 28 73 2c 74 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 2c 72 3d 5b 5d 2c 6f 3d 74 68 69 73 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 73 29 72 65 74 75 72 6e 20 65 2e 69 31 38 6e 2e 6c 6f 67 28 22 4c 6f 61 64 69 6e 67 20 6d 65 73 73 61 67 65 73 20 66 72 6f 6d 3a 20 22 2b 73 29 2c 66 75 6e 63 74 69 6f 6e 28 73 29 7b 76 61 72 20 74 3d 65 2e 44 65 66 65 72 72 65 64 28 29 3b 72 65 74 75 72 6e 20 65 2e 67 65 74 4a 53 4f 4e 28 73 29 2e 64 6f 6e Data Ascii: !function(e){"use strict";var s=function(){this.messages={},this.sources={}};s.prototype={load:function(s,t){var n=null,r=[],o=this;if("string"==typeof s)return e.i18n.log("Loading messages from: "+s),function(s){var t=e.Deferred();return e.getJSON(s).don

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49773	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:07 UTC	657	OUT	GET /js/lib/jquery.i18n/jquery.i18n.fallbacks.js HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904326.0.0.0; _ga=GA1.1.1560218031.1713904326
2024-04-23 20:32:07 UTC	834	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:08 GMT Last-Modified: Thu, 26 Dec 2019 17:35:38 GMT Content-Type: application/javascript Content-Length: 2381 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:07 UTC	2381	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 69 31 38 6e 3d 72 2e 69 31 38 6e 7c 7c 7b 7d 2c 72 2e 65 78 74 65 6e 64 28 72 2e 69 31 38 6e 2e 66 61 6c 6c 62 61 63 6b 73 2c 7b 61 62 3a 5b 22 72 75 22 5d 2c 61 63 65 3a 5b 22 69 64 22 5d 2c 61 6c 6e 3a 5b 22 73 71 22 5d 2c 61 6c 73 3a 5b 22 67 73 77 22 2c 22 64 65 22 5d 2c 61 6e 3a 5b 22 65 73 22 5d 2c 61 6e 70 3a 5b 22 68 69 22 5d 2c 61 72 6e 3a 5b 22 65 73 22 5d 2c 61 72 7a 3a 5b 22 61 72 22 5d 2c 61 76 3a 5b 22 72 75 22 5d 2c 61 79 3a 5b 22 65 73 22 5d 2c 62 61 3a 5b 22 72 75 22 5d 2c 62 61 72 3a 5b 22 64 65 22 5d 2c 22 62 61 74 2d 73 6d 67 22 3a 5b 22 73 67 73 22 2c 22 6c 74 22 5d 2c 62 63 63 3a 5b 22 66 61 22 5d 2c 22 62 65 2d 78 2d 6f 6c 64 22 3a 5b 22 62 65 2d 74 Data Ascii: !function(r){"use strict";r.i18n=r.i18n\|\|{},r.extend(r.i18n.fallbacks,{ab:["ru"],ace:["id"],aln:["sq"],als:["gsw","de"],an:["es"],anp:["hi"],arn:["es"],arz:["ar"],av:["ru"],ay:["es"],ba:["ru"],bar:["de"],"bat-smg":["sgs","lt"],bcc:["fa"],"be-x-old":["be-t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49771	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:07 UTC	471	OUT	GET /images/mobile_dnc_masthead_sm_3.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904326.0.0.0; _ga=GA1.1.1560218031.1713904326
2024-04-23 20:32:07 UTC	799	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:08 GMT Last-Modified: Wed, 30 Nov 2022 18:08:25 GMT Content-Type: image/jpeg Content-Length: 2485 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:07 UTC	2485	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 01 04 10 00 10 00 10 00 10 00 10 00 11 00 10 00 12 00 14 00 14 00 12 00 19 00 1b 00 18 00 1b 00 19 00 25 00 22 00 1f 00 1f 00 22 00 25 00 38 00 28 00 2b 00 28 00 2b 00 28 00 38 00 55 00 35 00 3e 00 35 00 35 00 3e 00 35 00 55 00 4b 00 5b 00 4a 00 45 00 4a 00 5b 00 4b 00 87 00 6a 00 5e 00 5e 00 6a 00 87 00 9c 00 83 00 7c 00 83 00 9c 00 bd 00 a9 00 a9 00 bd 00 ee 00 e2 00 ee 01 37 01 37 01 a2 11 00 10 00 10 00 10 00 10 00 11 00 10 00 12 00 14 00 14 00 12 00 19 00 1b 00 18 00 1b 00 19 00 25 00 22 00 1f 00 1f 00 22 00 25 00 38 00 28 00 2b 00 28 00 2b 00 28 00 38 00 55 00 35 00 3e 00 35 00 35 00 3e 00 35 00 55 00 4b 00 5b 00 4a 00 45 00 4a 00 5b 00 4b 00 87 00 6a 00 5e 00 5e 00 6a 00 87 00 9c 00 Data Ascii: JFIF%""%8(+(+(8U5>55>5UK[JEJ[Kj^^j\|77%""%8(+(+(8U5>55>5UK[JEJ[Kj^^j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49768	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:07 UTC	656	OUT	GET /js/lib/jquery.i18n/jquery.i18n.language.js HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904326.0.0.0; _ga=GA1.1.1560218031.1713904326
2024-04-23 20:32:07 UTC	834	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:08 GMT Last-Modified: Thu, 26 Dec 2019 17:35:38 GMT Content-Type: application/javascript Content-Length: 6395 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:07 UTC	6395	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 7b 70 6c 75 72 61 6c 52 75 6c 65 73 3a 7b 61 6b 3a 7b 6f 6e 65 3a 22 6e 20 3d 20 30 2e 2e 31 22 7d 2c 61 6d 3a 7b 6f 6e 65 3a 22 69 20 3d 20 30 20 6f 72 20 6e 20 3d 20 31 22 7d 2c 61 72 3a 7b 7a 65 72 6f 3a 22 6e 20 3d 20 30 22 2c 6f 6e 65 3a 22 6e 20 3d 20 31 22 2c 74 77 6f 3a 22 6e 20 3d 20 32 22 2c 66 65 77 3a 22 6e 20 25 20 31 30 30 20 3d 20 33 2e 2e 31 30 22 2c 6d 61 6e 79 3a 22 6e 20 25 20 31 30 30 20 3d 20 31 31 2e 2e 39 39 22 7d 2c 61 72 73 3a 7b 7a 65 72 6f 3a 22 6e 20 3d 20 30 22 2c 6f 6e 65 3a 22 6e 20 3d 20 31 22 2c 74 77 6f 3a 22 6e 20 3d 20 32 22 2c 66 65 77 3a 22 6e 20 25 20 31 30 30 20 3d 20 33 2e 2e 31 30 22 2c 6d 61 6e 79 3a 22 6e 20 25 20 31 Data Ascii: !function(n){"use strict";var o={pluralRules:{ak:{one:"n = 0..1"},am:{one:"i = 0 or n = 1"},ar:{zero:"n = 0",one:"n = 1",two:"n = 2",few:"n % 100 = 3..10",many:"n % 100 = 11..99"},ars:{zero:"n = 0",one:"n = 1",two:"n = 2",few:"n % 100 = 3..10",many:"n % 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49769	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:07 UTC	654	OUT	GET /js/lib/jquery.i18n/jquery.i18n.parser.js HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904326.0.0.0; _ga=GA1.1.1560218031.1713904326
2024-04-23 20:32:07 UTC	834	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:08 GMT Last-Modified: Thu, 26 Dec 2019 17:35:38 GMT Content-Type: application/javascript Content-Length: 2378 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:07 UTC	2378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 6e 2e 65 78 74 65 6e 64 28 7b 7d 2c 6e 2e 69 31 38 6e 2e 70 61 72 73 65 72 2e 64 65 66 61 75 6c 74 73 2c 72 29 2c 74 68 69 73 2e 6c 61 6e 67 75 61 67 65 3d 6e 2e 69 31 38 6e 2e 6c 61 6e 67 75 61 67 65 73 5b 53 74 72 69 6e 67 2e 6c 6f 63 61 6c 65 5d 7c 7c 6e 2e 69 31 38 6e 2e 6c 61 6e 67 75 61 67 65 73 2e 64 65 66 61 75 6c 74 2c 74 68 69 73 2e 65 6d 69 74 74 65 72 3d 6e 2e 69 31 38 6e 2e 70 61 72 73 65 72 2e 65 6d 69 74 74 65 72 7d 3b 72 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 72 2c 73 69 6d 70 6c 65 50 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 Data Ascii: !function(n){"use strict";var r=function(r){this.options=n.extend({},n.i18n.parser.defaults,r),this.language=n.i18n.languages[String.locale]\|\|n.i18n.languages.default,this.emitter=n.i18n.parser.emitter};r.prototype={constructor:r,simpleParse:function(n,r)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49770	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:07 UTC	460	OUT	GET /images/btn_enespanol.png HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904326.0.0.0; _ga=GA1.1.1560218031.1713904326
2024-04-23 20:32:07 UTC	798	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:08 GMT Last-Modified: Thu, 26 Dec 2019 17:35:33 GMT Content-Type: image/png Content-Length: 3986 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:07 UTC	3986	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 7b 00 00 00 1c 08 06 00 00 00 41 36 c0 9d 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR{A6pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49778	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:07 UTC	724	OUT	GET /js/lib/jquery.i18n/jquery.i18n.emitter.js HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904326.0.0.0; _ga=GA1.2.1560218031.1713904326; _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1
2024-04-23 20:32:07 UTC	834	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:08 GMT Last-Modified: Thu, 26 Dec 2019 17:35:38 GMT Content-Type: application/javascript Content-Length: 1005 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:07 UTC	1005	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6c 61 6e 67 75 61 67 65 3d 65 2e 69 31 38 6e 2e 6c 61 6e 67 75 61 67 65 73 5b 53 74 72 69 6e 67 2e 6c 6f 63 61 6c 65 5d 7c 7c 65 2e 69 31 38 6e 2e 6c 61 6e 67 75 61 67 65 73 2e 64 65 66 61 75 6c 74 7d 3b 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 6e 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 76 61 72 20 74 2c 61 2c 75 2c 69 3d 74 68 69 73 3b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 6e 29 7b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 74 3d 6e 3b 62 72 65 61 6b 3b 63 61 73 65 22 6f 62 6a 65 63 74 22 3a 69 66 28 61 3d 65 2e 6d 61 70 Data Ascii: !function(e){"use strict";var n=function(){this.language=e.i18n.languages[String.locale]\|\|e.i18n.languages.default};n.prototype={constructor:n,emit:function(n,r){var t,a,u,i=this;switch(typeof n){case"string":case"number":t=n;break;case"object":if(a=e.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49777	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:07 UTC	729	OUT	GET /js/lib/jquery.i18n/jquery.i18n.emitter.bidi.js HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904326.0.0.0; _ga=GA1.2.1560218031.1713904326; _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1
2024-04-23 20:32:07 UTC	834	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:08 GMT Last-Modified: Thu, 26 Dec 2019 17:35:38 GMT Content-Type: application/javascript Content-Length: 7356 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:07 UTC	7356	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 64 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 75 3b 75 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 3f 3a 28 5b 41 2d 5a 61 2d 7a c2 aa c2 b5 c2 ba c3 80 2d c3 96 c3 98 2d c3 b6 c3 b8 2d ca b8 ca bb 2d cb 81 cb 90 cb 91 cb a0 2d cb a4 cb ae cd b0 2d cd b3 cd b6 cd b7 cd ba 2d cd bd cd bf ce 86 ce 88 2d ce 8a ce 8c ce 8e 2d ce a1 ce a3 2d cf b5 cf b7 2d d2 82 d2 8a 2d d4 af d4 b1 2d d5 96 d5 99 2d d5 9f d5 a1 2d d6 87 d6 89 e0 a4 83 2d e0 a4 b9 e0 a4 bb e0 a4 bd 2d e0 a5 80 e0 a5 89 2d e0 a5 8c e0 a5 8e 2d e0 a5 90 e0 a5 98 2d e0 a5 a1 e0 a5 a4 2d e0 a6 80 e0 a6 82 e0 a6 83 e0 a6 85 2d e0 a6 8c e0 a6 8f e0 a6 90 e0 a6 93 2d e0 a6 a8 e0 a6 aa 2d e0 a6 b0 e0 a6 b2 e0 a6 b6 2d e0 a6 b9 e0 a6 bd 2d e0 a7 80 e0 a7 87 e0 Data Ascii: !function(d){"use strict";var u;u=new RegExp("(?:([A-Za-z--------------------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49780	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:07 UTC	582	OUT	GET /images/background-s.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:08 UTC	801	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:08 GMT Last-Modified: Thu, 26 Dec 2019 17:35:33 GMT Content-Type: image/jpeg Content-Length: 114310 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:08 UTC	15583	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 04 e0 06 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 9b 00 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 07 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 Data Ascii: JFIFddDucky<Adobed@
2024-04-23 20:32:08 UTC	16384	IN	Data Raw: 8b b9 ce 08 0e ea cb 52 84 bb 40 d0 08 60 48 02 80 97 90 15 25 88 19 bb a8 93 d4 0e 3d 4e bc 2a b8 5b 01 e6 bf ee d4 fc 12 d8 1c ee ea 75 6f c5 fa 80 96 f4 5b ab c7 50 3b d9 f6 c9 39 03 6e c4 ae 01 73 b5 01 8e 74 dc 24 df 00 35 fd eb 5f 85 00 56 59 8b 7c c0 69 24 be 5b 79 77 02 ab 2f 78 bf 50 1b 5d 0d 29 c4 0d 2e 8d ab 1c 40 d2 b5 2c 10 15 20 19 81 40 2a e0 06 6e be db 71 70 07 17 f7 5d 14 f5 03 0f ef d5 55 b6 fa c0 e3 77 de 75 9a d0 0e 4f ad 73 c6 e6 06 5d eb 50 32 af 59 01 39 d8 12 6f d4 0b 17 30 23 b0 07 d3 60 5e 55 95 40 b0 80 99 81 ac 10 13 1c 00 01 ae 50 33 8b 80 2b 50 80 b4 76 ee 06 5c f3 40 1a 8a 01 12 9a 81 2f 51 12 06 a0 09 1f 14 66 06 9d b4 03 36 80 bd 35 58 03 56 aa 48 18 af 38 1b 78 01 9b 6a 80 39 57 20 36 d5 00 e7 65 1b 02 dc 05 b5 7c 20 61 Data Ascii: R@`H%=N[uo[P;9nst$5_VY\|i$[yw/xP]).@, @nqp]UwuOs]P2Y9o0#`^U@P3+Pv\@/Qf65XVH8xj9W 6e\| a
2024-04-23 20:32:08 UTC	16384	IN	Data Raw: 4b 00 20 09 02 4d 40 ea f0 02 2a a0 30 a6 d7 40 37 37 30 24 5d a8 15 5a f5 02 fd 3b 80 eb 6f 42 50 1a 5d 08 c5 fb 00 d2 e8 db a8 1a fa 56 80 fa 76 20 39 b5 3d 45 6a 03 d6 be 54 80 d0 00 23 01 20 24 08 00 00 14 00 10 00 00 20 16 40 8c 00 00 12 01 81 00 8c 0c b0 24 00 00 98 1a c8 0c 75 1f 2f 4d 80 fb 6b 61 36 06 fa 49 bb 9e ad 81 d7 ee ba 9f 4f a5 ca b1 03 c0 07 3b b1 02 64 07 4b 12 56 f3 3d 14 01 2e b9 b6 de 60 75 b2 2d 4a ed 40 5a be a5 ea 31 d0 0f 5d 96 2b 54 2f 58 1d 22 80 54 80 ae 80 73 be fb 57 cc e1 01 c9 dd 75 ef 4b 40 b6 ab a6 2c 5d a0 75 b7 a5 6a f8 9d 6f cf 40 37 82 90 32 ee 6e 96 d3 fb 40 5b 6d 87 5a bd 40 b7 46 b0 06 25 cd 17 fe 20 35 ca a7 e2 ab d8 0d 3a 29 ba 8b 50 3c d7 fd e7 4e d6 e1 73 30 3c dd 4f ba ea de ea e1 68 80 e5 19 f7 81 df a6 9a Data Ascii: K M@*0@770$]Z;oBP]Vv 9=EjT# $ @$u/Mka6IO;dKV=.`u-J@Z1]+T/X"TsWuK@,]ujo@72n@[mZ@F% 5:)P<Ns0<Oh
2024-04-23 20:32:08 UTC	16384	IN	Data Raw: ce f7 50 39 01 8e a0 18 00 06 5a 02 40 12 a0 00 8c 0c 81 de d0 3a 20 34 98 15 30 2a 40 58 03 59 01 96 80 80 63 50 39 3f 9c 08 06 80 d2 00 80 a0 00 80 10 1a 40 00 a0 00 00 00 05 80 0c 0f 5f 43 f9 68 0e 95 02 00 00 05 40 00 01 24 00 11 80 02 66 05 02 01 00 00 02 c0 14 00 08 01 00 50 08 0b 00 50 20 15 20 28 12 40 a0 67 f7 80 48 09 02 80 02 80 00 00 02 02 b0 23 03 2c 0c 30 30 c0 e3 73 a8 13 a3 4e b5 bc 40 fa 2d 01 98 00 06 58 18 b8 0e 77 01 ce e0 30 04 6c 0e 77 81 c6 ef 98 0e b1 40 0b e6 5c 40 fa 56 60 b8 01 9e ad 8e ee a5 a9 76 81 a4 92 a2 02 b4 a8 07 2e af cd 67 fc 48 0f 4b c4 0a 06 58 10 0c 30 32 c0 cb 03 9d c0 73 60 40 3d 3f 62 dc 3d c0 f5 30 20 0c 80 80 47 80 18 bf e4 60 79 73 02 30 20 00 23 b9 20 27 d5 b0 08 fa d6 81 3e a8 0f af 7a c1 c0 1a e8 75 af 7d Data Ascii: P9Z@: 40*@XYcP9?@_Ch@$fPP (@gH#,00sN@-Xw0lw@\@V`v.gHKX02s`@=?b=0 G`ys0 # '>zu}
2024-04-23 20:32:08 UTC	16384	IN	Data Raw: 0c aa 36 b4 c9 56 3c d8 17 07 3a 76 c7 98 0a ae 2b 4a a5 39 2d 40 61 31 4c 9f 6f 88 09 4a 93 f2 eb 94 f7 b0 18 a9 5f ba e9 db e2 03 05 0b 27 9d 63 de 05 54 8a c7 2b 9d 7f 6b 02 29 c6 62 b8 63 1c 35 60 1c fc 4d d2 34 af 62 dc 02 4d 61 46 bb 7b 38 81 65 e2 f0 f6 a9 02 5d 45 2b e1 e5 cd 56 27 bd 80 c2 b8 47 6c 79 b0 0a 98 d3 4c e3 cd 80 d3 26 9e 55 6b cd 80 4d 2e ce d6 bc c0 93 6e be aa c7 0d 40 b6 cc ab 5c 5b cb 4f 5e 4b 50 2d 6b fb b1 4a 56 3d e0 44 f9 7b 1c 52 bf b5 81 7e 24 ae 53 19 be 2f c4 08 a2 12 4b 8a 7a f9 80 8d 30 4f d5 e6 c0 b4 4a 29 47 1a c6 cb 70 32 93 58 64 f0 d3 6e 20 5c 21 bc 56 95 8d 96 e0 33 d7 96 b1 c7 c4 06 4e bd bc 7c 40 4a b5 f0 ed 8f 36 02 33 ad 29 ac 3f 16 03 05 a4 76 c3 f1 60 54 a8 a6 89 69 97 9b 02 24 d3 95 4c a3 c8 04 d5 b7 57 84 Data Ascii: 6V<:v+J9-@a1LoJ_'cT+k)bc5`M4bMaF{8e]E+V'GlyL&UkM.n@\[O^KP-kJV=D{R~$S/Kz0OJ)Gp2Xdn \!V3N\|@J63)?v`Ti$LW
2024-04-23 20:32:08 UTC	16384	IN	Data Raw: 07 d6 75 5c b0 95 65 d7 d1 81 1f 59 ac a2 2b ae 3e 20 3e b3 95 aa aa f4 d4 07 d5 aa 6d 44 61 c5 80 fa cd 3c 30 03 56 df 3d 45 2a 12 cb 18 9c de a0 6d b5 f2 e1 cb ae 5e 60 1c e7 4a f1 f5 ea c0 60 a5 d2 1e 75 fd ac 04 35 b4 63 9c 7b c0 27 4a e4 f8 c7 bc 04 bc 30 87 9e 5e f0 2e 5a 47 a9 7b c0 94 89 c2 32 78 ad c0 e3 d6 8e 7a 52 92 de 5d 9b 81 95 09 51 d1 28 ad 63 8e ac 08 94 4f 2d 63 d9 ef 02 ac a9 1c 6b 1e f0 25 17 14 fd 5e f0 37 d2 a5 f6 ad 33 dd 81 da 62 b2 a8 e2 b8 80 7f 0a 8a d3 b6 37 7b 80 52 9b 9a 46 b5 6b 76 05 4a 2e 9e fa be dd 58 19 bb e1 b5 ed 5a d6 3d e0 71 c1 bb 5a 54 af 0f 36 04 a2 80 25 7b 3d 3d a0 47 16 d6 e7 0e 71 c5 2d b8 81 a7 72 4e 32 55 8b ab 0c 0e 9d 1b 14 bb a2 21 4d 6b 1c 75 03 a4 f6 34 e9 35 8f 78 16 af 55 5f 57 bc 08 dc 44 e4 f3 ac Data Ascii: u\eY+> >mDa<0V=E*m^`J`u5c{'J0^.ZG{2xzR]Q(cO-ck%^73b7{RFkvJ.XZ=qZT6%{==Gq-rN2U!Mku45xU_WD
2024-04-23 20:32:08 UTC	16384	IN	Data Raw: 4d b5 78 b9 ef 7e 40 1a 86 b2 58 b9 cd ea fc 80 ad 26 eb 57 8c ba 76 bf 20 32 db 4a 1e 75 6d e2 d6 e0 57 93 ba 99 f9 48 0c e5 ad eb e2 05 f8 b5 de bd ec 09 45 8e 55 73 de e3 b8 06 74 c1 55 f9 bf 20 09 38 73 57 8b 9e f6 05 56 e5 8b c6 b8 f1 60 4a e3 8c e6 f3 01 38 d3 d3 70 16 ba 51 6f 5d 37 02 a7 36 b9 5b fb df 90 11 f3 42 cb 39 7d ef c8 04 d6 af 0a d7 bd f9 00 aa 4a 5e e9 78 fb 80 65 84 a5 5a f8 81 54 37 39 63 cd e6 04 4f 7a bc 67 3d d8 0a b8 4d ee e7 bd 81 35 de ae 7b df 90 16 15 b3 49 78 cb f1 02 b9 49 d2 33 77 3d 35 60 48 a3 51 2f 16 9f 7b 01 11 45 3c ae b3 af 10 2b 8f de ab 75 73 de c0 89 d6 b8 3a cb cf 77 e4 05 9b a2 5f 19 d7 77 e4 04 da 67 37 e6 fc 80 36 f0 e6 9c eb de fc 80 53 37 55 57 3d ef c8 02 e6 cb 2a fb df 90 05 09 61 2f 16 9e 2b 77 e4 02 29 Data Ascii: Mx~@X&Wv 2JumWHEUstU 8sWV`J8pQo]76[B9}J^xeZT79cOzg=M5{IxI3w=5`HQ/{E<+us:w_wg76S7UW=*a/+w)
2024-04-23 20:32:08 UTC	423	IN	Data Raw: 80 54 4f 78 9d c0 28 6d a7 57 a3 00 a7 3c fd a0 15 56 b3 ed 01 8c 4d 53 cf 50 09 ca ab c7 da 02 5c eb 3a e6 02 a9 bd eb ea 01 47 47 59 c9 e6 01 c3 99 ac d2 b9 80 8e d9 f6 80 86 df 7f bc 04 56 ae 67 5c 1f b8 0a a6 8b 19 d7 16 04 49 4a 58 e7 c4 0b 38 39 97 8f 1f f8 80 62 d6 73 56 04 75 49 dd 56 f2 f1 02 fc 4f 74 04 c6 d7 35 6f 5c c0 4d 16 69 d7 88 16 8d 55 e3 ed 01 4e dc b7 00 f6 c5 fc c8 08 92 ce ba 00 51 17 45 5b c2 73 e2 02 13 96 dc ce 6f 3e 20 55 eb f1 01 4a 4d 79 bd a0 4d 26 b2 01 4d 33 6f 1d c0 4b a6 72 01 4c ac e7 2d 77 60 31 df 49 d0 0a eb 8f c5 39 b0 10 9c e7 38 ce 60 44 9b 8a 63 ed 01 4a cb f7 81 71 7a f8 81 29 2a 73 c7 70 1e 38 6f 1a 81 52 98 71 33 8c e7 c4 09 29 c5 ce b3 4a e7 c4 04 bc eb 38 ee 01 4d c9 37 c5 e9 da 03 48 ae 6f 7d de c0 6a 27 1e Data Ascii: TOx(mW<VMSP\:GGYVg\IJX89bsVuIVOt5o\MiUNQE[so> UJMyM&M3oKrL-w`1I98`DcJqz)*sp8oRq3)J8M7Ho}j'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49781	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:07 UTC	747	OUT	GET /js/menu.js HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:08 UTC	833	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:09 GMT Last-Modified: Wed, 30 Nov 2022 18:08:12 GMT Content-Type: application/javascript Content-Length: 393 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:08 UTC	393	IN	Data Raw: 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 24 28 22 23 6e 61 76 62 74 6e 22 29 2c 61 3d 24 28 22 23 74 6f 70 6e 61 76 20 6e 61 76 22 29 3b 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 77 69 64 74 68 28 29 3c 31 35 30 26 26 61 2e 68 61 73 43 6c 61 73 73 28 22 6b 65 65 70 2d 6e 61 76 2d 63 6c 6f 73 65 64 22 29 26 26 24 28 22 23 74 6f 70 6e 61 76 20 6e 61 76 22 29 2e 68 69 64 65 28 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 63 6c 61 73 73 22 29 2c 6e 2e 69 73 28 22 3a 68 69 64 64 65 6e 22 29 26 26 61 2e 69 73 28 22 3a 68 69 64 64 65 6e 22 29 26 26 24 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 3e 35 36 39 26 26 24 28 22 23 74 6f 70 6e 61 76 20 6e 61 76 22 29 2e 73 Data Ascii: $(function(){var n=$("#navbtn"),a=$("#topnav nav");$(window).on("resize",function(){$(this).width()<150&&a.hasClass("keep-nav-closed")&&$("#topnav nav").hide().removeAttr("class"),n.is(":hidden")&&a.is(":hidden")&&$(window).width()>569&&$("#topnav nav").s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49782	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:07 UTC	749	OUT	GET /js/global.js HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:08 UTC	834	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:09 GMT Last-Modified: Thu, 16 Feb 2023 21:11:24 GMT Content-Type: application/javascript Content-Length: 5748 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:08 UTC	5748	IN	Data Raw: 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 7c 7c 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 3d 6e 7c 7c 30 2c 74 68 69 73 2e 69 6e 64 65 78 4f 66 28 65 2c 6e 29 3d 3d 3d 6e 7d 29 2c 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 7c 7c 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2d 31 21 3d 3d 74 68 69 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 29 2c 77 69 6e 64 6f 77 2e 64 6e 63 5f 61 70 70 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 22 64 6e 63 5f 61 70 70 22 20 69 73 20 61 6c 72 65 61 64 79 20 Data Ascii: String.prototype.startsWith\|\|(String.prototype.startsWith=function(e,n){return n=n\|\|0,this.indexOf(e,n)===n}),String.prototype.includes\|\|(String.prototype.includes=function(e){return-1!==this.indexOf(e)}),window.dnc_app&&console.log('"dnc_app" is already

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49783	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:07 UTC	843	OUT	GET /images/foooter_background_gr.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.donotcall.gov/css/styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:08 UTC	799	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:09 GMT Last-Modified: Thu, 26 Dec 2019 17:35:34 GMT Content-Type: image/jpeg Content-Length: 7202 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:08 UTC	7202	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 01 46 00 b6 03 01 11 00 02 11 01 03 11 01 ff c4 00 6d 00 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 01 01 Data Ascii: JFIFddDucky<AdobedFm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49786	3.217.69.59	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:07 UTC	651	OUT	POST /api/contentsecuritypolicy HTTP/1.1 Host: telemetry.consumersentinel.gov Connection: keep-alive Content-Length: 983 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://www.donotcall.gov Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:07 UTC	983	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 6e 6f 74 63 61 6c 6c 2e 67 6f 76 2f 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c 61 74 65 64 2d 64 69 72 65 63 74 69 76 65 22 3a 22 63 6f 6e 6e 65 63 74 2d 73 72 63 22 2c 22 65 66 66 65 63 74 69 76 65 2d 64 69 72 65 63 74 69 76 65 22 3a 22 63 6f 6e 6e 65 63 74 2d 73 72 63 22 2c 22 6f 72 69 67 69 6e 61 6c 2d 70 6f 6c 69 63 79 22 3a 22 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 Data Ascii: {"csp-report":{"document-uri":"https://www.donotcall.gov/","referrer":"","violated-directive":"connect-src","effective-directive":"connect-src","original-policy":"default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gt
2024-04-23 20:32:08 UTC	448	IN	HTTP/1.1 204 No Content Date: Tue, 23 Apr 2024 20:32:07 GMT Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: TS012dcdf7=0121bc36220f1b8c995f629480c8bded7249323f00b674c6794d20b402f12bc5e792f348d96eb84fcdd4945b869243b41463a84922; Path=/; Domain=.telemetry.consumersentinel.gov; Secure; HTTPOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49788	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:08 UTC	828	OUT	GET /js/i18n/en-US.json HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:08 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:09 GMT Last-Modified: Wed, 30 Nov 2022 19:56:59 GMT Content-Type: application/json Content-Length: 46031 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:08 UTC	7015	IN	Data Raw: 7b 0d 0a 20 20 20 20 22 40 6d 65 74 61 64 61 74 61 22 3a 20 7b 20 22 6c 6f 63 61 6c 65 22 3a 20 22 65 6e 22 20 7d 2c 0d 0a 20 20 20 20 22 73 69 74 65 77 69 64 65 2e 70 61 67 65 2d 74 69 74 6c 65 22 3a 20 22 4e 61 74 69 6f 6e 61 6c 20 44 6f 20 4e 6f 74 20 43 61 6c 6c 20 52 65 67 69 73 74 72 79 22 2c 0d 0a 20 20 20 20 22 73 69 74 65 77 69 64 65 2e 4d 61 73 74 65 72 46 69 6c 65 53 69 74 65 48 65 61 64 65 72 22 20 3a 20 22 3c 68 65 61 64 65 72 20 63 6c 61 73 73 3d 5c 22 6d 61 69 6e 48 65 61 64 65 72 5c 22 3e 5c 72 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 6d 61 69 6e 48 65 61 64 65 72 5f 69 5f 69 6d 67 5c 22 3e 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 3a 2f 2f 66 74 63 2e 67 6f 76 5c 22 3e 3c 69 6d 67 20 73 72 63 3d 5c 22 2f 69 6d 61 67 65 73 2f 6d 61 73 Data Ascii: { "@metadata": { "locale": "en" }, "sitewide.page-title": "National Do Not Call Registry", "sitewide.MasterFileSiteHeader" : "<header class=\"mainHeader\">\r\n<div class=\"mainHeader_i_img\"><a href=\"http://ftc.gov\"><img src=\"/images/mas
2024-04-23 20:32:08 UTC	12890	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 62 72 20 2f 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 3c 6c 69 3e 41 66 74 65 72 20 79 6f 75 20 72 65 67 69 73 74 65 72 2c 20 3c 62 3e 6f 74 68 65 72 20 74 79 70 65 73 20 6f 66 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 20 6d 61 79 20 73 74 69 6c 6c 20 63 61 6c 6c 20 79 6f 75 3c 2f 62 3e 2c 20 73 75 63 68 20 61 73 20 63 68 61 72 69 74 69 65 73 2c 20 70 6f 6c 69 74 69 63 61 6c 5c 72 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 67 72 6f 75 70 73 2c 20 64 65 62 74 20 63 6f 6c 6c 65 63 74 6f 72 73 20 61 6e 64 20 73 75 72 76 65 79 73 2e 20 54 6f 20 6c 65 61 72 6e 20 6d 6f 72 65 2c 20 72 65 61 64 20 6f 75 72 20 3c 62 3e 3c 61 5c 72 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 5c 22 66 61 71 2e 68 74 6d Data Ascii: <br />\r\n <li>After you register, <b>other types of organizations may still call you</b>, such as charities, political\r\n groups, debt collectors and surveys. To learn more, read our <b><a\r\n href=\"faq.htm
2024-04-23 20:32:08 UTC	6445	IN	Data Raw: 69 6c 3c 2f 68 32 3e 3c 70 3e 20 59 6f 75 20 73 68 6f 75 6c 64 20 72 65 63 65 69 76 65 20 32 20 65 6d 61 69 6c 73 20 66 72 6f 6d 20 56 65 72 69 66 79 40 64 6f 6e 6f 74 63 61 6c 6c 2e 67 6f 76 20 77 69 74 68 69 6e 20 61 20 66 65 77 20 6d 69 6e 75 74 65 73 2e 3c 2f 70 3e 3c 70 3e 20 49 66 20 79 6f 75 72 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 69 73 20 72 65 67 69 73 74 65 72 65 64 2c 20 3c 62 3e 65 61 63 68 20 65 6d 61 69 6c 3c 2f 62 3e 20 77 69 6c 6c 20 74 65 6c 6c 20 79 6f 75 20 74 68 65 20 64 61 74 65 20 6f 66 20 72 65 67 69 73 74 72 61 74 69 6f 6e 2e 20 49 66 20 79 6f 75 72 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 69 73 20 6e 6f 74 20 72 65 67 69 73 74 65 72 65 64 20 61 6e 64 20 79 6f 75 20 77 61 6e 74 20 69 74 20 74 6f 20 62 65 2c 20 75 73 65 20 74 Data Ascii: il</h2><p> You should receive 2 emails from Verify@donotcall.gov within a few minutes.</p><p> If your phone number is registered, <b>each email</b> will tell you the date of registration. If your phone number is not registered and you want it to be, use t
2024-04-23 20:32:08 UTC	14179	IN	Data Raw: 6f 72 20 76 61 63 61 74 69 6f 6e 73 2e 3c 62 72 20 2f 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 62 72 2f 3e 20 3c 73 74 72 6f 6e 67 3e 52 65 6d 69 6e 64 65 72 3a 3c 2f 73 74 72 6f 6e 67 3e 20 45 76 65 6e 20 69 66 20 79 6f 75 72 20 6e 75 6d 62 65 72 20 69 73 20 72 65 67 69 73 74 65 72 65 64 2c 20 73 6f 6d 65 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 20 6d 61 79 20 73 74 69 6c 6c 20 63 61 6c 6c 20 79 6f 75 2c 20 73 75 63 68 20 61 73 20 63 68 61 72 69 74 69 65 73 2c 20 70 6f 6c 69 74 69 63 61 6c 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2c 20 61 6e 64 20 74 65 6c 65 70 68 6f 6e 65 20 73 75 72 76 65 79 6f 72 73 2e 20 46 6f 72 20 61 20 66 75 6c 6c 20 64 65 73 63 72 69 70 74 69 6f 6e 20 6f 66 20 77 68 6f 20 6d 61 79 20 73 74 69 6c 6c 20 63 61 6c 6c 20 79 6f 75 2c 20 Data Ascii: or vacations.<br /></li></ul><br/> <strong>Reminder:</strong> Even if your number is registered, some organizations may still call you, such as charities, political organizations, and telephone surveyors. For a full description of who may still call you,
2024-04-23 20:32:09 UTC	5156	IN	Data Raw: 72 74 2e 41 63 63 65 70 74 4d 61 69 6e 43 6f 6e 74 65 6e 74 4c 6f 63 61 6c 69 7a 65 52 65 73 6f 75 72 63 65 31 22 3a 20 22 3c 68 32 20 63 6c 61 73 73 3d 5c 22 73 70 5f 68 33 5f 74 5f 66 6f 72 6d 5c 22 3e 59 6f 75 72 20 43 6f 6d 70 6c 61 69 6e 74 20 48 61 73 20 42 65 65 6e 20 41 63 63 65 70 74 65 64 3c 2f 68 32 3e 3c 70 3e 20 54 68 61 6e 6b 20 79 6f 75 20 66 6f 72 20 66 69 6c 69 6e 67 20 79 6f 75 72 20 63 6f 6d 70 6c 61 69 6e 74 20 77 69 74 68 20 74 68 65 20 4e 61 74 69 6f 6e 61 6c 20 44 6f 20 4e 6f 74 20 43 61 6c 6c 20 52 65 67 69 73 74 72 79 2e 3c 2f 70 3e 3c 70 3e 20 44 6f 20 6e 6f 74 20 63 61 6c 6c 20 63 6f 6d 70 6c 61 69 6e 74 73 20 77 69 6c 6c 20 62 65 20 65 6e 74 65 72 65 64 20 69 6e 74 6f 20 61 20 73 65 63 75 72 65 20 6f 6e 6c 69 6e 65 20 64 61 74 Data Ascii: rt.AcceptMainContentLocalizeResource1": "<h2 class=\"sp_h3_t_form\">Your Complaint Has Been Accepted</h2><p> Thank you for filing your complaint with the National Do Not Call Registry.</p><p> Do not call complaints will be entered into a secure online dat
2024-04-23 20:32:09 UTC	346	IN	Data Raw: 65 66 3d 5c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 63 6f 6e 73 75 6d 65 72 2e 66 74 63 2e 67 6f 76 2f 74 6f 70 69 63 73 2f 6c 69 6d 69 74 69 6e 67 2d 75 6e 77 61 6e 74 65 64 2d 63 61 6c 6c 73 2d 65 6d 61 69 6c 73 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 5c 22 3e 4c 69 6d 69 74 69 6e 67 20 55 6e 77 61 6e 74 65 64 20 43 61 6c 6c 73 20 61 6e 64 20 45 6d 61 69 6c 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 63 6f 6e 73 75 6d 65 72 2e 66 74 63 2e 67 6f 76 2f 61 72 74 69 63 6c 65 73 2f 30 32 35 39 2d 72 6f 62 6f 63 61 6c 6c 73 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e Data Ascii: ef=\"http://www.consumer.ftc.gov/topics/limiting-unwanted-calls-emails\" target=\"_blank\" rel=\"noopener noreferrer\">Limiting Unwanted Calls and Emails</a></li><li><a href=\"http://www.consumer.ftc.gov/articles/0259-robocalls\" target=\"_blank\" rel=\"n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49787	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:08 UTC	828	OUT	GET /js/i18n/es-MX.json HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:08 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:09 GMT Last-Modified: Wed, 30 Nov 2022 19:57:00 GMT Content-Type: application/json Content-Length: 52825 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:08 UTC	10088	IN	Data Raw: 7b 0d 0a 20 20 20 20 22 40 6d 65 74 61 64 61 74 61 22 3a 20 7b 20 22 6c 6f 63 61 6c 65 22 3a 20 22 65 73 2d 6d 78 22 20 7d 2c 0d 0a 20 20 20 20 22 73 69 74 65 77 69 64 65 2e 70 61 67 65 2d 74 69 74 6c 65 22 3a 20 22 52 65 67 69 73 74 72 6f 20 4e 61 63 69 6f 6e 61 6c 20 4e 6f 20 4c 6c 61 6d 65 22 2c 0d 0a 20 20 20 20 22 73 69 74 65 77 69 64 65 2e 4d 61 73 74 65 72 46 69 6c 65 53 69 74 65 48 65 61 64 65 72 22 20 3a 20 22 3c 68 65 61 64 65 72 20 63 6c 61 73 73 3d 5c 22 6d 61 69 6e 48 65 61 64 65 72 5c 22 3e 5c 72 5c 6e 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 6d 61 69 6e 48 65 61 64 65 72 5f 69 5f 69 6d 67 5c 22 3e 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 74 63 2e 67 6f 76 2f 65 73 5c 22 3e 3c 69 6d 67 20 73 72 63 3d 5c 22 Data Ascii: { "@metadata": { "locale": "es-mx" }, "sitewide.page-title": "Registro Nacional No Llame", "sitewide.MasterFileSiteHeader" : "<header class=\"mainHeader\">\r\n <div class=\"mainHeader_i_img\"><a href=\"http://www.ftc.gov/es\"><img src=\"
2024-04-23 20:32:08 UTC	16384	IN	Data Raw: 5f 74 5f 66 6f 72 6d 5c 22 3e 50 61 73 6f 20 31 20 64 65 20 33 3c 2f 68 32 3e 3c 62 72 2f 3e 5c 72 5c 6e 3c 70 3e 20 53 69 20 75 73 74 65 64 20 63 6f 6d 70 61 72 74 65 20 63 75 61 6c 71 75 69 65 72 61 20 64 65 20 65 73 74 6f 73 20 6e 26 75 61 63 75 74 65 3b 6d 65 72 6f 73 20 74 65 6c 65 66 26 6f 61 63 75 74 65 3b 6e 69 63 6f 73 20 63 6f 6e 20 6f 74 72 61 73 20 70 65 72 73 6f 6e 61 73 2c 20 70 6f 72 20 66 61 76 6f 72 20 72 65 63 75 65 72 64 65 20 71 75 65 20 75 73 74 65 64 20 73 65 20 69 6e 73 63 72 69 62 65 20 65 6e 20 6e 6f 6d 62 72 65 20 64 65 20 74 6f 64 6f 73 20 6c 6f 73 20 75 73 75 61 72 69 6f 73 20 64 65 20 65 73 74 61 73 26 6e 62 73 70 3b 6c 26 69 61 63 75 74 65 3b 6e 65 61 73 20 74 65 6c 65 66 26 6f 61 63 75 74 65 3b 6e 69 63 61 73 2e 3c 2f 70 3e Data Ascii: _t_form\">Paso 1 de 3</h2><br/>\r\n<p> Si usted comparte cualquiera de estos números telefónicos con otras personas, por favor recuerde que usted se inscribe en nombre de todos los usuarios de estas líneas telefónicas.</p>
2024-04-23 20:32:08 UTC	5529	IN	Data Raw: 72 4d 65 73 73 61 67 65 2e 50 68 6f 6e 65 33 49 73 4e 6f 74 49 6e 43 6f 72 72 65 63 74 46 6f 72 6d 61 74 22 3a 20 22 3c 6c 69 3e 43 6f 72 72 69 6a 61 20 73 75 20 6e c3 ba 6d 65 72 6f 20 74 65 6c 65 66 c3 b3 6e 6f 20 65 6e 20 6c 69 6e 65 61 20 33 3a 20 45 6c 20 74 65 6c c3 a9 66 6f 6e 6f 20 64 65 62 65 20 73 65 72 20 75 6e 20 6e c3 ba 6d 65 72 6f 20 64 65 20 31 30 20 64 c3 ad 67 69 74 6f 73 3c 2f 6c 69 3e 22 2c 0d 0a 20 20 20 20 22 45 72 72 6f 72 4d 65 73 73 61 67 65 2e 41 72 65 61 43 6f 64 65 31 4e 6f 74 56 61 6c 69 64 22 3a 20 22 3c 6c 69 3e 43 6f 72 72 69 6a 61 20 73 75 20 63 c3 b3 64 69 67 6f 20 64 65 20 c3 a0 72 65 61 20 65 6e 20 6c 69 6e 65 61 20 31 3c 2f 6c 69 3e 22 2c 0d 0a 20 20 20 20 22 45 72 72 6f 72 4d 65 73 73 61 67 65 2e 41 72 65 61 43 6f 64 Data Ascii: rMessage.Phone3IsNotInCorrectFormat": "<li>Corrija su nmero telefno en linea 3: El telfono debe ser un nmero de 10 dgitos</li>", "ErrorMessage.AreaCode1NotValid": "<li>Corrija su cdigo de rea en linea 1</li>", "ErrorMessage.AreaCod
2024-04-23 20:32:09 UTC	12546	IN	Data Raw: 74 53 74 65 70 31 53 75 62 48 65 61 64 65 72 22 3a 20 22 3c 68 32 20 63 6c 61 73 73 3d 5c 22 73 70 5f 68 31 5f 74 5f 66 6f 72 6d 5f 73 5c 22 3e 50 41 53 4f 20 31 20 44 45 20 33 3c 2f 68 32 3e 22 2c 0d 0a 20 20 20 20 22 72 65 70 6f 72 74 2e 53 74 65 70 4f 6e 65 4c 61 62 65 6c 4f 6e 65 4c 6f 63 61 6c 69 7a 65 22 3a 20 22 3c 70 3e 20 50 72 65 67 75 6e 74 61 73 20 63 6f 6e 20 28 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 72 65 71 75 69 72 65 64 46 69 65 6c 64 5c 22 3e 2a 3c 2f 73 70 61 6e 3e 29 20 74 69 65 6e 65 6e 20 71 75 65 20 73 65 72 20 63 6f 6e 74 65 73 74 61 64 61 73 2e 3c 2f 70 3e 22 2c 0d 0a 20 20 20 20 22 72 65 70 6f 72 74 2e 50 68 6f 6e 65 4e 75 6d 62 65 72 4c 69 74 65 72 61 6c 52 65 73 6f 75 72 63 65 31 22 3a 20 22 c2 bf 43 c3 ba 61 6c 20 65 73 20 Data Ascii: tStep1SubHeader": "<h2 class=\"sp_h1_t_form_s\">PASO 1 DE 3</h2>", "report.StepOneLabelOneLocalize": "<p> Preguntas con (<span class=\"requiredField\">*</span>) tienen que ser contestadas.</p>", "report.PhoneNumberLiteralResource1": "Cal es
2024-04-23 20:32:09 UTC	8278	IN	Data Raw: 3e 2e 20 3c 62 72 3e 20 3c 62 72 2f 3e 53 69 20 75 6e 20 63 6f 62 72 61 64 6f 72 20 64 65 20 64 65 75 64 61 73 20 6e 6f 20 65 73 74 c3 a1 20 72 65 73 70 65 74 61 6e 64 6f 20 73 75 73 20 64 65 72 65 63 68 6f 73 2c 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 6e 73 75 6d 65 72 66 69 6e 61 6e 63 65 2e 67 6f 76 2f 65 73 2f 70 72 65 73 65 6e 74 61 72 2d 75 6e 61 2d 71 75 65 6a 61 2f 5c 22 20 74 69 74 6c 65 20 3d 20 5c 22 51 75 65 6a 61 20 73 6f 62 72 65 20 6c 6f 73 20 63 6f 6c 65 63 74 6f 72 65 73 20 64 65 20 64 65 75 64 61 73 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 5c 22 3e 52 45 50 4f 52 54 41 52 4c 41 20 41 51 55 c3 8d 3c 2f 61 3e Data Ascii: >. <br> <br/>Si un cobrador de deudas no est respetando sus derechos, <a href=\"https://www.consumerfinance.gov/es/presentar-una-queja/\" title = \"Queja sobre los colectores de deudas\" target=\"_blank\" rel=\"noopener noreferrer\">REPORTARLA AQU</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49789	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:08 UTC	591	OUT	GET /images/foooter_background_gr.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:08 UTC	799	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:09 GMT Last-Modified: Thu, 26 Dec 2019 17:35:34 GMT Content-Type: image/jpeg Content-Length: 7202 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:08 UTC	7202	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 01 46 00 b6 03 01 11 00 02 11 01 03 11 01 ff c4 00 6d 00 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 01 01 Data Ascii: JFIFddDucky<AdobedFm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49790	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:08 UTC	531	OUT	GET /manifest.json HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:08 UTC	830	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:09 GMT Last-Modified: Thu, 26 Dec 2019 17:35:34 GMT Content-Type: binary/octet-stream Content-Length: 720 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:08 UTC	720	IN	Data Raw: 7b 0a 20 22 6e 61 6d 65 22 3a 20 22 41 70 70 22 2c 0a 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 7b 0a 20 20 20 22 73 72 63 22 3a 20 22 5c 2f 61 6e 64 72 6f 69 64 2d 69 63 6f 6e 2d 33 36 78 33 36 2e 70 6e 67 22 2c 0a 20 20 20 22 73 69 7a 65 73 22 3a 20 22 33 36 78 33 36 22 2c 0a 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 5c 2f 70 6e 67 22 2c 0a 20 20 20 22 64 65 6e 73 69 74 79 22 3a 20 22 30 2e 37 35 22 0a 20 20 7d 2c 0a 20 20 7b 0a 20 20 20 22 73 72 63 22 3a 20 22 5c 2f 61 6e 64 72 6f 69 64 2d 69 63 6f 6e 2d 34 38 78 34 38 2e 70 6e 67 22 2c 0a 20 20 20 22 73 69 7a 65 73 22 3a 20 22 34 38 78 34 38 22 2c 0a 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 5c 2f 70 6e 67 22 2c 0a 20 20 20 22 64 65 6e 73 69 74 79 22 3a 20 22 31 2e 30 22 0a 20 20 7d Data Ascii: { "name": "App", "icons": [ { "src": "\/android-icon-36x36.png", "sizes": "36x36", "type": "image\/png", "density": "0.75" }, { "src": "\/android-icon-48x48.png", "sizes": "48x48", "type": "image\/png", "density": "1.0" }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49791	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:08 UTC	821	OUT	GET /images/favicon-32x32.png HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:08 UTC	798	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:09 GMT Last-Modified: Thu, 26 Dec 2019 17:35:33 GMT Content-Type: image/png Content-Length: 2024 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:08 UTC	2024	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 00 48 00 00 00 48 00 46 c9 6b 3e 00 00 05 5b 49 44 41 54 58 c3 ed 96 5b 6f 9c d5 15 86 9f fd 1d e7 7c f4 8c ed 78 1c 07 72 c0 63 07 d3 28 14 0a 6d 54 40 0a 20 b5 55 03 17 5c 70 16 fc 02 fe 06 12 42 95 4a cb 25 77 a5 48 14 90 5a aa b6 42 49 0a 0d 2d b1 83 9d c4 c6 99 c4 b1 63 88 cd cc 78 6c 4f be f1 7c e7 6f 73 e1 a6 6d e4 44 31 42 28 bd c8 92 f6 c5 be d8 7b 3f Data Ascii: PNGIHDR szzgAMAasRGB cHRMz&u0`:pQ<bKGDpHYsHHFk>[IDATX[o\|xrc(mT@ U\pBJ%wHZBI-cxlO\|osmD1B({?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49793	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:09 UTC	583	OUT	GET /images/favicon-32x32.png HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:09 UTC	798	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:10 GMT Last-Modified: Thu, 26 Dec 2019 17:35:33 GMT Content-Type: image/png Content-Length: 2024 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:09 UTC	2024	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 00 48 00 00 00 48 00 46 c9 6b 3e 00 00 05 5b 49 44 41 54 58 c3 ed 96 5b 6f 9c d5 15 86 9f fd 1d e7 7c f4 8c ed 78 1c 07 72 c0 63 07 d3 28 14 0a 6d 54 40 0a 20 b5 55 03 17 5c 70 16 fc 02 fe 06 12 42 95 4a cb 25 77 a5 48 14 90 5a aa b6 42 49 0a 0d 2d b1 83 9d c4 c6 99 c4 b1 63 88 cd cc 78 6c 4f be f1 7c e7 6f 73 e1 a6 6d e4 44 31 42 28 bd c8 92 f6 c5 be d8 7b 3f Data Ascii: PNGIHDR szzgAMAasRGB cHRMz&u0`:pQ<bKGDpHYsHHFk>[IDATX[o\|xrc(mT@ U\pBJ%wHZBI-cxlO\|osmD1B({?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49794	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:09 UTC	577	OUT	GET /js/i18n/en-US.json HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:09 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:10 GMT Last-Modified: Wed, 30 Nov 2022 19:56:59 GMT Content-Type: application/json Content-Length: 46031 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:09 UTC	11601	IN	Data Raw: 7b 0d 0a 20 20 20 20 22 40 6d 65 74 61 64 61 74 61 22 3a 20 7b 20 22 6c 6f 63 61 6c 65 22 3a 20 22 65 6e 22 20 7d 2c 0d 0a 20 20 20 20 22 73 69 74 65 77 69 64 65 2e 70 61 67 65 2d 74 69 74 6c 65 22 3a 20 22 4e 61 74 69 6f 6e 61 6c 20 44 6f 20 4e 6f 74 20 43 61 6c 6c 20 52 65 67 69 73 74 72 79 22 2c 0d 0a 20 20 20 20 22 73 69 74 65 77 69 64 65 2e 4d 61 73 74 65 72 46 69 6c 65 53 69 74 65 48 65 61 64 65 72 22 20 3a 20 22 3c 68 65 61 64 65 72 20 63 6c 61 73 73 3d 5c 22 6d 61 69 6e 48 65 61 64 65 72 5c 22 3e 5c 72 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 6d 61 69 6e 48 65 61 64 65 72 5f 69 5f 69 6d 67 5c 22 3e 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 3a 2f 2f 66 74 63 2e 67 6f 76 5c 22 3e 3c 69 6d 67 20 73 72 63 3d 5c 22 2f 69 6d 61 67 65 73 2f 6d 61 73 Data Ascii: { "@metadata": { "locale": "en" }, "sitewide.page-title": "National Do Not Call Registry", "sitewide.MasterFileSiteHeader" : "<header class=\"mainHeader\">\r\n<div class=\"mainHeader_i_img\"><a href=\"http://ftc.gov\"><img src=\"/images/mas
2024-04-23 20:32:09 UTC	11601	IN	Data Raw: 72 65 66 65 72 72 65 72 5c 22 3e 65 6d 61 69 6c 20 61 64 64 72 65 73 73 3c 2f 61 3e 20 4d 55 53 54 20 62 65 20 63 6f 72 72 65 63 74 20 74 6f 20 70 72 6f 63 65 73 73 20 79 6f 75 72 20 72 65 67 69 73 74 72 61 74 69 6f 6e 2e 3c 2f 70 3e 22 2c 0d 0a 20 20 20 20 22 72 65 67 69 73 74 65 72 2e 52 65 67 69 73 74 65 72 42 75 74 74 6f 6e 52 65 73 6f 75 72 63 65 32 22 20 3a 20 22 52 65 67 69 73 74 65 72 22 2c 0d 0a 20 20 20 20 22 72 65 67 69 73 74 65 72 2e 43 68 61 6e 67 65 42 75 74 74 6f 6e 52 65 73 6f 75 72 63 65 33 22 20 3a 20 22 43 68 61 6e 67 65 22 2c 0d 0a 20 20 20 20 22 72 65 67 69 73 74 65 72 2e 52 65 67 69 73 74 65 72 53 74 65 70 33 4d 61 69 6e 43 6f 6e 74 65 6e 74 54 69 74 6c 65 4c 6f 63 61 6c 69 7a 65 52 65 73 6f 75 72 63 65 31 22 20 3a 20 22 3c 68 32 20 Data Ascii: referrer\">email address</a> MUST be correct to process your registration.</p>", "register.RegisterButtonResource2" : "Register", "register.ChangeButtonResource3" : "Change", "register.RegisterStep3MainContentTitleLocalizeResource1" : "<h2
2024-04-23 20:32:09 UTC	13252	IN	Data Raw: 20 74 6f 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 73 20 77 69 74 68 20 55 53 20 61 72 65 61 20 63 6f 64 65 73 20 6f 6e 6c 79 2e 20 43 6c 69 63 6b 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 6c 6e 6e 74 65 2d 64 6e 63 6c 2e 67 63 2e 63 61 2f 65 6e 23 66 6f 72 43 6f 6e 73 75 6d 65 72 73 5c 22 20 74 69 74 6c 65 3d 5c 22 43 61 6e 61 64 69 61 6e 20 52 65 67 69 73 74 72 79 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 5c 22 3e 68 65 72 65 3c 2f 61 3e 20 74 6f 20 61 63 63 65 73 73 20 43 61 6e 61 64 61 27 73 20 4e 61 74 69 6f 6e 61 6c 20 44 6f 20 4e 6f 74 20 43 61 6c 6c 20 4c 69 73 74 2e 3c 2f 6c 69 3e 22 2c 0d 0a 20 20 20 20 22 45 72 72 6f 72 4d 65 73 73 61 67 Data Ascii: to phone numbers with US area codes only. Click <a href=\"https://lnnte-dncl.gc.ca/en#forConsumers\" title=\"Canadian Registry\" target=\"_blank\" rel=\"noopener noreferrer\">here</a> to access Canada's National Do Not Call List.</li>", "ErrorMessag
2024-04-23 20:32:09 UTC	8661	IN	Data Raw: 42 75 74 74 6f 6e 52 65 73 6f 75 72 63 65 31 22 3a 20 22 53 55 42 4d 49 54 22 2c 0d 0a 20 20 20 20 22 72 65 70 6f 72 74 2e 53 74 65 70 54 77 6f 43 61 6e 63 65 6c 42 75 74 74 6f 6e 52 65 73 6f 75 72 63 65 31 22 3a 20 22 43 41 4e 43 45 4c 22 2c 0d 0a 20 20 20 20 22 72 65 70 6f 72 74 2e 43 6f 6d 70 61 6e 79 44 6f 6e 65 42 75 73 69 6e 65 73 73 22 3a 20 22 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 73 6d 61 6c 6c 74 65 78 74 5c 22 3e 49 66 20 79 6f 75 20 68 61 76 65 20 64 6f 6e 65 20 62 75 73 69 6e 65 73 73 20 77 69 74 68 20 74 68 65 20 63 6f 6d 70 61 6e 79 20 77 69 74 68 69 6e 20 74 68 65 20 6c 61 73 74 20 31 38 20 6d 6f 6e 74 68 73 20 6f 72 20 68 61 76 65 20 72 65 71 75 65 73 74 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 69 74 20 77 69 74 68 Data Ascii: ButtonResource1": "SUBMIT", "report.StepTwoCancelButtonResource1": "CANCEL", "report.CompanyDoneBusiness": "<span class=\"smalltext\">If you have done business with the company within the last 18 months or have requested information from it with
2024-04-23 20:32:09 UTC	916	IN	Data Raw: 6e 65 74 68 65 6c 65 73 73 2c 20 74 68 65 20 46 54 43 20 61 6e 61 6c 79 7a 65 73 20 63 6f 6d 70 6c 61 69 6e 74 20 64 61 74 61 20 61 6e 64 20 74 72 65 6e 64 73 20 74 6f 20 69 64 65 6e 74 69 66 79 20 69 6c 6c 65 67 61 6c 20 63 61 6c 6c 65 72 73 20 62 61 73 65 64 20 6f 6e 20 63 61 6c 6c 69 6e 67 20 70 61 74 74 65 72 6e 73 2e 20 54 68 65 20 61 67 65 6e 63 79 20 61 6c 73 6f 20 69 73 20 70 75 72 73 75 69 6e 67 20 61 20 76 61 72 69 65 74 79 20 6f 66 20 74 65 63 68 6e 6f 6c 6f 67 79 2d 62 61 73 65 64 20 73 6f 6c 75 74 69 6f 6e 73 20 74 6f 20 63 6f 6d 62 61 74 20 69 6c 6c 65 67 61 6c 20 63 61 6c 6c 73 20 61 6e 64 20 70 72 61 63 74 69 63 65 73 2e 3c 2f 70 3e 20 20 20 20 20 3c 2f 73 70 61 6e 3e 20 3c 70 3e 3c 75 6c 3e 3c 6c 69 3e 3c 61 20 63 6c 61 73 73 3d 5c 22 41 Data Ascii: netheless, the FTC analyzes complaint data and trends to identify illegal callers based on calling patterns. The agency also is pursuing a variety of technology-based solutions to combat illegal calls and practices.</p> </span> <p><ul><li><a class=\"A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49796	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:09 UTC	820	OUT	GET /images/DNC-masthead.svg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:09 UTC	804	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:10 GMT Last-Modified: Wed, 30 Nov 2022 18:08:22 GMT Content-Type: image/svg+xml Content-Length: 107218 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:09 UTC	10090	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 36 30 20 31 34 33 22 3e 3c 64 65 66 73 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 22 20 78 31 3d 22 38 31 32 2e 39 33 36 22 20 79 31 3d 22 31 34 37 2e 30 35 33 22 20 78 32 3d 22 39 36 30 22 20 79 32 3d 22 31 34 37 2e 30 35 33 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 35 2e 35 33 35 33 36 20 30 20 30 20 2d 2e 37 37 36 38 39 20 2d 34 33 35 33 2e 39 34 33 20 32 30 30 2e 33 31 33 29 22 20 67 72 61 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 960 143"><defs><linearGradient id="linear-gradient" x1="812.936" y1="147.053" x2="960" y2="147.053" gradientTransform="matrix(5.53536 0 0 -.77689 -4353.943 200.313)" gra
2024-04-23 20:32:09 UTC	6445	IN	Data Raw: 38 2d 36 30 2e 38 35 31 2d 33 34 2e 34 39 35 2d 33 2e 37 30 36 2d 32 33 2e 31 31 35 20 31 37 2e 35 33 2d 34 36 2e 31 37 20 34 37 2e 34 33 32 2d 35 31 2e 34 39 37 20 32 39 2e 39 30 32 2d 35 2e 33 32 37 20 35 37 2e 31 34 36 20 39 2e 30 39 34 20 36 30 2e 38 35 31 20 33 32 2e 32 30 39 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 63 66 65 64 66 63 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 39 2e 35 34 31 20 35 35 2e 38 37 36 63 33 2e 37 20 32 33 2e 30 38 2d 31 37 2e 35 30 33 20 34 38 2e 33 38 37 2d 34 37 2e 33 35 38 20 35 33 2e 37 30 35 2d 32 39 2e 38 35 35 20 35 2e 33 32 2d 35 37 2e 30 35 36 2d 31 31 2e 33 36 36 2d 36 30 2e 37 35 35 2d 33 34 2e 34 34 36 2d 33 2e 37 2d 32 33 2e 30 38 20 31 37 2e 35 30 33 2d 34 36 2e 31 20 34 37 2e 33 35 38 2d 35 31 2e 34 Data Ascii: 8-60.851-34.495-3.706-23.115 17.53-46.17 47.432-51.497 29.902-5.327 57.146 9.094 60.851 32.209Z" style="fill:#cfedfc"/><path d="M129.541 55.876c3.7 23.08-17.503 48.387-47.358 53.705-29.855 5.32-57.056-11.366-60.755-34.446-3.7-23.08 17.503-46.1 47.358-51.4
2024-04-23 20:32:09 UTC	16384	IN	Data Raw: 32 38 2e 34 34 36 2d 35 2e 30 37 37 20 35 34 2e 33 36 33 20 38 2e 36 36 38 20 35 37 2e 38 38 38 20 33 30 2e 37 30 32 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 61 65 65 32 66 61 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 36 2e 39 30 35 20 35 36 2e 33 32 37 63 33 2e 35 32 20 32 31 2e 39 39 39 2d 31 36 2e 36 35 20 34 36 2e 32 32 37 2d 34 35 2e 30 34 38 20 35 31 2e 32 39 36 2d 32 38 2e 34 20 35 2e 30 37 2d 35 34 2e 32 37 34 2d 31 30 2e 39 34 2d 35 37 2e 37 39 33 2d 33 32 2e 39 33 39 2d 33 2e 35 32 2d 32 31 2e 39 39 38 20 31 36 2e 36 35 2d 34 33 2e 39 34 20 34 35 2e 30 34 38 2d 34 39 2e 30 31 20 32 38 2e 34 2d 35 2e 30 37 20 35 34 2e 32 37 34 20 38 2e 36 35 35 20 35 37 2e 37 39 33 20 33 30 2e 36 35 33 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 61 Data Ascii: 28.446-5.077 54.363 8.668 57.888 30.702Z" style="fill:#aee2fa"/><path d="M126.905 56.327c3.52 21.999-16.65 46.227-45.048 51.296-28.4 5.07-54.274-10.94-57.793-32.939-3.52-21.998 16.65-43.94 45.048-49.01 28.4-5.07 54.274 8.655 57.793 30.653Z" style="fill:#a
2024-04-23 20:32:09 UTC	511	IN	Data Raw: 37 2e 37 33 35 20 39 2e 31 33 36 2d 33 2e 36 37 31 20 37 2e 37 34 2d 31 34 2e 36 37 32 2d 32 2e 30 37 2d 32 33 2e 36 38 31 73 2d 33 34 2e 37 33 31 2d 33 30 2e 34 2d 36 31 2e 39 37 2d 33 30 2e 34 63 2d 32 37 2e 32 34 20 30 2d 35 39 2e 32 32 37 20 32 33 2e 31 30 32 2d 36 34 2e 33 31 37 20 33 32 2e 35 37 32 73 2e 38 39 20 32 30 2e 38 35 37 20 38 2e 30 31 33 20 32 32 2e 38 33 63 37 2e 30 39 36 20 31 2e 39 36 20 33 36 2e 38 34 37 20 36 2e 34 31 34 20 35 37 2e 30 34 36 20 36 2e 34 31 34 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 65 64 66 36 65 62 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 37 2e 31 32 38 20 31 31 35 2e 31 39 37 63 32 30 2e 33 35 35 20 30 20 35 34 2e 30 38 2d 34 2e 30 36 34 20 36 33 2e 31 39 33 2d 37 2e 37 33 34 20 39 2e 31 31 32 2d 33 2e 36 Data Ascii: 7.735 9.136-3.671 7.74-14.672-2.07-23.681s-34.731-30.4-61.97-30.4c-27.24 0-59.227 23.102-64.317 32.572s.89 20.857 8.013 22.83c7.096 1.96 36.847 6.414 57.046 6.414Z" style="fill:#edf6eb"/><path d="M77.128 115.197c20.355 0 54.08-4.064 63.193-7.734 9.112-3.6
2024-04-23 20:32:09 UTC	14041	IN	Data Raw: 36 2d 31 34 2e 36 39 34 2d 32 2e 30 35 37 2d 32 33 2e 36 38 2d 39 2e 37 39 33 2d 38 2e 39 38 35 2d 33 34 2e 35 38 34 2d 33 30 2e 32 36 33 2d 36 31 2e 37 37 34 2d 33 30 2e 32 36 33 2d 32 37 2e 31 39 20 30 2d 35 39 2e 30 35 20 32 32 2e 39 37 35 2d 36 34 2e 31 33 32 20 33 32 2e 34 33 73 2e 38 33 32 20 32 30 2e 38 37 20 37 2e 39 36 35 20 32 32 2e 38 35 34 63 37 2e 31 30 32 20 31 2e 39 37 32 20 33 36 2e 36 39 20 36 2e 33 39 31 20 35 36 2e 39 31 20 36 2e 33 39 31 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 65 63 66 35 65 39 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 37 2e 31 34 32 20 31 31 35 2e 30 37 31 63 32 30 2e 33 35 36 20 30 20 35 33 2e 39 31 38 2d 34 2e 30 36 33 20 36 32 2e 39 38 33 2d 37 2e 37 33 20 39 2e 30 36 35 2d 33 2e 36 36 36 20 37 2e 37 33 34 Data Ascii: 6-14.694-2.057-23.68-9.793-8.985-34.584-30.263-61.774-30.263-27.19 0-59.05 22.975-64.132 32.43s.832 20.87 7.965 22.854c7.102 1.972 36.69 6.391 56.91 6.391Z" style="fill:#ecf5e9"/><path d="M77.142 115.071c20.356 0 53.918-4.063 62.983-7.73 9.065-3.666 7.734
2024-04-23 20:32:09 UTC	16384	IN	Data Raw: 37 20 37 2e 36 34 36 2d 31 35 2e 33 32 39 2d 31 2e 36 35 39 2d 32 33 2e 36 36 34 73 2d 33 30 2e 34 38 2d 32 36 2e 34 35 31 2d 35 36 2e 32 38 38 2d 32 36 2e 34 35 31 53 32 32 2e 35 37 38 20 37 33 2e 33 30 35 20 31 37 2e 37 34 20 38 32 2e 33 35 34 73 2d 2e 37 34 34 20 32 31 2e 32 31 39 20 36 2e 36 33 32 20 32 33 2e 35 32 38 63 37 2e 32 37 33 20 32 2e 32 36 37 20 33 32 2e 33 31 20 35 2e 37 33 33 20 35 33 2e 30 39 38 20 35 2e 37 33 33 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 63 36 65 33 62 66 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 37 2e 34 37 37 20 31 31 31 2e 35 35 32 63 32 30 2e 33 35 36 20 30 20 34 39 2e 33 32 35 2d 34 2e 30 34 38 20 35 37 2e 30 39 2d 37 2e 36 33 33 20 37 2e 37 36 35 2d 33 2e 35 38 35 20 37 2e 36 34 35 2d 31 35 2e 33 34 2d 31 2e Data Ascii: 7 7.646-15.329-1.659-23.664s-30.48-26.451-56.288-26.451S22.578 73.305 17.74 82.354s-.744 21.219 6.632 23.528c7.273 2.267 32.31 5.733 53.098 5.733Z" style="fill:#c6e3bf"/><path d="M77.477 111.552c20.356 0 49.325-4.048 57.09-7.633 7.765-3.585 7.645-15.34-1.
2024-04-23 20:32:10 UTC	16255	IN	Data Raw: 2d 34 2e 30 32 39 20 35 30 2e 32 35 2d 37 2e 35 32 20 36 2e 32 35 35 2d 33 2e 34 39 20 37 2e 35 34 2d 31 36 2e 30 37 35 2d 31 2e 31 39 2d 32 33 2e 36 34 34 2d 38 2e 37 33 2d 37 2e 35 36 39 2d 32 35 2e 36 34 32 2d 32 31 2e 39 35 38 2d 34 39 2e 38 32 32 2d 32 31 2e 39 35 38 2d 32 34 2e 31 38 20 30 2d 34 38 2e 33 35 35 20 31 35 2e 32 37 32 2d 35 32 2e 39 30 35 20 32 33 2e 38 34 32 73 2d 32 2e 36 30 33 20 32 31 2e 36 33 20 35 2e 30 36 20 32 34 2e 33 32 33 63 37 2e 34 37 36 20 32 2e 36 31 36 20 32 37 2e 31 34 38 20 34 2e 39 35 37 20 34 38 2e 36 30 37 20 34 2e 39 35 37 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 39 38 63 66 39 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 37 2e 39 34 34 20 31 30 37 2e 34 30 34 63 32 30 2e 33 35 36 20 30 20 34 33 2e 39 31 33 Data Ascii: -4.029 50.25-7.52 6.255-3.49 7.54-16.075-1.19-23.644-8.73-7.569-25.642-21.958-49.822-21.958-24.18 0-48.355 15.272-52.905 23.842s-2.603 21.63 5.06 24.323c7.476 2.616 27.148 4.957 48.607 4.957Z" style="fill:#98cf90"/><path d="M77.944 107.404c20.356 0 43.913
2024-04-23 20:32:10 UTC	2164	IN	Data Raw: 31 30 33 2e 34 34 35 63 32 30 2e 33 35 35 20 30 20 33 38 2e 37 34 36 2d 34 2e 30 31 20 34 33 2e 35 31 36 2d 37 2e 34 30 38 20 34 2e 37 36 38 2d 33 2e 33 39 38 20 37 2e 34 33 38 2d 31 36 2e 38 2d 2e 37 33 35 2d 32 33 2e 36 32 36 2d 38 2e 31 37 33 2d 36 2e 38 32 35 2d 32 30 2e 39 35 32 2d 31 37 2e 36 30 32 2d 34 33 2e 35 35 32 2d 31 37 2e 36 30 32 2d 32 32 2e 36 30 31 20 30 2d 34 32 2e 37 34 35 20 31 31 2e 32 33 32 2d 34 37 2e 30 31 37 20 31 39 2e 33 33 38 73 2d 34 2e 34 30 34 20 32 32 2e 30 33 20 33 2e 35 33 38 20 32 35 2e 30 39 33 63 37 2e 36 37 20 32 2e 39 35 33 20 32 32 2e 31 34 20 34 2e 32 30 35 20 34 34 2e 32 35 20 34 2e 32 30 35 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 36 39 62 66 36 34 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 38 2e 34 35 34 Data Ascii: 103.445c20.355 0 38.746-4.01 43.516-7.408 4.768-3.398 7.438-16.8-.735-23.626-8.173-6.825-20.952-17.602-43.552-17.602-22.601 0-42.745 11.232-47.017 19.338s-4.404 22.03 3.538 25.093c7.67 2.953 22.14 4.205 44.25 4.205Z" style="fill:#69bf64"/><path d="M78.454
2024-04-23 20:32:10 UTC	16384	IN	Data Raw: 32 2e 30 34 33 20 31 30 2e 37 32 37 2d 34 36 2e 32 38 20 31 38 2e 37 37 34 73 2d 34 2e 36 33 20 32 32 2e 30 38 20 33 2e 33 34 38 20 32 35 2e 31 39 63 37 2e 36 39 35 20 32 2e 39 39 36 20 32 31 2e 35 31 34 20 34 2e 31 31 31 20 34 33 2e 37 30 35 20 34 2e 31 31 31 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 36 32 62 64 35 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 38 2e 35 32 32 20 31 30 32 2e 38 38 63 32 30 2e 33 35 36 20 30 20 33 38 2e 30 30 39 2d 34 2e 30 30 38 20 34 32 2e 35 37 2d 37 2e 33 39 33 20 34 2e 35 36 2d 33 2e 33 38 34 20 37 2e 34 32 33 2d 31 36 2e 39 30 32 2d 2e 36 37 2d 32 33 2e 36 32 33 2d 38 2e 30 39 36 2d 36 2e 37 32 31 2d 32 30 2e 32 39 33 2d 31 36 2e 39 39 2d 34 32 2e 36 37 32 2d 31 36 2e 39 39 2d 32 32 2e 33 37 39 20 30 2d 34 31 2e Data Ascii: 2.043 10.727-46.28 18.774s-4.63 22.08 3.348 25.19c7.695 2.996 21.514 4.111 43.705 4.111Z" style="fill:#62bd5e"/><path d="M78.522 102.88c20.356 0 38.009-4.008 42.57-7.393 4.56-3.384 7.423-16.902-.67-23.623-8.096-6.721-20.293-16.99-42.672-16.99-22.379 0-41.
2024-04-23 20:32:10 UTC	5529	IN	Data Raw: 2e 31 37 34 2e 38 36 38 61 32 2e 30 32 31 20 32 2e 30 32 31 20 30 20 30 20 30 20 2e 34 31 33 2d 2e 37 38 37 63 2d 2e 33 33 31 2d 34 2e 34 36 39 2d 2e 34 30 33 2d 39 2e 30 32 33 2d 2e 34 31 33 2d 31 33 2e 36 31 34 2d 2e 32 34 32 2d 31 2e 30 39 36 2d 31 2e 34 35 32 2d 31 2e 37 32 37 2d 32 2e 33 39 34 2d 32 2e 31 38 37 2d 2e 34 32 2d 2e 32 37 37 2d 2e 39 39 35 2d 2e 32 30 36 2d 31 2e 33 30 36 2d 2e 36 39 34 20 35 2e 30 36 35 2d 33 2e 36 33 32 20 31 30 2e 31 30 32 2d 36 2e 37 31 34 20 31 35 2e 33 34 31 2d 39 2e 38 38 34 5a 4d 34 36 2e 32 31 38 20 37 37 2e 38 34 39 6c 2e 34 38 33 2d 2e 36 30 37 61 37 2e 35 33 32 20 37 2e 35 33 32 20 30 20 30 20 31 20 35 2e 35 38 35 20 31 2e 30 30 33 20 37 35 2e 32 31 35 20 37 35 2e 32 31 35 20 30 20 30 20 30 20 2e 35 33 36 20 Data Ascii: .174.868a2.021 2.021 0 0 0 .413-.787c-.331-4.469-.403-9.023-.413-13.614-.242-1.096-1.452-1.727-2.394-2.187-.42-.277-.995-.206-1.306-.694 5.065-3.632 10.102-6.714 15.341-9.884ZM46.218 77.849l.483-.607a7.532 7.532 0 0 1 5.585 1.003 75.215 75.215 0 0 0 .536

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49801	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:09 UTC	577	OUT	GET /js/i18n/es-MX.json HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:09 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:10 GMT Last-Modified: Wed, 30 Nov 2022 19:57:00 GMT Content-Type: application/json Content-Length: 52825 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:09 UTC	10088	IN	Data Raw: 7b 0d 0a 20 20 20 20 22 40 6d 65 74 61 64 61 74 61 22 3a 20 7b 20 22 6c 6f 63 61 6c 65 22 3a 20 22 65 73 2d 6d 78 22 20 7d 2c 0d 0a 20 20 20 20 22 73 69 74 65 77 69 64 65 2e 70 61 67 65 2d 74 69 74 6c 65 22 3a 20 22 52 65 67 69 73 74 72 6f 20 4e 61 63 69 6f 6e 61 6c 20 4e 6f 20 4c 6c 61 6d 65 22 2c 0d 0a 20 20 20 20 22 73 69 74 65 77 69 64 65 2e 4d 61 73 74 65 72 46 69 6c 65 53 69 74 65 48 65 61 64 65 72 22 20 3a 20 22 3c 68 65 61 64 65 72 20 63 6c 61 73 73 3d 5c 22 6d 61 69 6e 48 65 61 64 65 72 5c 22 3e 5c 72 5c 6e 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 6d 61 69 6e 48 65 61 64 65 72 5f 69 5f 69 6d 67 5c 22 3e 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 74 63 2e 67 6f 76 2f 65 73 5c 22 3e 3c 69 6d 67 20 73 72 63 3d 5c 22 Data Ascii: { "@metadata": { "locale": "es-mx" }, "sitewide.page-title": "Registro Nacional No Llame", "sitewide.MasterFileSiteHeader" : "<header class=\"mainHeader\">\r\n <div class=\"mainHeader_i_img\"><a href=\"http://www.ftc.gov/es\"><img src=\"
2024-04-23 20:32:09 UTC	16384	IN	Data Raw: 5f 74 5f 66 6f 72 6d 5c 22 3e 50 61 73 6f 20 31 20 64 65 20 33 3c 2f 68 32 3e 3c 62 72 2f 3e 5c 72 5c 6e 3c 70 3e 20 53 69 20 75 73 74 65 64 20 63 6f 6d 70 61 72 74 65 20 63 75 61 6c 71 75 69 65 72 61 20 64 65 20 65 73 74 6f 73 20 6e 26 75 61 63 75 74 65 3b 6d 65 72 6f 73 20 74 65 6c 65 66 26 6f 61 63 75 74 65 3b 6e 69 63 6f 73 20 63 6f 6e 20 6f 74 72 61 73 20 70 65 72 73 6f 6e 61 73 2c 20 70 6f 72 20 66 61 76 6f 72 20 72 65 63 75 65 72 64 65 20 71 75 65 20 75 73 74 65 64 20 73 65 20 69 6e 73 63 72 69 62 65 20 65 6e 20 6e 6f 6d 62 72 65 20 64 65 20 74 6f 64 6f 73 20 6c 6f 73 20 75 73 75 61 72 69 6f 73 20 64 65 20 65 73 74 61 73 26 6e 62 73 70 3b 6c 26 69 61 63 75 74 65 3b 6e 65 61 73 20 74 65 6c 65 66 26 6f 61 63 75 74 65 3b 6e 69 63 61 73 2e 3c 2f 70 3e Data Ascii: _t_form\">Paso 1 de 3</h2><br/>\r\n<p> Si usted comparte cualquiera de estos números telefónicos con otras personas, por favor recuerde que usted se inscribe en nombre de todos los usuarios de estas líneas telefónicas.</p>
2024-04-23 20:32:09 UTC	6956	IN	Data Raw: 72 4d 65 73 73 61 67 65 2e 50 68 6f 6e 65 33 49 73 4e 6f 74 49 6e 43 6f 72 72 65 63 74 46 6f 72 6d 61 74 22 3a 20 22 3c 6c 69 3e 43 6f 72 72 69 6a 61 20 73 75 20 6e c3 ba 6d 65 72 6f 20 74 65 6c 65 66 c3 b3 6e 6f 20 65 6e 20 6c 69 6e 65 61 20 33 3a 20 45 6c 20 74 65 6c c3 a9 66 6f 6e 6f 20 64 65 62 65 20 73 65 72 20 75 6e 20 6e c3 ba 6d 65 72 6f 20 64 65 20 31 30 20 64 c3 ad 67 69 74 6f 73 3c 2f 6c 69 3e 22 2c 0d 0a 20 20 20 20 22 45 72 72 6f 72 4d 65 73 73 61 67 65 2e 41 72 65 61 43 6f 64 65 31 4e 6f 74 56 61 6c 69 64 22 3a 20 22 3c 6c 69 3e 43 6f 72 72 69 6a 61 20 73 75 20 63 c3 b3 64 69 67 6f 20 64 65 20 c3 a0 72 65 61 20 65 6e 20 6c 69 6e 65 61 20 31 3c 2f 6c 69 3e 22 2c 0d 0a 20 20 20 20 22 45 72 72 6f 72 4d 65 73 73 61 67 65 2e 41 72 65 61 43 6f 64 Data Ascii: rMessage.Phone3IsNotInCorrectFormat": "<li>Corrija su nmero telefno en linea 3: El telfono debe ser un nmero de 10 dgitos</li>", "ErrorMessage.AreaCode1NotValid": "<li>Corrija su cdigo de rea en linea 1</li>", "ErrorMessage.AreaCod
2024-04-23 20:32:09 UTC	11119	IN	Data Raw: 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 31 34 5c 22 3e 30 32 3a 30 30 20 50 20 4d 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 31 35 5c 22 3e 30 33 3a 30 30 20 50 20 4d 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 31 36 5c 22 3e 30 34 3a 30 30 20 50 20 4d 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 31 37 5c 22 3e 30 35 3a 30 30 20 50 20 4d 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 31 38 5c 22 3e 30 36 3a 30 30 20 50 20 4d 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 31 39 5c 22 3e 30 37 3a 30 30 20 50 20 4d 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 32 30 5c 22 3e 30 38 3a Data Ascii: tion value=\"14\">02:00 P M</option><option value=\"15\">03:00 P M</option><option value=\"16\">04:00 P M</option><option value=\"17\">05:00 P M</option><option value=\"18\">06:00 P M</option><option value=\"19\">07:00 P M</option><option value=\"20\">08:
2024-04-23 20:32:09 UTC	8278	IN	Data Raw: 3e 2e 20 3c 62 72 3e 20 3c 62 72 2f 3e 53 69 20 75 6e 20 63 6f 62 72 61 64 6f 72 20 64 65 20 64 65 75 64 61 73 20 6e 6f 20 65 73 74 c3 a1 20 72 65 73 70 65 74 61 6e 64 6f 20 73 75 73 20 64 65 72 65 63 68 6f 73 2c 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 6e 73 75 6d 65 72 66 69 6e 61 6e 63 65 2e 67 6f 76 2f 65 73 2f 70 72 65 73 65 6e 74 61 72 2d 75 6e 61 2d 71 75 65 6a 61 2f 5c 22 20 74 69 74 6c 65 20 3d 20 5c 22 51 75 65 6a 61 20 73 6f 62 72 65 20 6c 6f 73 20 63 6f 6c 65 63 74 6f 72 65 73 20 64 65 20 64 65 75 64 61 73 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 5c 22 3e 52 45 50 4f 52 54 41 52 4c 41 20 41 51 55 c3 8d 3c 2f 61 3e Data Ascii: >. <br> <br/>Si un cobrador de deudas no est respetando sus derechos, <a href=\"https://www.consumerfinance.gov/es/presentar-una-queja/\" title = \"Queja sobre los colectores de deudas\" target=\"_blank\" rel=\"noopener noreferrer\">REPORTARLA AQU</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49795	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:09 UTC	830	OUT	GET /images/FTC_DNC_main1_2_verify.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:09 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:10 GMT Last-Modified: Thu, 26 Dec 2019 17:35:32 GMT Content-Type: image/jpeg Content-Length: 23667 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:09 UTC	8553	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 c4 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 31 34 20 37 39 2e 31 35 36 37 39 37 2c 20 32 30 31 34 2f 30 38 2f 32 30 2d 30 39 3a 35 33 3a 30 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckydhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xm
2024-04-23 20:32:09 UTC	15114	IN	Data Raw: ff 00 de 39 9c f6 c7 77 2e 20 5d 8c af b9 d5 00 d1 56 22 34 c5 d9 4d 20 af 29 63 97 0a e7 2b cb 39 16 13 0c 80 e9 ac 93 2e 2e 0c bd 6a 6d 26 ea 44 64 34 6f 4f 8b 0c 11 79 d0 ee 8c c7 ab 9d bc 77 36 ae 9e f3 2c ae ad 5d de 4d 12 e6 1a 7a 51 36 a2 47 44 c7 ad f6 35 a1 d4 72 89 e4 e6 9a b7 44 d2 b3 c9 d2 14 9a 81 69 26 f8 8f 39 2e 40 d2 4d 40 6f 3e 0c e1 c6 f1 78 39 05 78 1d e1 4b bb aa 7f 93 ef 45 6b 47 da 2f 89 1e cc 59 7d 91 b6 13 e9 3a c1 b7 7e ca 5d c4 47 aa 37 c3 90 91 b9 6e 41 1b 8a be 7e 24 11 20 89 04 5f 72 74 ba 53 14 7b fd cf 5f db 8e 2a 93 0d ab b7 22 42 95 16 fd 2f c0 f2 70 7f e4 88 f0 c5 3d 91 d7 2b ff 00 0e a1 53 92 df a5 f8 1e 3f 74 02 28 1c 8e a1 6d 46 1d 42 a4 bd 3a 7d 15 3d 38 fd cd 46 2a b5 74 2f bc 11 20 89 04 48 22 41 12 08 90 44 82 24 Data Ascii: 9w. ]V"4M )c+9..jm&Dd4oOyw6,]MzQ6GD5rDi&9.@M@o>x9xKEkG/Y}:~]G7nA~$ _rtS{_"B/p=+S?t(mFB:}=8Ft/ H"AD$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49800	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:09 UTC	830	OUT	GET /images/FTC_DNC_main1_3_submit.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:09 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:10 GMT Last-Modified: Thu, 26 Dec 2019 17:35:32 GMT Content-Type: image/jpeg Content-Length: 19887 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:09 UTC	8554	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 c4 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 31 34 20 37 39 2e 31 35 36 37 39 37 2c 20 32 30 31 34 2f 30 38 2f 32 30 2d 30 39 3a 35 33 3a 30 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckydhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xm
2024-04-23 20:32:09 UTC	11333	IN	Data Raw: 07 48 06 13 cb db 80 33 42 4d 64 fa c0 38 5a 33 99 99 1c 7f 4c 0f 1d bf fd c8 62 2c b8 73 a2 7f 84 5a 79 17 39 69 f7 3e 4b d5 57 77 cc 49 6f 52 06 b6 4b cb 98 ab 96 6f 2a 59 98 70 78 7c e5 ae db 53 73 5a bb 90 60 a9 32 cb e6 e6 6c 52 90 f2 cb 3d cb 29 4e 42 55 73 fd 4b 30 99 2c 68 65 e5 98 90 10 33 34 c0 18 c6 be f1 af 85 f9 2e 51 97 fc 47 a7 d6 ec 96 09 ad be 07 b5 63 e1 c1 e3 f4 6c 78 28 7e a9 c8 ac ec d7 bc 6c 16 dc 4f 0e 94 03 09 c6 6a cd e5 6a e3 53 4e 31 2b 75 ab 71 ae 13 61 58 d8 86 32 96 56 79 b7 9b 86 d2 02 61 da 03 f2 30 cd 8e 3b d1 d7 fa 72 bd 52 bc bd 4f 97 0d 9e 55 f8 8e 74 3d 75 eb 8f c3 87 e3 21 93 1b 5a 64 51 00 48 57 a2 f6 f7 65 5b cd 71 f6 09 d2 fb 78 36 d9 4d 82 4c 9b f2 5c eb 89 de e0 48 6b a1 15 98 d5 9d 78 95 29 29 a5 65 93 e4 c8 80 Data Ascii: H3BMd8Z3Lb,sZy9i>KWwIoRKo*Ypx\|SsZ`2lR=)NBUsK0,he34.QGclx(~lOjjSN1+uqaX2Vya0;rROUt=u!ZdQHWe[qx6ML\Hkx))e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49797	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:09 UTC	832	OUT	GET /images/FTC_DNC_main1_1_register.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:09 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:10 GMT Last-Modified: Thu, 26 Dec 2019 17:35:32 GMT Content-Type: image/jpeg Content-Length: 21936 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:09 UTC	8554	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 c4 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 31 34 20 37 39 2e 31 35 36 37 39 37 2c 20 32 30 31 34 2f 30 38 2f 32 30 2d 30 39 3a 35 33 3a 30 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckydhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xm
2024-04-23 20:32:09 UTC	1289	IN	Data Raw: 93 ef 03 c5 21 6a a4 38 26 3e 7f ea 0f fa c9 d7 41 01 a0 eb c0 1d 9d 7e 45 b2 37 b3 bb b9 35 0b 76 55 82 a5 78 af 43 71 38 ee 6b df 46 e9 13 37 00 e9 ba 74 cd 8d 98 63 d7 10 3e 9d 66 5b 86 b9 55 24 a6 a7 2d 40 03 6e 73 45 b6 9d 50 94 0a eb 31 52 65 66 9a fd aa 4c a6 6e fb 1d e8 cd 6d d5 58 5e e7 bc 14 3e 8e 55 be 0f b1 3b 6f 31 c9 98 70 29 19 95 5e e2 1b 26 15 05 c8 ae 46 6a 92 73 8d 1b 74 42 71 53 53 d8 21 30 81 62 9b 26 37 28 c1 17 94 2e 56 d9 6c 83 40 67 da 3c b2 c8 b7 12 a2 eb f7 36 d4 2e a5 d8 e7 9c 95 66 ac f0 57 4e 2a a2 da 3a 2f e7 11 a9 c3 97 53 c7 f3 ee ba e6 8b 4a 00 1f 72 4a 13 6c 03 00 01 ab 63 b9 85 93 25 bc dd ec 36 b3 bc 2d 2e 63 5c 46 cd e7 87 18 08 f3 6e 91 d5 20 90 48 2b 6b be 62 d5 f8 ed 9e 8e e3 5f a7 a4 c1 23 9f 42 35 eb eb d8 5e a4 Data Ascii: !j8&>A~E75vUxCq8kF7tc>f[U$-@nsEP1RefLnmX^>U;o1p)^&FjstBqSS!0b&7(.Vl@g<6.fWN*:/SJrJlc%6-.c\Fn H+kb_#B5^
2024-04-23 20:32:09 UTC	10312	IN	Data Raw: 04 be 32 dd 25 70 9b 4f 95 22 83 e5 5d 4a 69 44 35 fb 90 40 35 d0 22 da aa b4 a3 b6 f2 e5 7c 72 ca 2a 29 1b ac de 19 ec e5 c3 db f9 92 ed f3 8a c8 ad 4b 78 6d b4 5d fd 77 2d 6a 91 47 7b 41 61 90 6e 67 6a 02 c2 7f d0 0e f9 4a 9b 01 26 55 41 3d 64 f4 c4 04 24 19 a9 81 92 f3 11 69 83 bc 9b 1b 32 2b d9 9f a5 8f 29 38 b3 99 45 6e cd af c8 d5 cb ac e0 59 b4 77 22 ce 31 93 cc d2 5c 62 15 b7 74 ce ab a9 1c 22 a0 a0 b8 b4 96 b6 4d d0 54 b0 9a 28 61 18 49 09 10 00 d7 94 1a 47 19 b7 0a b0 ae 24 b4 0c 92 8c ba bc 08 03 bc 41 00 72 0d ad 02 3d 43 f3 29 0f 0e e2 5e 4d 82 9f fa 0f f2 e3 b4 18 1e cf 56 1d 5f 99 43 4f 68 12 ec 13 bf 76 d3 76 95 eb 22 4c 53 4b 5d 8b 24 fa 7f fd 18 1f 28 12 ea 3a 4a da 05 93 a4 75 97 66 89 e7 4e 09 7d 78 3e 4c 42 7e ec 16 23 8d de f3 0c 7f Data Ascii: 2%pO"]JiD5@5"\|r*)Kxm]w-jG{AangjJ&UA=d$i2+)8EnYw"1\bt"MT(aIG$Ar=C)^MV_COhvv"LSK]$(:JufN}x>LB~#
2024-04-23 20:32:09 UTC	1289	IN	Data Raw: 78 79 c3 fb ed 55 f2 d7 64 b9 5b f2 46 d4 52 5c 44 c7 cc 13 d9 26 82 9c 4b 78 7f 4f 25 cf a7 9c c7 be 00 c5 8c 73 4c c2 06 ec de de 0d d7 fc 38 02 28 ca f4 80 6c 48 2f a9 04 48 22 41 12 08 90 45 54 f8 a0 a9 f4 47 d2 bc c4 dc c7 8a 3e 37 6b a8 f2 7c 5c f1 df c4 ce 77 87 f7 3f d2 3f 27 fb e8 c8 fa 1a 76 e6 fc 74 e8 7a 4f fc 3b db bf 9d 61 bd 23 6a df e8 f9 7a 7e 8b e7 dc df fc cb 29 bb d8 31 55 52 db 5d 73 57 f5 ae 9a 15 6d f5 d4 31 d2 5c 7d 1b 4e 4b 7e e2 06 80 70 4c 86 9a 8c 8e c1 fd f2 01 e3 3b d2 ba f1 3a f1 df 08 16 8b d7 e2 11 fc ba af ed 7c 8a b8 7b b2 71 40 5e 71 9f c1 d5 e6 37 1b 58 88 ea d2 73 ff 00 a4 f9 f6 ea 56 22 62 bc ab 50 82 20 1c 22 01 db 8f bb ae e6 2b e4 42 43 75 dc c5 7d 48 6e bb 98 af bb ae e6 2b e0 cd 28 6b a8 80 72 46 70 9b 51 0f 92 Data Ascii: xyUd[FR\D&KxO%sL8(lH/H"AETG>7k\|\w??'vtzO;a#jz~)1UR]sWm1\}NK~pL;:\|{q@^q7XsV"bP "+BCu}Hn+(krFpQ
2024-04-23 20:32:09 UTC	492	IN	Data Raw: 8f 67 4e 75 e7 27 c4 05 cb bf 3b f3 77 b7 fc 41 e9 2d ba 43 bd bb d6 1b 76 ee eb cd bd ca b2 01 76 25 b7 1f 7b c7 50 5d f9 d0 3e f6 e2 97 30 3a fc 63 96 50 48 04 ce 4e d9 cd 0c fc af 91 c1 a0 04 a3 36 bc 1b 62 58 ba b6 d8 6d 45 b7 62 05 24 35 71 8f e6 00 95 08 d8 dd 75 6d dc 3a c2 d2 eb cc 76 02 07 67 7b b5 ec f5 39 60 b5 3c c8 4b 51 85 53 ab 9d 5e c7 3c a2 4b a6 9c 62 ad 3a e3 6f df f6 fe f0 d2 ac 9c 33 eb f7 2a 2b be 5b 6c a0 54 ed 79 3f 5d 21 d2 f2 55 a5 fb 61 8a fc 11 43 72 fb 1f 0f c5 40 99 8c de e3 2a 1f 46 aa 9e ab f2 13 20 0f cc bd 38 c0 b2 6e 2f b8 0a 1c df 1b 2d b8 f8 4d 2d 55 17 48 36 ed 95 df 26 67 5a 0d 3f a5 41 83 74 a9 17 ab 52 99 53 25 0f d3 97 c0 18 a1 4e ad 10 ab da 90 cd 3a 35 25 0e dc a1 11 aa 9a e3 35 df 58 1b a3 e6 3f 99 23 aa be 24 Data Ascii: gNu';wA-Cvv%{P]>0:cPHN6bXmEb$5qum:vg{9`<KQS^<Kb:o3+[lTy?]!UaCr@F 8n/-M-UH6&gZ?AtRS%N:5%5X?#$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49799	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:09 UTC	820	OUT	GET /images/submit_gr_sm.gif HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:09 UTC	798	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:10 GMT Last-Modified: Thu, 26 Dec 2019 17:35:34 GMT Content-Type: image/gif Content-Length: 3374 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:09 UTC	3374	IN	Data Raw: 47 49 46 38 39 61 71 00 4f 00 f7 00 00 6b 6b 6b aa de 76 ba cf a4 c6 f8 94 fe fe fe e0 ff c0 83 ab 5b c2 f4 91 e8 ff d0 ac dd 7a a4 d5 72 47 5d 32 b4 e5 82 b0 e2 7e ea ea ea ba ec 89 da ff ab d2 ff a4 ea ff cc a7 d9 74 df ff bd 8f b8 66 ab ab ab cf cf cf b7 e9 86 c9 fc 96 a4 cd 79 a1 a1 a1 d5 ff a9 f7 ff ed d1 ff 9e c0 f2 8f c4 f5 92 be f0 8d 52 69 3c 78 78 78 c0 f1 8e d7 ff ad fd ff fa cb fc 98 e3 ff bd f4 ff dd 9f 9f 9f 40 40 41 b2 e4 81 bc ee 8c 29 35 1d ef ff dd b9 eb 88 fe ff fd a6 d7 74 33 33 33 92 92 92 da ff b4 5b 77 3f d3 d3 d3 bb ed 8a e2 ff c4 ec ff d6 e7 ff cd 8b 8b 8b ef ef ef c4 f8 92 7d a2 57 a2 d3 71 ae e0 7d eb ff d5 a9 da 78 ae dc 81 e2 e2 e2 a9 ca 88 b6 b6 b6 f4 ff e8 96 bf 6e fa ff f5 1c 1c 1c c9 fa 96 3e 4c 2e f2 ff e4 e4 ff c8 b6 e8 Data Ascii: GIF89aqOkkkv[zrG]2~tfyRi<xxx@@A)5t333[w?}Wq}xn>L.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49798	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:09 UTC	820	OUT	GET /images/verify_bl_sm.gif HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:09 UTC	798	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:10 GMT Last-Modified: Thu, 26 Dec 2019 17:35:34 GMT Content-Type: image/gif Content-Length: 4059 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:09 UTC	4059	IN	Data Raw: 47 49 46 38 39 61 71 00 4f 00 f7 00 00 36 37 37 87 a4 b3 d5 d5 d5 90 da ff 16 27 30 17 18 18 81 d5 ff ba e8 ff dc f3 ff fc fe ff 84 84 84 84 d5 ff e8 f7 ff 8d d9 ff 6c c5 f2 dc dc dc a9 e2 ff f8 fc ff f3 fb ff b6 b6 b6 a3 a3 a3 f5 f5 f5 bb bb bb e5 e5 e5 46 7f 9d f8 f8 f8 ca f6 ff 98 e5 ff a2 e0 ff b2 eb ff ec f8 ff ea ea ea da f2 ff f4 fb ff c5 f5 ff ae e4 ff ea f8 ff 93 93 93 96 dc ff 2b 48 57 8b 8b 8b dc fb ff 45 45 45 63 63 63 cd ee ff ee ee ee 7b 7b 7b 5b 5b 5b 52 52 52 d4 f0 ff de f4 ff 8a d8 ff d2 f0 ff d0 ef ff e5 f6 ff f6 fc ff 73 8b 96 c6 ec ff 7c d3 ff 3b 6c 83 c8 ed ff 39 66 7e d4 f9 ff 80 eb ff 84 da ff 9d 9d 9e 78 c6 eb ce ef ff d9 f2 ff 49 49 49 e0 f4 ff fc fc fc ee f9 ff cd cd cd 88 d7 ff fa fd ff ac e3 ff 98 dc ff 93 a8 b3 c0 ea ff 7e d4 Data Ascii: GIF89aqO677'0lF+HWEEEccc{{{[[[RRRs\|;l9f~xIII~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49803	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:10 UTC	822	OUT	GET /images/register_or_sm.gif HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:10 UTC	798	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:11 GMT Last-Modified: Thu, 26 Dec 2019 17:35:34 GMT Content-Type: image/gif Content-Length: 3972 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:10 UTC	3972	IN	Data Raw: 47 49 46 38 39 61 71 00 4f 00 f7 00 00 50 35 1b ff e2 c5 ff ce 9c ff c2 85 ff e5 ca dc dc dc 63 63 63 ff b1 61 04 04 03 ff fd ea ff d5 aa ff b4 69 ff b9 71 ff d3 a5 ff ba 75 c4 c3 c2 7b 7b 7b fe fe fd ff b6 6c ff b2 63 ab ab ab ea dd ca ff fc f9 8c 8c 8c ff aa 54 ff bf 7e 44 2c 16 eb eb eb ff ae 5c ff e8 cd 9a 9a 9a ff fc f8 51 51 51 b6 79 3b e6 e6 e6 93 93 93 ff e6 cb ce 9b 65 ff ca 94 ff ec d8 a4 a4 a4 6d 6d 6d fa fa fa ff e8 d0 ff fa f5 ff cc 96 ff b0 56 ff f6 ec ff b3 58 f5 f5 f5 ff ee dc 85 77 69 ff df bd c8 c8 c8 ff eb d4 5c 5c 5c b3 b3 b3 a3 6c 35 39 39 39 ff d7 ae ff d6 ac ff e0 c0 ff c8 8e ff d0 a0 ff ad 58 ff d1 a3 ff f4 e8 e7 9c 4d dd cb b7 ff f8 f0 ff af 5e 66 44 21 ff f7 ee f2 f2 f2 ff c8 90 ff f9 f2 45 45 45 a5 95 83 ff c4 7a ff f3 e6 ff c4 Data Ascii: GIF89aqOP5cccaiqu{{{lcT~D,\QQQy;emmmVXwi\\\l5999XM^fD!EEEz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49804	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:10 UTC	582	OUT	GET /images/submit_gr_sm.gif HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:10 UTC	798	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:11 GMT Last-Modified: Thu, 26 Dec 2019 17:35:34 GMT Content-Type: image/gif Content-Length: 3374 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:10 UTC	3374	IN	Data Raw: 47 49 46 38 39 61 71 00 4f 00 f7 00 00 6b 6b 6b aa de 76 ba cf a4 c6 f8 94 fe fe fe e0 ff c0 83 ab 5b c2 f4 91 e8 ff d0 ac dd 7a a4 d5 72 47 5d 32 b4 e5 82 b0 e2 7e ea ea ea ba ec 89 da ff ab d2 ff a4 ea ff cc a7 d9 74 df ff bd 8f b8 66 ab ab ab cf cf cf b7 e9 86 c9 fc 96 a4 cd 79 a1 a1 a1 d5 ff a9 f7 ff ed d1 ff 9e c0 f2 8f c4 f5 92 be f0 8d 52 69 3c 78 78 78 c0 f1 8e d7 ff ad fd ff fa cb fc 98 e3 ff bd f4 ff dd 9f 9f 9f 40 40 41 b2 e4 81 bc ee 8c 29 35 1d ef ff dd b9 eb 88 fe ff fd a6 d7 74 33 33 33 92 92 92 da ff b4 5b 77 3f d3 d3 d3 bb ed 8a e2 ff c4 ec ff d6 e7 ff cd 8b 8b 8b ef ef ef c4 f8 92 7d a2 57 a2 d3 71 ae e0 7d eb ff d5 a9 da 78 ae dc 81 e2 e2 e2 a9 ca 88 b6 b6 b6 f4 ff e8 96 bf 6e fa ff f5 1c 1c 1c c9 fa 96 3e 4c 2e f2 ff e4 e4 ff c8 b6 e8 Data Ascii: GIF89aqOkkkv[zrG]2~tfyRi<xxx@@A)5t333[w?}Wq}xn>L.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49805	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:10 UTC	582	OUT	GET /images/verify_bl_sm.gif HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:10 UTC	798	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:11 GMT Last-Modified: Thu, 26 Dec 2019 17:35:34 GMT Content-Type: image/gif Content-Length: 4059 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:10 UTC	4059	IN	Data Raw: 47 49 46 38 39 61 71 00 4f 00 f7 00 00 36 37 37 87 a4 b3 d5 d5 d5 90 da ff 16 27 30 17 18 18 81 d5 ff ba e8 ff dc f3 ff fc fe ff 84 84 84 84 d5 ff e8 f7 ff 8d d9 ff 6c c5 f2 dc dc dc a9 e2 ff f8 fc ff f3 fb ff b6 b6 b6 a3 a3 a3 f5 f5 f5 bb bb bb e5 e5 e5 46 7f 9d f8 f8 f8 ca f6 ff 98 e5 ff a2 e0 ff b2 eb ff ec f8 ff ea ea ea da f2 ff f4 fb ff c5 f5 ff ae e4 ff ea f8 ff 93 93 93 96 dc ff 2b 48 57 8b 8b 8b dc fb ff 45 45 45 63 63 63 cd ee ff ee ee ee 7b 7b 7b 5b 5b 5b 52 52 52 d4 f0 ff de f4 ff 8a d8 ff d2 f0 ff d0 ef ff e5 f6 ff f6 fc ff 73 8b 96 c6 ec ff 7c d3 ff 3b 6c 83 c8 ed ff 39 66 7e d4 f9 ff 80 eb ff 84 da ff 9d 9d 9e 78 c6 eb ce ef ff d9 f2 ff 49 49 49 e0 f4 ff fc fc fc ee f9 ff cd cd cd 88 d7 ff fa fd ff ac e3 ff 98 dc ff 93 a8 b3 c0 ea ff 7e d4 Data Ascii: GIF89aqO677'0lF+HWEEEccc{{{[[[RRRs\|;l9f~xIII~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49806	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:10 UTC	592	OUT	GET /images/FTC_DNC_main1_3_submit.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:10 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:11 GMT Last-Modified: Thu, 26 Dec 2019 17:35:32 GMT Content-Type: image/jpeg Content-Length: 19887 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:10 UTC	8553	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 c4 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 31 34 20 37 39 2e 31 35 36 37 39 37 2c 20 32 30 31 34 2f 30 38 2f 32 30 2d 30 39 3a 35 33 3a 30 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckydhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xm
2024-04-23 20:32:10 UTC	11334	IN	Data Raw: 6c 07 48 06 13 cb db 80 33 42 4d 64 fa c0 38 5a 33 99 99 1c 7f 4c 0f 1d bf fd c8 62 2c b8 73 a2 7f 84 5a 79 17 39 69 f7 3e 4b d5 57 77 cc 49 6f 52 06 b6 4b cb 98 ab 96 6f 2a 59 98 70 78 7c e5 ae db 53 73 5a bb 90 60 a9 32 cb e6 e6 6c 52 90 f2 cb 3d cb 29 4e 42 55 73 fd 4b 30 99 2c 68 65 e5 98 90 10 33 34 c0 18 c6 be f1 af 85 f9 2e 51 97 fc 47 a7 d6 ec 96 09 ad be 07 b5 63 e1 c1 e3 f4 6c 78 28 7e a9 c8 ac ec d7 bc 6c 16 dc 4f 0e 94 03 09 c6 6a cd e5 6a e3 53 4e 31 2b 75 ab 71 ae 13 61 58 d8 86 32 96 56 79 b7 9b 86 d2 02 61 da 03 f2 30 cd 8e 3b d1 d7 fa 72 bd 52 bc bd 4f 97 0d 9e 55 f8 8e 74 3d 75 eb 8f c3 87 e3 21 93 1b 5a 64 51 00 48 57 a2 f6 f7 65 5b cd 71 f6 09 d2 fb 78 36 d9 4d 82 4c 9b f2 5c eb 89 de e0 48 6b a1 15 98 d5 9d 78 95 29 29 a5 65 93 e4 c8 Data Ascii: lH3BMd8Z3Lb,sZy9i>KWwIoRKo*Ypx\|SsZ`2lR=)NBUsK0,he34.QGclx(~lOjjSN1+uqaX2Vya0;rROUt=u!ZdQHWe[qx6ML\Hkx))e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49807	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:10 UTC	592	OUT	GET /images/FTC_DNC_main1_2_verify.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:10 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:11 GMT Last-Modified: Thu, 26 Dec 2019 17:35:32 GMT Content-Type: image/jpeg Content-Length: 23667 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:10 UTC	8554	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 c4 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 31 34 20 37 39 2e 31 35 36 37 39 37 2c 20 32 30 31 34 2f 30 38 2f 32 30 2d 30 39 3a 35 33 3a 30 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckydhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xm
2024-04-23 20:32:10 UTC	2578	IN	Data Raw: 00 de 39 9c f6 c7 77 2e 20 5d 8c af b9 d5 00 d1 56 22 34 c5 d9 4d 20 af 29 63 97 0a e7 2b cb 39 16 13 0c 80 e9 ac 93 2e 2e 0c bd 6a 6d 26 ea 44 64 34 6f 4f 8b 0c 11 79 d0 ee 8c c7 ab 9d bc 77 36 ae 9e f3 2c ae ad 5d de 4d 12 e6 1a 7a 51 36 a2 47 44 c7 ad f6 35 a1 d4 72 89 e4 e6 9a b7 44 d2 b3 c9 d2 14 9a 81 69 26 f8 8f 39 2e 40 d2 4d 40 6f 3e 0c e1 c6 f1 78 39 05 78 1d e1 4b bb aa 7f 93 ef 45 6b 47 da 2f 89 1e cc 59 7d 91 b6 13 e9 3a c1 b7 7e ca 5d c4 47 aa 37 c3 90 91 b9 6e 41 1b 8a be 7e 24 11 20 89 04 5f 72 74 ba 53 14 7b fd cf 5f db 8e 2a 93 0d ab b7 22 42 95 16 fd 2f c0 f2 70 7f e4 88 f0 c5 3d 91 d7 2b ff 00 0e a1 53 92 df a5 f8 1e 3f 74 02 28 1c 8e a1 6d 46 1d 42 a4 bd 3a 7d 15 3d 38 fd cd 46 2a b5 74 2f bc 11 20 89 04 48 22 41 12 08 90 44 82 24 11 Data Ascii: 9w. ]V"4M )c+9..jm&Dd4oOyw6,]MzQ6GD5rDi&9.@M@o>x9xKEkG/Y}:~]G7nA~$ _rtS{_"B/p=+S?t(mFB:}=8Ft/ H"AD$
2024-04-23 20:32:10 UTC	3867	IN	Data Raw: 75 dd cb 74 37 95 67 ad a6 c6 37 92 7b b2 a5 9f b2 2b 62 e9 c8 ba 6a f3 2c 96 29 6d ed 4b 55 d1 31 b7 83 10 02 79 82 66 fb 81 fe e7 97 c4 85 0b 17 00 9f af 1f 98 d8 cb a1 53 22 04 59 f8 ed 3d 6f 08 77 e5 ee 49 da bd cb 98 50 42 67 3a 23 31 fc d3 6e dc b6 e3 2e 41 02 f7 03 20 4c 8d 34 76 25 a0 24 04 82 89 20 41 b4 d2 9d 01 39 20 e8 4c 16 e7 d0 d7 34 52 42 69 48 b7 1c dd 2d bb b1 87 bb 17 0b 2d 9e 34 35 41 39 55 e1 48 bc af 2b e0 f9 23 24 f4 fe 50 2f 1a f9 22 13 39 96 7e e8 23 50 13 d3 e5 2c 59 2d 2c 26 d0 41 19 3c a8 0e dd 60 8b 09 1d b4 6f dd 57 66 bf 6e db 51 f4 13 92 10 45 61 f7 33 fe ec ac 4a ff 00 92 5c 3f f5 e3 c2 37 cb 85 bf b8 74 7f d4 5f 31 78 e1 fc 4d bc 2c 9c 45 8c a9 f5 f6 2c 5a a1 aa 9d 15 2e f8 fa b5 e5 8e 29 d3 83 44 4a ed c8 91 f3 ab da ce Data Ascii: ut7g7{+bj,)mKU1yfS"Y=owIPBg:#1n.A L4v%$ A9 L4RBiH--45A9UH+#$P/"9~#P,Y-,&A<`oWfnQEa3J\?7t_1xM,E,Z.)DJ
2024-04-23 20:32:10 UTC	7734	IN	Data Raw: 75 a2 b7 d9 ec c2 07 1f e4 ab 3c 9f 37 24 56 cc 91 a7 ab e8 1a d1 fb 25 ee 9a 85 e8 bf 57 52 e5 9a ad d3 52 5d 76 ab 78 9c 7f e1 5b 09 7f 13 6d 94 ff 00 dc 51 09 96 8f a5 38 55 80 63 18 a5 15 b3 7c 39 77 44 f2 9e b9 31 27 aa 57 c7 ee 23 64 9e d8 e6 b5 99 07 85 56 ff 00 25 22 b0 d1 2f 50 a4 82 24 11 20 8a 8f 7a 38 2a b6 d2 6a 28 d3 90 67 e8 f6 cc 01 c8 1c 3c bc 51 8f b9 55 ba 8e 9c ce 6e d8 2c ad a2 85 b7 0a a1 21 c6 11 53 ab 23 71 c5 b8 db 73 61 45 2c 79 55 75 b9 59 b9 b0 d4 62 9c 62 9b 78 19 4e 5c 5c 4c 75 b8 94 d1 4a 38 d3 8f 55 6f 37 5b 25 26 4f 6b 95 75 27 d4 30 1d 5e 5a b4 04 2b f4 b3 4a 12 80 85 37 8e f1 5a b2 a2 d3 76 9d 91 4b 90 cb 9d a6 7b da f1 28 39 8c 7c b0 d7 16 11 ad f3 0e a7 b9 8f 1b e0 7b 58 05 b0 59 67 04 2d f4 b7 db 15 3e 27 36 a6 65 9e Data Ascii: u<7$V%WRR]vx[mQ8Uc\|9wD1'W#dV%"/P$ z8*j(g<QUn,!S#qsaE,yUuYbbxN\\LuJ8Uo7[%&Oku'0^Z+J7ZvK{(9\|{XYg->'6e
2024-04-23 20:32:10 UTC	934	IN	Data Raw: f7 b8 81 b4 0d 53 1c e2 04 76 c0 10 09 da 46 c0 bd f3 5e 2a 66 59 d9 94 cb f5 63 e7 53 c9 24 b1 81 b2 e5 b4 13 b0 bb 4c a6 31 a5 d0 d8 1c e0 48 11 00 88 98 d8 8f 26 10 fa 60 31 d4 28 f4 b2 ed 09 b9 a1 b3 da 89 77 79 53 6a d5 a0 45 41 3d 23 59 a3 46 b3 a5 7d 2b 37 51 eb ce 15 2a 12 a3 34 c1 c0 3c d0 f5 b9 23 cb a8 e9 de 62 e6 88 af 0c af aa 60 83 5e 60 be b5 11 13 2a d0 02 d3 94 a7 35 10 e0 90 65 0d 3d c8 f6 34 b2 1c dd 05 a3 4a f4 6d 65 43 5f d2 07 1d 6b 8f 49 b2 89 42 59 a5 a4 42 8c b2 cc 1a 08 04 a1 c7 de 8f 46 d1 53 34 41 ac 0b 91 d7 1a c7 98 b9 e6 21 7f 54 9b 88 d4 66 e7 d3 25 4a 59 b6 8e bc d0 e3 e1 e2 8f 2d a3 a7 69 88 68 8a f0 ea fa b7 88 39 e6 0b f0 5b 68 a3 5f ac 89 0a 3d 37 f4 f9 a1 af b9 0e f3 a6 d5 af 48 d4 82 be ac 33 a3 d6 74 ae 4f 89 93 75 Data Ascii: SvF^fYcS$L1H&`1(wySjEA=#YF}+7Q4<#b`^`*5e=4JmeC_kIBYBFS4A!Tf%JY-ih9[h_=7H3tOu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49808	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:10 UTC	594	OUT	GET /images/FTC_DNC_main1_1_register.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:10 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:11 GMT Last-Modified: Thu, 26 Dec 2019 17:35:32 GMT Content-Type: image/jpeg Content-Length: 21936 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:10 UTC	8553	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 c4 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 31 34 20 37 39 2e 31 35 36 37 39 37 2c 20 32 30 31 34 2f 30 38 2f 32 30 2d 30 39 3a 35 33 3a 30 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckydhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xm
2024-04-23 20:32:10 UTC	1289	IN	Data Raw: aa 93 ef 03 c5 21 6a a4 38 26 3e 7f ea 0f fa c9 d7 41 01 a0 eb c0 1d 9d 7e 45 b2 37 b3 bb b9 35 0b 76 55 82 a5 78 af 43 71 38 ee 6b df 46 e9 13 37 00 e9 ba 74 cd 8d 98 63 d7 10 3e 9d 66 5b 86 b9 55 24 a6 a7 2d 40 03 6e 73 45 b6 9d 50 94 0a eb 31 52 65 66 9a fd aa 4c a6 6e fb 1d e8 cd 6d d5 58 5e e7 bc 14 3e 8e 55 be 0f b1 3b 6f 31 c9 98 70 29 19 95 5e e2 1b 26 15 05 c8 ae 46 6a 92 73 8d 1b 74 42 71 53 53 d8 21 30 81 62 9b 26 37 28 c1 17 94 2e 56 d9 6c 83 40 67 da 3c b2 c8 b7 12 a2 eb f7 36 d4 2e a5 d8 e7 9c 95 66 ac f0 57 4e 2a a2 da 3a 2f e7 11 a9 c3 97 53 c7 f3 ee ba e6 8b 4a 00 1f 72 4a 13 6c 03 00 01 ab 63 b9 85 93 25 bc dd ec 36 b3 bc 2d 2e 63 5c 46 cd e7 87 18 08 f3 6e 91 d5 20 90 48 2b 6b be 62 d5 f8 ed 9e 8e e3 5f a7 a4 c1 23 9f 42 35 eb eb d8 5e Data Ascii: !j8&>A~E75vUxCq8kF7tc>f[U$-@nsEP1RefLnmX^>U;o1p)^&FjstBqSS!0b&7(.Vl@g<6.fWN*:/SJrJlc%6-.c\Fn H+kb_#B5^
2024-04-23 20:32:10 UTC	11601	IN	Data Raw: 77 04 be 32 dd 25 70 9b 4f 95 22 83 e5 5d 4a 69 44 35 fb 90 40 35 d0 22 da aa b4 a3 b6 f2 e5 7c 72 ca 2a 29 1b ac de 19 ec e5 c3 db f9 92 ed f3 8a c8 ad 4b 78 6d b4 5d fd 77 2d 6a 91 47 7b 41 61 90 6e 67 6a 02 c2 7f d0 0e f9 4a 9b 01 26 55 41 3d 64 f4 c4 04 24 19 a9 81 92 f3 11 69 83 bc 9b 1b 32 2b d9 9f a5 8f 29 38 b3 99 45 6e cd af c8 d5 cb ac e0 59 b4 77 22 ce 31 93 cc d2 5c 62 15 b7 74 ce ab a9 1c 22 a0 a0 b8 b4 96 b6 4d d0 54 b0 9a 28 61 18 49 09 10 00 d7 94 1a 47 19 b7 0a b0 ae 24 b4 0c 92 8c ba bc 08 03 bc 41 00 72 0d ad 02 3d 43 f3 29 0f 0e e2 5e 4d 82 9f fa 0f f2 e3 b4 18 1e cf 56 1d 5f 99 43 4f 68 12 ec 13 bf 76 d3 76 95 eb 22 4c 53 4b 5d 8b 24 fa 7f fd 18 1f 28 12 ea 3a 4a da 05 93 a4 75 97 66 89 e7 4e 09 7d 78 3e 4c 42 7e ec 16 23 8d de f3 0c Data Ascii: w2%pO"]JiD5@5"\|r*)Kxm]w-jG{AangjJ&UA=d$i2+)8EnYw"1\bt"MT(aIG$Ar=C)^MV_COhvv"LSK]$(:JufN}x>LB~#
2024-04-23 20:32:10 UTC	493	IN	Data Raw: f8 8f 67 4e 75 e7 27 c4 05 cb bf 3b f3 77 b7 fc 41 e9 2d ba 43 bd bb d6 1b 76 ee eb cd bd ca b2 01 76 25 b7 1f 7b c7 50 5d f9 d0 3e f6 e2 97 30 3a fc 63 96 50 48 04 ce 4e d9 cd 0c fc af 91 c1 a0 04 a3 36 bc 1b 62 58 ba b6 d8 6d 45 b7 62 05 24 35 71 8f e6 00 95 08 d8 dd 75 6d dc 3a c2 d2 eb cc 76 02 07 67 7b b5 ec f5 39 60 b5 3c c8 4b 51 85 53 ab 9d 5e c7 3c a2 4b a6 9c 62 ad 3a e3 6f df f6 fe f0 d2 ac 9c 33 eb f7 2a 2b be 5b 6c a0 54 ed 79 3f 5d 21 d2 f2 55 a5 fb 61 8a fc 11 43 72 fb 1f 0f c5 40 99 8c de e3 2a 1f 46 aa 9e ab f2 13 20 0f cc bd 38 c0 b2 6e 2f b8 0a 1c df 1b 2d b8 f8 4d 2d 55 17 48 36 ed 95 df 26 67 5a 0d 3f a5 41 83 74 a9 17 ab 52 99 53 25 0f d3 97 c0 18 a1 4e ad 10 ab da 90 cd 3a 35 25 0e dc a1 11 aa 9a e3 35 df 58 1b a3 e6 3f 99 23 aa be Data Ascii: gNu';wA-Cvv%{P]>0:cPHN6bXmEb$5qum:vg{9`<KQS^<Kb:o3+[lTy?]!UaCr@F 8n/-M-UH6&gZ?AtRS%N:5%5X?#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49809	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:10 UTC	582	OUT	GET /images/DNC-masthead.svg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:10 UTC	804	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:11 GMT Last-Modified: Wed, 30 Nov 2022 18:08:22 GMT Content-Type: image/svg+xml Content-Length: 107218 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:10 UTC	11601	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 36 30 20 31 34 33 22 3e 3c 64 65 66 73 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 22 20 78 31 3d 22 38 31 32 2e 39 33 36 22 20 79 31 3d 22 31 34 37 2e 30 35 33 22 20 78 32 3d 22 39 36 30 22 20 79 32 3d 22 31 34 37 2e 30 35 33 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 35 2e 35 33 35 33 36 20 30 20 30 20 2d 2e 37 37 36 38 39 20 2d 34 33 35 33 2e 39 34 33 20 32 30 30 2e 33 31 33 29 22 20 67 72 61 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 960 143"><defs><linearGradient id="linear-gradient" x1="812.936" y1="147.053" x2="960" y2="147.053" gradientTransform="matrix(5.53536 0 0 -.77689 -4353.943 200.313)" gra
2024-04-23 20:32:10 UTC	12890	IN	Data Raw: 2e 35 31 38 20 38 2e 39 39 38 20 36 30 2e 31 38 33 20 33 31 2e 38 36 39 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 63 38 65 62 66 62 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 38 2e 39 34 36 20 35 35 2e 39 37 38 63 33 2e 36 35 39 20 32 32 2e 38 33 36 2d 31 37 2e 33 31 20 34 37 2e 38 39 39 2d 34 36 2e 38 33 37 20 35 33 2e 31 36 31 2d 32 39 2e 35 32 36 20 35 2e 32 36 33 2d 35 36 2e 34 32 37 2d 31 31 2e 32 37 2d 36 30 2e 30 38 36 2d 33 34 2e 31 30 36 2d 33 2e 36 35 39 2d 32 32 2e 38 33 35 20 31 37 2e 33 31 2d 34 35 2e 36 31 33 20 34 36 2e 38 33 36 2d 35 30 2e 38 37 35 20 32 39 2e 35 32 36 2d 35 2e 32 36 32 20 35 36 2e 34 32 38 20 38 2e 39 38 34 20 36 30 2e 30 38 37 20 33 31 2e 38 32 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 63 37 65 61 66 62 22 Data Ascii: .518 8.998 60.183 31.869Z" style="fill:#c8ebfb"/><path d="M128.946 55.978c3.659 22.836-17.31 47.899-46.837 53.161-29.526 5.263-56.427-11.27-60.086-34.106-3.659-22.835 17.31-45.613 46.836-50.875 29.526-5.262 56.428 8.984 60.087 31.82Z" style="fill:#c7eafb"
2024-04-23 20:32:10 UTC	11961	IN	Data Raw: 2e 38 30 37 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 38 31 64 34 66 37 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 33 2e 35 38 39 20 35 36 2e 38 39 35 63 33 2e 32 39 32 20 32 30 2e 36 33 38 2d 31 35 2e 35 37 36 20 34 33 2e 35 31 2d 34 32 2e 31 34 33 20 34 38 2e 32 36 35 2d 32 36 2e 35 36 38 20 34 2e 37 35 36 2d 35 30 2e 37 37 34 2d 31 30 2e 34 30 35 2d 35 34 2e 30 36 36 2d 33 31 2e 30 34 34 2d 33 2e 32 39 32 2d 32 30 2e 36 33 37 20 31 35 2e 35 37 36 2d 34 31 2e 32 32 33 20 34 32 2e 31 34 33 2d 34 35 2e 39 37 39 20 32 36 2e 35 36 38 2d 34 2e 37 35 35 20 35 30 2e 37 37 33 20 38 2e 31 32 20 35 34 2e 30 36 36 20 32 38 2e 37 35 38 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 38 30 64 34 66 37 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 33 2e 35 30 Data Ascii: .807Z" style="fill:#81d4f7"/><path d="M123.589 56.895c3.292 20.638-15.576 43.51-42.143 48.265-26.568 4.756-50.774-10.405-54.066-31.044-3.292-20.637 15.576-41.223 42.143-45.979 26.568-4.755 50.773 8.12 54.066 28.758Z" style="fill:#80d4f7"/><path d="M123.50
2024-04-23 20:32:10 UTC	2578	IN	Data Raw: 2d 33 2e 36 35 31 20 37 2e 37 31 36 2d 31 34 2e 38 33 31 2d 31 2e 39 37 32 2d 32 33 2e 36 37 37 53 31 30 33 2e 33 37 33 20 35 33 2e 35 34 36 20 37 36 2e 34 38 20 35 33 2e 35 34 36 20 31 38 2e 34 38 20 37 35 2e 37 36 33 20 31 33 2e 34 35 20 38 35 2e 31 33 32 73 2e 34 39 35 20 32 30 2e 39 34 34 20 37 2e 36 38 20 32 32 2e 39 39 38 63 37 2e 31 33 38 20 32 2e 30 33 35 20 33 35 2e 37 35 32 20 36 2e 32 35 20 35 36 2e 30 39 33 20 36 2e 32 35 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 65 33 66 31 65 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 37 2e 32 33 31 20 31 31 34 2e 33 31 37 63 32 30 2e 33 35 36 20 30 20 35 32 2e 39 33 33 2d 34 2e 30 36 20 36 31 2e 37 32 2d 37 2e 37 30 39 20 38 2e 37 38 37 2d 33 2e 36 34 39 20 37 2e 37 31 35 2d 31 34 2e 38 34 32 2d 31 Data Ascii: -3.651 7.716-14.831-1.972-23.677S103.373 53.546 76.48 53.546 18.48 75.763 13.45 85.132s.495 20.944 7.68 22.998c7.138 2.035 35.752 6.25 56.093 6.25Z" style="fill:#e3f1e0"/><path d="M77.231 114.317c20.356 0 52.933-4.06 61.72-7.709 8.787-3.649 7.715-14.842-1
2024-04-23 20:32:10 UTC	16384	IN	Data Raw: 31 32 31 20 32 31 2e 35 38 36 2d 36 32 2e 31 30 37 20 33 30 2e 38 38 32 73 2e 32 31 33 20 32 31 2e 30 30 36 20 37 2e 34 34 31 20 32 33 2e 31 31 38 63 37 2e 31 37 20 32 2e 30 38 38 20 33 34 2e 39 37 20 36 2e 31 33 33 20 35 35 2e 34 31 33 20 36 2e 31 33 33 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 64 64 65 65 64 38 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 37 2e 32 35 34 20 31 31 33 2e 36 38 39 63 32 30 2e 33 35 35 20 30 20 35 32 2e 31 31 33 2d 34 2e 30 35 38 20 36 30 2e 36 36 37 2d 37 2e 36 39 32 20 38 2e 35 35 35 2d 33 2e 36 33 34 20 37 2e 37 2d 31 34 2e 39 35 35 2d 31 2e 38 39 33 2d 32 33 2e 36 37 33 2d 39 2e 35 39 32 2d 38 2e 37 31 39 2d 33 32 2e 38 39 38 2d 32 38 2e 36 39 38 2d 35 39 2e 35 32 31 2d 32 38 2e 36 39 38 2d 32 36 2e 36 32 33 20 30 2d Data Ascii: 121 21.586-62.107 30.882s.213 21.006 7.441 23.118c7.17 2.088 34.97 6.133 55.413 6.133Z" style="fill:#ddeed8"/><path d="M77.254 113.689c20.355 0 52.113-4.058 60.667-7.692 8.555-3.634 7.7-14.955-1.893-23.673-9.592-8.719-32.898-28.698-59.521-28.698-26.623 0-
2024-04-23 20:32:10 UTC	8107	IN	Data Raw: 33 35 37 20 35 30 2e 39 32 20 35 2e 33 35 37 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 62 30 64 39 61 37 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 37 2e 36 39 37 20 31 30 39 2e 35 34 31 63 32 30 2e 33 35 36 20 30 20 34 36 2e 37 2d 34 2e 30 33 38 20 35 33 2e 37 32 33 2d 37 2e 35 37 37 20 37 2e 30 32 32 2d 33 2e 35 33 38 20 37 2e 35 39 33 2d 31 35 2e 37 30 32 2d 31 2e 34 32 34 2d 32 33 2e 36 35 34 2d 39 2e 30 31 38 2d 37 2e 39 35 32 2d 32 38 2e 30 36 31 2d 32 34 2e 32 30 35 2d 35 33 2e 30 35 35 2d 32 34 2e 32 30 35 2d 32 34 2e 39 39 35 20 30 2d 35 31 2e 32 34 39 20 31 37 2e 33 35 36 2d 35 35 2e 39 34 32 20 32 36 2e 31 36 36 73 2d 31 2e 36 37 34 20 32 31 2e 34 32 34 20 35 2e 38 34 36 20 32 33 2e 39 32 35 63 37 2e 33 37 34 20 32 2e 34 34 31 20 32 39 2e Data Ascii: 357 50.92 5.357Z" style="fill:#b0d9a7"/><path d="M77.697 109.541c20.356 0 46.7-4.038 53.723-7.577 7.022-3.538 7.593-15.702-1.424-23.654-9.018-7.952-28.061-24.205-53.055-24.205-24.995 0-51.249 17.356-55.942 26.166s-1.674 21.424 5.846 23.925c7.374 2.441 29.
2024-04-23 20:32:11 UTC	6445	IN	Data Raw: 38 20 34 38 2e 37 34 33 20 34 2e 39 38 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 39 39 63 66 39 32 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 37 2e 39 33 20 31 30 37 2e 35 33 63 32 30 2e 33 35 35 20 30 20 34 34 2e 30 37 36 2d 34 2e 30 33 20 35 30 2e 33 35 35 2d 37 2e 35 32 31 20 36 2e 32 37 38 2d 33 2e 34 39 32 20 37 2e 35 34 32 2d 31 36 2e 30 36 34 2d 31 2e 31 39 37 2d 32 33 2e 36 34 35 2d 38 2e 37 33 39 2d 37 2e 35 38 2d 32 35 2e 37 31 36 2d 32 32 2e 30 32 36 2d 34 39 2e 39 32 2d 32 32 2e 30 32 36 2d 32 34 2e 32 30 35 20 30 2d 34 38 2e 34 34 33 20 31 35 2e 33 33 35 2d 35 32 2e 39 39 38 20 32 33 2e 39 31 32 73 2d 32 2e 35 37 34 20 32 31 2e 36 32 35 20 35 2e 30 38 35 20 32 34 2e 33 31 31 63 37 2e 34 37 32 20 32 2e 36 31 20 32 37 2e 32 32 35 20 34 2e Data Ascii: 8 48.743 4.98Z" style="fill:#99cf92"/><path d="M77.93 107.53c20.355 0 44.076-4.03 50.355-7.521 6.278-3.492 7.542-16.064-1.197-23.645-8.739-7.58-25.716-22.026-49.92-22.026-24.205 0-48.443 15.335-52.998 23.912s-2.574 21.625 5.085 24.311c7.472 2.61 27.225 4.
2024-04-23 20:32:11 UTC	16384	IN	Data Raw: 2e 34 35 35 20 37 2e 35 30 32 2d 31 36 2e 33 34 37 2d 31 2e 30 31 39 2d 32 33 2e 36 33 37 2d 38 2e 35 32 31 2d 37 2e 32 39 2d 32 33 2e 38 38 33 2d 32 30 2e 33 32 35 2d 34 37 2e 34 37 31 2d 32 30 2e 33 32 35 2d 32 33 2e 35 38 38 20 30 2d 34 36 2e 32 35 31 20 31 33 2e 37 35 37 2d 35 30 2e 36 39 37 20 32 32 2e 31 35 33 73 2d 33 2e 32 37 38 20 32 31 2e 37 38 20 34 2e 34 39 20 32 34 2e 36 31 32 63 37 2e 35 34 38 20 32 2e 37 34 32 20 32 35 2e 32 37 20 34 2e 36 37 35 20 34 36 2e 39 37 32 20 34 2e 36 37 35 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 38 37 63 39 38 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 38 2e 31 32 38 20 31 30 35 2e 38 39 36 63 32 30 2e 33 35 35 20 30 20 34 31 2e 39 34 34 2d 34 2e 30 32 32 20 34 37 2e 36 32 2d 37 2e 34 37 36 20 35 2e 36 Data Ascii: .455 7.502-16.347-1.019-23.637-8.521-7.29-23.883-20.325-47.471-20.325-23.588 0-46.251 13.757-50.697 22.153s-3.278 21.78 4.49 24.612c7.548 2.742 25.27 4.675 46.972 4.675Z" style="fill:#87c980"/><path d="M78.128 105.896c20.355 0 41.944-4.022 47.62-7.476 5.6
2024-04-23 20:32:11 UTC	5529	IN	Data Raw: 39 20 30 2d 34 30 2e 36 34 20 39 2e 37 31 36 2d 34 34 2e 38 30 38 20 31 37 2e 36 34 37 73 2d 35 2e 30 38 20 32 32 2e 31 38 20 32 2e 39 36 36 20 32 35 2e 33 38 33 63 37 2e 37 34 35 20 33 2e 30 38 20 32 30 2e 32 36 34 20 33 2e 39 32 33 20 34 32 2e 36 31 37 20 33 2e 39 32 33 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 35 34 62 39 35 34 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 38 2e 36 39 37 20 31 30 31 2e 38 37 34 63 32 30 2e 33 35 36 20 30 20 33 36 2e 36 39 36 2d 34 2e 30 30 33 20 34 30 2e 38 38 35 2d 37 2e 33 36 34 20 34 2e 31 38 39 2d 33 2e 33 36 32 20 37 2e 33 39 38 2d 31 37 2e 30 38 33 2d 2e 35 35 36 2d 32 33 2e 36 32 2d 37 2e 39 35 36 2d 36 2e 35 33 34 2d 31 39 2e 31 32 2d 31 35 2e 39 2d 34 31 2e 31 30 34 2d 31 35 2e 39 2d 32 31 2e 39 38 34 20 30 Data Ascii: 9 0-40.64 9.716-44.808 17.647s-5.08 22.18 2.966 25.383c7.745 3.08 20.264 3.923 42.617 3.923Z" style="fill:#54b954"/><path d="M78.697 101.874c20.356 0 36.696-4.003 40.885-7.364 4.189-3.362 7.398-17.083-.556-23.62-7.956-6.534-19.12-15.9-41.104-15.9-21.984 0
2024-04-23 20:32:11 UTC	2578	IN	Data Raw: 34 37 53 33 39 2e 33 36 33 20 36 33 2e 34 37 20 33 35 2e 32 39 20 37 31 2e 32 34 31 73 2d 35 2e 37 20 32 32 2e 33 31 38 20 32 2e 34 34 33 20 32 35 2e 36 34 38 63 37 2e 38 31 31 20 33 2e 31 39 36 20 31 38 2e 35 34 32 20 33 2e 36 36 34 20 34 31 2e 31 31 38 20 33 2e 36 36 34 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 33 39 62 35 34 61 22 2f 3e 3c 2f 67 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 22 20 64 3d 22 4d 31 31 31 2e 30 30 33 20 33 36 2e 32 30 31 61 32 32 2e 37 34 37 20 32 32 2e 37 34 37 20 30 20 30 20 31 2d 31 2e 32 36 34 2d 32 2e 39 33 32 20 31 37 2e 39 30 33 20 31 37 2e 39 30 33 20 30 20 30 20 30 2d 34 2e 31 35 2d 34 2e 34 31 38 20 32 2e 36 35 39 20 32 2e 36 35 39 20 30 20 30 20 30 2d 31 2e 32 34 2d 2e 35 39 34 20 32 2e 36 30 37 Data Ascii: 47S39.363 63.47 35.29 71.241s-5.7 22.318 2.443 25.648c7.811 3.196 18.542 3.664 41.118 3.664Z" style="fill:#39b54a"/></g><path class="cls-3" d="M111.003 36.201a22.747 22.747 0 0 1-1.264-2.932 17.903 17.903 0 0 0-4.15-4.418 2.659 2.659 0 0 0-1.24-.594 2.607

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49810	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:10 UTC	584	OUT	GET /images/register_or_sm.gif HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:11 UTC	798	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:11 GMT Last-Modified: Thu, 26 Dec 2019 17:35:34 GMT Content-Type: image/gif Content-Length: 3972 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:11 UTC	3972	IN	Data Raw: 47 49 46 38 39 61 71 00 4f 00 f7 00 00 50 35 1b ff e2 c5 ff ce 9c ff c2 85 ff e5 ca dc dc dc 63 63 63 ff b1 61 04 04 03 ff fd ea ff d5 aa ff b4 69 ff b9 71 ff d3 a5 ff ba 75 c4 c3 c2 7b 7b 7b fe fe fd ff b6 6c ff b2 63 ab ab ab ea dd ca ff fc f9 8c 8c 8c ff aa 54 ff bf 7e 44 2c 16 eb eb eb ff ae 5c ff e8 cd 9a 9a 9a ff fc f8 51 51 51 b6 79 3b e6 e6 e6 93 93 93 ff e6 cb ce 9b 65 ff ca 94 ff ec d8 a4 a4 a4 6d 6d 6d fa fa fa ff e8 d0 ff fa f5 ff cc 96 ff b0 56 ff f6 ec ff b3 58 f5 f5 f5 ff ee dc 85 77 69 ff df bd c8 c8 c8 ff eb d4 5c 5c 5c b3 b3 b3 a3 6c 35 39 39 39 ff d7 ae ff d6 ac ff e0 c0 ff c8 8e ff d0 a0 ff ad 58 ff d1 a3 ff f4 e8 e7 9c 4d dd cb b7 ff f8 f0 ff af 5e 66 44 21 ff f7 ee f2 f2 f2 ff c8 90 ff f9 f2 45 45 45 a5 95 83 ff c4 7a ff f3 e6 ff c4 Data Ascii: GIF89aqOP5cccaiqu{{{lcT~D,\QQQy;emmmVXwi\\\l5999XM^fD!EEEz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49842	104.22.71.197	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:19 UTC	526	OUT	GET /menu/page.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:19 UTC	938	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:19 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=86400, stale-while-revalidate=30, public Cf-Bgj: minify ETag: W/"e346c2841e4abbb66ee259e9540abb61" NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aoX1tm9Q5UjxS6xBqlUdfbbNxCx9v3kocJnsX5AHJSTeMf%2FexS92We3yPXFltvoyf50t83podO6woGXr%2Fk%2FTE%2B%2BBYphiZzJ1sMqcsVTznO0jLogd0BxuWGcbjsDravekRT0uL3at1372PH1vOyRVRlE2"}],"group":"cf-nel","max_age":604800} Vary: Accept-Encoding referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff CF-Cache-Status: HIT Age: 19093 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87909f4a9ccbb0c4-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 20:32:19 UTC	431	IN	Data Raw: 62 62 62 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 7d 76 61 72 20 6e 2c 64 2c 73 2c 6c 2c 63 2c 75 2c 66 2c 6d 2c 65 2c 61 2c 74 2c 70 2c 79 2c 76 2c 68 3d 22 2e 42 52 51 6e 7a 4f 38 76 22 2c 5f 3d 6f 2e 68 65 61 64 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 5b 5d 2e 69 6e 64 65 78 4f 66 26 26 5f 26 26 28 69 2e 61 32 61 3d 69 2e 61 32 61 7c 7c 7b 7d 2c 6e 3d 69 2e 61 32 61 5f 63 6f 6e 66 69 67 3d 69 2e 61 32 61 5f 63 6f 6e 66 69 67 7c 7c 7b 7d 2c 65 3d 28 64 3d 6f 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 29 26 26 64 2e 73 72 63 3f 64 2e 73 72 63 3a 22 22 2c 4e 6f 64 65 4c 69 73 74 26 26 4e 6f 64 65 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 26 26 28 69 2e 61 32 61 2e 69 Data Ascii: bbb!function(o,i){function r(){}var n,d,s,l,c,u,f,m,e,a,t,p,y,v,h=".BRQnzO8v",_=o.head;"function"==typeof[].indexOf&&_&&(i.a2a=i.a2a\|\|{},n=i.a2a_config=i.a2a_config\|\|{},e=(d=o.currentScript)&&d.src?d.src:"",NodeList&&NodeList.prototype.forEach&&(i.a2a.i
2024-04-23 20:32:19 UTC	1369	IN	Data Raw: 29 3b 65 2e 61 32 61 5f 69 6e 64 65 78 7c 7c 6e 75 6c 6c 21 3d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 32 61 2d 75 72 6c 22 29 7c 7c 65 2e 6d 61 74 63 68 65 73 28 22 2e 61 32 61 5f 6b 69 74 20 2e 61 32 61 5f 64 64 22 29 7c 7c 28 65 2e 64 61 74 61 73 65 74 2e 61 32 61 55 72 6c 3d 61 2e 6c 69 6e 6b 75 72 6c 7c 7c 22 22 2c 61 2e 6c 69 6e 6b 6e 61 6d 65 26 26 28 65 2e 64 61 74 61 73 65 74 2e 61 32 61 54 69 74 6c 65 3d 61 2e 6c 69 6e 6b 6e 61 6d 65 29 29 7d 29 2c 64 65 6c 65 74 65 20 6e 2e 6c 69 6e 6b 75 72 6c 2c 64 65 6c 65 74 65 20 6e 2e 6c 69 6e 6b 6e 61 6d 65 7d 2c 69 2e 61 32 61 5f 69 6e 69 74 3d 69 2e 61 32 61 2e 69 6e 69 74 2c 21 64 7c 7c 64 2e 61 73 79 6e 63 7c 7c 64 2e 64 65 66 65 72 7c 7c 69 2e 61 32 61 2e 69 6e 69 74 28 Data Ascii: );e.a2a_index\|\|null!==e.getAttribute("data-a2a-url")\|\|e.matches(".a2a_kit .a2a_dd")\|\|(e.dataset.a2aUrl=a.linkurl\|\|"",a.linkname&&(e.dataset.a2aTitle=a.linkname))}),delete n.linkurl,delete n.linkname},i.a2a_init=i.a2a.init,!d\|\|d.async\|\|d.defer\|\|i.a2a.init(
2024-04-23 20:32:19 UTC	1210	IN	Data Raw: 65 72 76 69 63 65 73 2c 6f 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 29 7d 29 2c 65 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 2c 61 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 74 3d 65 2e 73 74 79 6c 65 2c 6e 3d 61 2e 73 74 79 6c 65 2c 65 2e 69 64 3d 66 2c 74 2e 77 69 64 74 68 3d 74 2e 68 65 69 67 68 74 3d 6e 2e 77 69 64 74 68 3d 6e 2e 68 65 69 67 68 74 3d 22 31 70 78 22 2c 74 2e 74 6f 70 3d 74 2e 6c 65 66 74 3d 74 2e 62 6f 72 64 65 72 3d 22 30 22 2c 74 2e 70 6f 73 69 74 69 6f 6e 3d 6e 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 74 2e 7a 49 6e 64 65 78 3d 6e 2e 7a 49 6e 64 65 78 3d 22 31 30 30 30 30 Data Ascii: ervices,o.getElementById(f).style.display="none")}),e=o.createElement("iframe"),a=o.createElement("div"),t=e.style,n=a.style,e.id=f,t.width=t.height=n.width=n.height="1px",t.top=t.left=t.border="0",t.position=n.position="absolute",t.zIndex=n.zIndex="10000
2024-04-23 20:32:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49844	35.190.80.1	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:19 UTC	548	OUT	OPTIONS /report/v4?s=AxJE%2BSmPow%2F0SZcM70eSXcMM73NTEi8YMwaxWqrDFkv94XTquxkbzb9j2RQYvYTQujV%2Fm%2F1HVV4uq2cgU0QY4XLwzntQz4TUj6F9dWs%2For4NSRuCGWWaWDPUtMCBGRf%2FN71vAeJS HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://use.fontawesome.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:19 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 23 Apr 2024 20:32:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49851	3.161.136.81	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:19 UTC	560	OUT	GET /Universal-Federated-Analytics-Min.js?agency=FTC HTTP/1.1 Host: dap.digitalgov.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:20 UTC	652	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 28851 Connection: close Date: Mon, 22 Apr 2024 21:36:48 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 18 Apr 2024 15:08:41 GMT ETag: "26433217e805a89cf41adac58221316e" x-amz-server-side-encryption: AES256 x-amz-version-id: 39DeP5oo.f2rQ6hItN1skmgkaQ0kloSX Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 266ac52f1cf22bd836a3ed8dfdd6f30c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: P9sQHU3GIheCZJzYLRN4ZntdoapjdAF2eNlVTqnPz6euT02A4YFV9A== Age: 82533
2024-04-23 20:32:20 UTC	15732	IN	Data Raw: 76 61 72 20 74 4f 62 6a 65 63 74 43 68 65 63 6b 2c 5f 61 6c 6c 6f 77 65 64 51 75 65 72 79 73 74 72 69 6e 67 73 3d 5b 5d 2c 69 73 53 65 61 72 63 68 3d 21 31 2c 6f 43 4f 4e 46 49 47 3d 7b 47 57 54 5f 55 41 49 44 3a 5b 22 55 41 2d 33 33 35 32 33 31 34 35 2d 31 22 5d 2c 47 57 54 5f 47 41 34 49 44 3a 5b 22 47 2d 43 53 4c 4c 34 5a 45 4b 34 4c 22 5d 2c 46 4f 52 43 45 5f 53 53 4c 3a 21 30 2c 41 4e 4f 4e 59 4d 49 5a 45 5f 49 50 3a 21 30 2c 41 47 45 4e 43 59 3a 22 22 2c 53 55 42 5f 41 47 45 4e 43 59 3a 22 22 2c 56 45 52 53 49 4f 4e 3a 22 32 30 32 34 30 34 31 36 20 76 37 2e 30 31 20 2d 20 44 75 61 6c 20 54 72 61 63 6b 69 6e 67 22 2c 53 49 54 45 5f 54 4f 50 49 43 3a 22 22 2c 53 49 54 45 5f 50 4c 41 54 46 4f 52 4d 3a 22 22 2c 53 43 52 49 50 54 5f 53 4f 55 52 43 45 3a Data Ascii: var tObjectCheck,_allowedQuerystrings=[],isSearch=!1,oCONFIG={GWT_UAID:["UA-33523145-1"],GWT_GA4ID:["G-CSLL4ZEK4L"],FORCE_SSL:!0,ANONYMIZE_IP:!0,AGENCY:"",SUB_AGENCY:"",VERSION:"20240416 v7.01 - Dual Tracking",SITE_TOPIC:"",SITE_PLATFORM:"",SCRIPT_SOURCE:
2024-04-23 20:32:20 UTC	13119	IN	Data Raw: 2f 69 67 29 3f 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 67 3a 64 3b 61 3d 5f 55 52 49 48 61 6e 64 6c 65 72 28 5f 73 63 72 75 62 62 65 64 55 52 4c 28 63 29 29 3b 66 6f 72 28 63 3d 30 3b 63 3c 6f 43 4f 4e 46 49 47 2e 47 57 54 5f 47 41 34 49 44 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 30 3d 3d 3d 63 7c 7c 30 3c 63 26 26 6f 43 4f 4e 46 49 47 2e 55 53 45 5f 50 41 52 41 4c 4c 45 4c 5f 43 55 53 54 4f 4d 5f 44 49 4d 45 4e 53 49 4f 4e 53 3f 67 74 61 67 28 22 63 6f 6e 66 69 67 22 2c 6f 43 4f 4e 46 49 47 2e 47 57 54 5f 47 41 34 49 44 5b 63 5d 2c 0d 0a 7b 67 72 6f 75 70 73 3a 6f 43 4f 4e 46 49 47 2e 47 41 34 5f 4e 41 4d 45 2b 63 2c 63 6f Data Ascii: /ig)?document.location.protocol+"//"+document.location.hostname+g:d;a=_URIHandler(_scrubbedURL(c));for(c=0;c<oCONFIG.GWT_GA4ID.length;c++)0===c\|\|0<c&&oCONFIG.USE_PARALLEL_CUSTOM_DIMENSIONS?gtag("config",oCONFIG.GWT_GA4ID[c],{groups:oCONFIG.GA4_NAME+c,co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49853	35.190.80.1	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:19 UTC	486	OUT	POST /report/v4?s=AxJE%2BSmPow%2F0SZcM70eSXcMM73NTEi8YMwaxWqrDFkv94XTquxkbzb9j2RQYvYTQujV%2Fm%2F1HVV4uq2cgU0QY4XLwzntQz4TUj6F9dWs%2For4NSRuCGWWaWDPUtMCBGRf%2FN71vAeJS HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 444 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:19 UTC	444	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 39 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 74 63 2e 67 6f 76 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 34 32 2e 32 34 35 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 Data Ascii: [{"age":4,"body":{"elapsed_time":592,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://www.ftc.gov/","sampling_fraction":1.0,"server_ip":"172.67.142.245","status_code":404,"type":"http.error"},"type":"network-error","url":"htt
2024-04-23 20:32:20 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 23 Apr 2024 20:32:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49915	104.22.71.197	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:24 UTC	569	OUT	GET /menu/modules/core.BRQnzO8v.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.ftc.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:24 UTC	896	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:24 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=315360000, immutable Cf-Bgj: minify ETag: W/"25da5432b1057724b8210f17e9b9db05" NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YcwYRxGqVMItKPwGft%2FZ3IYx13WP8MASrZV5qmbVgIYNAA%2FK87HLICL7UhcAa8PfiVN54YdZPuU4Mi6I1jwHatbHDNFk6sejlSUqJMOw6MPxdcqRqV3ZguyS3ws4gOEZ22Twuobq"}],"group":"cf-nel","max_age":604800} Vary: Accept-Encoding referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff CF-Cache-Status: HIT Age: 15788 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87909f690ad97b96-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 20:32:24 UTC	473	IN	Data Raw: 37 63 33 37 0d 0a 63 6f 6e 73 74 20 74 3d 22 2e 42 52 51 6e 7a 4f 38 76 22 2c 4a 3d 77 69 6e 64 6f 77 2c 4b 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 58 3d 76 6f 69 64 20 30 3b 4a 2e 61 32 61 5f 63 6f 6e 66 69 67 3d 4a 2e 61 32 61 5f 63 6f 6e 66 69 67 7c 7c 7b 7d 3b 76 61 72 20 65 3d 7b 6c 6f 63 61 6c 69 7a 65 3a 4a 2e 61 32 61 5f 6c 6f 63 61 6c 69 7a 65 7c 7c 7b 7d 2c 73 74 61 74 69 63 5f 73 65 72 76 65 72 3a 4a 2e 61 32 61 5f 63 6f 6e 66 69 67 2e 73 74 61 74 69 63 5f 73 65 72 76 65 72 7c 7c 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 61 64 64 74 6f 61 6e 79 2e 63 6f 6d 2f 6d 65 6e 75 22 2c 74 65 6d 70 6c 61 74 65 73 3a 7b 7d 2c 6e 61 74 69 76 65 3a 58 2c 6f 6e 63 6c 69 63 6b 3a 32 2c 6f 72 69 65 6e 74 61 74 69 6f 6e Data Ascii: 7c37const t=".BRQnzO8v",J=window,K=document,p=function(){},X=void 0;J.a2a_config=J.a2a_config\|\|{};var e={localize:J.a2a_localize\|\|{},static_server:J.a2a_config.static_server\|\|"https://static.addtoany.com/menu",templates:{},native:X,onclick:2,orientation
2024-04-23 20:32:24 UTC	1369	IN	Data Raw: 72 6c 61 79 73 3a 5b 5d 7d 3b 63 6f 6e 73 74 20 4c 3d 7b 6e 75 6d 5f 73 65 72 76 69 63 65 73 3a 38 2c 70 72 69 6f 72 69 74 69 7a 65 3a 58 2c 65 78 63 6c 75 64 65 5f 73 65 72 76 69 63 65 73 3a 58 2c 63 75 73 74 6f 6d 5f 73 65 72 76 69 63 65 73 3a 58 2c 64 65 6c 61 79 3a 30 2c 73 68 6f 77 5f 6d 65 6e 75 3a 58 2c 62 6f 6f 6b 6d 61 72 6b 6c 65 74 3a 58 7d 2c 6d 3d 7b 6c 69 6e 6b 6d 65 64 69 61 3a 58 2c 6c 69 6e 6b 6e 61 6d 65 3a 58 2c 6c 69 6e 6b 75 72 6c 3a 58 2c 6c 69 6e 6b 6e 61 6d 65 5f 65 73 63 61 70 65 3a 58 2c 6d 65 6e 75 5f 74 79 70 65 3a 58 2c 74 61 72 67 65 74 3a 58 7d 2c 5a 3d 7b 2e 2e 2e 65 2c 2e 2e 2e 4c 2c 2e 2e 2e 6d 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 63 6f 6e 73 74 20 65 20 69 6e 20 4a 2e 61 32 61 5f 63 6f 6e 66 69 67 29 Data Ascii: rlays:[]};const L={num_services:8,prioritize:X,exclude_services:X,custom_services:X,delay:0,show_menu:X,bookmarklet:X},m={linkmedia:X,linkname:X,linkurl:X,linkname_escape:X,menu_type:X,target:X},Z={...e,...L,...m},v=function(){for(const e in J.a2a_config)
2024-04-23 20:32:24 UTC	1369	IN	Data Raw: 70 70 22 2c 22 77 68 61 74 73 61 70 70 22 2c 22 77 68 61 74 73 61 70 70 22 2c 22 31 32 41 46 30 41 22 2c 7b 70 75 3a 31 2c 6e 61 3a 31 7d 5d 2c 5b 22 45 6d 61 69 6c 22 2c 22 65 6d 61 69 6c 22 2c 22 65 6d 61 69 6c 22 2c 22 38 38 38 39 39 30 22 2c 7b 75 72 6c 3a 22 6d 61 69 6c 74 6f 3a 3f 73 75 62 6a 65 63 74 3d 24 7b 74 69 74 6c 65 7d 26 62 6f 64 79 3d 24 7b 6c 69 6e 6b 7d 22 7d 5d 2c 5b 22 50 69 6e 74 65 72 65 73 74 22 2c 22 70 69 6e 74 65 72 65 73 74 22 2c 22 70 69 6e 74 65 72 65 73 74 22 2c 22 65 36 30 30 32 33 22 2c 7b 74 79 70 65 3a 22 6a 73 22 2c 73 72 63 3a 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 70 69 6e 74 65 72 65 73 74 2e 63 6f 6d 2f 6a 73 2f 70 69 6e 6d 61 72 6b 6c 65 74 2e 6a 73 22 2c 6d 65 64 69 61 3a 31 2c 70 75 3a 31 7d 5d 2c 5b 22 Data Ascii: pp","whatsapp","whatsapp","12AF0A",{pu:1,na:1}],["Email","email","email","888990",{url:"mailto:?subject=${title}&body=${link}"}],["Pinterest","pinterest","pinterest","e60023",{type:"js",src:"https://assets.pinterest.com/js/pinmarklet.js",media:1,pu:1}],["
2024-04-23 20:32:24 UTC	1369	IN	Data Raw: 6a 61 76 61 73 63 72 69 70 74 3a 61 32 61 2e 63 6f 70 79 4c 69 6e 6b 28 27 24 7b 6c 69 6e 6b 7d 27 29 22 7d 5d 2c 5b 22 44 69 61 72 79 2e 52 75 22 2c 22 64 69 61 72 79 5f 72 75 22 2c 22 64 69 61 72 79 5f 72 75 22 2c 22 39 31 32 44 33 31 22 5d 2c 5b 22 44 69 61 73 70 6f 72 61 22 2c 22 64 69 61 73 70 6f 72 61 22 2c 22 64 69 61 73 70 6f 72 61 22 2c 22 32 45 33 34 33 36 22 5d 2c 5b 22 44 69 67 67 22 2c 22 64 69 67 67 22 2c 22 64 69 67 67 22 2c 22 31 41 31 41 31 41 22 5d 2c 5b 22 44 69 69 67 6f 22 2c 22 64 69 69 67 6f 22 2c 22 64 69 69 67 6f 22 2c 22 34 41 38 42 43 41 22 5d 2c 5b 22 44 6f 75 62 61 6e 22 2c 22 64 6f 75 62 61 6e 22 2c 22 64 6f 75 62 61 6e 22 2c 22 30 37 31 22 2c 7b 70 75 3a 31 7d 5d 2c 5b 22 44 72 61 75 67 69 65 6d 22 2c 22 64 72 61 75 67 69 65 Data Ascii: javascript:a2a.copyLink('${link}')"}],["Diary.Ru","diary_ru","diary_ru","912D31"],["Diaspora","diaspora","diaspora","2E3436"],["Digg","digg","digg","1A1A1A"],["Diigo","diigo","diigo","4A8BCA"],["Douban","douban","douban","071",{pu:1}],["Draugiem","draugie
2024-04-23 20:32:24 UTC	1369	IN	Data Raw: 74 79 70 65 3a 22 65 6d 61 69 6c 22 7d 5d 2c 5b 22 50 61 70 61 6c 79 22 2c 22 70 61 70 61 6c 79 22 2c 22 70 61 70 61 6c 79 22 2c 22 33 41 43 30 46 36 22 2c 7b 70 75 3a 31 7d 5d 2c 5b 22 50 69 6e 62 6f 61 72 64 22 2c 22 70 69 6e 62 6f 61 72 64 22 2c 22 70 69 6e 62 6f 61 72 64 22 2c 22 31 33 34 31 44 45 22 2c 7b 70 75 3a 31 7d 5d 2c 5b 22 50 6c 75 72 6b 22 2c 22 70 6c 75 72 6b 22 2c 22 70 6c 75 72 6b 22 2c 22 43 46 36 38 32 46 22 5d 2c 5b 22 50 72 69 6e 74 22 2c 22 70 72 69 6e 74 22 2c 22 70 72 69 6e 74 22 2c 22 38 38 38 39 39 30 22 2c 7b 74 79 70 65 3a 22 6a 73 22 2c 73 72 63 3a 22 6a 61 76 61 73 63 72 69 70 74 3a 70 72 69 6e 74 28 29 22 7d 5d 2c 5b 22 50 72 69 6e 74 46 72 69 65 6e 64 6c 79 22 2c 22 70 72 69 6e 74 66 72 69 65 6e 64 6c 79 22 2c 22 70 72 69 Data Ascii: type:"email"}],["Papaly","papaly","papaly","3AC0F6",{pu:1}],["Pinboard","pinboard","pinboard","1341DE",{pu:1}],["Plurk","plurk","plurk","CF682F"],["Print","print","print","888990",{type:"js",src:"javascript:print()"}],["PrintFriendly","printfriendly","pri
2024-04-23 20:32:24 UTC	1369	IN	Data Raw: 2c 5b 22 57 79 6b 6f 70 22 2c 22 77 79 6b 6f 70 22 2c 22 77 79 6b 6f 70 22 2c 22 33 36 37 44 41 39 22 5d 2c 5b 22 58 22 2c 22 78 22 2c 22 78 22 2c 22 31 41 31 41 31 41 22 2c 7b 70 75 3a 31 2c 6e 61 3a 31 7d 5d 2c 5b 22 58 49 4e 47 22 2c 22 78 69 6e 67 22 2c 22 78 69 6e 67 22 2c 22 31 36 35 42 36 36 22 2c 7b 70 75 3a 31 7d 5d 2c 5b 22 59 61 68 6f 6f 20 4d 61 69 6c 22 2c 22 79 61 68 6f 6f 5f 6d 61 69 6c 22 2c 22 79 61 68 6f 6f 22 2c 22 34 30 30 30 39 30 22 2c 7b 74 79 70 65 3a 22 65 6d 61 69 6c 22 7d 5d 2c 5b 22 59 75 6d 6d 6c 79 22 2c 22 79 75 6d 6d 6c 79 22 2c 22 79 75 6d 6d 6c 79 22 2c 22 45 31 36 31 32 30 22 2c 7b 74 79 70 65 3a 22 6a 73 22 2c 73 72 63 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 75 6d 6d 6c 79 2e 63 6f 6d 2f 6a 73 2f 79 75 6d 6c 65 74 Data Ascii: ,["Wykop","wykop","wykop","367DA9"],["X","x","x","1A1A1A",{pu:1,na:1}],["XING","xing","xing","165B66",{pu:1}],["Yahoo Mail","yahoo_mail","yahoo","400090",{type:"email"}],["Yummly","yummly","yummly","E16120",{type:"js",src:"https://www.yummly.com/js/yumlet
2024-04-23 20:32:24 UTC	1369	IN	Data Raw: 7a 22 2c 22 66 65 65 64 62 6c 69 74 7a 22 2c 22 66 65 65 64 62 6c 69 74 7a 22 2c 22 46 46 38 42 32 33 22 2c 7b 74 79 70 65 3a 22 65 6d 61 69 6c 22 7d 5d 5d 7d 7d 2c 65 65 3d 28 28 63 65 3d 52 2e 70 61 67 65 2e 6d 6f 73 74 2e 63 6f 6e 63 61 74 28 52 2e 66 65 65 64 2e 6d 6f 73 74 29 29 2e 66 6f 72 45 61 63 68 28 65 3d 3e 69 2e 70 75 73 68 28 65 5b 32 5d 29 29 2c 7b 61 70 70 6c 65 5f 6d 75 73 69 63 3a 7b 6e 61 6d 65 3a 22 41 70 70 6c 65 20 4d 75 73 69 63 22 2c 69 63 6f 6e 3a 22 61 70 70 6c 65 5f 6d 75 73 69 63 22 2c 63 6f 6c 6f 72 3a 22 66 61 32 33 33 62 22 7d 2c 62 65 68 61 6e 63 65 3a 7b 6e 61 6d 65 3a 22 42 65 68 61 6e 63 65 22 2c 69 63 6f 6e 3a 22 62 65 68 61 6e 63 65 22 2c 63 6f 6c 6f 72 3a 22 30 30 37 45 46 46 22 2c 75 72 6c 3a 22 68 74 74 70 73 3a 2f Data Ascii: z","feedblitz","feedblitz","FF8B23",{type:"email"}]]}},ee=((ce=R.page.most.concat(R.feed.most)).forEach(e=>i.push(e[2])),{apple_music:{name:"Apple Music",icon:"apple_music",color:"fa233b"},behance:{name:"Behance",icon:"behance",color:"007EFF",url:"https:/
2024-04-23 20:32:24 UTC	1369	IN	Data Raw: 22 2c 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 69 6e 74 65 72 65 73 74 2e 63 6f 6d 2f 24 7b 69 64 7d 22 7d 2c 73 6e 61 70 63 68 61 74 3a 7b 6e 61 6d 65 3a 22 53 6e 61 70 63 68 61 74 22 2c 69 63 6f 6e 3a 22 73 6e 61 70 63 68 61 74 22 2c 63 6f 6c 6f 72 3a 22 32 41 32 41 32 41 22 2c 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 6e 61 70 63 68 61 74 2e 63 6f 6d 2f 61 64 64 2f 24 7b 69 64 7d 22 7d 2c 73 6f 75 6e 64 63 6c 6f 75 64 3a 7b 6e 61 6d 65 3a 22 53 6f 75 6e 64 43 6c 6f 75 64 22 2c 69 63 6f 6e 3a 22 73 6f 75 6e 64 63 6c 6f 75 64 22 2c 63 6f 6c 6f 72 3a 22 66 66 35 35 30 30 22 7d 2c 73 70 6f 74 69 66 79 3a 7b 6e 61 6d 65 3a 22 53 70 6f 74 69 66 79 22 2c 69 63 6f 6e 3a 22 73 70 6f 74 69 66 79 22 2c 63 6f 6c 6f 72 3a 22 31 65 64 37 36 Data Ascii: ",url:"https://www.pinterest.com/${id}"},snapchat:{name:"Snapchat",icon:"snapchat",color:"2A2A2A",url:"https://www.snapchat.com/add/${id}"},soundcloud:{name:"SoundCloud",icon:"soundcloud",color:"ff5500"},spotify:{name:"Spotify",icon:"spotify",color:"1ed76
2024-04-23 20:32:24 UTC	1369	IN	Data Raw: 70 6c 65 74 65 22 3d 3d 3d 4b 2e 72 65 61 64 79 53 74 61 74 65 3f 61 28 29 3a 4b 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 28 4b 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 74 2c 21 31 29 2c 4a 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 74 2c 21 31 29 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 65 28 65 2c 61 3d 7b 7d 29 7b 76 28 29 3b 76 61 72 20 74 2c 6e 2c 6f 2c 69 2c 72 2c 6c 2c 73 3d 5a 2c 63 3d 7b 7d 2c 64 3d 6e 75 6c 6c 2c 70 3d 7b 7d 2c 75 3d 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 66 6f 72 28 74 20 69 6e 20 72 61 28 65 29 2c 61 29 73 5b 74 5d 3d 61 5b 74 5d 3b 66 6f 72 28 74 20 69 6e 20 73 29 63 5b 74 5d 3d 73 5b 74 5d 3b 69 66 28 6e Data Ascii: plete"===K.readyState?a():K.addEventListener&&(K.addEventListener("DOMContentLoaded",t,!1),J.addEventListener("load",t,!1))}};function ae(e,a={}){v();var t,n,o,i,r,l,s=Z,c={},d=null,p={},u=location.href;for(t in ra(e),a)s[t]=a[t];for(t in s)c[t]=s[t];if(n
2024-04-23 20:32:24 UTC	1369	IN	Data Raw: 6c 3d 6c 7c 7c 6e 2e 6c 69 6e 6b 75 72 6c 2c 72 26 26 28 6e 2e 6c 69 6e 6b 6e 61 6d 65 5f 69 6d 70 6c 69 63 69 74 3d 21 31 29 2c 6c 26 26 28 6e 2e 6c 69 6e 6b 75 72 6c 5f 69 6d 70 6c 69 63 69 74 3d 21 31 29 2c 22 74 65 78 74 43 6f 6e 74 65 6e 74 22 69 6e 20 4b 3f 70 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 6e 2e 6c 69 6e 6b 6e 61 6d 65 3a 70 2e 69 6e 6e 65 72 54 65 78 74 3d 6e 2e 6c 69 6e 6b 6e 61 6d 65 2c 28 69 3d 70 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 29 26 26 28 6e 2e 6c 69 6e 6b 6e 61 6d 65 3d 69 2e 6e 6f 64 65 56 61 6c 75 65 29 2c 64 2e 61 32 61 5f 6b 69 74 3f 71 28 6e 2c 6f 29 3a 57 28 6e 29 29 3a 75 2e 73 68 6f 77 5f 6d 65 6e 75 7c 7c 6a 2d 2d 2c 59 28 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 50 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 30 Data Ascii: l=l\|\|n.linkurl,r&&(n.linkname_implicit=!1),l&&(n.linkurl_implicit=!1),"textContent"in K?p.textContent=n.linkname:p.innerText=n.linkname,(i=p.childNodes[0])&&(n.linkname=i.nodeValue),d.a2a_kit?q(n,o):W(n)):u.show_menu\|\|j--,Y()}function r(a){P(function(e){0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49917	172.67.39.148	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:24 UTC	692	OUT	GET /menu/sm.25.html HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:24 UTC	854	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:24 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=315360000, immutable referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nzelyvczJ9smi%2BooRiOkJnls9rLCiuk4DuCOMZnPGC5KKTHyoTN0j6zhugTPk%2B8J7O8HZaLNuwGO6Zh4nW6L8ceTywTGye7YHVwSCoYXiQG8bik2OwXlQY15NX3uvbL4hFvfK1DhkMzTdWL8vGBFn18c"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: HIT Age: 26308 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87909f69bc96ad82-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 20:32:24 UTC	515	IN	Data Raw: 32 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 41 32 41 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 3c 73 63 72 69 70 74 3e 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2c 74 3d 30 3c 6f 2e 6c 65 6e 67 74 68 3b 76 61 72 20 6e 2c 61 3d 7b 66 65 65 64 3a 5b 5d 2c 70 61 67 65 3a 5b 5d 7d 3b 74 26 26 5b 22 66 65 65 64 22 2c 22 70 61 67 65 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2b 22 5f 73 65 72 76 69 63 65 73 22 2c 6e 3d 6f 2e 69 6e 64 65 78 4f 66 28 74 2b 22 3d 22 29 3b 2d 31 21 3d 6e 26 Data Ascii: 2cc<!doctype html><html><head><title>A2A</title><meta name="robots" content="noindex"><script>!function(e){var o=document.cookie,t=0<o.length;var n,a={feed:[],page:[]};t&&["feed","page"].forEach(function(e){var t=e+"_services",n=o.indexOf(t+"=");-1!=n&
2024-04-23 20:32:24 UTC	208	IN	Data Raw: 48 6f 70 50 72 6f 74 6f 63 6f 6c 3a 22 22 2c 74 3d 2f 5e 68 74 74 70 5c 2f 31 2f 2e 74 65 73 74 28 6e 29 29 2c 74 29 2c 75 73 65 72 5f 73 65 72 76 69 63 65 73 3a 7b 66 65 65 64 3a 61 2e 66 65 65 64 2c 70 61 67 65 3a 61 2e 70 61 67 65 7d 7d 2c 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 26 26 65 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 6e 2c 22 2a 22 29 7d 28 77 69 6e 64 6f 77 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: HopProtocol:"",t=/^http\/1/.test(n)),t),user_services:{feed:a.feed,page:a.page}},e.postMessage&&e.parent.postMessage(n,"*")}(window);</script></head><body style="background-color:transparent"></body></html>
2024-04-23 20:32:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49935	54.230.253.105	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:26 UTC	537	OUT	GET /javascripts/remote.loader.js HTTP/1.1 Host: search.usa.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:27 UTC	425	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=iso-8859-1 Content-Length: 252 Connection: close Date: Tue, 23 Apr 2024 20:32:27 GMT Location: https://search.usa.gov/assets/sayt_loader.js Server: Apache X-Cache: Miss from cloudfront Via: 1.1 d95b64cce83cf2283db48e77cc0ee81e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C1 X-Amz-Cf-Id: r4bfWq_zR1P_mCI7KuQk9kx-XjTAMkAcfrTYR_DaS6qqNBAvK63PQA==
2024-04-23 20:32:27 UTC	252	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 65 61 72 63 68 2e 75 73 61 2e 67 6f 76 2f 61 73 73 65 74 73 2f 73 61 79 74 5f 6c 6f 61 64 65 72 2e 6a 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://search.usa.gov/assets/sayt_loader.js">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49936	151.101.14.109	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:27 UTC	528	OUT	GET /ga/98318866.js HTTP/1.1 Host: extend.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:27 UTC	568	IN	HTTP/1.1 200 OK Connection: close Content-Length: 16926 Server: Apache Last-Modified: Tue, 16 Apr 2024 05:29:23 GMT ETag: "421e-61630054652c0" Expires: Fri, 14 Apr 2034 06:37:16 GMT X-BApp-Server: assets-594f587997-grg44 X-Vimeo-DC: ge Timing-Allow-Origin: * Content-Type: text/javascript; charset=utf-8 Accept-Ranges: bytes Date: Tue, 23 Apr 2024 20:32:27 GMT Via: 1.1 varnish Age: 654910 X-Served-By: cache-pdk-katl1840058-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713904347.114050,VS0,VE1 Vary: Accept-Encoding Cache-Control: max-age=86400
2024-04-23 20:32:27 UTC	1371	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 2e 56 69 6d 65 6f 3d 65 2e 56 69 6d 65 6f 7c 7c 7b 7d 2c 65 2e 56 69 6d 65 6f 2e 50 6c 61 79 65 72 3d 74 28 29 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 65 28 74 2c 74 2e 65 78 70 6f 72 Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e.Vimeo=e.Vimeo\|\|{},e.Vimeo.Player=t())}(this,function(){"use strict";function e(e,t){return t={exports:{}},e(t,t.expor
2024-04-23 20:32:27 UTC	1371	IN	Data Raw: 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 c3 a2 e2 82 ac c5 93 22 2b 72 2b 22 c3 a2 e2 82 ac c2 9d 20 69 73 20 6e 6f 74 20 61 20 76 69 6d 65 6f 2e 63 6f 6d 20 75 72 6c 2e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 31 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 7b 7d 3a 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 6e 3d 54 2c 72 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 2c 6f 3d 30 2c 6e 3d 72 3f 6e 3a 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 3b 29 7b 76 61 72 20 69 3b 69 66 28 72 29 7b 69 66 28 6f 3e 3d 6e 2e 6c 65 6e 67 74 68 29 62 72 65 61 6b 3b 69 3d 6e 5b 6f 2b 2b 5d 7d 65 6c 73 65 7b Data Ascii: ;throw new TypeError(""+r+" is not a vimeo.com url.")}function f(e){for(var t=arguments.length<=1\|\|void 0===arguments[1]?{}:arguments[1],n=T,r=Array.isArray(n),o=0,n=r?n:n[Symbol.iterator]();;){var i;if(r){if(o>=n.length)break;i=n[o++]}else{
2024-04-23 20:32:27 UTC	1371	IN	Data Raw: 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 72 2e 69 6e 6e 65 72 48 54 4d 4c 3d 6e 3b 76 61 72 20 6f 3d 72 2e 66 69 72 73 74 43 68 69 6c 64 3b 72 65 74 75 72 6e 20 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 76 69 6d 65 6f 2d 69 6e 69 74 69 61 6c 69 7a 65 64 22 2c 22 74 72 75 65 22 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 30 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 64 6f 63 75 6d 65 6e 74 3a 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2c 74 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 64 61 74 61 2d 76 69 Data Ascii: reateElement("div");r.innerHTML=n;var o=r.firstChild;return t.appendChild(o),t.setAttribute("data-vimeo-initialized","true"),o}function h(){var e=arguments.length<=0\|\|void 0===arguments[0]?document:arguments[0],t=[].slice.call(e.querySelectorAll("[data-vi
2024-04-23 20:32:27 UTC	1371	IN	Data Raw: 66 2c 64 3d 6e 65 77 20 45 72 72 6f 72 28 74 2e 64 61 74 61 2e 6d 65 73 73 61 67 65 29 3b 64 2e 6e 61 6d 65 3d 74 2e 64 61 74 61 2e 6e 61 6d 65 2c 6c 2e 72 65 6a 65 63 74 28 64 29 2c 72 28 65 2c 74 2e 64 61 74 61 2e 6d 65 74 68 6f 64 2c 6c 29 7d 6f 3d 6e 28 65 2c 22 65 76 65 6e 74 3a 22 2b 74 2e 65 76 65 6e 74 29 2c 69 3d 74 2e 64 61 74 61 7d 65 6c 73 65 20 74 2e 6d 65 74 68 6f 64 26 26 28 6f 3d 6e 28 65 2c 74 2e 6d 65 74 68 6f 64 29 2c 69 3d 74 2e 76 61 6c 75 65 2c 72 28 65 2c 74 2e 6d 65 74 68 6f 64 29 29 3b 66 6f 72 28 76 61 72 20 68 3d 6f 2c 76 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 68 29 2c 79 3d 30 2c 68 3d 76 3f 68 3a 68 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 3b 29 7b 76 61 72 20 67 3b 69 66 28 76 29 7b 69 66 28 79 3e 3d Data Ascii: f,d=new Error(t.data.message);d.name=t.data.name,l.reject(d),r(e,t.data.method,l)}o=n(e,"event:"+t.event),i=t.data}else t.method&&(o=n(e,t.method),i=t.value,r(e,t.method));for(var h=o,v=Array.isArray(h),y=0,h=v?h:h[Symbol.iterator]();;){var g;if(v){if(y>=
2024-04-23 20:32:27 UTC	1371	IN	Data Raw: 3d 65 2e 6c 65 6e 67 74 68 3b 6d 2d 2d 26 26 21 62 28 65 5b 6d 5d 2c 74 29 3b 29 3b 65 6c 73 65 20 6d 3d 65 2e 69 6e 64 65 78 4f 66 28 74 29 3b 72 65 74 75 72 6e 20 6d 3e 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 74 68 69 73 2c 74 68 69 73 2e 5f 76 61 6c 75 65 73 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 74 68 69 73 2c 74 68 69 73 2e 5f 6b 65 79 73 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 61 73 28 65 29 3f 74 68 69 73 2e 5f 76 61 6c 75 65 73 5b 6d 5d 3d 74 3a 74 68 69 73 2e 5f 76 61 6c 75 65 73 5b 74 68 69 73 2e 5f 6b 65 79 73 2e 70 75 73 68 28 65 29 2d 31 5d 3d 74 2c 74 68 69 73 7d 66 75 6e 63 Data Ascii: =e.length;m--&&!b(e[m],t););else m=e.indexOf(t);return m>-1}function a(e){return i.call(this,this._values,e)}function u(e){return i.call(this,this._keys,e)}function s(e,t){return this.has(e)?this._values[m]=t:this._values[this._keys.push(e)-1]=t,this}func
2024-04-23 20:32:27 UTC	1371	IN	Data Raw: 61 6c 75 65 73 3a 64 2c 65 6e 74 72 69 65 73 3a 70 2c 66 6f 72 45 61 63 68 3a 67 7d 29 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 57 65 61 6b 53 65 74 26 26 28 65 2e 57 65 61 6b 53 65 74 3d 74 28 7b 64 65 6c 65 74 65 3a 72 2c 61 64 64 3a 63 2c 63 6c 65 61 72 3a 66 2c 68 61 73 3a 61 7d 2c 21 30 29 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 77 3a 77 69 6e 64 6f 77 29 7d 29 2c 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 6e 5b 74 5d 3d 6e 5b 74 5d 7c 7c 72 28 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 65 78 70 6f 72 74 73 3f 65 2e 65 78 Data Ascii: alues:d,entries:p,forEach:g})),"undefined"==typeof WeakSet&&(e.WeakSet=t({delete:r,add:c,clear:f,has:a},!0))}("undefined"!=typeof t&&"undefined"!=typeof global?w:window)}),e(function(e){!function(t,n,r){n[t]=n[t]\|\|r(),"undefined"!=typeof e&&e.exports?e.ex
2024-04-23 20:32:27 UTC	1371	IN	Data Raw: 65 6e 67 74 68 3b 6f 2b 2b 29 21 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 65 2e 72 65 73 6f 6c 76 65 28 74 5b 6f 5d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 6f 2c 65 29 7d 2c 72 29 7d 28 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 74 68 69 73 2e 64 65 66 3d 65 2c 74 68 69 73 2e 74 72 69 67 67 65 72 65 64 3d 21 31 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 65 2c 74 68 69 73 2e 73 74 61 74 65 3d 30 2c 74 68 69 73 2e 74 72 69 67 67 65 72 65 64 3d 21 31 2c 74 68 69 73 2e 63 68 61 69 6e 3d 5b 5d 2c 74 68 69 73 2e 6d 73 67 3d 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 Data Ascii: ength;o++)!function(o){e.resolve(t[o]).then(function(e){n(o,e)},r)}(o)}function u(e){this.def=e,this.triggered=!1}function s(e){this.promise=e,this.state=0,this.triggered=!1,this.chain=[],this.msg=void 0}function c(t){if("function"!=typeof t)throw TypeErr
2024-04-23 20:32:27 UTC	1371	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 3d 76 2c 66 28 76 2c 22 5f 5f 4e 50 4f 5f 5f 22 2c 30 2c 21 31 29 2c 66 28 63 2c 22 72 65 73 6f 6c 76 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 31 3d 3d 3d 65 2e 5f 5f 4e 50 4f 5f 5f 3f 65 3a 6e 65 77 20 74 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6e 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 4e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 28 65 29 7d 29 7d 29 2c 66 28 63 2c 22 72 65 6a 65 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e Data Ascii: prototype=v,f(v,"__NPO__",0,!1),f(c,"resolve",function(e){var t=this;return e&&"object"==typeof e&&1===e.__NPO__?e:new t(function(t,n){if("function"!=typeof t\|\|"function"!=typeof n)throw TypeError("Not a function");t(e)})}),f(c,"reject",function(e){return
2024-04-23 20:32:27 UTC	1371	IN	Data Raw: 6e 64 6f 77 26 26 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6a 51 75 65 72 79 26 26 28 74 2e 6c 65 6e 67 74 68 3e 31 26 26 22 63 6f 6e 73 6f 6c 65 22 69 6e 20 77 69 6e 64 6f 77 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 41 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 20 77 69 74 68 20 6d 75 6c 74 69 70 6c 65 20 65 6c 65 6d 65 6e 74 73 20 77 61 73 20 70 61 73 73 65 64 2c 20 75 73 69 6e 67 20 74 68 65 20 66 69 72 73 74 20 65 6c 65 6d 65 6e 74 2e 22 29 2c 74 3d 74 5b 30 5d 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 2c 21 61 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 59 6f 75 Data Ascii: ndow&&t instanceof jQuery&&(t.length>1&&"console"in window&&console.warn&&console.warn("A jQuery object with multiple elements was passed, using the first element."),t=t[0]),"string"==typeof t&&(t=document.getElementById(t)),!a(t))throw new TypeError("You
2024-04-23 20:32:27 UTC	1371	IN	Data Raw: 2c 74 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 6c 6c 4d 65 74 68 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 31 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 7b 7d 3a 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 72 65 74 75 72 6e 20 6e 65 77 20 45 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 72 65 74 75 72 6e 20 6e 2e 72 65 61 64 79 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6e 2c 65 2c 7b 72 65 73 6f 6c 76 65 3a 6f 2c 72 65 6a 65 63 74 3a 69 7d 29 2c 76 28 6e 2c 65 2c 72 29 7d 29 7d 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 72 65 Data Ascii: ,t)},e.prototype.callMethod=function(e){var n=this,r=arguments.length<=1\|\|void 0===arguments[1]?{}:arguments[1];return new E(function(o,i){return n.ready().then(function(){t(n,e,{resolve:o,reject:i}),v(n,e,r)})})},e.prototype.get=function(e){var n=this;re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49941	54.230.253.105	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:27 UTC	530	OUT	GET /assets/sayt_loader.js HTTP/1.1 Host: search.usa.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:27 UTC	665	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2290 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Date: Tue, 23 Apr 2024 20:32:27 GMT Expires: Tue, 23 Apr 2024 21:32:27 GMT Last-Modified: Thu, 18 Apr 2024 19:55:39 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload Vary: Accept-Encoding Via: 1.1 proxy4.us-east-1.prod.infr.search.usa.gov:8443, 1.1 5ac6e9200f10f178333bdd6e2f375a64.cloudfront.net (CloudFront) X-Cache: Miss from cloudfront X-Amz-Cf-Pop: ATL56-C1 X-Amz-Cf-Id: dq7JXQJPvOVqdFpj4DwpNv5dXC5E4Dcptr_eZREItmUJgjNC13AzNg==
2024-04-23 20:32:27 UTC	2290	IN	Data Raw: 2f 2a 21 0a 09 44 65 76 65 6c 6f 70 65 64 20 62 79 20 52 6f 62 65 72 74 20 4e 79 6d 61 6e 2c 20 68 74 74 70 3a 2f 2f 77 77 77 2e 72 6f 62 65 72 74 6e 79 6d 61 6e 2e 63 6f 6d 0a 09 43 6f 64 65 2f 6c 69 63 65 6e 73 69 6e 67 3a 20 68 74 74 70 3a 2f 2f 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 67 65 74 65 6c 65 6d 65 6e 74 73 62 79 63 6c 61 73 73 6e 61 6d 65 2f 0a 2a 2f 0a 76 61 72 20 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 73 2c 74 29 7b 72 65 74 75 72 6e 28 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 73 2c 74 29 7b 66 6f 72 28 76 61 Data Ascii: /!Developed by Robert Nyman, http://www.robertnyman.comCode/licensing: http://code.google.com/p/getelementsbyclassname//var getElementsByClassName=function(e,s,t){return(getElementsByClassName=document.getElementsByClassName?function(e,s,t){for(va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49943	54.230.253.105	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:27 UTC	538	OUT	GET /assets/sayt.css HTTP/1.1 Host: search.usa.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:28 UTC	651	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 9487 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Date: Tue, 23 Apr 2024 20:32:28 GMT Expires: Tue, 23 Apr 2024 21:32:28 GMT Last-Modified: Thu, 18 Apr 2024 19:45:18 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload Vary: Accept-Encoding Via: 1.1 proxy4.us-east-1.prod.infr.search.usa.gov:8443, 1.1 bb13763985c0d55b6c58ddf1d18f97ee.cloudfront.net (CloudFront) X-Cache: Miss from cloudfront X-Amz-Cf-Pop: ATL56-C1 X-Amz-Cf-Id: t5yLizD6eDWfzoGnWOOpBP_uCrqb14GUQbBRKdyH0nelaCFNZa6wLg==
2024-04-23 20:32:28 UTC	7617	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 43 53 53 20 46 72 61 6d 65 77 6f 72 6b 20 31 2e 38 2e 32 32 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 2c 20 41 55 54 48 4f 52 53 2e 74 78 74 20 28 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 2f 61 62 6f 75 74 29 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6f 72 20 47 50 4c 20 56 65 72 73 69 6f 6e 20 32 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 55 49 2f 54 68 65 6d 69 6e 67 2f 41 50 49 20 2a 2f 0a 0a 23 75 73 61 73 65 61 72 63 68 5f 73 61 79 74 20 2e 75 69 2d Data Ascii: /! jQuery UI CSS Framework 1.8.22 * * Copyright 2012, AUTHORS.txt (http://jqueryui.com/about) * Dual licensed under the MIT or GPL Version 2 licenses. * http://jquery.org/license * * http://docs.jquery.com/UI/Theming/API */#usasearch_sayt .ui-
2024-04-23 20:32:28 UTC	1870	IN	Data Raw: 61 61 61 20 75 72 6c 28 2f 61 73 73 65 74 73 2f 6c 65 67 61 63 79 2f 73 61 79 74 2f 75 69 2d 62 67 5f 66 6c 61 74 5f 30 5f 61 61 61 61 61 61 5f 34 30 78 31 30 30 2e 70 6e 67 29 20 35 30 25 20 72 65 70 65 61 74 2d 78 3b 0a 7d 0a 0a 23 75 73 61 73 65 61 72 63 68 5f 73 61 79 74 20 2e 75 69 2d 77 69 64 67 65 74 2d 73 68 61 64 6f 77 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 20 2e 33 3b 0a 20 20 66 69 6c 74 65 72 3a 20 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 20 33 30 29 3b 0a 20 20 2d 6b 68 74 6d 6c 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 61 61 61 20 75 72 6c 28 2f 61 73 73 65 74 73 2f 6c 65 67 61 63 79 2f 73 61 79 74 2f 75 69 2d 62 67 5f 66 6c 61 74 5f 30 5f 61 61 61 61 61 61 5f 34 30 78 31 30 Data Ascii: aaa url(/assets/legacy/sayt/ui-bg_flat_0_aaaaaa_40x100.png) 50% repeat-x;}#usasearch_sayt .ui-widget-shadow { opacity: .3; filter: Alpha(Opacity= 30); -khtml-border-radius: 8px; background: #aaa url(/assets/legacy/sayt/ui-bg_flat_0_aaaaaa_40x10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49942	54.230.253.105	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:27 UTC	535	OUT	GET /assets/sayt_loader_libs.js HTTP/1.1 Host: search.usa.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:32:28 UTC	667	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 127658 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Date: Tue, 23 Apr 2024 20:32:28 GMT Expires: Tue, 23 Apr 2024 21:32:28 GMT Last-Modified: Thu, 18 Apr 2024 19:55:39 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload Vary: Accept-Encoding Via: 1.1 proxy2.us-east-1.prod.infr.search.usa.gov:8443, 1.1 9e32d061d6f1c0e8ba238fdbb0c7b97e.cloudfront.net (CloudFront) X-Cache: Miss from cloudfront X-Amz-Cf-Pop: ATL56-C1 X-Amz-Cf-Id: PSp4P7YWrHufdHuzipU2ruODyI-RSRaJldCKtqezMND-q6ebLQdVzQ==
2024-04-23 20:32:28 UTC	7601	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-04-23 20:32:28 UTC	16000	IN	Data Raw: 2c 6e 29 7b 76 61 72 20 69 3d 69 74 28 65 29 2c 6f 3d 28 21 75 65 2e 62 6f 78 53 69 7a 69 6e 67 52 65 6c 69 61 62 6c 65 28 29 7c 7c 6e 29 26 26 22 62 6f 72 64 65 72 2d 62 6f 78 22 3d 3d 3d 70 65 2e 63 73 73 28 65 2c 22 62 6f 78 53 69 7a 69 6e 67 22 2c 21 31 2c 69 29 2c 73 3d 6f 2c 61 3d 4c 28 65 2c 74 2c 69 29 2c 75 3d 22 6f 66 66 73 65 74 22 2b 74 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 74 2e 73 6c 69 63 65 28 31 29 3b 69 66 28 6e 74 2e 74 65 73 74 28 61 29 29 7b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 61 3b 61 3d 22 61 75 74 6f 22 7d 72 65 74 75 72 6e 28 21 75 65 2e 62 6f 78 53 69 7a 69 6e 67 52 65 6c 69 61 62 6c 65 28 29 26 26 6f 7c 7c 21 75 65 2e 72 65 6c 69 61 62 6c 65 54 72 44 69 6d 65 6e 73 69 6f 6e 73 28 29 26 26 72 28 65 2c 22 74 72 Data Ascii: ,n){var i=it(e),o=(!ue.boxSizingReliable()\|\|n)&&"border-box"===pe.css(e,"boxSizing",!1,i),s=o,a=L(e,t,i),u="offset"+t[0].toUpperCase()+t.slice(1);if(nt.test(a)){if(!n)return a;a="auto"}return(!ue.boxSizingReliable()&&o\|\|!ue.reliableTrDimensions()&&r(e,"tr
2024-04-23 20:32:28 UTC	8000	IN	Data Raw: 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 74 3d 6a 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 74 65 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d Data Ascii: a href='' disabled='disabled'></a><select disabled='disabled'><option/></select>";var t=j.createElement("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&q.push("name"+te+"[^$\|!~]?=
2024-04-23 20:32:28 UTC	8000	IN	Data Raw: 2c 75 2c 6c 2c 63 3d 42 5b 65 2b 22 20 22 5d 3b 69 66 28 63 29 72 65 74 75 72 6e 20 6e 3f 30 3a 63 2e 73 6c 69 63 65 28 30 29 3b 66 6f 72 28 61 3d 65 2c 75 3d 5b 5d 2c 6c 3d 77 2e 70 72 65 46 69 6c 74 65 72 3b 61 3b 29 7b 66 6f 72 28 73 20 69 6e 20 69 26 26 21 28 6f 3d 61 65 2e 65 78 65 63 28 61 29 29 7c 7c 28 6f 26 26 28 61 3d 61 2e 73 6c 69 63 65 28 6f 5b 30 5d 2e 6c 65 6e 67 74 68 29 7c 7c 61 29 2c 75 2e 70 75 73 68 28 72 3d 5b 5d 29 29 2c 69 3d 21 31 2c 28 6f 3d 75 65 2e 65 78 65 63 28 61 29 29 26 26 28 69 3d 6f 2e 73 68 69 66 74 28 29 2c 72 2e 70 75 73 68 28 7b 76 61 6c 75 65 3a 69 2c 74 79 70 65 3a 6f 5b 30 5d 2e 72 65 70 6c 61 63 65 28 73 65 2c 22 20 22 29 7d 29 2c 61 3d 61 2e 73 6c 69 63 65 28 69 2e 6c 65 6e 67 74 68 29 29 2c 77 2e 66 69 6c 74 65 Data Ascii: ,u,l,c=B[e+" "];if(c)return n?0:c.slice(0);for(a=e,u=[],l=w.preFilter;a;){for(s in i&&!(o=ae.exec(a))\|\|(o&&(a=a.slice(o[0].length)\|\|a),u.push(r=[])),i=!1,(o=ue.exec(a))&&(i=o.shift(),r.push({value:i,type:o[0].replace(se," ")}),a=a.slice(i.length)),w.filte
2024-04-23 20:32:28 UTC	8384	IN	Data Raw: 7b 76 61 72 20 65 3d 6f 26 26 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 65 26 26 6c 65 28 65 2e 70 72 6f 6d 69 73 65 29 3f 65 2e 70 72 6f 6d 69 73 65 28 29 2e 70 72 6f 67 72 65 73 73 28 74 2e 6e 6f 74 69 66 79 29 2e 64 6f 6e 65 28 74 2e 72 65 73 6f 6c 76 65 29 2e 66 61 69 6c 28 74 2e 72 65 6a 65 63 74 29 3a 74 5b 69 5b 30 5d 2b 22 57 69 74 68 22 5d 28 74 68 69 73 2c 6f 3f 5b 65 5d 3a 61 72 67 75 6d 65 6e 74 73 29 7d 29 7d 29 2c 65 3d 6e 75 6c 6c 7d 29 2e 70 72 6f 6d 69 73 65 28 29 7d 2c 74 68 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 6e 2c 69 2c 6f 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2c 63 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: {var e=o&&o.apply(this,arguments);e&&le(e.promise)?e.promise().progress(t.notify).done(t.resolve).fail(t.reject):t[i[0]+"With"](this,o?[e]:arguments)})}),e=null}).promise()},then:function(t,i,o){function r(t,n,i,o){return function(){var a=this,c=arguments
2024-04-23 20:32:28 UTC	16384	IN	Data Raw: 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 64 2c 73 29 29 2c 66 2e 61 64 64 26 26 28 66 2e 61 64 64 2e 63 61 6c 6c 28 65 2c 63 29 2c 63 2e 68 61 6e 64 6c 65 72 2e 67 75 69 64 7c 7c 28 63 2e 68 61 6e 64 6c 65 72 2e 67 75 69 64 3d 6e 2e 67 75 69 64 29 29 2c 6f 3f 68 2e 73 70 6c 69 63 65 28 68 2e 64 65 6c 65 67 61 74 65 43 6f 75 6e 74 2b 2b 2c 30 2c 63 29 3a 68 2e 70 75 73 68 28 63 29 2c 70 65 2e 65 76 65 6e 74 2e 67 6c 6f 62 61 6c 5b 64 5d 3d 21 30 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 2c 6f 29 7b 76 61 72 20 72 2c 73 2c 61 2c 75 2c 6c 2c 63 2c 66 2c 68 2c 64 2c 70 2c 6d 2c 67 3d 6a 65 2e 68 61 73 44 61 74 61 28 65 29 26 26 6a 65 2e 67 65 74 28 65 29 3b 69 66 28 67 26 26 28 75 3d 67 2e 65 76 65 6e 74 73 29 29 Data Ascii: addEventListener(d,s)),f.add&&(f.add.call(e,c),c.handler.guid\|\|(c.handler.guid=n.guid)),o?h.splice(h.delegateCount++,0,c):h.push(c),pe.event.global[d]=!0)},remove:function(e,t,n,i,o){var r,s,a,u,l,c,f,h,d,p,m,g=je.hasData(e)&&je.get(e);if(g&&(u=g.events))
2024-04-23 20:32:28 UTC	16384	IN	Data Raw: 69 74 79 22 2c 30 29 2e 73 68 6f 77 28 29 2e 65 6e 64 28 29 2e 61 6e 69 6d 61 74 65 28 7b 6f 70 61 63 69 74 79 3a 74 7d 2c 65 2c 6e 2c 69 29 7d 2c 61 6e 69 6d 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 76 61 72 20 6f 3d 70 65 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 65 29 2c 72 3d 70 65 2e 73 70 65 65 64 28 74 2c 6e 2c 69 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 42 28 74 68 69 73 2c 70 65 2e 65 78 74 65 6e 64 28 7b 7d 2c 65 29 2c 72 29 3b 28 6f 7c 7c 6a 65 2e 67 65 74 28 74 68 69 73 2c 22 66 69 6e 69 73 68 22 29 29 26 26 74 2e 73 74 6f 70 28 21 30 29 7d 3b 72 65 74 75 72 6e 20 73 2e 66 69 6e 69 73 68 3d 73 2c 6f 7c 7c 21 31 3d 3d 3d 72 2e 71 75 65 75 65 3f 74 68 69 73 2e 65 61 63 68 28 73 29 3a 74 68 69 73 Data Ascii: ity",0).show().end().animate({opacity:t},e,n,i)},animate:function(e,t,n,i){var o=pe.isEmptyObject(e),r=pe.speed(t,n,i),s=function(){var t=B(this,pe.extend({},e),r);(o\|\|je.get(this,"finish"))&&t.stop(!0)};return s.finish=s,o\|\|!1===r.queue?this.each(s):this
2024-04-23 20:32:28 UTC	16384	IN	Data Raw: 75 63 63 65 73 73 3a 69 7d 2c 70 65 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 65 29 26 26 65 29 29 7d 7d 29 2c 70 65 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 2e 68 65 61 64 65 72 73 29 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 28 65 2e 63 6f 6e 74 65 6e 74 54 79 70 65 3d 65 2e 68 65 61 64 65 72 73 5b 74 5d 7c 7c 22 22 29 7d 29 2c 70 65 2e 5f 65 76 61 6c 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 70 65 2e 61 6a 61 78 28 7b 75 72 6c 3a 65 2c 74 79 70 65 3a 22 47 45 54 22 2c 64 61 74 61 54 79 70 65 3a 22 73 63 72 69 70 74 22 2c 63 61 63 68 65 3a 21 30 2c 61 73 79 6e 63 3a Data Ascii: uccess:i},pe.isPlainObject(e)&&e))}}),pe.ajaxPrefilter(function(e){var t;for(t in e.headers)"content-type"===t.toLowerCase()&&(e.contentType=e.headers[t]\|\|"")}),pe._evalUrl=function(e,t,n){return pe.ajax({url:e,type:"GET",dataType:"script",cache:!0,async:
2024-04-23 20:32:28 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6e 5b 65 5d 3a 65 29 2e 61 70 70 6c 79 28 6e 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 74 7c 7c 30 29 7d 2c 5f 68 6f 76 65 72 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 68 6f 76 65 72 61 62 6c 65 3d 74 68 69 73 2e 68 6f 76 65 72 61 62 6c 65 2e 61 64 64 28 74 29 2c 74 68 69 73 2e 5f 6f 6e 28 74 2c 7b 6d 6f 75 73 65 65 6e 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 65 28 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 2c 6e 75 6c 6c 2c 22 75 69 2d 73 74 61 Data Ascii: unction(e,t){var n=this;return setTimeout(function(){return("string"==typeof e?n[e]:e).apply(n,arguments)},t\|\|0)},_hoverable:function(t){this.hoverable=this.hoverable.add(t),this._on(t,{mouseenter:function(t){this._addClass(e(t.currentTarget),null,"ui-sta
2024-04-23 20:32:28 UTC	14137	IN	Data Raw: 2b 6f 7d 29 2c 74 68 69 73 2e 66 6f 63 75 73 28 74 2c 6e 29 29 3a 74 68 69 73 2e 66 6f 63 75 73 28 74 2c 74 68 69 73 2e 5f 6d 65 6e 75 49 74 65 6d 73 28 74 68 69 73 2e 61 63 74 69 76 65 4d 65 6e 75 29 2e 66 69 72 73 74 28 29 29 29 3a 74 68 69 73 2e 6e 65 78 74 28 74 29 7d 2c 5f 68 61 73 53 63 72 6f 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 3c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 70 72 6f 70 28 22 73 63 72 6f 6c 6c 48 65 69 67 68 74 22 29 7d 2c 73 65 6c 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 61 63 74 69 76 65 3d 74 68 69 73 2e 61 63 74 69 76 65 7c 7c 65 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 22 2e 75 69 2d 6d 65 6e Data Ascii: +o}),this.focus(t,n)):this.focus(t,this._menuItems(this.activeMenu).first())):this.next(t)},_hasScroll:function(){return this.element.outerHeight()<this.element.prop("scrollHeight")},select:function(t){this.active=this.active\|\|e(t.target).closest(".ui-men

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49977	3.161.136.81	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:33 UTC	661	OUT	GET /Universal-Federated-Analytics-Min.js?agency=FTC HTTP/1.1 Host: dap.digitalgov.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "26433217e805a89cf41adac58221316e" If-Modified-Since: Thu, 18 Apr 2024 15:08:41 GMT
2024-04-23 20:32:34 UTC	579	IN	HTTP/1.1 304 Not Modified Connection: close Date: Tue, 23 Apr 2024 11:59:18 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 18 Apr 2024 15:08:41 GMT ETag: "26433217e805a89cf41adac58221316e" x-amz-server-side-encryption: AES256 x-amz-version-id: 39DeP5oo.f2rQ6hItN1skmgkaQ0kloSX Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d4eae7f9eca00212bac8b49e2d359cc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: uOn0izcAGhG2ullCAyBs84xHHENLzXoxqva5mz-I5IX3SgWn1EJOPA== Age: 30797

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49988	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:34 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=LLG371WrZXc8zOU&MD=REaeMeof HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-23 20:32:35 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 6d8f3d0f-d4c8-4cda-9436-d6b19de5c51f MS-RequestId: cbdcec92-9575-4d52-9b88-dcf4fb7107ec MS-CV: ulQedbC/DEKbX9N3.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 23 Apr 2024 20:32:35 GMT Connection: close Content-Length: 25457
2024-04-23 20:32:35 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-23 20:32:35 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49999	151.101.14.109	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:36 UTC	615	OUT	GET /ga/98318866.js HTTP/1.1 Host: extend.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "421e-61630054652c0" If-Modified-Since: Tue, 16 Apr 2024 05:29:23 GMT
2024-04-23 20:32:36 UTC	345	IN	HTTP/1.1 304 Not Modified Connection: close Date: Tue, 23 Apr 2024 20:32:36 GMT Via: 1.1 varnish ETag: "421e-61630054652c0" Expires: Fri, 14 Apr 2034 06:37:16 GMT Age: 654920 X-Served-By: cache-pdk-katl1840075-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713904357.903928,VS0,VE1 Vary: Accept-Encoding Cache-Control: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	50014	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:41 UTC	866	OUT	GET /faq.html HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:41 UTC	821	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:42 GMT Last-Modified: Wed, 30 Nov 2022 19:34:18 GMT Content-Type: text/html Content-Length: 6348 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:41 UTC	6348	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 47 2d 58 32 4b 48 36 38 52 4a 52 51 22 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 6a 73 2f 67 61 66 6f 75 72 70 72 6f 64 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 74 69 74 6c 65 20 64 61 74 61 2d 69 31 38 6e 3d 22 73 69 74 65 77 69 64 65 2e 70 61 67 65 2d 74 69 74 6c 65 22 3e 4e 61 74 69 6f 6e 61 6c 20 44 6f 20 4e 6f 74 20 43 61 6c 6c 20 52 65 67 69 73 74 72 79 3c 2f 74 69 74 6c 65 3e 20 3c 6d 65 Data Ascii: <!doctype html> <head> <script async src="https://www.googletagmanager.com/gtag/js?id=G-X2KH68RJRQ"></script> <script type="text/javascript" src="/js/gafourprod.js"></script> <title data-i18n="sitewide.page-title">National Do Not Call Registry</title> <me

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	50015	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:41 UTC	770	OUT	GET /css/faq.css HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.donotcall.gov/faq.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.0.1713904327.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.0.1713904327.0.0.0
2024-04-23 20:32:41 UTC	819	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:42 GMT Last-Modified: Wed, 30 Nov 2022 18:08:19 GMT Content-Type: text/css Content-Length: 226 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:41 UTC	226	IN	Data Raw: 2e 72 6e 6c 5f 68 70 20 2e 72 69 67 68 74 4e 61 76 4c 69 6e 6b 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 30 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 38 70 78 29 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 31 70 78 29 7b 62 6f 64 79 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 31 29 20 2e 72 6e 6c 5f 68 70 20 2e 72 69 67 68 74 4e 61 76 4c 69 6e 6b 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 30 70 78 7d 7d 2e 66 6f 72 6d 5f 66 69 65 6c 64 5f 72 69 67 68 74 7b 6d 61 72 67 69 6e 3a 2d 32 37 70 78 20 30 20 30 20 32 32 30 70 78 3b 77 69 64 74 68 3a 32 35 30 70 78 3b 63 6c 65 61 72 3a 62 6f 74 68 7d Data Ascii: .rnl_hp .rightNavLinks{margin-top:40px}@media only screen and (max-width:768px) and (min-width:481px){body:nth-of-type(1) .rnl_hp .rightNavLinks{margin-top:40px}}.form_field_right{margin:-27px 0 0 220px;width:250px;clear:both}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	50020	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:42 UTC	839	OUT	GET /images/Header_generic_moreinfo.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.donotcall.gov/faq.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904361.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904361.0.0.0
2024-04-23 20:32:42 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:43 GMT Last-Modified: Thu, 26 Dec 2019 17:35:33 GMT Content-Type: image/jpeg Content-Length: 27527 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:42 UTC	11601	IN	Data Raw: ff d8 ff e1 04 ae 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 c2 00 00 01 01 00 03 00 00 00 01 00 a6 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 20 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d4 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 31 33 3a 30 37 3a 33 31 20 30 37 3a 35 31 3a 30 36 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: ExifMM*(1 2i ''Adobe Photoshop CS6 (Macintosh)2013:07:31 07:51:060
2024-04-23 20:32:42 UTC	15468	IN	Data Raw: 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 46 41 39 42 45 35 36 34 33 42 36 31 31 45 32 38 34 31 35 46 41 33 37 33 32 37 44 45 44 46 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 37 31 37 44 38 34 30 33 32 32 30 36 38 31 31 38 30 41 41 43 37 33 44 38 34 43 38 42 35 42 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 38 32 43 45 30 37 41 44 30 33 45 45 31 31 31 38 34 30 34 38 30 31 38 33 31 36 34 30 35 31 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 39 36 43 30 36 41 39 37 38 45 42 45 30 31 31 42 42 38 35 41 42 43 35 31 45 44 39 35 43 32 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a Data Ascii: df:li> <rdf:li>xmp.did:7FA9BE5643B611E28415FA37327DEDF2</rdf:li> <rdf:li>xmp.did:8717D8403220681180AAC73D84C8B5B9</rdf:li> <rdf:li>xmp.did:882CE07AD03EE1118404801831640518</rdf:li> <rdf:li>xmp.did:996C06A978EBE011BB85ABC51ED95C2D</rdf:li> <rdf:li>xmp.did:
2024-04-23 20:32:42 UTC	458	IN	Data Raw: 98 17 ed af fd 5c 27 fc 90 3b 1f fa 3d ff 00 15 fc 79 ea f5 6b 21 d4 5f f9 89 6b 7f e4 83 f6 9b fe 75 d7 fc 93 7e d7 fb 9f c3 d9 cf 57 a9 09 cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 7a bd cf 57 ab dc f5 Data Ascii: \';=yk!_ku~WWzWzWzWzWzWzWzWzWzWzWzWzWzWzWzWzWzWzWzWzWzWzWzWzWzWzWzWzWzW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	50021	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:43 UTC	593	OUT	GET /images/Header_generic_moreinfo.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904361.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904361.0.0.0
2024-04-23 20:32:43 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:44 GMT Last-Modified: Thu, 26 Dec 2019 17:35:33 GMT Content-Type: image/jpeg Content-Length: 27527 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:32:43 UTC	15584	IN	Data Raw: ff d8 ff e1 04 ae 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 c2 00 00 01 01 00 03 00 00 00 01 00 a6 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 20 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d4 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 31 33 3a 30 37 3a 33 31 20 30 37 3a 35 31 3a 30 36 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: ExifMM*(1 2i ''Adobe Photoshop CS6 (Macintosh)2013:07:31 07:51:060
2024-04-23 20:32:43 UTC	11943	IN	Data Raw: 68 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 35 31 32 37 38 38 39 31 37 36 32 30 36 38 31 31 38 30 38 33 44 39 34 44 31 41 38 34 30 36 31 35 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 33 2d 30 37 2d 33 30 54 31 35 3a 34 36 3a 30 35 2d 30 34 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 6f 6e 76 65 72 74 Data Ascii: h)" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:51278891762068118083D94D1A840615" stEvt:when="2013-07-30T15:46:05-04:00" stEvt:softwareAgent="Adobe Photoshop CS6 (Macintosh)" stEvt:changed="/"/> <rdf:li stEvt:action="convert

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	50022	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:45 UTC	868	OUT	GET /index.html HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904361.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904361.0.0.0
2024-04-23 20:32:45 UTC	821	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:32:46 GMT Last-Modified: Wed, 30 Nov 2022 19:34:19 GMT Content-Type: text/html Content-Length: 6285 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:32:45 UTC	6285	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 47 2d 58 32 4b 48 36 38 52 4a 52 51 22 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 6a 73 2f 67 61 66 6f 75 72 70 72 6f 64 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 74 69 74 6c 65 20 64 61 74 61 2d 69 31 38 6e 3d 22 73 69 74 65 77 69 64 65 2e 70 61 67 65 2d 74 69 74 6c 65 22 3e 4e 61 74 69 6f 6e 61 6c 20 44 6f 20 4e 6f 74 20 43 61 6c 6c 20 52 65 67 69 73 74 72 79 3c 2f 74 69 74 6c 65 3e 20 3c 6d 65 Data Ascii: <!doctype html> <head> <script async src="https://www.googletagmanager.com/gtag/js?id=G-X2KH68RJRQ"></script> <script type="text/javascript" src="/js/gafourprod.js"></script> <title data-i18n="sitewide.page-title">National Do Not Call Registry</title> <me

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	50036	151.101.14.109	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:32:57 UTC	615	OUT	GET /ga/98318866.js HTTP/1.1 Host: extend.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "421e-61630054652c0" If-Modified-Since: Tue, 16 Apr 2024 05:29:23 GMT
2024-04-23 20:32:57 UTC	345	IN	HTTP/1.1 304 Not Modified Connection: close Date: Tue, 23 Apr 2024 20:32:57 GMT Via: 1.1 varnish ETag: "421e-61630054652c0" Expires: Fri, 14 Apr 2034 06:37:16 GMT Age: 654940 X-Served-By: cache-pdk-katl1840031-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713904377.344818,VS0,VE1 Vary: Accept-Encoding Cache-Control: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	50047	151.101.14.109	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:01 UTC	615	OUT	GET /ga/98318866.js HTTP/1.1 Host: extend.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "421e-61630054652c0" If-Modified-Since: Tue, 16 Apr 2024 05:29:23 GMT
2024-04-23 20:33:02 UTC	345	IN	HTTP/1.1 304 Not Modified Connection: close Date: Tue, 23 Apr 2024 20:33:02 GMT Via: 1.1 varnish ETag: "421e-61630054652c0" Expires: Fri, 14 Apr 2034 06:37:16 GMT Age: 654945 X-Served-By: cache-pdk-katl1840026-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713904382.133866,VS0,VE1 Vary: Accept-Encoding Cache-Control: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	50065	3.217.69.59	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:05 UTC	652	OUT	POST /api/contentsecuritypolicy HTTP/1.1 Host: telemetry.consumersentinel.gov Connection: keep-alive Content-Length: 1023 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://www.donotcall.gov Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:33:05 UTC	1023	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 6e 6f 74 63 61 6c 6c 2e 67 6f 76 2f 69 6e 64 65 78 2e 68 74 6d 6c 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c 61 74 65 64 2d 64 69 72 65 63 74 69 76 65 22 3a 22 69 6d 67 2d 73 72 63 22 2c 22 65 66 66 65 63 74 69 76 65 2d 64 69 72 65 63 74 69 76 65 22 3a 22 69 6d 67 2d 73 72 63 22 2c 22 6f 72 69 67 69 6e 61 6c 2d 70 6f 6c 69 63 79 22 3a 22 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f Data Ascii: {"csp-report":{"document-uri":"https://www.donotcall.gov/index.html","referrer":"","violated-directive":"img-src","effective-directive":"img-src","original-policy":"default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/
2024-04-23 20:33:06 UTC	448	IN	HTTP/1.1 204 No Content Date: Tue, 23 Apr 2024 20:33:05 GMT Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: TS012dcdf7=0121bc3622f6dc6e97dbfa102bde00fc19230822491ff8f9526feafeda7e3481217780b43b903f2c531f9e586c814e288577a78f6c; Path=/; Domain=.telemetry.consumersentinel.gov; Secure; HTTPOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	50068	3.217.69.59	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:05 UTC	652	OUT	POST /api/contentsecuritypolicy HTTP/1.1 Host: telemetry.consumersentinel.gov Connection: keep-alive Content-Length: 1024 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://www.donotcall.gov Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:33:05 UTC	1024	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 6e 6f 74 63 61 6c 6c 2e 67 6f 76 2f 69 6e 64 65 78 2e 68 74 6d 6c 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c 61 74 65 64 2d 64 69 72 65 63 74 69 76 65 22 3a 22 69 6d 67 2d 73 72 63 22 2c 22 65 66 66 65 63 74 69 76 65 2d 64 69 72 65 63 74 69 76 65 22 3a 22 69 6d 67 2d 73 72 63 22 2c 22 6f 72 69 67 69 6e 61 6c 2d 70 6f 6c 69 63 79 22 3a 22 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f Data Ascii: {"csp-report":{"document-uri":"https://www.donotcall.gov/index.html","referrer":"","violated-directive":"img-src","effective-directive":"img-src","original-policy":"default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/
2024-04-23 20:33:06 UTC	448	IN	HTTP/1.1 204 No Content Date: Tue, 23 Apr 2024 20:33:05 GMT Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: TS012dcdf7=0121bc3622584f06f47e49fb2f0bd59430f531e2084e87eca3bf80eb334fa0ad4de0723156fff843d6203dda498c0b01c6dcd7a12c; Path=/; Domain=.telemetry.consumersentinel.gov; Secure; HTTPOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	50067	3.217.69.59	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:05 UTC	652	OUT	POST /api/contentsecuritypolicy HTTP/1.1 Host: telemetry.consumersentinel.gov Connection: keep-alive Content-Length: 1244 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://www.donotcall.gov Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:33:05 UTC	1244	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 6e 6f 74 63 61 6c 6c 2e 67 6f 76 2f 69 6e 64 65 78 2e 68 74 6d 6c 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c 61 74 65 64 2d 64 69 72 65 63 74 69 76 65 22 3a 22 69 6d 67 2d 73 72 63 22 2c 22 65 66 66 65 63 74 69 76 65 2d 64 69 72 65 63 74 69 76 65 22 3a 22 69 6d 67 2d 73 72 63 22 2c 22 6f 72 69 67 69 6e 61 6c 2d 70 6f 6c 69 63 79 22 3a 22 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f Data Ascii: {"csp-report":{"document-uri":"https://www.donotcall.gov/index.html","referrer":"","violated-directive":"img-src","effective-directive":"img-src","original-policy":"default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/
2024-04-23 20:33:06 UTC	448	IN	HTTP/1.1 204 No Content Date: Tue, 23 Apr 2024 20:33:06 GMT Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: TS012dcdf7=0121bc3622f2f155cd660b4581388d7b7699b3454d7721f19b408c22d3fb4b00794afe0a660390eb60cd5fe82f3f932cd7852ee91d; Path=/; Domain=.telemetry.consumersentinel.gov; Secure; HTTPOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	50066	3.217.69.59	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:05 UTC	651	OUT	POST /api/contentsecuritypolicy HTTP/1.1 Host: telemetry.consumersentinel.gov Connection: keep-alive Content-Length: 914 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://www.donotcall.gov Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:33:05 UTC	914	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 6e 6f 74 63 61 6c 6c 2e 67 6f 76 2f 69 6e 64 65 78 2e 68 74 6d 6c 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c 61 74 65 64 2d 64 69 72 65 63 74 69 76 65 22 3a 22 69 6d 67 2d 73 72 63 22 2c 22 65 66 66 65 63 74 69 76 65 2d 64 69 72 65 63 74 69 76 65 22 3a 22 69 6d 67 2d 73 72 63 22 2c 22 6f 72 69 67 69 6e 61 6c 2d 70 6f 6c 69 63 79 22 3a 22 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f Data Ascii: {"csp-report":{"document-uri":"https://www.donotcall.gov/index.html","referrer":"","violated-directive":"img-src","effective-directive":"img-src","original-policy":"default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/
2024-04-23 20:33:06 UTC	448	IN	HTTP/1.1 204 No Content Date: Tue, 23 Apr 2024 20:33:06 GMT Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: TS012dcdf7=0121bc3622734e66aba6a97c99a9c6769ae7a1c1e1e890b56c78c6fa88585bfd8e053853964b59a4e43b9177429533df3bdab7367d; Path=/; Domain=.telemetry.consumersentinel.gov; Secure; HTTPOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	50064	3.217.69.59	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:05 UTC	651	OUT	POST /api/contentsecuritypolicy HTTP/1.1 Host: telemetry.consumersentinel.gov Connection: keep-alive Content-Length: 903 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://www.donotcall.gov Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:33:05 UTC	903	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 6e 6f 74 63 61 6c 6c 2e 67 6f 76 2f 69 6e 64 65 78 2e 68 74 6d 6c 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c 61 74 65 64 2d 64 69 72 65 63 74 69 76 65 22 3a 22 69 6d 67 2d 73 72 63 22 2c 22 65 66 66 65 63 74 69 76 65 2d 64 69 72 65 63 74 69 76 65 22 3a 22 69 6d 67 2d 73 72 63 22 2c 22 6f 72 69 67 69 6e 61 6c 2d 70 6f 6c 69 63 79 22 3a 22 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f Data Ascii: {"csp-report":{"document-uri":"https://www.donotcall.gov/index.html","referrer":"","violated-directive":"img-src","effective-directive":"img-src","original-policy":"default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/
2024-04-23 20:33:06 UTC	448	IN	HTTP/1.1 204 No Content Date: Tue, 23 Apr 2024 20:33:05 GMT Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: TS012dcdf7=0121bc3622f4578599fe1e10933a849b37f785f284049f7519b60ca510c3fa3140d3f95684c82c431174239230885348fd810dda35; Path=/; Domain=.telemetry.consumersentinel.gov; Secure; HTTPOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	50069	3.217.69.59	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:05 UTC	651	OUT	POST /api/contentsecuritypolicy HTTP/1.1 Host: telemetry.consumersentinel.gov Connection: keep-alive Content-Length: 845 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://www.donotcall.gov Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:33:05 UTC	845	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 6e 6f 74 63 61 6c 6c 2e 67 6f 76 2f 69 6e 64 65 78 2e 68 74 6d 6c 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c 61 74 65 64 2d 64 69 72 65 63 74 69 76 65 22 3a 22 69 6d 67 2d 73 72 63 22 2c 22 65 66 66 65 63 74 69 76 65 2d 64 69 72 65 63 74 69 76 65 22 3a 22 69 6d 67 2d 73 72 63 22 2c 22 6f 72 69 67 69 6e 61 6c 2d 70 6f 6c 69 63 79 22 3a 22 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f Data Ascii: {"csp-report":{"document-uri":"https://www.donotcall.gov/index.html","referrer":"","violated-directive":"img-src","effective-directive":"img-src","original-policy":"default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/
2024-04-23 20:33:06 UTC	448	IN	HTTP/1.1 204 No Content Date: Tue, 23 Apr 2024 20:33:06 GMT Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: TS012dcdf7=0121bc3622217d54aa85dbd0dee61ea35ee94d59c0c8e1a663da7413b5ea894359d6146e1821206822bdd9e42b1b029a246cdc62f4; Path=/; Domain=.telemetry.consumersentinel.gov; Secure; HTTPOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	50023	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:07 UTC	833	OUT	GET /report.html HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904385.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904385.0.0.0
2024-04-23 20:33:07 UTC	821	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:08 GMT Last-Modified: Wed, 30 Nov 2022 19:34:20 GMT Content-Type: text/html Content-Length: 6862 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:33:07 UTC	6862	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 47 2d 58 32 4b 48 36 38 52 4a 52 51 22 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 6a 73 2f 67 61 66 6f 75 72 70 72 6f 64 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 74 69 74 6c 65 20 64 61 74 61 2d 69 31 38 6e 3d 22 73 69 74 65 77 69 64 65 2e 70 61 67 65 2d 74 69 74 6c 65 22 3e 4e 61 74 69 6f 6e 61 6c 20 44 6f 20 4e 6f 74 20 43 61 6c 6c 20 52 65 67 69 73 74 72 79 3c 2f 74 69 74 6c 65 3e 20 3c 6d 65 Data Ascii: <!doctype html> <head> <script async src="https://www.googletagmanager.com/gtag/js?id=G-X2KH68RJRQ"></script> <script type="text/javascript" src="/js/gafourprod.js"></script> <title data-i18n="sitewide.page-title">National Do Not Call Registry</title> <me

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	50053	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:07 UTC	740	OUT	GET /css/report.css HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.donotcall.gov/report.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904385.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904385.0.0.0
2024-04-23 20:33:07 UTC	821	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:08 GMT Last-Modified: Wed, 30 Nov 2022 19:37:32 GMT Content-Type: text/css Content-Length: 29501 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:33:07 UTC	11133	IN	Data Raw: 2e 72 6e 6c 5f 68 70 20 2e 72 69 67 68 74 4e 61 76 4c 69 6e 6b 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 30 70 78 7d 62 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 6e 6e 72 5f 61 72 65 61 5f 69 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 74 78 74 53 75 62 6a 65 63 74 4d 61 74 74 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6e 6f 44 69 73 70 6c 61 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 70 6e 6c 4c 69 6e 6b 73 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 50 6e 6c 52 65 64 69 72 65 63 74 54 6f 43 41 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 6f 62 69 6c 65 4d 65 73 73 61 67 65 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a Data Ascii: .rnl_hp .rightNavLinks{margin-top:40px}br{display:block!important}.bnnr_area_i{margin:0 auto}.txtSubjectMatter{display:none;position:relative}.noDisplay{display:none}#pnlLinks{width:100%}#PnlRedirectToCA{height:100%;width:100%}.mobileMessage{padding-left:
2024-04-23 20:33:07 UTC	12890	IN	Data Raw: 74 74 6f 6e 5d 7b 77 69 64 74 68 3a 31 30 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 63 63 36 37 33 33 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 47 65 6e 65 76 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 62 6f 72 64 65 72 3a 31 70 20 73 6f 6c 69 64 20 23 39 39 39 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 69 6e 70 75 74 2e 74 68 5f 76 5b 74 79 70 65 3d 62 75 Data Ascii: tton]{width:100px;background:#cc6733;color:#fff;font-family:Tahoma,Geneva,sans-serif;height:30px;-webkit-border-radius:15px;-webkit-appearance:none;-moz-border-radius:15px;border-radius:15px;border:1p solid #999;text-transform:uppercase}input.th_v[type=bu
2024-04-23 20:33:07 UTC	5156	IN	Data Raw: 6f 62 69 6c 65 5f 68 70 5f 30 31 20 69 6d 67 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 6d 6f 62 69 6c 65 5f 68 70 5f 30 31 20 64 69 76 2e 68 70 5f 64 6e 63 5f 62 5f 6d 5f 6f 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 6d 6f 62 69 6c 65 5f 68 70 5f 30 32 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 30 20 36 70 78 20 30 7d 2e 6d 6f 62 69 6c 65 5f 68 70 5f 30 32 20 69 6d 67 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 6d 6f 62 69 6c 65 5f 68 70 5f 30 32 20 64 69 76 2e 68 70 5f 64 6e 63 5f 62 5f 6d 5f 62 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 6d 6f 62 69 6c 65 5f 68 70 5f 30 33 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 30 20 36 70 78 20 30 7d 2e 6d 6f 62 69 6c 65 5f 68 70 5f 30 33 20 69 6d 67 7b 66 6c 6f 61 74 Data Ascii: obile_hp_01 img{float:left}.mobile_hp_01 div.hp_dnc_b_m_o{float:right}.mobile_hp_02{clear:both;padding:6px 0 6px 0}.mobile_hp_02 img{float:left}.mobile_hp_02 div.hp_dnc_b_m_b{float:right}.mobile_hp_03{clear:both;padding:6px 0 6px 0}.mobile_hp_03 img{float
2024-04-23 20:33:07 UTC	322	IN	Data Raw: 76 20 6e 61 76 20 75 6c 20 6c 69 20 61 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 68 6f 76 65 72 5f 62 61 63 6b 67 72 6f 75 6e 64 2e 67 69 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 70 61 64 64 69 6e 67 3a 37 70 78 20 35 70 78 20 37 70 78 20 35 70 78 7d 23 74 6f 70 6e 61 76 20 23 6e 61 76 62 74 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 7d 23 72 65 70 6f 72 74 5f 65 6e 67 6c 69 73 68 5f 63 6f 6e 74 65 6e 74 20 3a 6c 61 6e 67 28 65 73 2d 4d 58 29 2c 23 72 65 70 6f 72 74 5f 65 6e 67 6c 69 73 68 5f 68 65 61 64 65 72 20 3a 6c 61 6e 67 28 65 73 2d 4d 58 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 72 65 70 6f 72 74 5f 73 70 61 6e 69 Data Ascii: v nav ul li a:hover{background-image:url(../images/hover_background.gif);background-repeat:repeat-x;padding:7px 5px 7px 5px}#topnav #navbtn{display:inline}}#report_english_content :lang(es-MX),#report_english_header :lang(es-MX){display:none}#report_spani

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	50074	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:07 UTC	743	OUT	GET /css/jquery-ui.css HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.donotcall.gov/report.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _ga=GA1.1.1560218031.1713904326; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904385.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904385.0.0.0
2024-04-23 20:33:08 UTC	821	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:09 GMT Last-Modified: Thu, 26 Dec 2019 17:35:32 GMT Content-Type: text/css Content-Length: 30644 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:33:08 UTC	10095	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 0d 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 63 73 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 63 73 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 63 73 73 2c 20 6d 65 6e 75 2e 63 73 73 2c 20 62 75 74 74 6f 6e 2e 63 73 73 2c 20 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2e 63 73 73 2c 20 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2e 63 73 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 63 73 73 2c 20 64 69 61 6c 6f 67 2e 63 73 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 63 73 73 2c 20 72 65 73 69 7a 61 62 6c 65 2e 63 73 73 2c 20 70 72 6f 67 72 65 73 73 62 61 72 2e 63 73 73 2c 20 73 65 6c 65 63 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com* Includes: core.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, draggable.css, resizable.css, progressbar.css, selec
2024-04-23 20:33:08 UTC	6445	IN	Data Raw: 70 78 7d 2e 75 69 2d 64 69 61 6c 6f 67 20 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 73 65 7b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 7d 2e 75 69 2d 64 69 61 6c 6f 67 20 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 73 77 7b 6c 65 66 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 7d 2e 75 69 2d 64 69 61 6c 6f 67 20 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 6e 65 7b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 2e 75 69 2d 64 69 61 6c 6f 67 20 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 6e 77 7b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 7d 2e 75 69 2d 64 72 61 67 67 61 62 6c 65 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 74 69 74 6c 65 62 61 72 7b 63 75 72 73 6f 72 3a 6d 6f 76 65 7d 2e 75 69 2d 64 72 61 67 67 61 62 6c 65 2d 68 61 6e 64 6c 65 7b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 Data Ascii: px}.ui-dialog .ui-resizable-se{right:0;bottom:0}.ui-dialog .ui-resizable-sw{left:0;bottom:0}.ui-dialog .ui-resizable-ne{right:0;top:0}.ui-dialog .ui-resizable-nw{left:0;top:0}.ui-draggable .ui-dialog-titlebar{cursor:move}.ui-draggable-handle{-ms-touch-act
2024-04-23 20:33:08 UTC	1289	IN	Data Raw: 20 2e 75 69 2d 74 61 62 73 2d 61 6e 63 68 6f 72 2c 2e 75 69 2d 74 61 62 73 20 2e 75 69 2d 74 61 62 73 2d 6e 61 76 20 6c 69 2e 75 69 2d 74 61 62 73 2d 61 63 74 69 76 65 20 2e 75 69 2d 74 61 62 73 2d 61 6e 63 68 6f 72 2c 2e 75 69 2d 74 61 62 73 20 2e 75 69 2d 74 61 62 73 2d 6e 61 76 20 6c 69 2e 75 69 2d 74 61 62 73 2d 6c 6f 61 64 69 6e 67 20 2e 75 69 2d 74 61 62 73 2d 61 6e 63 68 6f 72 7b 63 75 72 73 6f 72 3a 74 65 78 74 7d 2e 75 69 2d 74 61 62 73 2d 63 6f 6c 6c 61 70 73 69 62 6c 65 20 2e 75 69 2d 74 61 62 73 2d 6e 61 76 20 6c 69 2e 75 69 2d 74 61 62 73 2d 61 63 74 69 76 65 20 2e 75 69 2d 74 61 62 73 2d 61 6e 63 68 6f 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 75 69 2d 74 61 62 73 20 2e 75 69 2d 74 61 62 73 2d 70 61 6e 65 6c 7b 64 69 73 70 6c 61 Data Ascii: .ui-tabs-anchor,.ui-tabs .ui-tabs-nav li.ui-tabs-active .ui-tabs-anchor,.ui-tabs .ui-tabs-nav li.ui-tabs-loading .ui-tabs-anchor{cursor:text}.ui-tabs-collapsible .ui-tabs-nav li.ui-tabs-active .ui-tabs-anchor{cursor:pointer}.ui-tabs .ui-tabs-panel{displa
2024-04-23 20:33:08 UTC	11601	IN	Data Raw: 74 65 64 2e 75 69 2d 62 75 74 74 6f 6e 7b 63 6f 6c 6f 72 3a 23 34 35 34 35 34 35 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 75 69 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e 75 69 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 2e 75 69 2d 73 74 61 74 65 2d 66 6f 63 75 73 2c 2e 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 2c 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 2e 75 69 2d 73 74 61 74 65 2d 66 6f 63 75 73 2c 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 2e 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 2c 2e 75 69 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 20 2e 75 69 2d 73 74 61 74 65 2d 66 6f 63 75 73 2c 2e 75 69 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 20 2e 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 7b 62 6f Data Ascii: ted.ui-button{color:#454545;text-decoration:none}.ui-button:focus,.ui-button:hover,.ui-state-focus,.ui-state-hover,.ui-widget-content .ui-state-focus,.ui-widget-content .ui-state-hover,.ui-widget-header .ui-state-focus,.ui-widget-header .ui-state-hover{bo
2024-04-23 20:33:08 UTC	1214	IN	Data Raw: 6c 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 32 30 38 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 63 69 72 63 6c 65 73 6d 61 6c 6c 2d 6d 69 6e 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 36 70 78 20 2d 32 30 38 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 63 69 72 63 6c 65 73 6d 61 6c 6c 2d 63 6c 6f 73 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 32 70 78 20 2d 32 30 38 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 73 71 75 61 72 65 73 6d 61 6c 6c 2d 70 6c 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 38 70 78 20 2d 32 30 38 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 73 71 75 61 72 65 73 6d 61 6c 6c 2d 6d 69 6e 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 Data Ascii: lus{background-position:0 -208px}.ui-icon-circlesmall-minus{background-position:-16px -208px}.ui-icon-circlesmall-close{background-position:-32px -208px}.ui-icon-squaresmall-plus{background-position:-48px -208px}.ui-icon-squaresmall-minus{background-posit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	50075	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:07 UTC	724	OUT	GET /js/report.js HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.donotcall.gov/report.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904385.0.0.0; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904387.0.0.0
2024-04-23 20:33:08 UTC	835	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:09 GMT Last-Modified: Wed, 30 Nov 2022 18:08:13 GMT Content-Type: application/javascript Content-Length: 22689 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:33:08 UTC	8540	IN	Data Raw: 76 61 72 20 69 73 43 68 65 63 6b 65 64 2c 5f 63 6f 6e 74 65 6e 74 45 6c 65 6d 65 6e 74 49 64 2c 70 68 6f 6e 65 4d 6f 62 69 6c 65 43 61 6c 6c 3d 22 22 2c 73 75 62 6a 65 63 74 4d 61 74 74 65 72 56 61 6c 3d 22 22 2c 73 75 62 6a 65 63 74 4f 74 68 65 72 54 65 78 74 3d 22 22 2c 64 61 74 65 4f 66 43 61 6c 6c 4f 72 69 67 69 6e 61 6c 3d 22 22 2c 63 68 6b 43 6f 6e 73 75 6d 65 72 50 68 6f 6e 65 56 61 6c 3d 22 22 2c 63 61 4c 69 6e 6b 55 72 6c 45 6e 3d 22 22 2c 63 61 4c 69 6e 6b 55 72 6c 45 73 3d 22 22 2c 68 61 73 68 56 61 6c 3d 22 22 2c 5f 6d 6f 64 65 6c 3d 7b 70 68 6f 6e 65 4e 75 6d 62 65 72 3a 22 22 2c 64 61 74 65 4f 66 43 61 6c 6c 3a 22 22 2c 74 69 6d 65 4f 66 43 61 6c 6c 3a 22 22 2c 6d 69 6e 75 74 65 4f 66 43 61 6c 6c 3a 22 22 2c 77 61 73 50 72 65 72 65 63 6f 72 Data Ascii: var isChecked,_contentElementId,phoneMobileCall="",subjectMatterVal="",subjectOtherText="",dateOfCallOriginal="",chkConsumerPhoneVal="",caLinkUrlEn="",caLinkUrlEs="",hashVal="",_model={phoneNumber:"",dateOfCall:"",timeOfCall:"",minuteOfCall:"",wasPrerecor
2024-04-23 20:33:08 UTC	14149	IN	Data Raw: 74 65 64 22 2c 22 73 65 6c 65 63 74 65 64 22 29 2c 22 22 21 3d 3d 5f 6d 6f 64 65 6c 2e 77 61 73 50 72 65 72 65 63 6f 72 64 65 64 26 26 28 22 59 22 3d 3d 3d 5f 6d 6f 64 65 6c 2e 77 61 73 50 72 65 72 65 63 6f 72 64 65 64 3f 24 28 22 23 50 72 65 72 65 63 6f 72 64 4d 65 73 73 61 67 65 59 45 53 52 61 64 69 6f 42 75 74 74 6f 6e 22 29 2e 70 72 6f 70 28 22 63 68 65 63 6b 65 64 22 2c 22 63 68 65 63 6b 65 64 22 29 3a 24 28 22 23 50 72 65 72 65 63 6f 72 64 4d 65 73 73 61 67 65 4e 4f 52 61 64 69 6f 42 75 74 74 6f 6e 22 29 2e 70 72 6f 70 28 22 63 68 65 63 6b 65 64 22 2c 22 63 68 65 63 6b 65 64 22 29 29 2c 22 22 21 3d 3d 70 68 6f 6e 65 4d 6f 62 69 6c 65 43 61 6c 6c 26 26 28 22 70 22 3d 3d 70 68 6f 6e 65 4d 6f 62 69 6c 65 43 61 6c 6c 3f 24 28 22 23 50 68 6f 6e 65 43 61 Data Ascii: ted","selected"),""!==_model.wasPrerecorded&&("Y"===_model.wasPrerecorded?$("#PrerecordMessageYESRadioButton").prop("checked","checked"):$("#PrerecordMessageNORadioButton").prop("checked","checked")),""!==phoneMobileCall&&("p"==phoneMobileCall?$("#PhoneCa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	50077	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:08 UTC	855	OUT	GET /js/json/areaCodeStateMappings.json HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.donotcall.gov/report.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904387.0.0.0; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904388.0.0.0
2024-04-23 20:33:08 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:09 GMT Last-Modified: Sun, 24 Mar 2024 01:47:33 GMT Content-Type: application/json Content-Length: 10417 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:33:08 UTC	10417	IN	Data Raw: 5b 7b 22 63 6f 64 65 22 3a 22 32 30 31 22 2c 22 73 74 61 74 65 22 3a 22 4e 4a 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 32 30 32 22 2c 22 73 74 61 74 65 22 3a 22 44 43 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 32 30 33 22 2c 22 73 74 61 74 65 22 3a 22 43 54 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 32 30 35 22 2c 22 73 74 61 74 65 22 3a 22 41 4c 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 32 30 36 22 2c 22 73 74 61 74 65 22 3a 22 57 41 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 32 30 37 22 2c 22 73 74 61 74 65 22 3a 22 4d 45 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 32 30 38 22 2c 22 73 74 61 74 65 22 3a 22 49 44 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 32 30 39 22 2c 22 73 74 61 74 65 22 3a 22 43 41 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 32 31 30 22 2c 22 73 74 61 74 65 22 3a 22 54 58 22 7d 2c 7b 22 Data Ascii: [{"code":"201","state":"NJ"},{"code":"202","state":"DC"},{"code":"203","state":"CT"},{"code":"205","state":"AL"},{"code":"206","state":"WA"},{"code":"207","state":"ME"},{"code":"208","state":"ID"},{"code":"209","state":"CA"},{"code":"210","state":"TX"},{"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	50081	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:08 UTC	851	OUT	GET /js/json/canadianAreaCodes.json HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.donotcall.gov/report.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904387.0.0.0; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904388.0.0.0
2024-04-23 20:33:09 UTC	830	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:09 GMT Last-Modified: Thu, 26 Dec 2019 17:35:34 GMT Content-Type: binary/octet-stream Content-Length: 231 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:33:09 UTC	231	IN	Data Raw: 5b 22 33 36 38 2c 34 30 33 2c 35 38 37 2c 37 38 30 2c 38 32 35 2c 32 33 36 2c 32 35 30 2c 36 30 34 2c 36 37 32 2c 37 37 38 2c 32 30 34 2c 34 33 31 2c 35 30 36 2c 34 32 38 2c 37 30 39 2c 38 37 39 2c 38 36 37 2c 37 38 32 2c 39 30 32 2c 38 36 37 2c 32 32 36 2c 32 34 39 2c 32 38 39 2c 33 34 33 2c 33 36 35 2c 34 31 36 2c 34 33 37 2c 35 31 39 2c 35 34 38 2c 36 31 33 2c 36 34 37 2c 37 30 35 2c 38 30 37 2c 39 30 35 2c 37 38 32 2c 39 30 32 2c 33 35 34 2c 33 36 37 2c 34 31 38 2c 34 33 38 2c 34 35 30 2c 35 31 34 2c 35 37 39 2c 35 38 31 2c 38 31 39 2c 38 37 33 2c 33 30 36 2c 34 37 34 2c 36 33 39 2c 38 36 37 2c 36 30 30 2c 36 32 32 2c 36 33 33 2c 36 34 34 2c 36 35 35 2c 36 37 37 2c 36 38 38 22 5d Data Ascii: ["368,403,587,780,825,236,250,604,672,778,204,431,506,428,709,879,867,782,902,867,226,249,289,343,365,416,437,519,548,613,647,705,807,905,782,902,354,367,418,438,450,514,579,581,819,873,306,474,639,867,600,622,633,644,655,677,688"]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	50082	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:08 UTC	731	OUT	GET /js/lib/jquery-ui.js HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.donotcall.gov/report.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904385.0.0.0; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904387.0.0.0
2024-04-23 20:33:09 UTC	835	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:09 GMT Last-Modified: Fri, 27 May 2022 14:09:56 GMT Content-Type: application/javascript Content-Length: 54254 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:33:09 UTC	8210	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 31 20 2d 20 32 30 32 32 2d 30 35 2d 31 38 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 66 6f 63 75 73 61 62 6c 65 2e 6a 73 2c 20 66 6f 72 6d 2d 72 65 73 65 74 2d 6d 69 78 69 6e 2e 6a 73 2c 20 6a 71 75 65 72 79 2d 70 61 74 63 68 2e 6a 73 2c 20 6b 65 79 63 6f 64 65 2e 6a 73 2c 20 6c 61 62 65 6c 73 2e 6a 73 2c 20 73 63 72 6f 6c 6c 2d 70 61 72 65 6e 74 2e 6a 73 2c 20 74 61 62 62 61 62 6c 65 2e 6a 73 2c 20 75 6e 69 71 75 65 2d 69 64 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 64 Data Ascii: /! jQuery UI - v1.13.1 - 2022-05-18 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/d
2024-04-23 20:33:09 UTC	5048	IN	Data Raw: 6e 63 61 74 28 69 29 29 7c 7c 65 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7d 7d 2c 4a 2e 65 61 63 68 28 7b 73 68 6f 77 3a 22 66 61 64 65 49 6e 22 2c 68 69 64 65 3a 22 66 61 64 65 4f 75 74 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 4a 2e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 5b 22 5f 22 2b 6e 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 76 61 72 20 61 2c 73 3d 28 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 7b 65 66 66 65 63 74 3a 74 7d 3a 74 29 3f 21 30 21 3d 3d 74 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 65 66 66 65 63 74 7c 7c 72 3a 6e 3b 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 28 74 3d 74 7c 7c 7b 7d 29 3f 74 3d 7b 64 75 72 61 74 69 6f 6e 3a 74 Data Ascii: ncat(i))\|\|e.isDefaultPrevented())}},J.each({show:"fadeIn",hide:"fadeOut"},function(n,r){J.Widget.prototype["_"+n]=function(e,t,i){var a,s=(t="string"==typeof t?{effect:t}:t)?!0!==t&&"number"!=typeof t&&t.effect\|\|r:n;"number"==typeof(t=t\|\|{})?t={duration:t
2024-04-23 20:33:09 UTC	1397	IN	Data Raw: 65 66 74 22 3d 3d 3d 65 2e 6d 79 5b 30 5d 3f 2d 65 2e 65 6c 65 6d 57 69 64 74 68 3a 22 72 69 67 68 74 22 3d 3d 3d 65 2e 6d 79 5b 30 5d 3f 65 2e 65 6c 65 6d 57 69 64 74 68 3a 30 2c 69 3d 22 6c 65 66 74 22 3d 3d 3d 65 2e 61 74 5b 30 5d 3f 65 2e 74 61 72 67 65 74 57 69 64 74 68 3a 22 72 69 67 68 74 22 3d 3d 3d 65 2e 61 74 5b 30 5d 3f 2d 65 2e 74 61 72 67 65 74 57 69 64 74 68 3a 30 2c 72 3d 2d 32 2a 65 2e 6f 66 66 73 65 74 5b 30 5d 3b 6f 3c 30 3f 28 28 61 3d 74 2e 6c 65 66 74 2b 63 2b 69 2b 72 2b 65 2e 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 2d 73 2d 61 29 3c 30 7c 7c 61 3c 62 28 6f 29 29 26 26 28 74 2e 6c 65 66 74 2b 3d 63 2b 69 2b 72 29 3a 30 3c 6c 26 26 28 30 3c 28 6e 3d 74 2e 6c 65 66 74 2d 65 2e 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 2e 6d Data Ascii: eft"===e.my[0]?-e.elemWidth:"right"===e.my[0]?e.elemWidth:0,i="left"===e.at[0]?e.targetWidth:"right"===e.at[0]?-e.targetWidth:0,r=-2*e.offset[0];o<0?((a=t.left+c+i+r+e.collisionWidth-s-a)<0\|\|a<b(o))&&(t.left+=c+i+r):0<l&&(0<(n=t.left-e.collisionPosition.m
2024-04-23 20:33:09 UTC	7734	IN	Data Raw: 6c 65 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 66 66 28 22 2e 75 69 2d 64 69 73 61 62 6c 65 53 65 6c 65 63 74 69 6f 6e 22 29 7d 7d 29 3b 4a 2e 75 69 2e 66 6f 63 75 73 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 61 2c 73 2c 6e 2c 72 3d 74 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 61 72 65 61 22 3d 3d 3d 72 3f 28 61 3d 28 69 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2e 6e 61 6d 65 2c 21 28 21 74 2e 68 72 65 66 7c 7c 21 61 7c 7c 22 6d 61 70 22 21 3d 3d 69 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 28 30 3c 28 61 3d 4a 28 22 69 6d 67 5b 75 73 65 6d 61 70 3d 27 23 22 2b 61 2b 22 27 5d 22 29 29 2e Data Ascii: lection:function(){return this.off(".ui-disableSelection")}});J.ui.focusable=function(t,e){var i,a,s,n,r=t.nodeName.toLowerCase();return"area"===r?(a=(i=t.parentNode).name,!(!t.href\|\|!a\|\|"map"!==i.nodeName.toLowerCase())&&(0<(a=J("img[usemap='#"+a+"']")).
2024-04-23 20:33:09 UTC	5156	IN	Data Raw: 73 2e 5f 67 65 74 28 65 2c 22 62 75 74 74 6f 6e 49 6d 61 67 65 22 29 2c 74 68 69 73 2e 5f 67 65 74 28 65 2c 22 62 75 74 74 6f 6e 49 6d 61 67 65 4f 6e 6c 79 22 29 3f 65 2e 74 72 69 67 67 65 72 3d 4a 28 22 3c 69 6d 67 3e 22 29 2e 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 61 73 73 29 2e 61 74 74 72 28 7b 73 72 63 3a 69 2c 61 6c 74 3a 61 2c 74 69 74 6c 65 3a 61 7d 29 3a 28 65 2e 74 72 69 67 67 65 72 3d 4a 28 22 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 27 62 75 74 74 6f 6e 27 3e 22 29 2e 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 61 73 73 29 2c 69 3f 65 2e 74 72 69 67 67 65 72 2e 68 74 6d 6c 28 4a 28 22 3c 69 6d 67 3e 22 29 2e 61 74 74 72 28 7b 73 72 63 3a 69 2c 61 6c 74 3a 61 2c 74 69 74 6c 65 3a 61 7d Data Ascii: s._get(e,"buttonImage"),this._get(e,"buttonImageOnly")?e.trigger=J("<img>").addClass(this._triggerClass).attr({src:i,alt:a,title:a}):(e.trigger=J("<button type='button'>").addClass(this._triggerClass),i?e.trigger.html(J("<img>").attr({src:i,alt:a,title:a}
2024-04-23 20:33:09 UTC	6445	IN	Data Raw: 65 2c 69 29 7b 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 44 61 74 65 70 69 63 6b 65 72 28 74 2c 65 2c 69 29 7d 2c 5f 72 65 66 72 65 73 68 44 61 74 65 70 69 63 6b 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 74 68 69 73 2e 5f 67 65 74 49 6e 73 74 28 74 29 3b 74 26 26 74 68 69 73 2e 5f 75 70 64 61 74 65 44 61 74 65 70 69 63 6b 65 72 28 74 29 7d 2c 5f 73 65 74 44 61 74 65 44 61 74 65 70 69 63 6b 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3d 74 68 69 73 2e 5f 67 65 74 49 6e 73 74 28 74 29 3b 74 26 26 28 74 68 69 73 2e 5f 73 65 74 44 61 74 65 28 74 2c 65 29 2c 74 68 69 73 2e 5f 75 70 64 61 74 65 44 61 74 65 70 69 63 6b 65 72 28 74 29 2c 74 68 69 73 2e 5f 75 70 64 61 74 65 41 6c 74 65 72 6e 61 74 65 28 74 29 29 7d 2c 5f 67 65 74 44 61 74 65 44 61 74 Data Ascii: e,i){this._optionDatepicker(t,e,i)},_refreshDatepicker:function(t){t=this._getInst(t);t&&this._updateDatepicker(t)},_setDateDatepicker:function(t,e){t=this._getInst(t);t&&(this._setDate(t,e),this._updateDatepicker(t),this._updateAlternate(t))},_getDateDat
2024-04-23 20:33:09 UTC	10312	IN	Data Raw: 69 63 6b 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 2c 61 3d 74 68 69 73 2e 5f 63 75 72 49 6e 73 74 3b 21 61 7c 7c 74 26 26 61 21 3d 3d 4a 2e 64 61 74 61 28 74 2c 22 64 61 74 65 70 69 63 6b 65 72 22 29 7c 7c 74 68 69 73 2e 5f 64 61 74 65 70 69 63 6b 65 72 53 68 6f 77 69 6e 67 26 26 28 65 3d 74 68 69 73 2e 5f 67 65 74 28 61 2c 22 73 68 6f 77 41 6e 69 6d 22 29 2c 69 3d 74 68 69 73 2e 5f 67 65 74 28 61 2c 22 64 75 72 61 74 69 6f 6e 22 29 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4a 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 74 69 64 79 44 69 61 6c 6f 67 28 61 29 7d 2c 4a 2e 65 66 66 65 63 74 73 26 26 28 4a 2e 65 66 66 65 63 74 73 2e 65 66 66 65 63 74 5b 65 5d 7c 7c 4a 2e 65 66 66 65 63 74 73 5b 65 5d 29 3f 61 2e 64 70 44 69 76 2e 68 69 64 Data Ascii: icker:function(t){var e,i,a=this._curInst;!a\|\|t&&a!==J.data(t,"datepicker")\|\|this._datepickerShowing&&(e=this._get(a,"showAnim"),i=this._get(a,"duration"),t=function(){J.datepicker._tidyDialog(a)},J.effects&&(J.effects.effect[e]\|\|J.effects[e])?a.dpDiv.hid
2024-04-23 20:33:09 UTC	9023	IN	Data Raw: 74 68 69 73 2e 5f 67 65 74 28 74 2c 22 73 68 6f 77 42 75 74 74 6f 6e 50 61 6e 65 6c 22 29 2c 4c 3d 74 68 69 73 2e 5f 67 65 74 28 74 2c 22 68 69 64 65 49 66 4e 6f 50 72 65 76 4e 65 78 74 22 29 2c 6a 3d 74 68 69 73 2e 5f 67 65 74 28 74 2c 22 6e 61 76 69 67 61 74 69 6f 6e 41 73 44 61 74 65 46 6f 72 6d 61 74 22 29 2c 48 3d 74 68 69 73 2e 5f 67 65 74 4e 75 6d 62 65 72 4f 66 4d 6f 6e 74 68 73 28 74 29 2c 4b 3d 74 68 69 73 2e 5f 67 65 74 28 74 2c 22 73 68 6f 77 43 75 72 72 65 6e 74 41 74 50 6f 73 22 29 2c 41 3d 74 68 69 73 2e 5f 67 65 74 28 74 2c 22 73 74 65 70 4d 6f 6e 74 68 73 22 29 2c 50 3d 31 21 3d 3d 48 5b 30 5d 7c 7c 31 21 3d 3d 48 5b 31 5d 2c 52 3d 74 68 69 73 2e 5f 64 61 79 6c 69 67 68 74 53 61 76 69 6e 67 41 64 6a 75 73 74 28 74 2e 63 75 72 72 65 6e 74 Data Ascii: this._get(t,"showButtonPanel"),L=this._get(t,"hideIfNoPrevNext"),j=this._get(t,"navigationAsDateFormat"),H=this._getNumberOfMonths(t),K=this._get(t,"showCurrentAtPos"),A=this._get(t,"stepMonths"),P=1!==H[0]\|\|1!==H[1],R=this._daylightSavingAdjust(t.current
2024-04-23 20:33:09 UTC	929	IN	Data Raw: 6e 65 77 20 44 61 74 65 28 74 2e 63 75 72 72 65 6e 74 59 65 61 72 2c 74 2e 63 75 72 72 65 6e 74 4d 6f 6e 74 68 2c 74 2e 63 75 72 72 65 6e 74 44 61 79 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 6f 72 6d 61 74 44 61 74 65 28 74 68 69 73 2e 5f 67 65 74 28 74 2c 22 64 61 74 65 46 6f 72 6d 61 74 22 29 2c 65 2c 74 68 69 73 2e 5f 67 65 74 46 6f 72 6d 61 74 43 6f 6e 66 69 67 28 74 29 29 7d 7d 29 2c 4a 2e 66 6e 2e 64 61 74 65 70 69 63 6b 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 68 69 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 74 68 69 73 3b 4a 2e 64 61 74 65 70 69 63 6b 65 72 2e 69 6e 69 74 69 61 6c 69 7a 65 64 7c 7c 28 4a 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 4a 2e 64 61 74 65 70 69 63 6b 65 72 Data Ascii: new Date(t.currentYear,t.currentMonth,t.currentDay));return this.formatDate(this._get(t,"dateFormat"),e,this._getFormatConfig(t))}}),J.fn.datepicker=function(t){if(!this.length)return this;J.datepicker.initialized\|\|(J(document).on("mousedown",J.datepicker

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	50083	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:08 UTC	843	OUT	GET /images/FTC_subpg_header3_submit.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.donotcall.gov/report.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904387.0.0.0; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904388.0.0.0
2024-04-23 20:33:09 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:10 GMT Last-Modified: Thu, 26 Dec 2019 17:35:33 GMT Content-Type: image/jpeg Content-Length: 17047 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:33:09 UTC	7021	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 c0 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 31 34 20 37 39 2e 31 35 36 37 39 37 2c 20 32 30 31 34 2f 30 38 2f 32 30 2d 30 39 3a 35 33 3a 30 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xm
2024-04-23 20:33:09 UTC	1531	IN	Data Raw: 44 d7 0c 77 37 8a aa 69 7e 50 d3 8a bb fd be 5b ad 55 6c 56 ab 44 2a ad 75 64 db b8 ab 77 d5 11 5c c6 ec a7 95 55 c8 5a b3 95 9a e3 9a 67 0a 57 72 f9 39 b9 4f 34 cf 2d 2b cc c1 a5 73 50 d9 64 bd 59 ee b0 5e ed f0 22 ad 44 90 22 22 b5 1b ed 2a 6c be 56 b9 1b f7 de b6 3e 83 bb 99 3c 29 e6 a6 79 a1 dd dc 84 d3 4f 35 35 45 50 81 94 99 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 4b ab bf db d4 9f 92 37 f1 8f 36 3f 5f fc 27 ee de fd 5f f0 9f bb b1 3b ae 7d 84 e5 9f eb df f5 0a 82 fb 4d b5 40 00 00 00 00 00 00 00 01 13 d4 bd 41 b4 64 1c a5 57 98 6e 68 af 48 f0 8a 92 99 ab 83 a7 a8 7f b1 13 57 c9 8e 0a aa be 44 45 50 38 9f 35 f7 8f d5 bc c3 5c f9 d2 f9 35 a6 99 57 ea a8 ad aa b4 cc 63 7c db 6d fa c7 Data Ascii: Dw7i~P[UlVDudw\UZgWr9O4-+sPdY^"D""lV><)yO55EPK76?_'_;}M@AdWnhHWDEP85\5Wc\|m
2024-04-23 20:33:09 UTC	2578	IN	Data Raw: 33 76 a5 7c 95 13 54 d5 7a af 1d 9f 1b 97 b5 6b 7c bd 69 65 fe 4b dd 2c f4 b5 ec a8 92 a5 b1 cf 1b a3 54 63 1c c9 93 61 1e 8d f5 51 b8 b3 e4 3b ab 9a bb 35 73 46 12 92 ae 6a f2 f5 73 44 c4 fc 4b 03 a3 ac 4a 0a 0c c9 98 5e 88 89 43 48 ac 89 fe 5c 76 5d 2b 91 3f 80 d2 1c 8c 61 15 55 b2 15 ff 00 5d 1c b1 5d 7b 21 9b be 5b 1b 9c e8 32 86 62 85 a8 e9 9d 3c 34 b7 2c 3c 8d 57 fd 66 3e 86 bd ae c3 f7 c4 b7 28 f7 62 8a e3 fa a7 b9 47 bd 14 57 1b 7c 50 fd 65 b9 25 66 78 9e 26 ae 2d a1 86 2a 74 54 f3 e1 c2 3b fc b2 60 55 cf 55 8d cf b2 97 ec ab c6 ee 1b 12 28 11 6c 9a 1b 2b f6 51 93 dd 9e bf 2a 4d 22 33 1f e6 63 27 8f c3 2f f7 f8 f4 59 8f c3 29 ff 00 db ff 00 9e 08 f6 8c db 52 b3 3b 43 33 9b b4 ca 18 64 a8 5f 36 38 70 6d ff 00 2c 98 90 64 69 c6 e6 3b 15 bf 5b 46 37 Data Ascii: 3v\|Tzk\|ieK,TcaQ;5sFjsDKJ^CH\v]+?aU]]{![2b<4,<Wf>(bGW\|Pe%fx&-tT;`UU(l+QM"3c'/Y)R;C3d_68pm,di;[F7
2024-04-23 20:33:09 UTC	5917	IN	Data Raw: e7 33 14 55 6e 9a 28 9c 70 54 d2 2c cb 95 f2 fb 6e 73 dd eb be 16 a2 a7 83 8e 06 a4 52 c8 bb 0d da 57 3b 18 d8 f4 dd 57 26 ff 00 98 f7 25 76 8a 31 e6 97 bf af bf 6e de 33 54 e1 32 fa eb 2e 88 39 ca e7 66 2b 82 b9 57 15 55 63 d5 55 57 fa a8 f6 f2 ff 00 e5 3f 1f d0 f6 f2 bf e7 57 c7 fd aa b9 06 f7 90 72 e6 6a bb d5 25 c2 44 b7 f0 4c 82 db 3c d1 cb 24 92 35 d8 3a 55 54 8e 24 c3 d6 62 6f b5 37 0f 72 f7 2d 5b ae 67 1f 0f 93 dc a5 db 36 ee 55 38 f8 7c be 30 55 77 62 70 dc a5 bb cb 72 ac b9 ce e9 5d 3a d1 be 39 36 1f 23 9d b7 bc b0 c3 8e ef 91 cf c3 ce 75 ff 00 af 13 cd 8c cf c7 d9 d7 fe ac 55 cd 8c d5 3f 1f 44 4f 3e e7 6a 9c d5 74 6c db 0b 05 05 32 2b 28 e9 97 75 51 15 7d 67 3b 0d cd a7 60 9b c5 6c c5 f9 b9 3f 45 3c de 66 6e d5 f4 8f 26 12 d1 73 a8 b5 dd 29 6e Data Ascii: 3Un(pT,nsRW;W&%v1n3T2.9f+WUcUW?Wrj%DL<$5:UT$bo7r-[g6U8\|0Uwbpr]:96#uU?DO>jtl2+(uQ}g;`l?E<fn&s)n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	50084	3.217.69.59	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:09 UTC	651	OUT	POST /api/contentsecuritypolicy HTTP/1.1 Host: telemetry.consumersentinel.gov Connection: keep-alive Content-Length: 992 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://www.donotcall.gov Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://www.donotcall.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:33:09 UTC	992	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 6e 6f 74 63 61 6c 6c 2e 67 6f 76 2f 72 65 70 6f 72 74 2e 68 74 6d 6c 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c 61 74 65 64 2d 64 69 72 65 63 74 69 76 65 22 3a 22 63 6f 6e 6e 65 63 74 2d 73 72 63 22 2c 22 65 66 66 65 63 74 69 76 65 2d 64 69 72 65 63 74 69 76 65 22 3a 22 63 6f 6e 6e 65 63 74 2d 73 72 63 22 2c 22 6f 72 69 67 69 6e 61 6c 2d 70 6f 6c 69 63 79 22 3a 22 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e Data Ascii: {"csp-report":{"document-uri":"https://www.donotcall.gov/report.html","referrer":"","violated-directive":"connect-src","effective-directive":"connect-src","original-policy":"default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagman
2024-04-23 20:33:09 UTC	448	IN	HTTP/1.1 204 No Content Date: Tue, 23 Apr 2024 20:33:09 GMT Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: TS012dcdf7=0121bc3622f76655a2ac07849cbb658f04e12266c1d4f937239034b98713f497462026dcff18103fd322fcc21d2cd3a150ae25f030; Path=/; Domain=.telemetry.consumersentinel.gov; Secure; HTTPOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	50087	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:09 UTC	593	OUT	GET /js/json/areaCodeStateMappings.json HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904387.0.0.0; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904388.0.0.0
2024-04-23 20:33:09 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:10 GMT Last-Modified: Sun, 24 Mar 2024 01:47:33 GMT Content-Type: application/json Content-Length: 10417 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:33:09 UTC	10417	IN	Data Raw: 5b 7b 22 63 6f 64 65 22 3a 22 32 30 31 22 2c 22 73 74 61 74 65 22 3a 22 4e 4a 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 32 30 32 22 2c 22 73 74 61 74 65 22 3a 22 44 43 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 32 30 33 22 2c 22 73 74 61 74 65 22 3a 22 43 54 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 32 30 35 22 2c 22 73 74 61 74 65 22 3a 22 41 4c 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 32 30 36 22 2c 22 73 74 61 74 65 22 3a 22 57 41 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 32 30 37 22 2c 22 73 74 61 74 65 22 3a 22 4d 45 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 32 30 38 22 2c 22 73 74 61 74 65 22 3a 22 49 44 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 32 30 39 22 2c 22 73 74 61 74 65 22 3a 22 43 41 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 32 31 30 22 2c 22 73 74 61 74 65 22 3a 22 54 58 22 7d 2c 7b 22 Data Ascii: [{"code":"201","state":"NJ"},{"code":"202","state":"DC"},{"code":"203","state":"CT"},{"code":"205","state":"AL"},{"code":"206","state":"WA"},{"code":"207","state":"ME"},{"code":"208","state":"ID"},{"code":"209","state":"CA"},{"code":"210","state":"TX"},{"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	50088	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:09 UTC	589	OUT	GET /js/json/canadianAreaCodes.json HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904387.0.0.0; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904388.0.0.0
2024-04-23 20:33:09 UTC	830	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:10 GMT Last-Modified: Thu, 26 Dec 2019 17:35:34 GMT Content-Type: binary/octet-stream Content-Length: 231 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:33:09 UTC	231	IN	Data Raw: 5b 22 33 36 38 2c 34 30 33 2c 35 38 37 2c 37 38 30 2c 38 32 35 2c 32 33 36 2c 32 35 30 2c 36 30 34 2c 36 37 32 2c 37 37 38 2c 32 30 34 2c 34 33 31 2c 35 30 36 2c 34 32 38 2c 37 30 39 2c 38 37 39 2c 38 36 37 2c 37 38 32 2c 39 30 32 2c 38 36 37 2c 32 32 36 2c 32 34 39 2c 32 38 39 2c 33 34 33 2c 33 36 35 2c 34 31 36 2c 34 33 37 2c 35 31 39 2c 35 34 38 2c 36 31 33 2c 36 34 37 2c 37 30 35 2c 38 30 37 2c 39 30 35 2c 37 38 32 2c 39 30 32 2c 33 35 34 2c 33 36 37 2c 34 31 38 2c 34 33 38 2c 34 35 30 2c 35 31 34 2c 35 37 39 2c 35 38 31 2c 38 31 39 2c 38 37 33 2c 33 30 36 2c 34 37 34 2c 36 33 39 2c 38 36 37 2c 36 30 30 2c 36 32 32 2c 36 33 33 2c 36 34 34 2c 36 35 35 2c 36 37 37 2c 36 38 38 22 5d Data Ascii: ["368,403,587,780,825,236,250,604,672,778,204,431,506,428,709,879,867,782,902,867,226,249,289,343,365,416,437,519,548,613,647,705,807,905,782,902,354,367,418,438,450,514,579,581,819,873,306,474,639,867,600,622,633,644,655,677,688"]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	50089	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:09 UTC	594	OUT	GET /images/FTC_subpg_header3_submit.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904387.0.0.0; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904388.0.0.0
2024-04-23 20:33:09 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:10 GMT Last-Modified: Thu, 26 Dec 2019 17:35:33 GMT Content-Type: image/jpeg Content-Length: 17047 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:33:09 UTC	8552	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 c0 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 31 34 20 37 39 2e 31 35 36 37 39 37 2c 20 32 30 31 34 2f 30 38 2f 32 30 2d 30 39 3a 35 33 3a 30 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xm
2024-04-23 20:33:10 UTC	8495	IN	Data Raw: 33 76 a5 7c 95 13 54 d5 7a af 1d 9f 1b 97 b5 6b 7c bd 69 65 fe 4b dd 2c f4 b5 ec a8 92 a5 b1 cf 1b a3 54 63 1c c9 93 61 1e 8d f5 51 b8 b3 e4 3b ab 9a bb 35 73 46 12 92 ae 6a f2 f5 73 44 c4 fc 4b 03 a3 ac 4a 0a 0c c9 98 5e 88 89 43 48 ac 89 fe 5c 76 5d 2b 91 3f 80 d2 1c 8c 61 15 55 b2 15 ff 00 5d 1c b1 5d 7b 21 9b be 5b 1b 9c e8 32 86 62 85 a8 e9 9d 3c 34 b7 2c 3c 8d 57 fd 66 3e 86 bd ae c3 f7 c4 b7 28 f7 62 8a e3 fa a7 b9 47 bd 14 57 1b 7c 50 fd 65 b9 25 66 78 9e 26 ae 2d a1 86 2a 74 54 f3 e1 c2 3b fc b2 60 55 cf 55 8d cf b2 97 ec ab c6 ee 1b 12 28 11 6c 9a 1b 2b f6 51 93 dd 9e bf 2a 4d 22 33 1f e6 63 27 8f c3 2f f7 f8 f4 59 8f c3 29 ff 00 db ff 00 9e 08 f6 8c db 52 b3 3b 43 33 9b b4 ca 18 64 a8 5f 36 38 70 6d ff 00 2c 98 90 64 69 c6 e6 3b 15 bf 5b 46 37 Data Ascii: 3v\|Tzk\|ieK,TcaQ;5sFjsDKJ^CH\v]+?aU]]{![2b<4,<Wf>(bGW\|Pe%fx&-tT;`UU(l+QM"3c'/Y)R;C3d_68pm,di;[F7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	50096	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:11 UTC	869	OUT	GET /verify.html HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904387.0.0.0; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904388.0.0.0
2024-04-23 20:33:11 UTC	821	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:12 GMT Last-Modified: Wed, 30 Nov 2022 19:34:20 GMT Content-Type: text/html Content-Length: 6404 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:33:11 UTC	6404	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 47 2d 58 32 4b 48 36 38 52 4a 52 51 22 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 6a 73 2f 67 61 66 6f 75 72 70 72 6f 64 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 74 69 74 6c 65 20 64 61 74 61 2d 69 31 38 6e 3d 22 73 69 74 65 77 69 64 65 2e 70 61 67 65 2d 74 69 74 6c 65 22 3e 4e 61 74 69 6f 6e 61 6c 20 44 6f 20 4e 6f 74 20 43 61 6c 6c 20 52 65 67 69 73 74 72 79 3c 2f 74 69 74 6c 65 3e 20 3c 6d 65 Data Ascii: <!doctype html> <head> <script async src="https://www.googletagmanager.com/gtag/js?id=G-X2KH68RJRQ"></script> <script type="text/javascript" src="/js/gafourprod.js"></script> <title data-i18n="sitewide.page-title">National Do Not Call Registry</title> <me

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	50095	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:11 UTC	776	OUT	GET /css/verify.css HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.donotcall.gov/verify.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904387.0.0.0; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904388.0.0.0
2024-04-23 20:33:12 UTC	820	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:12 GMT Last-Modified: Wed, 30 Nov 2022 18:08:20 GMT Content-Type: text/css Content-Length: 1112 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:33:12 UTC	1112	IN	Data Raw: 2e 72 6e 6c 5f 68 70 20 2e 72 69 67 68 74 4e 61 76 4c 69 6e 6b 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 30 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 38 70 78 29 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 31 70 78 29 7b 62 6f 64 79 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 31 29 20 2e 72 6e 6c 5f 68 70 20 2e 72 69 67 68 74 4e 61 76 4c 69 6e 6b 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 30 70 78 7d 7d 2e 66 6f 72 6d 5f 66 69 65 6c 64 5f 72 69 67 68 74 7b 6d 61 72 67 69 6e 3a 2d 32 37 70 78 20 30 20 30 20 32 32 30 70 78 3b 77 69 64 74 68 3a 32 35 30 70 78 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 Data Ascii: .rnl_hp .rightNavLinks{margin-top:40px}@media only screen and (max-width:768px) and (min-width:481px){body:nth-of-type(1) .rnl_hp .rightNavLinks{margin-top:40px}}.form_field_right{margin:-27px 0 0 220px;width:250px;clear:both}@media only screen and (min-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	50098	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:12 UTC	846	OUT	GET /images/FTC_subpg_header2_ismyphone.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.donotcall.gov/verify.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904391.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904391.0.0.0
2024-04-23 20:33:12 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:13 GMT Last-Modified: Wed, 30 Nov 2022 18:08:24 GMT Content-Type: image/jpeg Content-Length: 14153 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:33:12 UTC	10589	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 00 a6 03 c2 03 01 21 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 03 04 06 07 08 02 01 09 ff da 00 08 01 01 00 00 00 00 ec b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 9d ad ad ad 1f 3e ab 5d 5d 5c d5 00 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}!>]]\
2024-04-23 20:33:12 UTC	2578	IN	Data Raw: 95 a7 ad 09 69 f7 25 94 fb 1a dc 4c d2 dd 48 fe d0 1d 69 56 6c d4 c3 6d dc 2b 0b 2b 1f cf 4a 18 9a 5a e5 9b b2 6e 34 5c 28 17 ae 0e bb a9 10 1e 73 91 ce cd ad 21 26 60 a5 08 1d c3 a2 24 14 db 4d cf a5 b5 85 25 06 a0 8e bf 56 12 9a 49 d8 ed fc ce a0 fe 95 54 34 00 b2 26 9c 57 4b a1 c5 ab c4 c5 e2 d4 cb 4f ec 83 2d 9f 32 0c 59 e9 bb 25 2c 3f 92 bf af ee 96 ff 00 c2 79 fe dc fb 05 9d 6f bc 7f ea 3f 3f 4a c5 e4 29 3d e0 8e 70 d4 a4 ab b8 83 09 55 e4 85 77 8a c3 e8 2e 30 f2 07 4a 90 a0 3c 4c 72 29 b6 ec c4 b6 96 aa ea 9d 0b 50 d5 d0 21 c1 69 cd 4b be d3 d2 e8 15 09 09 b9 e3 af ac c4 d4 bb ba 65 ad a4 54 2a 59 6d 9d 60 6b f7 7a 62 4e 59 d6 9f 52 96 8a 24 30 d2 13 f9 0d 71 34 cb 8f 39 27 75 15 4a 1d bc af c8 1a 7a 19 93 71 56 6a 98 71 37 56 bb c4 8f a9 35 89 56 Data Ascii: i%LHiVlm++JZn4\(s!&`$M%VIT4&WKO-2Y%,?yo??J)=pUw.0J<Lr)P!iKeT*Ym`kzbNYR$0q49'uJzqVjq7V5V
2024-04-23 20:33:12 UTC	986	IN	Data Raw: 8d 0a b8 b4 2b dc 41 fd 0f 94 b4 df 42 93 ef 04 42 85 d2 47 58 34 3d a2 25 96 1a 98 61 c3 a1 2e 24 9e c0 60 da 12 8e da cb 79 6f dd 61 2c 14 24 f4 f7 76 c3 46 c7 93 9b 95 79 99 a5 ac 24 ac aa f7 e1 e8 f4 44 49 cd 4b f3 76 9b 7d db 85 13 68 74 74 13 51 e9 68 89 f9 b6 5e 95 42 5b 5d e5 2a 61 d7 15 a7 ac d0 69 89 27 da 61 a9 fb cb a2 dc 60 b6 8f ee 3d 30 21 f9 e6 93 6b 37 34 ca ef 32 dd c0 3e 69 02 e9 89 c9 ab 39 99 77 59 90 5a 89 79 61 6e 13 5f 34 24 d4 01 58 99 9e b3 8b 53 2f b3 79 53 53 2d 84 29 27 d1 ad 01 8e 7d 2b 94 90 ae 57 f7 73 2d c8 15 7c ae d3 fe 62 41 f6 98 33 8a 5a e8 a5 4b ad 0d fe 25 44 8c ec aa 45 9a a7 9d b8 a6 14 e0 3d 04 d5 2a 1d 1a 04 3b 93 24 d7 2e fc 93 eb 75 68 74 15 05 7c 23 f2 11 31 33 64 b6 cc d1 95 5a 8b b3 34 0b af a0 09 04 c2 a7 Data Ascii: +ABBGX4=%a.$`yoa,$vFy$DIKv}httQh^B[]ai'a`=0!k742>i9wYZyan_4$XS/ySS-)'}+Ws-\|bA3ZK%DE=;$.uht\|#13dZ4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	50102	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:12 UTC	760	OUT	GET /js/verify.js HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.donotcall.gov/verify.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904388.0.0.0; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904391.0.0.0
2024-04-23 20:33:12 UTC	834	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:13 GMT Last-Modified: Wed, 30 Nov 2022 18:08:13 GMT Content-Type: application/javascript Content-Length: 4753 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:33:12 UTC	4753	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 75 6c 6c 2c 6e 3d 6e 75 6c 6c 3b 24 2e 67 65 74 4a 53 4f 4e 28 22 6a 73 2f 6a 73 6f 6e 2f 61 72 65 61 43 6f 64 65 53 74 61 74 65 4d 61 70 70 69 6e 67 73 2e 6a 73 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 65 3d 6e 7d 29 2c 24 2e 67 65 74 4a 53 4f 4e 28 22 6a 73 2f 6a 73 6f 6e 2f 63 61 6e 61 64 69 61 6e 41 72 65 61 43 6f 64 65 73 2e 6a 73 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 65 7d 29 2c 64 6e 63 5f 61 70 70 2e 67 65 74 50 61 72 74 69 61 6c 28 22 70 61 72 74 69 61 6c 73 2f 76 65 72 69 66 79 2f 73 74 65 70 31 22 2c 22 6d 61 69 6e 43 6f 6e 74 65 6e 74 22 29 3b 76 61 72 20 74 3d 7b 70 68 6f 6e 65 31 3a 22 22 2c 70 68 6f 6e 65 32 3a 22 22 2c 70 68 6f 6e 65 33 3a 22 22 2c 65 6d 61 69 Data Ascii: !function(){var e=null,n=null;$.getJSON("js/json/areaCodeStateMappings.json",function(n){e=n}),$.getJSON("js/json/canadianAreaCodes.json",function(e){n=e}),dnc_app.getPartial("partials/verify/step1","mainContent");var t={phone1:"",phone2:"",phone3:"",emai

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	50103	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:13 UTC	597	OUT	GET /images/FTC_subpg_header2_ismyphone.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904391.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904391.0.0.0
2024-04-23 20:33:13 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:14 GMT Last-Modified: Wed, 30 Nov 2022 18:08:24 GMT Content-Type: image/jpeg Content-Length: 14153 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:33:13 UTC	7744	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 00 a6 03 c2 03 01 21 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 03 04 06 07 08 02 01 09 ff da 00 08 01 01 00 00 00 00 ec b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 9d ad ad ad 1f 3e ab 5d 5d 5c d5 00 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}!>]]\
2024-04-23 20:33:13 UTC	5156	IN	Data Raw: d3 84 a9 a4 92 71 6c 8b c7 68 92 7a d0 aa 9d cc 2d c9 89 16 ce 10 5c d4 a7 1b 50 01 5d 09 a1 ae c8 b4 26 d8 75 d3 8d c6 12 85 00 a5 13 52 4d 10 ad 67 b0 c3 2e 33 23 2c f2 49 75 ce a0 08 a8 1a cf 4c 3c 1c 6a 40 63 49 c0 a4 80 bc 40 81 e3 01 f2 44 4e 4d c8 cd a5 b0 85 25 09 26 a0 76 84 ac 43 2b 12 52 aa 0a d2 2e a0 ac a4 10 29 13 21 0f ad b4 25 84 60 5a 8a a9 52 45 52 0c 3d 85 8e fa 43 af ac 82 75 05 54 ec 06 1f d2 4b 35 2e 94 25 58 4a 2a 49 24 9a 2a 86 27 83 76 ac aa 92 12 56 85 9c 40 1c 24 95 25 27 68 89 df 15 94 55 e7 cb 34 27 b2 8e 27 6a 8e b2 62 d4 ab 2b 68 25 b3 a0 1b 4e df 82 4c 4c 84 30 c2 5c 2d af 02 d4 14 a2 30 8d 49 04 c2 aa db af 1d 1a 88 22 a8 48 09 49 fa 40 89 90 eb 32 ad 90 ba 36 b4 50 a4 04 a4 0c 60 41 79 89 89 54 84 a2 61 b4 95 57 a2 a3 08 Data Ascii: qlhz-\P]&uRMg.3#,IuL<j@cI@DNM%&vC+R.)!%`ZRER=CuTK5.%XJI$'vV@$%'hU4''jb+h%NLL0\-0I"HI@26P`AyTaW
2024-04-23 20:33:13 UTC	1253	IN	Data Raw: ca 96 66 57 da 45 44 49 38 e3 b9 59 d5 e8 53 0b 27 b5 4a 14 83 e6 5b 4e 1d 5e 58 e1 47 18 44 9c b9 66 cd 98 75 fa 09 66 12 e1 6c 0a 93 53 7a b1 65 2c 3d 6b a9 f3 a3 f6 8e 57 dd 58 44 bb 32 6a 92 94 43 fc aa de 98 43 c5 54 a0 ba 9f 74 29 ab 29 d9 e6 54 c4 d3 ae 3c b9 a4 95 a4 e8 d3 53 e8 88 43 2b 78 5a 53 89 9e b8 e8 e5 82 9a 22 a4 a3 dc 61 6f 4b b7 36 89 69 8e 86 97 26 d3 2a 57 c2 69 78 18 2c 3c 9b 5a 4a 59 d7 6f 86 d4 80 d9 e8 fb 1a 46 88 92 6d 13 4e 5b 65 4e a5 a0 e2 8a 6f 9e ab ea 26 39 06 b9 fd 9f 22 85 29 62 56 fa d6 a2 29 53 f6 a2 d2 4b af bb 66 29 d4 14 ad d1 75 40 e9 06 ff 00 18 5a eb 68 5b 8e fc 32 eb 40 ed e8 4c 3c 5c cb 72 8d 27 43 2a 65 b4 f6 00 09 84 a0 3d 28 f4 b0 d0 f2 9f 75 3f d8 e0 a4 5a ab bf 68 cd 9f 73 94 fd 05 3f 94 f0 5f d7 be 9f 7f Data Ascii: fWEDI8YS'J[N^XGDfuflSze,=kWXD2jCCTt))T<SC+xZS"aoK6i&Wix,<ZJYoFmN[eNo&9")bV)SKf)u@Zh[2@L<\r'Ce=(u?Zhs?_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	50105	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:13 UTC	804	OUT	GET /partials/verify/step1.html HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.donotcall.gov/verify.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904391.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904391.0.0.0
2024-04-23 20:33:13 UTC	821	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:14 GMT Last-Modified: Wed, 30 Nov 2022 18:07:51 GMT Content-Type: text/html Content-Length: 1492 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:33:13 UTC	1492	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 5f 63 22 3e 20 3c 64 69 76 20 64 61 74 61 2d 69 31 38 6e 3d 22 5b 68 74 6d 6c 5d 76 65 72 69 66 79 2e 53 74 65 70 31 43 6f 6e 74 65 6e 74 22 20 69 64 3d 22 76 65 72 69 66 79 5f 73 74 65 70 31 5f 69 6e 73 74 72 22 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 5f 6d 65 73 73 5f 63 22 3e 3c 73 70 61 6e 20 69 64 3d 22 65 72 72 6f 72 5f 6d 73 67 22 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 5f 66 6f 72 6d 5f 63 6f 6e 74 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 5f 6c 69 6e 65 5f 73 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 5f 74 65 78 74 5f 6c 65 66 74 22 Data Ascii: <div class="sp_c"> <div data-i18n="[html]verify.Step1Content" id="verify_step1_instr"> </div> <div class="error_mess_c"><span id="error_msg" class="errorMessage"></span></div> <div class="s_form_cont"> <div class="form_line_s"> <div class="form_text_left"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	50106	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:14 UTC	585	OUT	GET /partials/verify/step1.html HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904391.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904391.0.0.0
2024-04-23 20:33:14 UTC	821	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:15 GMT Last-Modified: Wed, 30 Nov 2022 18:07:51 GMT Content-Type: text/html Content-Length: 1492 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:33:14 UTC	1492	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 5f 63 22 3e 20 3c 64 69 76 20 64 61 74 61 2d 69 31 38 6e 3d 22 5b 68 74 6d 6c 5d 76 65 72 69 66 79 2e 53 74 65 70 31 43 6f 6e 74 65 6e 74 22 20 69 64 3d 22 76 65 72 69 66 79 5f 73 74 65 70 31 5f 69 6e 73 74 72 22 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 5f 6d 65 73 73 5f 63 22 3e 3c 73 70 61 6e 20 69 64 3d 22 65 72 72 6f 72 5f 6d 73 67 22 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 5f 66 6f 72 6d 5f 63 6f 6e 74 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 5f 6c 69 6e 65 5f 73 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 5f 74 65 78 74 5f 6c 65 66 74 22 Data Ascii: <div class="sp_c"> <div data-i18n="[html]verify.Step1Content" id="verify_step1_instr"> </div> <div class="error_mess_c"><span id="error_msg" class="errorMessage"></span></div> <div class="s_form_cont"> <div class="form_line_s"> <div class="form_text_left"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	50110	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:15 UTC	871	OUT	GET /register.html HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904391.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904391.0.0.0
2024-04-23 20:33:15 UTC	821	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:16 GMT Last-Modified: Wed, 30 Nov 2022 19:34:19 GMT Content-Type: text/html Content-Length: 7048 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:33:15 UTC	7048	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 47 2d 58 32 4b 48 36 38 52 4a 52 51 22 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 6a 73 2f 67 61 66 6f 75 72 70 72 6f 64 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 74 69 74 6c 65 20 64 61 74 61 2d 69 31 38 6e 3d 22 73 69 74 65 77 69 64 65 2e 70 61 67 65 2d 74 69 74 6c 65 22 3e 4e 61 74 69 6f 6e 61 6c 20 44 6f 20 4e 6f 74 20 43 61 6c 6c 20 52 65 67 69 73 74 72 79 3c 2f 74 69 74 6c 65 3e 20 3c 6d 65 Data Ascii: <!doctype html> <head> <script async src="https://www.googletagmanager.com/gtag/js?id=G-X2KH68RJRQ"></script> <script type="text/javascript" src="/js/gafourprod.js"></script> <title data-i18n="sitewide.page-title">National Do Not Call Registry</title> <me

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	50109	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:15 UTC	780	OUT	GET /css/register.css HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.donotcall.gov/register.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904391.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904391.0.0.0
2024-04-23 20:33:16 UTC	820	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:17 GMT Last-Modified: Wed, 30 Nov 2022 18:08:19 GMT Content-Type: text/css Content-Length: 1110 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:33:16 UTC	1110	IN	Data Raw: 2e 72 6e 6c 5f 68 70 20 2e 72 69 67 68 74 4e 61 76 4c 69 6e 6b 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 30 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 38 70 78 29 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 31 70 78 29 7b 62 6f 64 79 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 31 29 20 2e 72 6e 6c 5f 68 70 20 2e 72 69 67 68 74 4e 61 76 4c 69 6e 6b 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 30 70 78 7d 7d 2e 66 6f 72 6d 5f 66 69 65 6c 64 5f 72 69 67 68 74 7b 6d 61 72 67 69 6e 3a 2d 32 37 70 78 20 30 20 30 20 32 32 30 70 78 3b 77 69 64 74 68 3a 32 35 30 70 78 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 Data Ascii: .rnl_hp .rightNavLinks{margin-top:40px}@media only screen and (max-width:768px) and (min-width:481px){body:nth-of-type(1) .rnl_hp .rightNavLinks{margin-top:40px}}.form_field_right{margin:-27px 0 0 220px;width:250px;clear:both}@media only screen and (min-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	50114	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:17 UTC	764	OUT	GET /js/register.js HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.donotcall.gov/register.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904391.0.0.0; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904395.0.0.0
2024-04-23 20:33:17 UTC	834	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:18 GMT Last-Modified: Wed, 30 Nov 2022 18:08:12 GMT Content-Type: application/javascript Content-Length: 4663 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-04-23 20:33:17 UTC	4663	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 75 6c 6c 2c 6e 3d 6e 75 6c 6c 3b 24 2e 67 65 74 4a 53 4f 4e 28 22 6a 73 2f 6a 73 6f 6e 2f 61 72 65 61 43 6f 64 65 53 74 61 74 65 4d 61 70 70 69 6e 67 73 2e 6a 73 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 65 3d 6e 7d 29 2c 24 2e 67 65 74 4a 53 4f 4e 28 22 6a 73 2f 6a 73 6f 6e 2f 63 61 6e 61 64 69 61 6e 41 72 65 61 43 6f 64 65 73 2e 6a 73 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 65 7d 29 3b 76 61 72 20 74 3d 7b 70 68 6f 6e 65 31 3a 22 22 2c 70 68 6f 6e 65 32 3a 22 22 2c 70 68 6f 6e 65 33 3a 22 22 2c 65 6d 61 69 6c 3a 22 22 2c 63 6f 6e 66 69 72 6d 5f 65 6d 61 69 6c 3a 22 22 2c 6c 61 6e 67 75 61 67 65 3a 22 22 7d 2c 6f 3d 7b 70 68 6f 6e 65 31 3a 22 22 2c 70 68 6f 6e 65 32 3a 22 22 2c Data Ascii: !function(){var e=null,n=null;$.getJSON("js/json/areaCodeStateMappings.json",function(n){e=n}),$.getJSON("js/json/canadianAreaCodes.json",function(e){n=e});var t={phone1:"",phone2:"",phone3:"",email:"",confirm_email:"",language:""},o={phone1:"",phone2:"",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	50116	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:17 UTC	847	OUT	GET /images/FTC_subpg_header1_register.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.donotcall.gov/register.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904395.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904396.0.0.0
2024-04-23 20:33:18 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:19 GMT Last-Modified: Wed, 30 Nov 2022 18:08:23 GMT Content-Type: image/jpeg Content-Length: 13965 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:33:18 UTC	11104	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 a6 03 be 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 07 08 05 06 01 03 04 02 09 ff c4 00 58 10 00 01 03 02 02 05 08 04 06 0e 05 09 09 01 00 00 00 01 02 03 04 05 06 11 07 12 17 21 a4 08 13 31 41 55 66 d2 e3 14 22 51 61 15 Data Ascii: JFIFC!"$"$C"X!1AUf"Qa
2024-04-23 20:33:18 UTC	2578	IN	Data Raw: fb 0c ef 4f 01 e6 0d 86 77 a7 80 f3 09 a0 0c a6 d3 a3 57 b8 cf 2f bd cd 16 c4 2f b0 ce f4 f0 1e 60 d8 67 7a 78 0f 30 9a 00 ca 6d 3a 35 7b 8c f2 fb dc d1 6c 42 fb 0c ef 4f 01 e6 0d 86 77 a7 80 f3 09 a0 0c a6 d3 a3 57 b8 cf 2f bd cd 16 c4 2f b0 ce f4 f0 1e 60 d8 67 7a 78 0f 30 9a 00 ca 6d 3a 35 7b 8c f2 fb dc d1 6c 42 fb 0c ef 4f 01 e6 0d 86 77 a7 80 f3 09 a0 0c a6 d3 a3 57 b8 cf 2f bd cd 16 c4 2f b0 ce f4 f0 1e 60 d8 67 7a 78 0f 30 9a 00 ca 6d 3a 35 7b 8c f2 fb dc d1 6c 42 fb 0c ef 4f 01 e6 1d 53 68 4d 62 ff 00 c4 b9 ff 00 c8 f9 84 da 74 d5 37 36 1a 4f 85 5a a5 ca 3a bd cd e1 c6 ef b1 e7 3d 16 c4 11 3e 89 16 2f fc 41 9f fc a7 f8 cf 04 ba 35 e6 d7 fc f3 c3 7f 88 9a 2b e3 e9 30 15 f1 94 37 76 d1 a7 fd 28 ba b6 e2 35 ea 7f 54 bf c1 19 ec e7 fd f1 c2 ff 00 88 Data Ascii: OwW//`gzx0m:5{lBOwW//`gzx0m:5{lBOwW//`gzx0m:5{lBOShMbt76OZ:=>/A5+07v(5T
2024-04-23 20:33:18 UTC	283	IN	Data Raw: 46 b5 db f4 f8 34 94 2d 97 96 a5 0d 8b 92 26 91 dd 22 24 97 bc 2c d6 75 aa 54 4e ab f9 39 9f de 4b 7a 26 e4 a7 87 30 e5 74 37 4c 55 5d f1 8a b2 25 47 32 9b 9a e6 e9 5a ef 7b 55 55 64 cb df 92 7b 50 b3 f1 d0 21 e9 65 33 18 7a 14 6b cd 61 26 40 e7 4a 1c d2 30 d4 d6 f4 4c 91 13 72 19 2a 7a 24 6f 49 ee 46 a2 74 1c 9b 52 b5 84 0d 27 73 39 9f 0c 63 59 d0 7d 80 7a 92 3c e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 32 40 00 38 d5 6f b0 6a b7 d8 Data Ascii: F4-&"$,uTN9Kz&0t7LU]%G2Z{UUd{P!e3zka&@J0Lr*z$oIFtR's9cY}z<2@8oj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	50119	52.23.29.251	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:18 UTC	596	OUT	GET /images/FTC_subpg_header1_register.jpg HTTP/1.1 Host: www.donotcall.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.496538669.1713904327; _gat_GSA_ENOR0=1; _gat_GSA_ENOR1=1; _ga_X2KH68RJRQ=GS1.1.1713904326.1.1.1713904395.0.0.0; _ga=GA1.1.1560218031.1713904326; _ga_CSLL4ZEK4L=GS1.1.1713904327.1.1.1713904396.0.0.0
2024-04-23 20:33:18 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:33:19 GMT Last-Modified: Wed, 30 Nov 2022 18:08:23 GMT Content-Type: image/jpeg Content-Length: 13965 Connection: close Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com/gtag/js https://www.google-analytics.com https://dap.digitalgov.gov; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/gtag/js https://www2.donotcall.gov; base-uri 'none'; form-action 'self'; frame-src 'none'; frame-ancestors 'self'; report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:33:18 UTC	11601	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 a6 03 be 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 07 08 05 06 01 03 04 02 09 ff c4 00 58 10 00 01 03 02 02 05 08 04 06 0e 05 09 09 01 00 00 00 01 02 03 04 05 06 11 07 12 17 21 a4 08 13 31 41 55 66 d2 e3 14 22 51 61 15 Data Ascii: JFIFC!"$"$C"X!1AUf"Qa
2024-04-23 20:33:18 UTC	1289	IN	Data Raw: 3f e8 a9 75 98 aa 9c da 3b d5 6e 59 a7 ad 2a a2 b9 de c6 ee ea 42 23 d3 65 b5 b6 7d 34 5d ad ac 7b 5e d8 26 81 a8 e4 66 aa 65 cd 46 bd 1d 5d 25 87 d0 06 33 c2 58 56 3a 2d 16 d5 da ef 38 7f 11 a3 b2 a9 8e e3 4d cd ac f5 2e 6a 2a ae 68 b9 a6 69 96 ae 68 9b b2 e9 20 5e 52 1f e9 05 7f ff 00 8a 83 ea a3 2b 28 55 a9 3b d9 29 ac 12 5c be 57 32 ca ac 21 1b 35 d9 78 e2 d6 3f 07 ea 30 00 b3 2b 00 00 00 00 00 18 2d 21 7d a0 e2 1f c5 75 3f 54 e3 3a 60 b4 85 f6 83 88 7f 15 d4 fd 53 80 3f 3a b9 25 59 7e 1d d2 35 c2 93 d2 7d 1f 56 d1 24 9a fa 9a fd 13 42 99 65 9a 7b 4b 47 b3 9f f7 c7 0b fe 22 b9 f2 1d fe b6 2e 7f 88 e5 fa f8 0b 94 72 3c 67 f9 2f f0 8e b3 83 d6 9c 2d b0 8b f3 66 83 b3 9f f7 c7 0b fe 21 b3 9f f7 c7 0b fe 23 7e 05 51 69 f5 35 7d 4d 07 67 3f ef 8e 17 fc 47 Data Ascii: ?u;nYB#e}4]{^&feF]%3XV:-8M.jhih ^R+(U;)\W2!5x?0+-!}u?T:`S?:%Y~5}V$Be{KG".r<g/-f!#~Qi5}Mg?G
2024-04-23 20:33:18 UTC	1075	IN	Data Raw: d4 f7 5b 95 75 f3 05 de e7 c3 b7 5a f6 48 da b8 da f7 25 3d 4b 5f f2 da ba be b3 51 dd 69 bd ab f7 26 23 43 dc 9c a8 f0 d5 e2 2b de 2c af a6 ba d5 53 bb 5e 0a 48 18 bc c3 5c 9d 0e 72 b9 33 72 a7 52 64 89 f4 96 8a a6 8f dc 62 e7 a4 54 e8 2b ea dc 5d 42 1f a6 a5 cb 53 df 4e 8d bc e7 db c3 9f fe f9 1e 32 83 f2 a1 6b 99 a7 5c 4a 8e 4c bf a4 85 7f 2c 11 a9 7e dd 1b 9b d4 55 1e 5a 38 0a a5 97 3a 7c 7b 41 03 9d 4d 2c 6d a6 b8 6a a6 7a 8f 6e e8 de be e5 4f 57 3f 6b 53 da 63 83 54 54 ee 30 97 9a c0 cf 14 83 a9 43 18 f9 32 b2 80 0e ac e6 4f a8 91 16 56 a2 f4 2a a1 fa 67 f6 33 68 3f ef 16 2f d2 15 5f cc 3f 33 22 54 49 5a ab d0 8a 87 e9 ef d9 17 a1 5f bf fb 7f ff 00 c6 6f 00 06 95 a6 0e 4f da 20 b0 e8 a3 15 de ad 58 32 1a 7a fa 1b 3d 55 45 34 a9 59 52 ed 49 1b 13 95 Data Ascii: [uZH%=K_Qi&#C+,S^H\r3rRdbT+]BSN2k\JL,~UZ8:\|{AM,mjznOW?kScTT0C2OV*g3h?/_?3"TIZ_oO X2z=UE4YRI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	50120	35.190.80.1	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:19 UTC	544	OUT	OPTIONS /report/v4?s=JTDCQL4ntRogt9tT8vTbsMzAnl1D%2FesK6zofennrzaHwSElCIdYKxMx07odU0%2BeaNduflyCqEF3CaNFrHD3xkRoExZQKBP4GBPtBP8DI4im53UmXp3%2Bp2En5NLG3q4uPeuubma%2Br HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://use.fontawesome.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:33:19 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 23 Apr 2024 20:33:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	50121	35.190.80.1	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:19 UTC	483	OUT	POST /report/v4?s=JTDCQL4ntRogt9tT8vTbsMzAnl1D%2FesK6zofennrzaHwSElCIdYKxMx07odU0%2BeaNduflyCqEF3CaNFrHD3xkRoExZQKBP4GBPtBP8DI4im53UmXp3%2Bp2En5NLG3q4uPeuubma%2Br HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 2240 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:33:19 UTC	2240	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 39 35 31 39 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 34 38 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 74 63 2e 67 6f 76 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 34 32 2e 32 34 35 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a Data Ascii: [{"age":59519,"body":{"elapsed_time":485,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://www.ftc.gov/","sampling_fraction":1.0,"server_ip":"172.67.142.245","status_code":404,"type":"http.error"},"type":"network-error","url":
2024-04-23 20:33:20 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 23 Apr 2024 20:33:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	50149	151.101.14.109	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:25 UTC	615	OUT	GET /ga/98318866.js HTTP/1.1 Host: extend.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "421e-61630054652c0" If-Modified-Since: Tue, 16 Apr 2024 05:29:23 GMT
2024-04-23 20:33:25 UTC	345	IN	HTTP/1.1 304 Not Modified Connection: close Date: Tue, 23 Apr 2024 20:33:25 GMT Via: 1.1 varnish ETag: "421e-61630054652c0" Expires: Fri, 14 Apr 2034 06:37:16 GMT Age: 654969 X-Served-By: cache-pdk-katl1840091-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713904405.470055,VS0,VE2 Vary: Accept-Encoding Cache-Control: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	50159	151.101.14.109	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:29 UTC	615	OUT	GET /ga/98318866.js HTTP/1.1 Host: extend.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "421e-61630054652c0" If-Modified-Since: Tue, 16 Apr 2024 05:29:23 GMT
2024-04-23 20:33:29 UTC	345	IN	HTTP/1.1 304 Not Modified Connection: close Date: Tue, 23 Apr 2024 20:33:29 GMT Via: 1.1 varnish ETag: "421e-61630054652c0" Expires: Fri, 14 Apr 2034 06:37:16 GMT Age: 654972 X-Served-By: cache-pdk-katl1840085-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713904409.174343,VS0,VE1 Vary: Accept-Encoding Cache-Control: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	50189	151.101.14.109	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:46 UTC	615	OUT	GET /ga/98318866.js HTTP/1.1 Host: extend.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "421e-61630054652c0" If-Modified-Since: Tue, 16 Apr 2024 05:29:23 GMT
2024-04-23 20:33:47 UTC	345	IN	HTTP/1.1 304 Not Modified Connection: close Date: Tue, 23 Apr 2024 20:33:47 GMT Via: 1.1 varnish ETag: "421e-61630054652c0" Expires: Fri, 14 Apr 2034 06:37:16 GMT Age: 654990 X-Served-By: cache-pdk-katl1840052-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713904427.159169,VS0,VE2 Vary: Accept-Encoding Cache-Control: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	50201	151.101.14.109	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:33:51 UTC	615	OUT	GET /ga/98318866.js HTTP/1.1 Host: extend.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "421e-61630054652c0" If-Modified-Since: Tue, 16 Apr 2024 05:29:23 GMT
2024-04-23 20:33:51 UTC	345	IN	HTTP/1.1 304 Not Modified Connection: close Date: Tue, 23 Apr 2024 20:33:51 GMT Via: 1.1 varnish ETag: "421e-61630054652c0" Expires: Fri, 14 Apr 2034 06:37:16 GMT Age: 654995 X-Served-By: cache-pdk-katl1840079-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713904432.945481,VS0,VE2 Vary: Accept-Encoding Cache-Control: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	50242	151.101.14.109	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:13 UTC	615	OUT	GET /ga/98318866.js HTTP/1.1 Host: extend.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "421e-61630054652c0" If-Modified-Since: Tue, 16 Apr 2024 05:29:23 GMT
2024-04-23 20:34:13 UTC	345	IN	HTTP/1.1 304 Not Modified Connection: close Date: Tue, 23 Apr 2024 20:34:13 GMT Via: 1.1 varnish ETag: "421e-61630054652c0" Expires: Fri, 14 Apr 2034 06:37:16 GMT Age: 655016 X-Served-By: cache-pdk-katl1840047-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713904453.217102,VS0,VE1 Vary: Accept-Encoding Cache-Control: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	50260	151.101.14.109	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:16 UTC	615	OUT	GET /ga/98318866.js HTTP/1.1 Host: extend.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "421e-61630054652c0" If-Modified-Since: Tue, 16 Apr 2024 05:29:23 GMT
2024-04-23 20:34:17 UTC	345	IN	HTTP/1.1 304 Not Modified Connection: close Date: Tue, 23 Apr 2024 20:34:17 GMT Via: 1.1 varnish ETag: "421e-61630054652c0" Expires: Fri, 14 Apr 2034 06:37:16 GMT Age: 655020 X-Served-By: cache-pdk-katl1840025-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713904457.141925,VS0,VE1 Vary: Accept-Encoding Cache-Control: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	50269	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:19 UTC	843	OUT	GET / HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _gat_GSA_ENOR0=1; _ga=GA1.1.1455269847.1713904340; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904455.0.0.0; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0
2024-04-23 20:34:19 UTC	361	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:20 GMT Cache-Control: no-value Last-Modified: Tue, 19 Mar 2024 13:54:36 GMT Content-Type: text/html Content-Length: 5543 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:19 UTC	5543	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 63 72 69 74 74 65 72 73 2d 63 6f 6e 74 61 69 6e 65 72 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 44 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 50 72 6f 74 65 63 74 20 79 6f 75 72 20 63 6f 6d 6d 75 6e 69 74 79 20 62 79 20 72 65 70 6f 72 74 69 6e 67 20 66 72 61 75 64 2c 20 73 63 61 6d 73 2c 20 61 6e 64 20 62 61 64 20 62 75 73 69 6e 65 73 73 20 70 72 61 63 74 69 63 65 73 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 52 65 70 6f 72 74 46 72 61 75 64 2e 66 74 63 2e 67 6f 76 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 62 61 73 Data Ascii: <!doctype html><html lang="en" data-critters-container><head> <meta charset="utf-8"> <meta name="Description" content="Protect your community by reporting fraud, scams, and bad business practices"> <title>ReportFraud.ftc.gov</title> <bas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	50270	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:20 UTC	821	OUT	GET /assets/images/RF-Hero-1200x467-v3.svg HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _gat_GSA_ENOR0=1; _ga=GA1.1.1455269847.1713904340; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904455.0.0.0; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0
2024-04-23 20:34:20 UTC	366	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:21 GMT Cache-Control: no-cache Last-Modified: Fri, 13 Nov 2020 15:33:45 GMT Content-Type: image/svg+xml Content-Length: 20942 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:20 UTC	8524	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 33 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-04-23 20:34:20 UTC	1289	IN	Data Raw: 68 65 69 67 68 74 3d 22 31 31 38 2e 36 22 2f 3e 0d 0a 3c 70 6f 6c 79 67 6f 6e 20 63 6c 61 73 73 3d 22 73 74 39 22 20 70 6f 69 6e 74 73 3d 22 34 32 35 2e 35 2c 32 33 30 2e 38 20 34 30 35 2c 32 36 35 2e 32 20 34 39 31 2c 32 36 35 2e 32 20 34 37 30 2e 34 2c 32 33 30 2e 38 20 22 2f 3e 0d 0a 3c 72 65 63 74 20 78 3d 22 34 32 31 22 20 79 3d 22 32 37 37 2e 36 22 20 63 6c 61 73 73 3d 22 73 74 31 30 22 20 77 69 64 74 68 3d 22 36 2e 31 22 20 68 65 69 67 68 74 3d 22 32 31 2e 39 22 2f 3e 0d 0a 3c 72 65 63 74 20 78 3d 22 34 34 34 2e 39 22 20 79 3d 22 32 37 37 2e 36 22 20 63 6c 61 73 73 3d 22 73 74 31 30 22 20 77 69 64 74 68 3d 22 36 2e 31 22 20 68 65 69 67 68 74 3d 22 32 31 2e 39 22 2f 3e 0d 0a 3c 72 65 63 74 20 78 3d 22 34 36 38 2e 38 22 20 79 3d 22 32 37 37 2e 36 22 Data Ascii: height="118.6"/><polygon class="st9" points="425.5,230.8 405,265.2 491,265.2 470.4,230.8 "/><rect x="421" y="277.6" class="st10" width="6.1" height="21.9"/><rect x="444.9" y="277.6" class="st10" width="6.1" height="21.9"/><rect x="468.8" y="277.6"
2024-04-23 20:34:20 UTC	10312	IN	Data Raw: 73 3d 22 31 31 30 2e 38 2c 32 38 39 2e 35 20 39 31 2e 32 2c 33 31 38 2e 32 20 31 37 33 2e 33 2c 33 31 38 2e 32 20 31 35 33 2e 36 2c 32 38 39 2e 35 20 22 2f 3e 0d 0a 3c 67 3e 0d 0a 09 3c 72 65 63 74 20 78 3d 22 32 39 34 2e 36 22 20 79 3d 22 33 33 30 22 20 63 6c 61 73 73 3d 22 73 74 39 22 20 77 69 64 74 68 3d 22 36 2e 33 22 20 68 65 69 67 68 74 3d 22 31 33 2e 36 22 2f 3e 0d 0a 09 3c 72 65 63 74 20 78 3d 22 33 32 34 2e 34 22 20 79 3d 22 33 33 30 22 20 63 6c 61 73 73 3d 22 73 74 39 22 20 77 69 64 74 68 3d 22 36 2e 33 22 20 68 65 69 67 68 74 3d 22 31 33 2e 36 22 2f 3e 0d 0a 09 3c 72 65 63 74 20 78 3d 22 32 39 34 2e 36 22 20 79 3d 22 33 36 37 2e 32 22 20 63 6c 61 73 73 3d 22 73 74 39 22 20 77 69 64 74 68 3d 22 36 2e 33 22 20 68 65 69 67 68 74 3d 22 31 33 2e 36 Data Ascii: s="110.8,289.5 91.2,318.2 173.3,318.2 153.6,289.5 "/><g><rect x="294.6" y="330" class="st9" width="6.3" height="13.6"/><rect x="324.4" y="330" class="st9" width="6.3" height="13.6"/><rect x="294.6" y="367.2" class="st9" width="6.3" height="13.6
2024-04-23 20:34:20 UTC	817	IN	Data Raw: 74 35 22 20 70 6f 69 6e 74 73 3d 22 34 36 2e 34 2c 33 37 37 2e 35 20 34 30 2e 39 2c 33 36 38 2e 37 20 33 39 2e 34 2c 33 37 30 2e 32 20 34 34 2e 35 2c 33 38 32 20 09 22 2f 3e 0d 0a 09 3c 70 6f 6c 79 67 6f 6e 20 63 6c 61 73 73 3d 22 73 74 35 22 20 70 6f 69 6e 74 73 3d 22 34 30 2e 39 2c 33 39 38 2e 38 20 34 38 2e 33 2c 33 39 30 2e 31 20 35 30 2e 37 2c 33 39 30 2e 31 20 34 30 2e 39 2c 34 30 37 2e 33 20 09 22 2f 3e 0d 0a 3c 2f 67 3e 0d 0a 3c 67 3e 0d 0a 09 3c 72 65 63 74 20 78 3d 22 37 38 2e 31 22 20 79 3d 22 34 33 38 2e 34 22 20 63 6c 61 73 73 3d 22 73 74 31 33 22 20 77 69 64 74 68 3d 22 34 22 20 68 65 69 67 68 74 3d 22 37 2e 36 22 2f 3e 0d 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 37 22 20 64 3d 22 4d 38 30 2e 33 2c 34 31 36 2e 38 63 30 2c 30 2d 33 Data Ascii: t5" points="46.4,377.5 40.9,368.7 39.4,370.2 44.5,382 "/><polygon class="st5" points="40.9,398.8 48.3,390.1 50.7,390.1 40.9,407.3 "/></g><g><rect x="78.1" y="438.4" class="st13" width="4" height="7.6"/><path class="st7" d="M80.3,416.8c0,0-3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	50272	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:20 UTC	817	OUT	GET /assets/fonts/proximanova_regular/ProximaNova-Reg-webfont.woff HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://reportfraud.ftc.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _gat_GSA_ENOR0=1; _ga=GA1.1.1455269847.1713904340; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904455.0.0.0; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0
2024-04-23 20:34:20 UTC	374	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:21 GMT Cache-Control: no-cache Last-Modified: Fri, 13 Nov 2020 15:33:45 GMT Content-Type: application/font-woff Content-Length: 25940 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:20 UTC	16010	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 65 54 00 13 00 00 00 00 cf 28 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 a8 00 00 00 1c 00 00 00 1c 5e e1 b9 4b 47 44 45 46 00 00 01 c4 00 00 00 2d 00 00 00 32 03 0b 01 f8 47 50 4f 53 00 00 01 f4 00 00 06 dd 00 00 24 ac b4 70 f0 cf 47 53 55 42 00 00 08 d4 00 00 02 0a 00 00 06 14 4c e5 75 98 4f 53 2f 32 00 00 0a e0 00 00 00 5a 00 00 00 60 7f 2e 96 22 63 6d 61 70 00 00 0b 3c 00 00 01 88 00 00 01 e2 d1 0b 73 66 63 76 74 20 00 00 0c c4 00 00 00 34 00 00 00 34 0b 1e 0a 77 66 70 67 6d 00 00 0c f8 00 00 01 b1 00 00 02 65 53 b4 2f a7 67 61 73 70 00 00 0e ac 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 0e b4 00 00 4d fb 00 00 90 cc 19 5e 94 98 68 65 61 64 00 00 5c b0 00 00 00 Data Ascii: wOFFeT(FFTM^KGDEF-2GPOS$pGSUBLuOS/2Z`."cmap<sfcvt 44wfpgmeS/gaspglyfM^head\
2024-04-23 20:34:20 UTC	9930	IN	Data Raw: 67 be c8 82 83 e5 01 f5 96 10 89 4f 42 36 c4 62 50 1a 55 b2 04 62 9a 51 03 7e 5d bf 3c 71 8f bd b6 7c bc 3b df 9b dd 38 aa ad c2 e9 a9 69 ee 68 ad 5b a5 1c 99 5c 53 56 e8 2c c8 2d 78 76 bb 63 e2 c8 f1 b3 5d 08 53 a6 30 87 2c d4 ee e6 b4 5c 16 07 5a 2b da b4 1d 77 51 d3 76 80 36 6d 67 7e b4 fc e6 ed 1a e9 ec f9 b7 f9 fb ee 06 39 34 0d 6c 86 cf c0 66 d0 73 76 ae 01 a9 25 27 c4 ec f6 64 9a 57 32 e0 6e 37 d3 f0 0c 6c 7c 9a ae 31 47 33 ac b2 2d 01 5d 3b 8d 36 92 54 42 34 cc 98 6e 8d 11 8a d3 8e de bf ff e8 d1 fd f7 8f 58 3d 6f c1 0d 37 2c 98 b7 5a 98 4c b2 4e bc ae fc fe 75 32 6d f1 b6 6d 8b 17 6d dd 3a 58 af 07 22 31 4d f8 1f f4 ba f2 62 17 fe d8 15 bd da 1c 51 e9 31 aa 1d 74 69 26 e6 1f 69 1d 93 01 30 4a e1 76 b2 4a 34 c9 a6 56 5a c7 f9 c3 f1 c9 3a 92 40 2b Data Ascii: gOB6bPUbQ~]<q\|;8ih[\SV,-xvc]S0,\Z+wQv6mg~94lfsv%'dW2n7l\|1G3-];6TB4nX=o7,ZLNu2mmm:X"1MbQ1ti&i0JvJ4VZ:@+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	50276	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:20 UTC	785	OUT	GET /runtime.4facd336c6fc7187.js HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://reportfraud.ftc.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _gat_GSA_ENOR0=1; _ga=GA1.1.1455269847.1713904340; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904455.0.0.0; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0
2024-04-23 20:34:20 UTC	396	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:21 GMT Cache-Control: no-value Content-Encoding: br Last-Modified: Tue, 19 Mar 2024 13:54:36 GMT Content-Type: application/javascript Content-Length: 1509 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:20 UTC	1509	IN	Data Raw: 1b 2d 0c 51 94 30 ce 2c 00 1d 07 39 99 ab 79 04 34 c5 f5 24 5c 45 44 7c d9 d6 d6 16 eb 3b fb 32 42 92 d9 6b a9 f6 fa 5a 9b 19 66 49 45 b9 4e 0e dd f5 57 e9 af 54 04 8b 83 4f 06 0d 2c d7 64 ab a6 da b4 f6 83 08 d3 fa 56 ce 4c a6 41 d0 97 52 26 47 b7 1f fe 52 ff 4d 04 b9 31 05 31 e5 77 eb 6a 4d 6d 80 54 81 84 f2 d9 dd fb 3c 25 7c 41 2c 20 3a 00 36 12 e8 0b 64 2b 4c 8d ec 14 72 5b 87 d2 a3 57 30 67 b3 35 d2 f2 b5 5a 51 c1 85 bb 1e 27 df 41 94 1a 66 68 bf b4 aa 7f 25 3a 86 de 02 03 88 bf b5 ec b9 3d ee 9e 47 bc 18 35 d8 0d 49 db a0 ec f1 01 81 b9 87 5a 97 49 68 68 9e 9c db 98 97 c2 b1 b9 16 ff a2 5e f6 25 7f d2 ef 25 0c 6a 86 8b 93 6d 3a 66 ba 17 15 3c 7d 7b ff e3 5b fd 26 e9 f2 9a c5 3f 0b 13 99 81 b1 fc 20 4c 2a 97 ed 63 ab 7e 67 b7 87 cf 82 59 aa e7 89 36 Data Ascii: -Q0,9y4$\ED\|;2BkZfIENWTO,dVLAR&GRM11wjMmT<%\|A, :6d+Lr[W0g5ZQ'Afh%:=G5IZIhh^%%jm:f<}{[&? L*c~gY6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	50274	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:20 UTC	787	OUT	GET /polyfills.289c63289f8f9520.js HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://reportfraud.ftc.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _gat_GSA_ENOR0=1; _ga=GA1.1.1455269847.1713904340; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904455.0.0.0; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0
2024-04-23 20:34:20 UTC	397	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:21 GMT Cache-Control: no-value Content-Encoding: br Last-Modified: Tue, 19 Mar 2024 13:54:36 GMT Content-Type: application/javascript Content-Length: 11143 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:20 UTC	11143	IN	Data Raw: 1b 29 86 a3 90 a4 af 3e 83 88 6a 5a 57 80 5a 1d f0 44 94 fe b0 2f 46 6c 55 bb 7a 24 08 b3 1c 55 55 db bf 99 53 eb b3 34 cd d9 32 c2 2a 8d 92 fc 50 bd 3c 5a 3d 36 bc 32 dc 10 94 55 65 3d f9 3e 42 63 9f e4 5e 66 ae 5e 6f 8b 4b d9 d3 61 f6 45 95 e7 52 0c 36 97 41 2b e7 a6 32 ed d0 2d 9a 53 74 94 b2 07 93 c3 36 eb f5 85 ac c1 9e 85 13 cf ba a5 9a fa 0e 43 49 42 07 09 75 e8 5f fd bd 55 6d ec 62 74 1f 50 1b c9 01 a0 5d f6 a7 00 79 d1 c1 13 bf 7c 53 eb eb 57 e6 4e 61 bb 8b 2f d8 e3 26 f4 82 e4 9e f3 ee c1 7a 64 ab 65 6b a3 90 5e 12 ca 65 02 2a 53 cb 28 7d 1e 04 3e 1b 2c f9 6c 1a 83 0b 72 19 bf 32 9e a1 8c dd eb cb d4 f5 fa 9e 73 ad 19 fe ca 8c 5c 13 ab a0 74 fa 52 36 b1 28 f2 05 e3 15 48 99 fb 7b 33 2d ef 4e ee cf c0 ec 86 b2 3e 92 0f 42 15 68 ea 2a 57 aa 54 49 Data Ascii: )>jZWZD/FlUz$UUS42P<Z=62Ue=>Bc^f^oKaER6A+2-St6CIBu_UmbtP]y\|SWNa/&zdek^eS(}>,lr2s\tR6(H{3-N>Bh*WTI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	50273	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:20 UTC	782	OUT	GET /main.cba37e78289a564b.js HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://reportfraud.ftc.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _gat_GSA_ENOR0=1; _ga=GA1.1.1455269847.1713904340; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904455.0.0.0; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0
2024-04-23 20:34:20 UTC	398	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:21 GMT Cache-Control: no-value Content-Encoding: br Last-Modified: Tue, 19 Mar 2024 13:54:36 GMT Content-Type: application/javascript Content-Length: 174423 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:20 UTC	9859	IN	Data Raw: 5b 5a a9 99 46 84 63 ec 1e 55 23 12 92 65 65 eb 88 66 7e f4 48 b1 6d 72 0b 2a 26 43 c6 d4 97 ad c3 db 54 08 a9 3c 8d cf 50 e3 f0 1e a5 a4 99 6e 43 38 84 f3 5a 99 53 e9 04 a8 aa aa aa aa aa bb 8a 45 1c 6b e6 6e 77 ef 0e 00 50 2a f5 55 d5 d7 bf 8f 40 2d c4 94 69 ce 4a a1 90 32 b0 72 55 90 72 42 55 a2 8e 8a 46 48 d0 aa 7a 75 1a 9a 1e c3 68 2d 55 1c 27 81 b1 70 3e 17 b0 45 62 87 3a 43 b7 eb ad d9 2b 5a 04 55 9f 7d b6 52 26 a4 83 f3 00 d3 34 09 a2 e3 e8 91 12 e4 a4 ae ad 45 3a ab 4f 85 b9 d3 b3 b4 32 73 43 89 95 85 2d ee 60 b4 50 c8 71 8c 0a bb 28 46 08 c4 f3 67 8d e5 82 ed da d2 ad 6f cb 5e 10 51 43 79 6b 7b 18 47 6c 74 5f 35 1f ec 5c f4 10 d5 e8 f3 c0 f3 b5 14 72 78 ec f8 42 c1 32 f4 2c 9c bd 5b 58 42 dc 20 db 84 a8 1a 2e 66 03 04 83 fa 54 87 7c ae a8 4f b5 Data Ascii: [ZFcU#eef~Hmr&CT<PnC8ZSEknwPU@-iJ2rUrBUFHzuh-U'p>Eb:C+ZU}R&4E:O2sC-`Pq(Fgo^QCyk{Glt_5\rxB2,[XB .fT\|O
2024-04-23 20:34:20 UTC	12890	IN	Data Raw: 69 fe a8 43 74 70 e8 5a 30 9b b6 6a 61 9b 8e ec 75 97 e7 12 ac d5 d2 48 d8 ec 2e 5b ef 29 b3 ce f9 7d 1f 72 96 93 4b 0a 28 4b 19 74 30 11 e6 d0 3d 7b 48 5c 5a 29 9a 72 3e 91 c6 6b c3 b8 1b ad b8 32 74 e6 8c 2e 1d e1 88 c6 2d 2d 94 33 d8 2a 10 d2 cb 7b d7 c9 c2 2e c5 23 43 a2 9e 6a 9c e1 d4 b8 ae f2 af 35 6f 9b 92 7c 1f 69 7d 17 32 2e 4a 02 4e ee a7 dc bd f4 aa 9f 7d ae 12 22 51 a9 3e 56 36 4b db e9 03 06 c5 65 6f e1 11 4d 6e ed 68 17 8e 3f ff 97 c4 6b 49 7d bd 0f 5e 0e d0 8c 6b eb 70 7d fa f5 33 7d ae 3f 76 98 d0 7e 6a 4e af ee ac 8a 1c 79 74 0d e9 0d c0 e5 23 31 2e ac 31 57 37 00 a3 9d ef eb 56 18 d2 7b 7d b8 c2 fc de 14 c9 e0 0d 2d 26 51 16 b5 08 5e 59 59 0b 5b d7 c0 ca e3 02 09 80 2c 94 30 de 4c 51 8f 89 87 6a e2 4b 46 e4 15 33 b1 d7 27 37 4f 1f 37 1f Data Ascii: iCtpZ0jauH.[)}rK(Kt0={H\Z)r>k2t.--3*{.#Cj5o\|i}2.JN}"Q>V6KeoMnh?kI}^kp}3}?v~jNyt#1.1W7V{}-&Q^YY[,0LQjKF3'7O7
2024-04-23 20:34:20 UTC	6445	IN	Data Raw: 0b 6c 12 d1 5e aa 39 e3 66 91 cd b0 0b a1 01 9e bf ac 07 7e dd f7 fe 0b 0c 39 6d 7b 43 a2 1c 02 1b 39 87 e6 99 f7 e0 b2 9e 11 f2 b7 96 0a 4f cb b2 e3 62 24 20 bd 4a 20 a7 70 34 04 dd 6e 51 6a 0a db 4b b8 1b 32 a1 39 30 15 cb 64 1e 87 c7 8a 94 fb 46 a2 0e c6 44 41 dc 3b dc 5f 4b dc ff c8 d2 ae 06 32 55 46 88 55 21 df 72 f9 c9 0d 22 20 dc 02 e5 bc 37 60 50 eb d1 40 7c 9c c7 fd 48 a9 7c ff 63 c8 a9 7e 13 32 aa 13 28 a9 92 99 4e de dc 3e f2 30 cf bb c0 9e 75 12 ca 6c 58 86 d6 61 ee 58 98 69 8d d1 82 ae c3 93 e5 b9 2b 48 c9 1a 89 7f 33 c3 92 61 b5 81 cd c5 9b 1e 88 5c b4 18 0e a7 5f 33 79 72 51 32 08 30 bf e3 f9 54 ef 8e 52 e3 42 3e d6 20 00 59 4f 79 2a 18 2e f6 c8 61 65 81 7c 1a bf b6 d9 6f 9a a6 5d f7 ce 1b f7 40 42 ef 88 6d d5 ae 63 b5 aa 6d 95 1f 46 fb 97 Data Ascii: l^9f~9m{C9Ob$ J p4nQjK290dFDA;_K2UFU!r" 7`P@\|H\|c~2(N>0ulXaXi+H3a\_3yrQ20TRB> YOy*.ae\|o]@BmcmF
2024-04-23 20:34:20 UTC	16384	IN	Data Raw: 3a 6b 08 a1 e8 8f f5 a4 99 3d 2a 8d 17 4a 66 ab 65 a8 c7 3c c1 c6 87 f6 82 25 06 ee 06 f5 55 fb 69 79 0e 71 5a 54 0b 02 76 88 b7 84 a6 15 9a 50 18 1d 21 56 54 1b 5e ee 4c ed 85 7c 14 37 ee 03 d3 6f 4e eb 26 d6 29 99 4a 60 d6 3a 09 90 97 ea 90 43 a8 c5 fb d7 f4 2d 9e 49 14 ff 3f c0 c4 d3 1f b0 1a be 5d ba 4e de db cb 22 f5 3c b2 af e0 09 b3 3f 97 f9 12 e3 9d 77 27 06 cb 69 43 40 f8 1a 43 fa 7f 15 eb f2 f2 49 8d f4 23 b4 9c 2d e1 3a 33 1d ed c8 84 c8 d8 3c 1a 93 d0 d8 18 56 8c 20 33 a2 5d a1 03 4d b9 12 c8 08 34 39 d8 34 c7 04 f8 14 3f 3c 1d dd d8 7a 0b 2e 8b ca e6 75 13 b2 bd 90 ca 2a a3 c3 0a 5b f2 2a dd db d6 35 72 20 bc eb 24 71 1a 17 ba 6b 8b 7d 1e dc c1 91 9b ed 22 a6 a6 43 4f 85 c9 1b 6b 30 dc dc 0a 5f 60 3c b1 45 a3 c0 cc 59 20 08 99 04 b1 6d 2d 07 Data Ascii: :k=Jfe<%UiyqZTvP!VT^L\|7oN&)J`:C-I?]N"<?w'iC@CI#-:3<V 3]M494?<z.u[*5r $qk}"COk0_`<EY m-
2024-04-23 20:34:20 UTC	1662	IN	Data Raw: 64 4e fa a5 0d 5b 68 2f d9 79 47 6e 40 8e fe 72 41 8e 26 89 50 b3 d6 99 43 fe 59 d0 7f 01 7e ea 2b 8a c0 3e bf 0b f3 0a c1 25 3d f9 ae 28 8f e0 98 45 50 8b 29 ba aa 95 38 5c 80 6a 85 dd ae 40 e3 81 26 be be 08 93 54 99 52 93 fd eb fe 81 2d 84 26 1c 0d ac 05 61 3c 6c 01 16 de a7 24 14 05 b2 47 94 de 96 99 34 98 63 f3 f9 fe 7b 2a 84 d9 31 45 6f f8 3d c7 ad d0 ff 85 8b c1 3d 62 11 41 63 25 0f 2b 39 41 d4 8e ce 73 12 76 3c 9f 61 26 80 b0 81 3f 6e 29 d1 cc 90 27 c5 04 60 07 5d 32 c0 67 e6 39 c0 76 2f d0 a5 1c 3e d2 ed 54 6c ce 41 9b c8 0f ba 02 18 a1 5b 23 fd dc b9 58 1d 0a 20 68 8d 70 18 6a 0f ba 14 b0 1d 45 e7 e0 ce bc 0d de d3 2e e3 6a ac 61 aa 97 3d bc 39 59 d4 25 87 55 b5 f7 0f 7e 3c df 2b fb f0 13 4a d0 20 5b c1 d3 39 3c eb 92 64 af 57 7f e1 d8 74 d7 6c Data Ascii: dN[h/yGn@rA&PCY~+>%=(EP)8\j@&TR-&a<l$G4c{*1Eo==bAc%+9Asv<a&?n)'`]2g9v/>TlA[#X hpjE.ja=9Y%U~<+J [9<dWtl
2024-04-23 20:34:20 UTC	5156	IN	Data Raw: 51 d1 2b c5 0a 4d dc 72 d0 44 7b 40 38 ce f1 9a 96 83 70 9a 65 84 28 1f 9c 1c 5e 11 46 9e 78 6c 80 03 40 08 f1 cd 08 5d bc 60 3a 11 75 fc 5e d7 35 61 b7 45 80 a8 a6 75 92 c3 73 75 89 3d 37 2c 5e 6a a5 a7 16 87 29 1e 24 10 06 ec 1f 17 07 fe 3f 1e 9c 70 7d 72 4a 32 f9 8e 98 06 e5 27 7a 83 ab aa b1 8e 8b ae e3 5a 26 16 ef 6f 53 79 68 71 30 a2 30 19 9b cc a7 1b 9f 12 60 40 d3 95 b6 05 ea 15 0d c1 47 6d 3b dc f0 24 46 b9 4f cb 3d ad c7 3a ae 7a d0 80 42 d2 35 1f 1a a9 c7 d0 c2 2a dd 74 bd 89 e0 05 0a 93 b1 2b ea 00 37 fb b4 79 5a 44 a7 37 5e b5 cb 5a 6b f1 28 f2 4c 38 45 8a 77 aa ae a4 8c 18 6c a5 90 86 a3 80 7e 9d 66 bd ca 1c 6b 81 97 b3 5f 5f a8 3d 2b cb 14 2b 38 15 d3 b2 ea db 78 17 66 7f 21 4c bd b1 e0 3c 27 41 c5 34 a0 26 8f a0 ad 9f d5 49 8a 81 13 cf 40 Data Ascii: Q+MrD{@8pe(^Fxl@]`:u^5aEusu=7,^j)$?p}rJ2'zZ&oSyhq00`@Gm;$FO=:zB5*t+7yZD7^Zk(L8Ewl~fk__=++8xf!L<'A4&I@
2024-04-23 20:34:21 UTC	12890	IN	Data Raw: 2a 27 0a 92 20 14 bd a8 8b d6 d8 c3 88 6b f0 a9 fb a5 4d 1a b0 ca 22 5f 72 5e 49 24 6b e1 01 b9 2e 95 23 b7 31 33 04 b1 81 0c 62 b5 9e 64 33 1e c8 1e c3 12 d7 7a 93 4d 8c 49 6a 2b 24 92 ee fd 8c 35 b7 fb e7 16 7c b2 a1 99 36 37 33 34 3f 6b cc c1 7f 31 64 91 1b 09 61 df b1 cf 03 26 3e ff c7 cf 4b fb 44 b8 74 26 d8 11 4e b9 60 5e f7 b7 e5 7e 3b 2f 7e b1 df 12 a9 dc da 3f cf 0b 1f 61 f7 cf 39 8e a9 15 6b 7e d4 63 37 38 52 54 ca fe 70 5d b3 4a b0 56 ad b4 a7 4a 0a d9 c1 94 20 37 46 5e 2d ae f2 89 bb 10 97 bb 6d 81 9e a8 7c 5f 70 b7 74 63 6d 14 19 01 04 ba f2 cf 43 ce c7 26 85 14 67 ad 50 c0 23 c1 7c 88 a1 31 05 c7 01 50 d1 92 3e af 00 91 6e 4c ae 80 40 40 e1 c0 5f e7 44 60 7c e8 a5 41 7e 0b 5e ff 50 5c 2d 4d 67 93 3a ec 1c 95 24 23 ff 78 65 70 4a 83 e3 60 0d Data Ascii: *' kM"_r^I$k.#13bd3zMIj+$5\|6734?k1da&>KDt&N`^~;/~?a9k~c78RTp]JVJ 7F^-m\|_ptcmC&gP#\|1P>nL@@_D`\|A~^P\-Mg:$#xepJ`
2024-04-23 20:34:21 UTC	11601	IN	Data Raw: 92 17 d4 1c 8b 77 eb 12 c7 8e d9 ae 17 39 af 03 fb 52 93 5a 0e 0d cc 4e 52 35 4a 78 a9 d8 fb 8d d3 c1 bf b0 9d c1 fc b6 4d b3 77 eb 1c 58 2b cb 30 c6 a5 39 dc 78 ae 35 e5 53 ea a3 fb 16 4c a7 5f 2d e8 59 b7 c5 68 2f b8 98 86 fc 66 d2 85 fd db 20 62 fb 22 a6 f6 99 97 c4 b0 19 86 5a 52 11 48 cb 00 2f e1 45 76 ef c5 06 68 b4 32 9f ce fd 1c ef e7 77 ff ad 8b 5f 1d cd b2 13 f8 7f f2 ef cc eb 6f 95 e5 b7 88 ac d5 cd e3 d6 07 fc ea 28 18 2d 63 33 c1 ab b9 67 6e f8 c7 1c 1c bf b0 be 16 29 47 1a 81 20 37 4d af 0d 29 af 60 c0 a8 22 76 c1 38 b7 93 86 91 30 17 ba 8d 3d 51 d3 bf 73 1b f2 49 6a 38 0b d3 18 f4 1a e3 c7 a5 6e 6c 8b 50 04 8c dd f5 ac d1 ed c6 9f 77 93 bc d1 ed 13 e4 ba a3 88 71 47 7c b3 fe c6 f2 1d f1 b4 0f 03 15 d2 0b f2 28 07 e7 fc 6e 02 84 f5 fd fe f9 Data Ascii: w9RZNR5JxMwX+09x5SL_-Yh/f b"ZRH/Evh2w_o(-c3gn)G 7M)`"v80=QsIj8nlPwqG\|(n
2024-04-23 20:34:21 UTC	11601	IN	Data Raw: 44 db 8f ab e9 67 39 c6 d7 03 b1 26 c8 9d f6 ba be f1 23 c8 4c ff d0 69 98 ba ec b8 c9 5c 97 df b0 77 d2 b5 90 80 66 8e c1 d2 de b5 aa b3 49 33 f0 de 50 57 05 c3 1e 53 35 c3 ac b9 d2 49 24 77 53 07 7f 27 2f aa 6c e9 76 da 4f bc 1c 0e 58 31 05 ee c2 2f 04 b4 ac 8b 15 04 0a 6a 40 61 7c 6a b0 c5 93 c9 85 ac 85 63 e4 2f ae 92 38 6b 5d 65 af f3 bc f4 98 be da 9e a6 d8 9b f3 b2 b4 dd 78 0f a9 f0 d3 fc 95 49 3e 6c 80 da 3b 00 42 38 fd 76 72 a1 d2 ae 6b 50 db 15 37 33 63 a4 14 66 21 4b fe ae 2c 97 4b cf ee 73 fe 99 6d 3b 3a 37 f4 27 da 26 aa 66 b9 7a 4c 54 1b ce b7 20 cd a6 ca 95 55 de f4 af 09 c5 e0 13 ec 31 98 54 36 3b 72 51 6c 05 aa 8c 3a 20 87 b1 ca 1c 49 55 26 1b 93 46 04 37 4f 38 d8 a9 ec 8d dc 09 f2 b6 dc ef d1 cf 2b 9a be e8 ce 5d 40 e1 ac cd 42 7d ef b0 Data Ascii: Dg9&#Li\wfI3PWS5I$wS'/lvOX1/j@a\|jc/8k]exI>l;B8vrkP73cf!K,Ksm;:7'&fzLT U1T6;rQl: IU&F7O8+]@B}
2024-04-23 20:34:21 UTC	14179	IN	Data Raw: 41 42 2f 13 0a bf 5e 78 09 88 84 8f c1 b6 36 f5 68 7d e0 2d 47 3f 9c 0f 7e 46 b7 e7 1b df 9f cb bf 9c f3 4f 1e 3c ab b9 7c 4e e3 99 ec a2 ed 5b 54 b8 2e 93 c9 b2 62 d6 87 04 f1 1b 4f 38 64 93 3f cd 24 06 b1 77 d9 4a a8 a9 6a ed f7 65 0d d2 0d 7a d8 78 d0 f6 56 01 83 27 fc 4e 49 48 d9 5a 8e ac 77 03 89 95 e0 99 77 8d bb 31 1a 69 0b 9a 8a 01 96 81 4d 3b 5c ad 5b 4f d8 ee 9a 35 a9 85 d7 b9 dc 37 9b 57 bc 1c 98 e0 c8 ac 93 59 59 f3 27 39 ff cb 1c a6 20 54 6d cf 4c 78 15 17 6b 71 b0 53 a2 97 75 bd 10 37 97 b0 0e 20 c2 32 0c 5e 79 d5 ec 27 ab b3 76 89 6d ea 10 e6 cc 95 05 b1 a8 c2 33 37 2e 08 5f 65 41 5a d2 66 e7 9d 2f 90 dc 57 db 98 e1 b3 83 50 d2 b3 78 b3 f0 7a c5 a4 7b 29 75 ea 3c 43 1c 2b 6e cc 2c de 1a 9b d7 d4 bb 57 1b 04 b3 ea 6a 9e 5d a7 fd f6 56 86 e4 Data Ascii: AB/^x6h}-G?~FO<\|N[T.bO8d?$wJjezxV'NIHZww1iM;\[O57WYY'9 TmLxkqSu7 2^y'vm37._eAZf/WPxz{)u<C+n,Wj]V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	50275	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:20 UTC	751	OUT	GET /scripts.6df1642d06080470.js HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _gat_GSA_ENOR0=1; _ga=GA1.1.1455269847.1713904340; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904455.0.0.0; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0
2024-04-23 20:34:20 UTC	397	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:21 GMT Cache-Control: no-value Content-Encoding: br Last-Modified: Tue, 19 Mar 2024 13:54:36 GMT Content-Type: application/javascript Content-Length: 53529 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:20 UTC	11601	IN	Data Raw: 5b c9 eb 52 c2 31 86 bb 40 77 00 a4 4a 5f 2f 7d 14 81 ee 00 52 25 fe 16 ad 15 70 d7 07 dd 81 20 a1 da 07 1f a0 aa 5e 8b 93 c3 ba da 76 0c 23 72 64 40 65 91 7e d2 2c 24 8b 03 0b bf 62 57 c1 d5 86 d7 3e 08 a4 c6 02 27 74 51 2b f7 57 b1 58 dc b8 b0 15 28 15 5d a1 21 2c 08 1a 9a e8 10 7a 2e 91 38 d8 ac 8f 98 b0 14 48 b8 e2 1a 7a 9b 43 4f 23 89 e7 40 cf ad 8f fa 12 8b 8d 03 d3 9f d4 bb 20 ac 30 0a 82 62 e4 e1 64 a0 85 f5 d1 28 36 8b bd 36 82 12 89 9a be 86 a6 e1 34 da 23 89 97 cd b5 c8 88 2e 4e 16 b5 3a 61 72 42 e7 4f 68 e5 3e e9 34 c2 23 0b 2f 75 2f d6 f9 4c 9a 66 d3 c2 23 d3 9f f8 cf 2e 08 fb 98 2c b4 57 01 76 8b 7c 94 e2 e4 28 7b 91 7f fe 9a ff 5f df c9 38 cc c9 5d 41 df b2 f1 e1 06 5a 42 a3 8c c5 97 74 61 7a 11 43 c0 8d 24 e0 d6 fe bf 9f d6 7f fd ea d5 35 Data Ascii: [R1@wJ_/}R%p ^v#rd@e~,$bW>'tQ+WX(]!,z.8HzCO#@ 0bd(664#.N:arBOh>4#/u/Lf#.,Wv\|({_8]AZBtazC$5
2024-04-23 20:34:20 UTC	7734	IN	Data Raw: 28 cc 36 38 8a f2 04 3a d8 86 6b 94 36 2d 73 3a 54 a0 30 a9 bd bb 25 8c 63 99 08 b2 3e 6d 57 e2 61 6d 5c 6e a1 23 02 69 37 a4 e3 4b 7c 5a 6c 4f f7 bb 71 be d6 af 2a e3 2e 89 52 9d c6 1f 72 9b 12 34 6b 95 08 8b 3e 68 5a 4d 29 cf 24 46 e0 cc 7a f7 22 3e 8d 67 fe fb b3 bd fa 67 3d 7c fd dc 4f fb 9f 2e cd 8f 51 e6 e7 4e 24 1a 09 3b 13 66 fe 82 2a 8a 5d dd 6d b7 04 95 b1 95 45 53 38 c7 79 66 bd 2f 95 59 b8 3c d6 44 c9 f8 85 f9 97 7b 56 ab a5 7e 6f 32 e0 c3 4e 09 12 a2 a7 3d eb 2c db 10 26 95 60 d8 9b 26 b1 9d 73 29 80 3a 91 e7 a3 11 22 0b ab d0 87 80 57 6c 1a ba 21 43 33 65 3b 31 73 98 4e 82 a6 36 88 10 36 3d b4 7a ba dd b4 a5 3a 1f 0d a0 cc a0 4f e9 90 9f b8 85 b8 cc de 1a d7 08 12 79 39 b2 cc 04 f4 0d 00 62 68 5b c0 5f 03 e2 3f 75 b5 83 64 81 ca 74 10 37 58 Data Ascii: (68:k6-s:T0%c>mWam\n#i7K\|ZlOq.Rr4k>hZM)$Fz">gg=\|O.QN$;f]mES8yf/Y<D{V~o2N=,&`&s):"Wl!C3e;1sN66=z:Oy9bh[_?udt7X
2024-04-23 20:34:20 UTC	15468	IN	Data Raw: 53 83 c4 73 47 31 9e d2 92 c3 38 84 f0 6b 1a b1 2b 95 58 b5 5e ed a7 37 88 06 b1 59 61 b3 03 95 59 16 65 e7 14 d2 4b 05 bb 44 0c 89 67 72 37 6b 4c 9a 69 e7 3d 43 3c 29 76 b2 14 50 b1 c6 c8 ad 3a 94 ea 0b 76 34 72 77 8b 65 7f c4 79 94 b3 38 b9 f7 90 78 7d 46 d9 23 e5 d0 d0 41 34 04 54 af be fb a9 6b c8 8f 03 c8 35 31 c8 ed 59 0c c3 57 25 3d 61 2c eb e5 be ae 64 f1 10 65 a8 c1 60 83 10 e5 a3 54 8f bb 6e ee ed 7f 2c 36 0f db 30 16 af 36 cc e9 73 a1 6d 91 17 7e c9 1c 32 4d c4 56 5e bd bb 7e 40 17 3b d3 98 9f a8 50 96 7a ed bf af 9b ae 0f 92 47 b6 44 53 a3 e7 5a be af 57 89 ed d5 22 24 fc dc 03 5b a2 5a 9f 35 0b 66 6f 99 a8 92 e5 76 db c2 a2 b5 47 1f 24 42 cd 54 ef 9a 32 f5 da 7f 5f c3 48 4c 14 b6 7e d2 4b 80 4b ff 47 8f ce 58 e2 bf 0e 61 0f 43 2c a3 0d ab d3 Data Ascii: SsG18k+X^7YaYeKDgr7kLi=C<)vP:v4rwey8x}F#A4Tk51YW%=a,de`Tn,606sm~2MV^~@;PzGDSZW"$[Z5fovG$BT2_HL~KKGXaC,
2024-04-23 20:34:20 UTC	7734	IN	Data Raw: 47 77 3b 9c 21 cf 20 a7 6c fc f6 f4 30 fa 25 76 55 bb cf 14 2f ca f3 d1 f4 75 ab 30 1f 62 06 20 19 ad e3 7d d9 bf fa 1c dc 4d db e0 62 7a 2f 2f 3c 7d 86 79 ba 5c ff 3b a2 65 f8 ed 07 d9 90 e3 69 4b 7a c0 c3 5b 01 55 5e cc 15 69 c9 d1 3c 8f 70 29 77 24 c7 94 72 a1 29 17 08 09 e7 1e 34 60 fa a3 cc 3b 09 ef 62 3d d7 a1 e4 de 2f df c8 01 9b 47 cd 20 80 1b be 79 7e 22 16 e5 a4 3b 0c cd dc 14 e9 16 ca 37 0e ed 26 89 bb 99 0a 1e 7d cb 8b 86 bc 91 0e 97 6c 8d 4c 51 d7 d9 e3 4b 16 e8 a6 35 ba 82 fb b4 1f e7 ef 90 a5 0b f2 a4 a3 04 bb 40 4f 52 c3 1a 01 af a8 45 e1 16 09 d5 cc 79 a6 47 a8 19 b7 99 17 38 e9 0f 7f f5 4a 30 cb fc 40 04 ec 57 64 bc 70 88 20 73 05 2f 6a 2b 1d a0 da 3e ba ad 3d 01 f9 a4 2c 6d 68 fe 52 bd 7d 65 9c 9b 3d c8 69 db 20 c1 88 b4 54 6f a1 80 ca Data Ascii: Gw;! l0%vU/u0b }Mbz//<}y\;eiKz[U^i<p)w$r)4`;b=/G y~";7&}lLQK5@OREyG8J0@Wdp s/j+>=,mhR}e=i To
2024-04-23 20:34:20 UTC	3867	IN	Data Raw: fb 4a 54 d2 ef 2f f6 0b d8 0d 49 eb 25 70 a8 46 c6 1e f8 dc a1 89 d0 bb 82 95 9c 6e a1 58 19 d4 45 8a ba e2 34 10 d2 09 af e5 a3 b3 f4 23 73 38 c9 2e 51 71 85 8b f5 f3 fc 0a 92 47 d1 f9 58 58 51 bc b4 c6 3e 9b 75 16 b3 0f c6 70 37 20 10 a3 92 46 80 00 ec 77 ca 32 06 b0 85 d9 b6 51 2d f3 e6 bf ab 1f 73 e9 c6 4f ce 1b cb 02 e2 2f a5 20 13 df db 8b 93 d5 42 a0 18 68 eb f0 64 34 d1 fb f7 c2 e1 2b b2 95 d6 02 69 b9 40 4a 5f f0 b0 17 28 51 17 fc b1 17 28 b0 17 3c 92 17 a9 cc 5e b0 bc 9a 99 96 91 74 c5 a7 27 29 0a e5 cd 71 08 e0 3c 64 de 6f 75 fe 4a 31 6d 90 1e 1d 40 e5 50 47 94 20 bb 47 08 02 a2 b0 f1 e9 16 72 6a 84 04 0e 4b 83 a2 03 4e 24 cd 3f 75 93 cb 70 6c 33 61 60 7a 1c dd 48 8b d0 95 64 f6 d5 f5 23 63 f3 8f f5 72 a9 32 09 97 a9 d2 1a 87 72 86 66 ce 33 3c Data Ascii: JT/I%pFnXE4#s8.QqGXXQ>up7 Fw2Q-sO/ Bhd4+i@J_(Q(<^t')q<douJ1m@PG GrjKN$?upl3a`zHd#cr2rf3<
2024-04-23 20:34:20 UTC	6445	IN	Data Raw: 20 a8 d1 7c 61 df 1b a3 37 8d c1 24 19 33 33 fd e6 f9 91 a4 ad 07 33 42 63 ec 70 02 90 6d a1 b9 be 7f 1f 9a 3e db b5 da 4b f1 dc dd ee 3d 3c 51 d0 52 7a 54 02 ae 0c 32 dd ed a9 38 f4 76 f3 22 b1 dd 0d 62 3b dd 09 82 8f d5 df aa fb eb d1 cd 3b 61 57 b4 05 77 aa 00 dd 4d 80 38 eb c7 d6 00 a4 76 b2 e9 3b 3d 34 9d 76 ee d7 6e 3a 3b d2 8f fe ac b2 d9 79 48 60 27 e5 ed 55 78 c4 e6 3a 96 1b e6 83 9d 44 5e 19 91 23 ad 10 2f a9 cf 0d 26 8f 0d 61 2b 7b 7b e0 ef 2c 3b bf 03 ca 25 87 da c0 23 6d 88 4e ed fd de 81 1e 3f ba f9 4e 8c 3e ed d0 06 15 8b 9e 05 2c 6c a0 ce d8 1e 5a 23 b3 90 b8 eb 0c 3b 86 55 ce 68 48 eb 43 30 64 53 c2 00 04 89 1d 07 5a 87 00 dd e4 37 f0 0c 58 89 2f 85 e3 d0 18 18 46 99 41 0b 31 fc 64 9d 8d 26 b2 98 8a 61 24 2d d9 5b 32 c8 e5 16 65 1f de e9 Data Ascii: \|a7$333Bcpm>K=<QRzT28v"b;;aWwM8v;=4vn:;yH`'Ux:D^#/&a+{{,;%#mN?N>,lZ#;UhHC0dSZ7X/FA1d&a$-[2e
2024-04-23 20:34:20 UTC	680	IN	Data Raw: c3 e3 4b db 86 32 69 a2 0d 9c a3 04 26 e7 f7 98 aa d8 57 3c 89 a0 0d 3f 1e 90 11 2f 28 eb 72 a3 7f 18 f9 c3 4b e9 e6 0c c0 91 69 eb c2 46 26 10 54 e9 be 05 1c df 62 72 f5 2c 29 87 f7 66 44 8f f1 ce 44 91 4d 1e a2 b1 25 c6 dd 75 f5 88 af 9e 5f 96 15 fe e5 9d d8 a1 06 92 2d 1b c2 a8 49 b9 a5 4f 9b f1 b9 be 14 ee af cc 59 45 c2 59 88 2e 98 bd 2d 49 82 ed 8b 0f cd 65 f5 df 14 24 4f b0 3d b2 cd ad 9e 8f 2f 76 e1 00 20 82 9d f7 aa f6 82 06 c2 c9 67 89 73 7c 56 a1 e8 d9 d1 ec 27 01 20 2f e9 6c 8a 88 97 97 82 2d d6 85 68 ad 5a 0d 00 d0 b5 06 42 ab 6c 49 c0 78 2a 1b 16 be 1d b3 6d 60 c5 d4 87 8f a2 f0 79 ce 91 57 e7 33 7c dc 4e b9 1b de b3 ee 41 7a 35 d1 4a ca a1 55 16 68 df fa 2e bb bb 4d 03 09 af e9 35 6d 7a da 29 c5 7b fa 31 6c f8 6b 56 74 a2 5a c5 76 b0 01 a7 Data Ascii: K2i&W<?/(rKiF&Tbr,)fDDM%u_-IOYEY.-Ie$O=/v gs\|V' /l-hZBlIx*m`yW3\|NAz5JUh.M5mz){1lkVtZv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	50278	3.222.198.52	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:20 UTC	565	OUT	GET /inContact/ChatClient/js/embed.min.js HTTP/1.1 Host: home-c72.niceincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:34:20 UTC	802	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:20 GMT Content-Type: application/javascript Content-Length: 13144 Connection: close Set-Cookie: AWSALB=W8Xg3mGY/BXuhI4N2q6BMz79/A5WwnHnJ4awy71QqzQrLQ0aMoqRfLdWkd4SjUtTgAuNr+H2WkNWxLXac7t7Di5ErFCjxceGWgZYSiD/KZGKTH0BM1PJSnXN5G2C; Expires=Tue, 30 Apr 2024 20:34:20 GMT; Path=/ Set-Cookie: AWSALBCORS=W8Xg3mGY/BXuhI4N2q6BMz79/A5WwnHnJ4awy71QqzQrLQ0aMoqRfLdWkd4SjUtTgAuNr+H2WkNWxLXac7t7Di5ErFCjxceGWgZYSiD/KZGKTH0BM1PJSnXN5G2C; Expires=Tue, 30 Apr 2024 20:34:20 GMT; Path=/; SameSite=None; Secure Last-Modified: Thu, 25 Jan 2024 16:25:20 GMT Accept-Ranges: bytes ETag: "0d8b716ab4fda1:0" Server: Powered by Nice CXOne X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-23 20:34:20 UTC	5468	IN	Data Raw: 76 61 72 20 69 63 50 61 74 72 6f 6e 43 68 61 74 3d 69 63 50 61 74 72 6f 6e 43 68 61 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 6e 69 74 69 61 6c 48 3d 30 3b 76 61 72 20 69 6e 69 74 69 61 6c 57 3d 30 3b 76 61 72 20 63 68 61 74 42 75 74 74 6f 6e 48 3d 38 30 3b 76 61 72 20 63 68 61 74 42 75 74 74 6f 6e 57 3d 31 38 30 3b 76 61 72 20 6d 69 6e 48 3d 30 3b 76 61 72 20 6d 69 6e 57 3d 30 3b 76 61 72 20 63 68 61 74 48 3d 36 30 30 3b 76 61 72 20 63 68 61 74 57 3d 33 38 30 3b 76 61 72 20 5f 66 72 61 6d 65 3d 6e 75 6c 6c 3b 76 61 72 20 5f 63 68 61 74 42 75 74 74 6f 6e 46 72 61 6d 65 3d 6e 75 6c 6c 3b 76 61 72 20 5f 68 6f 73 74 3d 6e 75 6c 6c 3b 76 61 72 20 69 73 49 70 61 64 3d 66 61 6c 73 65 3b 76 61 72 20 70 6f 70 4f 75 74 43 68 61 74 3b 76 61 72 20 43 Data Ascii: var icPatronChat=icPatronChat\|\|function(){var initialH=0;var initialW=0;var chatButtonH=80;var chatButtonW=180;var minH=0;var minW=0;var chatH=600;var chatW=380;var _frame=null;var _chatButtonFrame=null;var _host=null;var isIpad=false;var popOutChat;var C
2024-04-23 20:34:20 UTC	7676	IN	Data Raw: 29 3b 69 66 28 63 75 73 74 6f 6d 43 68 61 74 42 75 74 74 6f 6e 3d 3d 3d 66 61 6c 73 65 29 7b 5f 63 68 61 74 42 75 74 74 6f 6e 46 72 61 6d 65 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 6d 65 73 73 61 67 65 54 79 70 65 3a 22 69 73 50 6f 70 49 6e 22 2c 64 61 74 61 3a 7b 69 73 50 6f 70 49 6e 3a 74 72 75 65 7d 7d 2c 22 2a 22 29 7d 62 72 65 61 6b 3b 63 61 73 65 22 67 65 74 53 74 6f 72 65 44 61 74 61 22 3a 69 66 28 43 48 49 4c 44 5f 57 49 4e 44 4f 57 5f 48 41 4e 44 4c 45 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 43 48 49 4c 44 5f 57 49 4e 44 4f 57 5f 48 41 4e 44 4c 45 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 70 6f 70 4f 75 74 43 68 61 74 2c 22 2a 22 29 7d 2c 35 30 30 29 7d 62 72 65 61 6b 3b 63 Data Ascii: );if(customChatButton===false){_chatButtonFrame.contentWindow.postMessage({messageType:"isPopIn",data:{isPopIn:true}},"")}break;case"getStoreData":if(CHILD_WINDOW_HANDLE){setTimeout(function(){CHILD_WINDOW_HANDLE.postMessage(popOutChat,"")},500)}break;c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	50279	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:20 UTC	765	OUT	GET /styles.e8c5964d39f13771.css HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _gat_GSA_ENOR0=1; _ga=GA1.1.1455269847.1713904340; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904455.0.0.0; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0
2024-04-23 20:34:21 UTC	383	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:21 GMT Cache-Control: no-value Content-Encoding: br Last-Modified: Tue, 19 Mar 2024 13:54:36 GMT Content-Type: text/css Content-Length: 19981 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:21 UTC	16001	IN	Data Raw: 5b 75 a6 52 83 37 5d ac d2 9b c5 bc e6 4c 77 b1 0b ca 26 a6 82 77 d7 79 f6 92 23 4d 51 c7 1b e8 b6 ed a9 52 90 db 46 10 af 53 5b 37 07 50 55 bd 26 a8 23 62 8b 6b c0 55 5f 01 d2 14 6a d1 66 40 b9 98 b2 68 d4 a3 6b da a2 11 5d 55 4a 5a 59 91 2a 94 42 b8 78 98 ab 54 09 af 0c 6e 1a 04 b1 d9 41 8b bb ce aa da 99 ad 4c 27 37 da 42 44 de de e7 4c 0b 37 b5 e1 ef 89 e7 d5 7e b1 f2 fe d1 1b ce 03 ad 7f e4 7a 79 18 55 78 e3 9c 6a 3d e7 30 af c1 8d ab 6e f6 20 85 6d 08 09 21 16 ef 42 89 0f 77 c0 cd c3 17 f3 7e bf 4c 7d 3d 5d d7 5d fc dc 47 ba 54 60 4c a7 9c 73 cb 4d 69 a0 b8 2c 23 d8 d0 90 50 da 9b 35 fc f7 ee 67 7e 8d 2a 28 4a 0a 7c 17 94 4f fe 9b 29 f2 e6 d4 2a 55 2b bf 24 da e7 17 e4 b7 bf 67 76 67 8d 10 a4 ba 20 7a 0b c2 3c 59 07 48 2c 50 c6 e1 5e 7f 69 55 7b d8 Data Ascii: [uR7]Lw&wy#MQRFS[7PU&#bkU_jf@hk]UJZYBxTnAL'7BDL7~zyUxj=0n m!Bw~L}=]]GT`LsMi,#P5g~(J\|O)*U+$gvg z<YH,P^iU{
2024-04-23 20:34:21 UTC	3980	IN	Data Raw: cb 2c 41 f7 ed 21 aa 2e a7 2f e7 af 6f f0 3a ad e1 46 35 97 b3 97 d3 57 17 78 b8 d6 68 be 8a cb c9 cb d9 eb f7 69 d3 d6 60 d9 aa cb e9 cb f9 eb 1b 3c 77 6b 38 7a c5 e5 e4 e5 ec f5 fb b4 84 6b b0 87 8f cd f9 9b fb e2 96 3b 2c 92 7b 3c 95 6f cd e9 9b f3 b7 5c 61 fd dc c3 15 7d 6a ce de 9c be be c1 d3 ba 47 03 fb d8 9c bf b9 2f 6e b9 c3 aa bb c7 db fb d4 9c bd 39 7d 7d 83 07 79 8f 66 f9 ad d7 e9 7b 9d bf e5 12 6d f5 6d 7b b1 a3 9f b3 1e a5 5e 85 ff c8 00 0c 84 77 83 77 6f 84 41 19 1c 5d c8 54 05 18 90 41 d1 7e a6 a2 ef 0c c6 a0 68 3d 52 0d 61 50 06 47 2f 53 d5 77 06 63 40 b4 5e a9 e6 2b 83 30 18 5a 6e de bd 21 06 66 70 7c a3 53 19 61 50 06 46 17 3a 55 01 06 64 60 b4 5f a9 08 31 30 83 e3 d7 a9 0c 30 20 03 a3 fd 4a 45 8c 83 73 fc 01 8f 3b 91 eb 10 07 e6 e0 3c Data Ascii: ,A!./o:F5Wxhi`<wk8zk;,{<o\a}jG/n9}}yf{mm{^wwoA]TA~h=RaPG/Swc@^+0Zn!fp\|SaPF:Ud`_100 JEs;<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	50280	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:20 UTC	648	OUT	GET /assets/images/RF-Hero-1200x467-v3.svg HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _gat_GSA_ENOR0=1; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0
2024-04-23 20:34:21 UTC	366	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:21 GMT Cache-Control: no-cache Last-Modified: Fri, 13 Nov 2020 15:33:45 GMT Content-Type: image/svg+xml Content-Length: 20942 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:21 UTC	8524	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 33 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-04-23 20:34:21 UTC	8192	IN	Data Raw: 68 65 69 67 68 74 3d 22 31 31 38 2e 36 22 2f 3e 0d 0a 3c 70 6f 6c 79 67 6f 6e 20 63 6c 61 73 73 3d 22 73 74 39 22 20 70 6f 69 6e 74 73 3d 22 34 32 35 2e 35 2c 32 33 30 2e 38 20 34 30 35 2c 32 36 35 2e 32 20 34 39 31 2c 32 36 35 2e 32 20 34 37 30 2e 34 2c 32 33 30 2e 38 20 22 2f 3e 0d 0a 3c 72 65 63 74 20 78 3d 22 34 32 31 22 20 79 3d 22 32 37 37 2e 36 22 20 63 6c 61 73 73 3d 22 73 74 31 30 22 20 77 69 64 74 68 3d 22 36 2e 31 22 20 68 65 69 67 68 74 3d 22 32 31 2e 39 22 2f 3e 0d 0a 3c 72 65 63 74 20 78 3d 22 34 34 34 2e 39 22 20 79 3d 22 32 37 37 2e 36 22 20 63 6c 61 73 73 3d 22 73 74 31 30 22 20 77 69 64 74 68 3d 22 36 2e 31 22 20 68 65 69 67 68 74 3d 22 32 31 2e 39 22 2f 3e 0d 0a 3c 72 65 63 74 20 78 3d 22 34 36 38 2e 38 22 20 79 3d 22 32 37 37 2e 36 22 Data Ascii: height="118.6"/><polygon class="st9" points="425.5,230.8 405,265.2 491,265.2 470.4,230.8 "/><rect x="421" y="277.6" class="st10" width="6.1" height="21.9"/><rect x="444.9" y="277.6" class="st10" width="6.1" height="21.9"/><rect x="468.8" y="277.6"
2024-04-23 20:34:21 UTC	4226	IN	Data Raw: 35 2c 33 32 31 2e 36 22 2f 3e 0d 0a 09 3c 70 6f 6c 79 67 6f 6e 20 63 6c 61 73 73 3d 22 73 74 35 22 20 70 6f 69 6e 74 73 3d 22 31 30 32 39 2e 39 2c 33 33 33 2e 32 20 31 30 32 32 2e 37 2c 33 35 36 2e 39 20 31 30 31 35 2e 39 2c 33 34 35 2e 39 20 31 30 31 33 2e 35 2c 33 34 36 2e 38 20 31 30 32 30 2e 31 2c 33 36 31 2e 34 20 31 30 31 38 2e 35 2c 33 39 37 20 31 30 32 32 2e 33 2c 33 39 36 2e 38 20 0d 0a 09 09 31 30 32 34 2e 36 2c 33 36 31 2e 32 20 31 30 33 31 2e 37 2c 33 33 33 20 09 22 2f 3e 0d 0a 09 3c 70 6f 6c 79 67 6f 6e 20 63 6c 61 73 73 3d 22 73 74 35 22 20 70 6f 69 6e 74 73 3d 22 31 30 32 38 2e 37 2c 33 34 33 2e 38 20 31 30 32 33 2e 35 2c 33 33 35 2e 36 20 31 30 32 32 2e 31 2c 33 33 37 20 31 30 32 36 2e 39 2c 33 34 37 2e 39 20 09 22 2f 3e 0d 0a 09 3c 70 6f Data Ascii: 5,321.6"/><polygon class="st5" points="1029.9,333.2 1022.7,356.9 1015.9,345.9 1013.5,346.8 1020.1,361.4 1018.5,397 1022.3,396.8 1024.6,361.2 1031.7,333 "/><polygon class="st5" points="1028.7,343.8 1023.5,335.6 1022.1,337 1026.9,347.9 "/><po

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	50281	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:21 UTC	817	OUT	GET /config/config.json HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0
2024-04-23 20:34:21 UTC	343	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:22 GMT Last-Modified: Mon, 01 Apr 2024 13:07:15 GMT Content-Type: application/json Content-Length: 3445 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:21 UTC	3445	IN	Data Raw: 7b 0d 0a 09 22 61 70 69 55 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 32 2e 72 65 70 6f 72 74 66 72 61 75 64 2e 66 74 63 2e 67 6f 76 2f 50 52 4f 44 5f 45 41 53 54 22 2c 0d 0a 09 22 73 68 6f 77 42 61 6e 6e 65 72 22 3a 20 74 72 75 65 2c 0d 0a 09 22 73 68 6f 77 42 61 6e 6e 65 72 32 22 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 20 20 20 20 22 66 6f 72 65 73 65 65 22 3a 20 74 72 75 65 2c 0d 0a 09 22 6d 65 6c 69 73 73 61 4c 69 63 65 6e 73 65 4b 65 79 22 3a 20 22 51 47 52 57 4b 5f 78 59 49 66 42 34 51 68 4c 76 4f 4a 4d 42 4e 4a 2a 2a 22 2c 0d 0a 09 22 6d 65 6c 69 73 73 61 45 78 70 72 65 73 73 41 50 49 55 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 65 78 70 72 65 73 73 65 6e 74 72 79 2e 6d 65 6c 69 73 73 61 64 61 74 61 2e 6e 65 74 2f 77 65 62 2f 47 6c 6f 62 Data Ascii: {"apiUrl": "https://www2.reportfraud.ftc.gov/PROD_EAST","showBanner": true,"showBanner2": false, "foresee": true,"melissaLicenseKey": "QGRWK_xYIfB4QhLvOJMBNJ**","melissaExpressAPIUrl": "https://expressentry.melissadata.net/web/Glob

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	50282	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:21 UTC	844	OUT	GET /favicon.ico HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0
2024-04-23 20:34:22 UTC	340	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:22 GMT Last-Modified: Thu, 01 Dec 2022 22:15:05 GMT Content-Type: image/x-icon Content-Length: 15406 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:22 UTC	9087	IN	Data Raw: 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 8e 60 2d d8 b2 92 8f db ba 9b d2 dd bf a3 f0 d9 b8 96 f0 d9 b8 99 d0 d5 b1 8f 8d c2 8c 61 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 aa 71 55 09 d3 ac 8b 91 df c4 a8 fa e5 cf bc ff e6 d1 bc ff e7 d3 be ff e7 d2 bf ff e5 cf bb ff ed de d2 ff e8 d3 c0 fa d2 ab 8a 8e db 92 6d 07 00 00 00 00 00 00 00 00 00 00 00 00 bf 9f 80 08 d5 b1 92 b8 dd bf a5 ff e5 cf ba ff dc bd a6 ff ca 9b 78 ff d8 b6 9b ff d8 Data Ascii: h6 (00 h&( `-a*qUmx
2024-04-23 20:34:22 UTC	5156	IN	Data Raw: d3 c0 ff f7 f0 ea ff ee df cf ff c4 90 67 ff a4 53 0a ff a7 59 1f ff c3 8e 61 ff bf 87 52 ff af 69 36 ff d6 b2 95 ff e6 d0 b9 ff e0 c4 ac ff c2 8d 5b ff bb 7e 42 ff bf 85 4a ff ba 7d 40 ff c6 93 64 ff e0 c4 a7 ff e5 ce b6 ff c5 92 5d ff cd a0 75 ff e9 d6 c1 ff de c1 a3 ff c5 91 5f ff ba 7d 3f ff be 86 4a ff bb 7f 42 ff c3 8f 5f ff e1 c7 ae ff e3 cb b0 ff da b9 9c ff b4 72 4a ff ad 64 36 ff ac 63 36 ff cc a0 81 ff aa 5f 32 ff cb 9c 75 ff f2 e6 db ff fc f8 f6 ff dc bd b3 ff ef e0 d8 ff f5 ec e3 ff d3 ad 86 e4 be 81 50 43 c1 8a 5c 74 dc bd a0 f9 e4 cc b5 ff e8 d4 c1 ff e3 cb b6 ff f3 e9 e0 ff e2 c8 ae ff b8 79 47 ff a9 5c 1c ff b1 6c 3b ff c2 8c 64 ff a4 53 18 ff b9 7b 50 ff e4 cd b6 ff dd be a2 ff c9 9a 72 ff cd a2 79 ff cd a0 76 ff ce a2 77 ff d4 af 89 ff Data Ascii: gSYaRi6[~BJ}@d]u_}?JB_rJd6c6_2uPC\tyG\l;dS{Pryvw
2024-04-23 20:34:22 UTC	1163	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 00 00 03 b1 69 3b 27 c6 95 6a 82 cc 9f 73 d2 d6 b0 8d f0 e3 c8 b0 fb f0 e3 d6 ff ee de d2 ff ec da ca ff f5 ec e2 ff fe fd fc ff fd fc fb ff f5 ed e5 ff f6 ec e4 ff fc f9 f7 ff e6 d1 bb ff e7 d3 be ff ec db ca ff e6 d1 c0 ff eb d9 c8 ff e1 c6 ab fb d8 b2 8e ef cd a0 78 d1 c4 8e 61 81 ae 6b 2f 26 80 80 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 Data Ascii: Ui;'jsxak/&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	50285	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:22 UTC	611	OUT	GET /config/config.json HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0
2024-04-23 20:34:22 UTC	343	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:23 GMT Last-Modified: Mon, 01 Apr 2024 13:07:15 GMT Content-Type: application/json Content-Length: 3445 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:22 UTC	3445	IN	Data Raw: 7b 0d 0a 09 22 61 70 69 55 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 32 2e 72 65 70 6f 72 74 66 72 61 75 64 2e 66 74 63 2e 67 6f 76 2f 50 52 4f 44 5f 45 41 53 54 22 2c 0d 0a 09 22 73 68 6f 77 42 61 6e 6e 65 72 22 3a 20 74 72 75 65 2c 0d 0a 09 22 73 68 6f 77 42 61 6e 6e 65 72 32 22 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 20 20 20 20 22 66 6f 72 65 73 65 65 22 3a 20 74 72 75 65 2c 0d 0a 09 22 6d 65 6c 69 73 73 61 4c 69 63 65 6e 73 65 4b 65 79 22 3a 20 22 51 47 52 57 4b 5f 78 59 49 66 42 34 51 68 4c 76 4f 4a 4d 42 4e 4a 2a 2a 22 2c 0d 0a 09 22 6d 65 6c 69 73 73 61 45 78 70 72 65 73 73 41 50 49 55 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 65 78 70 72 65 73 73 65 6e 74 72 79 2e 6d 65 6c 69 73 73 61 64 61 74 61 2e 6e 65 74 2f 77 65 62 2f 47 6c 6f 62 Data Ascii: {"apiUrl": "https://www2.reportfraud.ftc.gov/PROD_EAST","showBanner": true,"showBanner2": false, "foresee": true,"melissaLicenseKey": "QGRWK_xYIfB4QhLvOJMBNJ**","melissaExpressAPIUrl": "https://expressentry.melissadata.net/web/Glob

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	50286	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:22 UTC	887	OUT	GET /836.3a84870d141ed8eb.js HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://reportfraud.ftc.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z
2024-04-23 20:34:22 UTC	397	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:23 GMT Cache-Control: no-value Content-Encoding: br Last-Modified: Tue, 19 Mar 2024 13:54:36 GMT Content-Type: application/javascript Content-Length: 12136 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:22 UTC	6898	IN	Data Raw: 5b 03 02 31 19 c7 46 dc ad 6a 48 40 60 8e 0c e4 76 00 55 89 ec 8a d9 81 16 36 0e 08 c0 f7 5a 00 d5 cb 81 36 46 08 fa 87 d6 5a 07 0b 0a d1 54 71 7c b6 98 6a 45 09 3a b4 57 5c a2 1b ec 60 e3 38 45 a6 c0 92 e0 a1 04 fd 5e 19 3b e7 cc 37 cf a8 ee f2 9f ce 33 68 ad e3 51 3a d7 71 a8 0e da de 68 a3 45 80 3b 3d 0c 4b 3b 3e 79 d8 54 5f 5f e7 b2 44 a7 ee 4e 12 22 63 2e 32 16 d8 34 20 99 61 17 d7 ee e5 ab da 7f fd 22 4c 23 e7 01 8c 45 97 36 bc 3c d9 4e a9 ca d9 4a f7 4d b4 04 96 24 6c 10 cb 2c 00 53 72 51 25 26 f9 fa 9e 7a b0 55 4a ab d8 0e 0e e8 98 5e 03 24 e2 cb b1 57 d9 0f a5 9b 6e 51 26 25 65 4e 96 58 66 5e 80 e4 5c 1b de e2 d2 f7 11 4d d1 be 17 4b db 65 28 5a 6e fb c7 ec 04 8c 46 87 8b 4a 9a 13 04 08 90 75 ae 6d a7 c2 be 70 fe 0b f2 d3 0e 47 b1 32 ce d3 a2 79 Data Ascii: [1FjH@`vU6Z6FZTq\|jE:W\`8E^;73hQ:qhE;=K;>yT__DN"c.24 a"L#E6<NJM$l,SrQ%&zUJ^$WnQ&%eNXf^\MKe(ZnFJumpG2y
2024-04-23 20:34:22 UTC	5156	IN	Data Raw: 9d 9a bb 16 20 aa 68 0c 45 5d e4 c0 cc 4d 4e 92 3c e0 49 ba e0 ac d7 c4 8b 4e c4 a8 ee 7b e4 16 e9 30 a6 1e c3 0d 2d a2 64 05 38 4c c2 45 54 ee 93 0b 6c c6 28 ec c7 47 1f 3d cb 5a 82 8a 2e 20 20 20 66 e9 b4 59 e0 b1 7c d4 e4 bd f0 a2 a4 60 be fb 0b 9e cd dd 73 f7 6a 15 46 92 28 8a 95 0f 8c cd 3a 38 b9 d6 ed 2a 6b 41 b9 e2 b5 9a 8d 03 39 c8 10 a3 59 aa b2 5c 83 13 e4 f4 1b 67 69 03 72 41 72 f4 e3 73 53 89 cf c6 fe 89 60 63 53 8e 3f 70 1c bb d0 71 2d 1a 39 71 75 9f a9 76 83 84 ea f3 cb a8 d8 c3 d7 db e3 f4 6b 45 16 d5 4a 3c aa dd 62 85 6a 45 80 6a 25 0d aa dd 4c 86 ca 9f b0 eb bf a1 3a 30 f4 dc 4b 61 02 b2 f9 5c d5 0b f5 b2 53 d0 a7 8c b0 52 c0 04 b9 fc 3f a3 38 b4 94 e2 73 1c f4 80 8d bd 1f 35 49 56 c9 06 66 6e a4 18 24 69 e6 c8 85 1d c2 ea 36 ba 1e a0 9f Data Ascii: hE]MN<IN{0-d8LETl(G=Z. fY\|`sjF(:8*kA9Y\girArsS`cS?pq-9quvkEJ<bjEj%L:0Ka\SR?8s5IVfn$i6
2024-04-23 20:34:22 UTC	82	IN	Data Raw: bd 6c cf 76 62 80 68 cb 48 c3 e8 a9 c8 54 4a 79 24 bc 32 e0 ca 92 6e 62 79 8c 54 a2 22 52 29 b8 97 2a 70 a6 c7 2d a3 50 63 cd d5 f4 cb 27 a2 c7 ac 47 a3 c6 ee 3a e4 eb a3 a2 53 20 a2 12 a9 e4 b1 d2 bb 4e cc 05 f7 31 42 54 3c 68 21 1b 9f 95 6a 02 Data Ascii: lvbhHTJy$2nbyT"R)*p-Pc'G:S N1BT<h!j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	50287	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:22 UTC	953	OUT	GET /assets/fonts/proximanova_semibold/ProximaNova-Sbold-webfont.woff HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://reportfraud.ftc.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://reportfraud.ftc.gov/styles.e8c5964d39f13771.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z
2024-04-23 20:34:22 UTC	374	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:23 GMT Cache-Control: no-cache Last-Modified: Fri, 13 Nov 2020 15:33:45 GMT Content-Type: application/font-woff Content-Length: 25948 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:22 UTC	11601	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 65 5c 00 13 00 00 00 00 cf 78 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 a8 00 00 00 1c 00 00 00 1c 5e da 3e 09 47 44 45 46 00 00 01 c4 00 00 00 2d 00 00 00 32 03 0b 01 f8 47 50 4f 53 00 00 01 f4 00 00 06 29 00 00 24 ac b6 e4 f0 f9 47 53 55 42 00 00 08 20 00 00 02 0a 00 00 06 14 4c e5 75 98 4f 53 2f 32 00 00 0a 2c 00 00 00 5a 00 00 00 60 7f f6 96 23 63 6d 61 70 00 00 0a 88 00 00 01 88 00 00 01 e2 d1 0b 73 66 63 76 74 20 00 00 0c 10 00 00 00 32 00 00 00 32 0d 4d 0c 79 66 70 67 6d 00 00 0c 44 00 00 01 b1 00 00 02 65 53 b4 2f a7 67 61 73 70 00 00 0d f8 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 0e 00 00 00 4e be 00 00 91 28 7a 7f ce e7 68 65 61 64 00 00 5c c0 00 00 00 Data Ascii: wOFFe\xFFTM^>GDEF-2GPOS)$GSUB LuOS/2,Z`#cmapsfcvt 22MyfpgmDeS/gaspglyfN(zhead\
2024-04-23 20:34:22 UTC	7734	IN	Data Raw: ed d2 68 2e a8 30 97 9e 7b 84 fc e3 7b 84 a4 ed 11 4f 1f 7b e4 99 6b 1e 7a e4 c4 c2 d9 4d 5b fb c1 88 46 cc da b7 a7 6b 0c bf 68 c9 e5 74 8b 68 3a 61 0c 8c 43 02 9d 36 4a f3 eb 80 28 62 09 bf 69 9a cc 09 32 c9 e9 50 b2 34 20 80 4a 2c cb 89 a0 47 87 4c 99 0b 32 48 31 69 f9 99 34 be 9d 8c 6c f3 e9 39 9a 4d 63 36 1e 5d b1 e7 cf 6b d7 fe 79 cf 8a a3 1b c7 7c ba 67 d3 e6 fb ee db bc 69 0f 39 b5 e8 c5 db a7 6c ef b8 63 c7 9f b7 4f bd fd c8 d5 b7 1e 7d 69 5b db 91 23 14 b7 a8 5b c4 16 18 1f ea dc 4b b9 34 c8 92 22 55 0e ac 38 17 4a 8e b3 2f d4 52 d8 0b b5 58 19 6a c9 a1 6b 4e b4 d4 01 8d 7a 49 d4 92 9d 34 af 35 d8 52 f7 ab cb 5f fb f6 6f af 82 98 2c d9 39 f6 86 fb ee bb 01 a4 a2 ba 45 d7 02 8a 56 fd fa d4 7f ab 5f 4d 9d d4 a5 f2 fb a2 4d cf dc b9 e3 f0 c4 3a 2a Data Ascii: h.0{{O{kzM[Fkhth:aC6J(bi2P4 J,GL2H1i4l9Mc6]ky\|gi9lcO}i[#[K4"U8J/RXjkNzI45R_o,9EV_MM:*
2024-04-23 20:34:22 UTC	6445	IN	Data Raw: 54 45 41 28 11 63 47 83 34 12 0e 63 24 6c 1f 90 e9 35 06 13 15 cc 25 3b 06 be 89 15 b1 0c 1d af 34 cc 84 c4 f4 97 0f 6c 18 85 06 c1 00 8e 86 a9 38 65 14 56 91 70 48 4f 1d ad 9e b0 d0 df 3b 24 f8 52 29 1f 08 ab 51 84 f2 eb 67 37 62 df c1 92 0b 23 f8 b6 3e 63 28 81 0b a1 ff fd 67 c5 56 e4 ee 16 19 60 53 b0 b5 68 86 b5 08 82 2e 19 c1 3d 91 be 1a a1 de ab 51 9b be 1a 00 84 87 45 b0 f1 2c 02 8a 7a 00 14 23 e9 7a 0c 00 32 17 0d 40 ef 60 19 80 88 01 da 02 84 d9 02 c8 99 0e 79 08 f6 d9 8c c1 77 b1 90 32 04 14 e5 28 f8 be 0c 5d 17 b6 5c 74 7d c9 31 a9 dd e2 08 69 b1 e0 73 13 ff 42 08 9e f4 56 a5 93 99 a4 d0 c9 b9 09 be 39 99 a5 db 9c 46 e3 56 e6 da 3a 37 ad bb 34 dc d2 b9 31 49 62 61 4e 7a bc 87 d1 fa 1b 2a 27 6b b8 e1 dc eb 17 2c 29 e5 1a e0 68 16 ff 19 1a 4a 0c Data Ascii: TEA(cG4c$l5%;4l8eVpHO;$R)Qg7b#>c(gV`Sh.=QE,z#z2@`yw2(]\t}1isBV9FV:741IbaNz*'k,)hJ
2024-04-23 20:34:22 UTC	168	IN	Data Raw: 73 d0 2c 19 7e 53 b7 df e2 8b 84 1b 5b 13 9f da c3 ef 35 f7 88 6a 28 9d 4a d7 1f 39 e0 a0 a6 00 78 da db c1 f8 bf 75 03 63 2f 83 f7 06 8e 80 88 8d 8c 8c 7d 91 1b dd d8 b4 23 14 37 08 44 7a 6f 10 09 02 32 1a 22 65 37 b0 69 c7 44 30 6c 60 56 70 dd c0 ac ed b2 81 4d c1 75 13 b3 27 93 36 98 c3 0a e4 b0 39 40 39 2c 40 0e 2b 3f 84 c3 b8 81 1d aa 9e 13 28 ca 0e 54 b2 91 d9 ad 0c c8 e5 00 72 39 f5 e1 5c 2e 05 d7 5d 0c ec f5 ff 19 e0 22 dc 40 05 5c 27 60 dc c8 0d 22 da 00 58 dd 30 98 00 01 50 10 58 26 00 00 Data Ascii: s,~S[5j(J9xuc/}#7Dzo2"e7iD0l`VpMu'69@9,@+?(Tr9\.]"@\'`"X0PX&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	50289	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:22 UTC	947	OUT	GET /assets/images/search-solid.svg HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reportfraud.ftc.gov/styles.e8c5964d39f13771.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z
2024-04-23 20:34:23 UTC	364	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:24 GMT Cache-Control: no-cache Last-Modified: Fri, 13 Nov 2020 15:33:48 GMT Content-Type: image/svg+xml Content-Length: 577 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:23 UTC	577	IN	Data Raw: 3c 73 76 67 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 66 6f 63 75 73 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 64 61 74 61 2d 70 72 65 66 69 78 3d 22 66 61 73 22 20 64 61 74 61 2d 69 63 6f 6e 3d 22 73 65 61 72 63 68 22 20 63 6c 61 73 73 3d 22 73 76 67 2d 69 6e 6c 69 6e 65 2d 2d 66 61 20 66 61 2d 73 65 61 72 63 68 20 66 61 2d 77 2d 31 36 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 20 64 3d 22 4d 35 30 35 20 34 34 32 2e 37 4c 34 30 35 2e 33 20 33 34 33 63 2d 34 2e 35 2d 34 2e 35 2d 31 30 2e 36 2d 37 2d 31 Data Ascii: <svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="search" class="svg-inline--fa fa-search fa-w-16" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path fill="currentColor" d="M505 442.7L405.3 343c-4.5-4.5-10.6-7-1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	50292	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:22 UTC	934	OUT	GET /assets/images/topSplashButtonArrow-white.png HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z
2024-04-23 20:34:23 UTC	361	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:24 GMT Cache-Control: no-cache Last-Modified: Fri, 13 Nov 2020 15:33:49 GMT Content-Type: image/png Content-Length: 1234 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:23 UTC	1234	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 b0 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da ed 97 5b 92 e4 28 0c 45 ff 59 c5 2c c1 42 08 89 e5 f0 8c 98 1d cc f2 fb 82 a9 7c 55 76 57 57 56 fd 74 4c 9b 48 0b 84 10 42 07 63 a7 eb ff fd 3b dc 3f b8 fc 91 82 0b a2 16 53 8c 07 ae 90 42 f2 19 15 3b ce eb 94 74 84 75 5f 97 df 5d 68 df e9 dd a5 c3 43 c5 90 7c 36 63 df f6 19 7a b9 0e d0 b0 f5 e5 5e ef b4 6e 3f b6 1d ed 8e 37 87 3c 67 9e b3 6d 3b db 8e d8 9f 7a da 6d 97 f6 b8 1c 6e 96 b3 7f a5 6d 9d 9c e2 b1 1d 14 c9 68 02 7f ec 9d ef 4c 7c e0 6e 73 16 3e 7f 79 c9 79 c7 c4 e8 67 d4 85 23 ee cc f6 3c 77 ee 52 7d 48 de a5 f6 90 bb 23 6f 3d df a7 c2 1d 71 1b c4 87 Data Ascii: PNGIHDR szzzTXtRaw profile type exifx[(EY,B\|UvWWVtLHBc;?SB;tu_]hC\|6cz^n?7<gm;zmnmhL\|ns>yyg#<wR}H#o=q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	50293	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:22 UTC	661	OUT	GET /favicon.ico HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z
2024-04-23 20:34:23 UTC	340	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:24 GMT Last-Modified: Thu, 01 Dec 2022 22:15:05 GMT Content-Type: image/x-icon Content-Length: 15406 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:23 UTC	10092	IN	Data Raw: 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 8e 60 2d d8 b2 92 8f db ba 9b d2 dd bf a3 f0 d9 b8 96 f0 d9 b8 99 d0 d5 b1 8f 8d c2 8c 61 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 aa 71 55 09 d3 ac 8b 91 df c4 a8 fa e5 cf bc ff e6 d1 bc ff e7 d3 be ff e7 d2 bf ff e5 cf bb ff ed de d2 ff e8 d3 c0 fa d2 ab 8a 8e db 92 6d 07 00 00 00 00 00 00 00 00 00 00 00 00 bf 9f 80 08 d5 b1 92 b8 dd bf a5 ff e5 cf ba ff dc bd a6 ff ca 9b 78 ff d8 b6 9b ff d8 Data Ascii: h6 (00 h&( `-a*qUmx
2024-04-23 20:34:23 UTC	5156	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f0 e3 d5 ff c2 8d 54 ff d1 a8 7c ff ef e1 d3 ff d8 b7 93 ff d9 b9 97 ff d0 a8 7c ff ed dd cd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fa f6 f1 ff e4 cc b2 ff e5 d0 b8 ff d1 aa 81 ff e0 c4 a8 ff d5 b1 99 ff ab 60 30 ff d3 ac 86 ff f1 e6 d8 ff f3 ea df ff e6 d0 b8 ff eb da ca ff e7 d2 bc fe c7 95 66 d1 c9 9a 71 de e7 d2 bc fe ed dd ce ff e9 d7 c5 ff e8 d4 c2 ff f2 e6 d9 ff d0 a5 81 ff be 83 5a ff da bb a3 ff d6 b2 8f ff d2 aa 82 ff e3 cc b2 ff f2 e7 dc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f3 e8 dd ff c3 8e 57 ff c6 94 65 ff f1 e6 db ff ee e0 d2 ff cd a0 75 ff d2 a9 81 ff f3 e7 dd ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: T\|\|`0fqZWeu
2024-04-23 20:34:23 UTC	158	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	50291	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:22 UTC	922	OUT	GET /assets/images/USFlag-Icon-2x.png HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z
2024-04-23 20:34:23 UTC	335	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:24 GMT Last-Modified: Thu, 09 Nov 2023 15:12:28 GMT Content-Type: image/png Content-Length: 144 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:23 UTC	144	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2e 00 00 00 1a 02 03 00 00 00 b5 3c 86 1f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 09 50 4c 54 45 00 28 68 bf 0a 30 ff ff ff 40 10 f5 13 00 00 00 35 49 44 41 54 18 57 63 60 00 02 d6 50 30 08 60 40 e1 70 81 c0 2a 30 58 80 ca c1 ad 87 61 c1 82 05 08 65 28 1c aa da b3 0a 01 16 a0 72 42 11 20 00 95 43 27 3d 00 ab ba 7a 3b eb 6e 66 15 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR.<sRGBPLTE(h0@5IDATWc`P0`@p*0Xae(rB C'=z;nfIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	50290	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:22 UTC	863	OUT	GET /foresee_assets/qualtricsScript.js HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z
2024-04-23 20:34:23 UTC	349	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:24 GMT Last-Modified: Wed, 25 Oct 2023 17:32:56 GMT Content-Type: application/javascript Content-Length: 1437 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:23 UTC	1437	IN	Data Raw: 2f 2f 42 45 47 49 4e 20 51 55 41 4c 54 52 49 43 53 20 57 45 42 53 49 54 45 20 46 45 45 44 42 41 43 4b 20 53 4e 49 50 50 45 54 2f 2f 0d 0a 0d 0a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 0d 0a 20 20 20 20 51 53 49 2e 41 50 49 2e 72 75 6e 28 29 3b 20 20 0d 0a 0d 0a 7d 2c 20 31 35 30 30 29 3b 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 68 2c 66 2c 67 29 7b 0d 0a 0d 0a 74 68 69 73 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 61 3d 61 2b 22 3d 22 2c 63 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2c 62 3d 30 2c 65 3d 63 2e 6c 65 6e 67 74 68 3b 62 3c 65 3b 62 2b 2b 29 7b 66 6f 72 28 76 61 72 20 64 3d 63 5b 62 5d Data Ascii: //BEGIN QUALTRICS WEBSITE FEEDBACK SNIPPET//setTimeout(function(){ QSI.API.run(); }, 1500);(function(){var g=function(e,h,f,g){this.get=function(a){for(var a=a+"=",c=document.cookie.split(";"),b=0,e=c.length;b<e;b++){for(var d=c[b]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	50298	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:23 UTC	915	OUT	GET /assets/images/wh-icon.png HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z
2024-04-23 20:34:23 UTC	335	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:24 GMT Last-Modified: Thu, 09 Nov 2023 15:12:28 GMT Content-Type: image/png Content-Length: 980 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:23 UTC	980	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 03 00 00 00 b9 cf 02 9f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 50 a0 03 00 04 00 00 00 01 00 00 00 50 00 00 00 00 12 28 6e 75 00 00 00 57 50 4c 54 45 00 00 00 20 70 bf 20 78 c7 20 75 c5 20 79 c2 20 78 c3 20 77 c2 23 76 c2 23 79 c4 23 78 c2 22 77 c3 22 76 c4 22 78 c3 22 78 c3 22 77 c2 22 77 c3 22 78 c2 23 78 c2 23 77 c3 23 77 c2 23 78 c3 23 78 c3 22 77 c3 22 77 c3 22 78 c2 22 78 c3 22 77 c2 22 77 c2 23 78 c3 e5 2c ed 98 00 00 00 1c 74 52 4e 53 00 10 20 30 3f 40 4f 50 5f 60 6f 70 7f 80 8f 90 9f a0 af b0 bf c0 cf d0 df e0 ef f0 42 ab b9 f4 00 00 Data Ascii: PNGIHDRPPsRGB8eXIfMM*iPP(nuWPLTE p x u y x w#v#y#x"w"v"x"x"w"w"x#x#w#w#x#x"w"w"x"x"w"w#x,tRNS 0?@OP_`opB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	50297	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:23 UTC	917	OUT	GET /assets/images/lock-icon.png HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z
2024-04-23 20:34:23 UTC	335	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:24 GMT Last-Modified: Thu, 09 Nov 2023 15:12:27 GMT Content-Type: image/png Content-Length: 987 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:23 UTC	987	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 03 00 00 00 b9 cf 02 9f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 50 a0 03 00 04 00 00 00 01 00 00 00 50 00 00 00 00 12 28 6e 75 00 00 00 57 50 4c 54 45 00 00 00 70 9f 20 70 9f 28 70 9f 2b 71 9e 28 70 9f 28 71 9e 2a 70 9f 29 71 9e 28 70 9f 28 71 9f 29 70 9f 29 70 9f 2a 70 9f 2a 70 9f 29 71 9f 29 70 9f 2a 71 9e 29 70 9f 29 71 9e 2a 70 9f 29 71 9e 29 70 9f 2a 71 9e 2a 70 9f 29 71 9e 29 70 9f 2a 71 9e 29 71 9f 2a 24 87 8f 88 00 00 00 1c 74 52 4e 53 00 10 20 30 3f 40 4f 50 5f 60 6f 70 7f 80 8f 90 9f a0 af b0 bf c0 cf d0 df e0 ef f0 42 ab b9 f4 00 00 Data Ascii: PNGIHDRPPsRGB8eXIfMMiPP(nuWPLTEp p(p+q(p(qp)q(p(q)p)ppp)q)pq)p)qp)q)pqp)q)pq)q$tRNS 0?@OP_`opB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	50301	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:24 UTC	950	OUT	GET /515.93f17397f92c22a2.js HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://reportfraud.ftc.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
2024-04-23 20:34:25 UTC	396	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:26 GMT Cache-Control: no-value Content-Encoding: br Last-Modified: Tue, 19 Mar 2024 13:54:36 GMT Content-Type: application/javascript Content-Length: 2850 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:25 UTC	2850	IN	Data Raw: 1b 78 21 51 94 72 d2 98 01 b4 38 b0 8d 99 0d bd 81 ee 80 50 98 ac 1c 04 d6 f7 ab af 6d 47 ec 62 1b 21 c9 ec df 7e 66 5f bf de bb 86 13 64 05 76 37 d5 d4 66 4a f7 9a 22 18 2f 0a 06 71 b7 5b b6 9c b2 94 76 c9 40 b6 df 2e 28 2c 16 fd 8a a2 bf e8 87 f7 d7 44 a5 5b b5 c0 e3 f0 f7 29 9b 32 c1 8f 95 b9 a9 2c 8b 53 50 44 cb 7e 5a 9d 1b 86 22 c9 76 f1 dd 00 e3 29 c8 cf ff 5d fb b7 96 33 25 56 3d 95 75 c0 ba 0e 48 b1 33 9d 9b 9b e4 3c fe 84 90 99 7c e6 29 21 58 82 25 c7 c2 7e bb ba 46 ed b2 b0 eb 2a e4 ea 3c d1 55 9b b2 25 98 0c 97 3f 61 e6 58 48 a1 09 87 54 7e cf 80 ae 95 5e eb 6c 29 1c 0c 22 25 86 8c 65 96 f0 b4 83 f7 4e 7f d0 7d 81 8f 6d da e5 91 03 3a 1e c4 29 8e be 61 92 0c d8 07 e6 43 67 bf a3 4b ac f0 5f ff da ce 5f 62 91 f2 d9 24 f7 c3 f3 65 2b 3a 5f 79 6f Data Ascii: x!Qr8PmGb!~f_dv7fJ"/q[v@.(,D[)2,SPD~Z"v)]3%V=uH3<\|)!X%~F*<U%?aXHT~^l)"%eN}m:)aCgK__b$e+:_yo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	50305	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:24 UTC	950	OUT	GET /885.e4c25f8965e3c3f1.js HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://reportfraud.ftc.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
2024-04-23 20:34:25 UTC	397	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:26 GMT Cache-Control: no-value Content-Encoding: br Last-Modified: Tue, 19 Mar 2024 13:54:36 GMT Content-Type: application/javascript Content-Length: 11812 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:25 UTC	8467	IN	Data Raw: 1b d8 c9 a3 a2 4e 92 5a b3 36 8a 60 e3 60 04 8d 3d cb 80 3b ec 76 00 45 a5 ff ad 00 6a 59 c0 1b d2 47 fd 05 82 17 50 8d 82 ea 78 70 48 d5 b0 db 2a 11 89 92 97 1a 08 eb b0 aa c7 f1 bb 4c 6b 6b 41 77 4a 85 e8 4b 3d fe 77 ea 2a d3 a5 2f db 7c 7d 91 20 98 ce 00 77 72 44 7a c4 ab df cf fa fa c5 5e 8b ed 29 06 64 c8 7b bc 3e 4a 21 26 54 89 a6 44 77 f3 f2 38 22 68 b8 55 b0 00 77 35 0e 67 a6 d9 aa 16 44 94 47 1e 56 92 f3 87 ab 1a 4c 36 4d f5 be 7c 9d df d7 ef 63 87 0f fb b5 b3 21 e5 9a 73 13 e2 b4 39 c0 d0 53 da 22 d9 20 90 b5 9a 95 14 da 04 be af 54 ed 74 76 a2 a7 85 87 4f 6d 48 33 6c 4f f9 b8 31 42 a8 5a 05 ca 21 13 dc 48 fc 9b 69 f6 fa c6 42 04 79 ab b4 3d 45 04 7b b5 70 02 59 18 4b 29 d5 9c 52 26 31 29 55 85 5d 33 67 89 a8 e6 50 3f 42 1e 40 02 cb 3a 5b 7b 27 Data Ascii: NZ6``=;vEjYGPxpHLkkAwJK=w/\|} wrDz^)d{>J!&TDw8"hUw5gDGVL6M\|c!s9S" TtvOmH3lO1BZ!HiBy=E{pYK)R&1)U]3gP?B@:[{'
2024-04-23 20:34:25 UTC	2578	IN	Data Raw: 55 0c 41 5a d5 0f 48 94 0f b9 a4 7b 5e 52 58 a1 94 41 17 75 45 3d 50 bb 29 61 72 a8 98 db 1b 77 bf 9c 7d 95 a7 79 b6 53 6a a4 38 3b c7 ad bf 76 a9 1d 30 08 3f 66 cf 0f ef 0b cc fa 43 fd 6c a8 de b6 a5 a2 ac 92 ce 69 72 7b a5 7f da ef dc ab cf d8 a9 50 ca cc 9a f0 f2 02 3f b2 cb 6d a5 79 2a 02 dd 5f 64 1c 40 e9 87 43 88 af 80 93 d0 11 94 1f 3e ea 6e 10 ca 34 b2 31 ab 36 47 5a cf 38 4c a5 2a 69 82 ff 96 41 b6 3b 04 6d 58 75 cc 16 fb 9c ef 3f 46 4c 34 fd 7b a7 ef 2e dc d4 69 b6 34 c8 de 4f fd ce 1b 3f 31 c2 34 42 65 38 64 93 4b 5a d0 53 18 29 00 3c f7 b7 95 b1 28 27 08 77 a9 db f5 d1 43 65 a5 27 5d 25 3a a9 c1 18 f8 1c 2c 8a 50 57 c6 3e c7 4f 2e ce e6 53 bf cb 0d 5b 73 b9 83 3e d1 75 e7 a9 3e bb ee ee d5 b2 76 b6 3a 5e fb ea 9e f5 92 26 cb d6 0b 46 51 04 b4 Data Ascii: UAZH{^RXAuE=P)arw}ySj8;v0?fClir{P?my_d@C>n416GZ8LiA;mXu?FL4{.i4O?14Be8dKZS)<('wCe']%:,PW>O.S[s>u>v:^&FQ
2024-04-23 20:34:25 UTC	767	IN	Data Raw: 93 36 c9 51 35 31 2c 83 00 55 98 54 aa 7b 3f 08 9c 42 76 cb bb df 0d 32 bc f7 65 8d 26 63 ff c9 7b 84 bc 4c f4 7f 4e 0c ec 4e 09 1d f9 f7 ef 88 3a ed 43 36 6d 36 19 b0 84 69 d6 b7 1f 13 c5 86 34 35 d3 3c 9a 99 13 b6 86 16 44 ef d5 11 43 7c 67 86 f8 24 ab 0c e6 c3 83 dc 12 7b 10 f8 b8 6f a2 ec f4 6e 39 6b 83 f8 af f0 56 08 95 5e 89 f1 4a 48 87 77 b6 58 0f 15 38 b6 86 95 76 65 33 52 bf 05 43 58 85 59 34 27 11 68 ff 0c f2 41 44 eb 29 b0 31 8c f6 cc ba cc 28 ac 85 aa 12 d0 fe 79 24 a1 7a 1f 22 9f 34 03 c5 42 d2 b5 88 96 d6 af 03 b1 b8 10 fb bf 36 72 4b d6 d2 94 4f c0 56 08 32 bf 68 fe ff d7 33 a4 93 e8 dc 62 49 19 b9 be bb b1 3d 14 0c 47 ff 61 3c 54 b0 de 21 d7 d4 09 a4 d7 90 87 32 2a 3d c8 b6 af 0c a1 c7 af 50 27 ff ec 73 83 bd d7 8f 27 59 d4 c6 d2 a5 9b 6c Data Ascii: 6Q51,UT{?Bv2e&c{LNN:C6m6i45<DC\|g${on9kV^JHwX8ve3RCXY4'hAD)1(y$z"4B6rKOV2h3bI=Ga<T!2*=P's'Yl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	50302	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:24 UTC	950	OUT	GET /999.eb89264becfdfe17.js HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://reportfraud.ftc.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
2024-04-23 20:34:25 UTC	396	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:26 GMT Cache-Control: no-value Content-Encoding: br Last-Modified: Tue, 19 Mar 2024 13:54:36 GMT Content-Type: application/javascript Content-Length: 6995 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:25 UTC	6995	IN	Data Raw: 1b 05 9b 23 11 c2 c6 01 40 48 1f 42 44 15 6b 3b 00 f5 50 60 13 99 2e d8 5f 85 d9 18 05 b6 96 22 c6 36 f6 e6 94 2d 1b d1 1c 42 d8 ba a3 bb 2f 16 9f 83 79 89 8d 44 cd 25 98 5f 43 b6 4e 54 9e f9 93 6f c9 cd 1d ce 6d 7b cf 23 72 86 4b bf 4c 47 68 72 ca f3 ac a5 f5 fa 92 9a 15 ea 96 a0 cd 95 0b 89 ec d8 90 64 c9 65 8f 71 ac 8d 3d 57 1b ca 4e 6b 30 c5 d2 8d 8f 1c 8f df 67 2d 3f 57 fe e9 ba 72 d0 d2 d3 aa ab 1a df e4 34 41 9a 75 88 0c 01 fe 04 26 a6 99 af 2f 92 57 93 d3 5a bd 36 22 a0 35 d6 14 46 07 90 6e 10 aa 9a d3 de 64 13 38 0b 9f 31 16 98 35 d3 0f a3 4b fd 5e 64 a6 0f db 5d 41 7e 26 c8 09 5e 85 a4 f4 1c 0a 99 cc ff 7f a9 bd 54 5e fb a7 a2 d2 61 50 c2 02 e0 6a 46 33 fe b5 2a 85 06 c0 78 ef 7d f7 4d 76 46 96 d7 2a d6 b1 65 ff 62 ff aa ed ed cd bc 79 cf b6 64 Data Ascii: #@HBDk;P`._"6-B/yD%_CNTom{#rKLGhrdeq=WNk0g-?Wr4Au&/WZ6"5Fnd815K^d]A~&^T^aPjF3x}MvFebyd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	50303	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:24 UTC	950	OUT	GET /640.b1edbf4b35c3951b.js HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://reportfraud.ftc.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
2024-04-23 20:34:25 UTC	396	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:26 GMT Cache-Control: no-value Content-Encoding: br Last-Modified: Tue, 19 Mar 2024 13:54:36 GMT Content-Type: application/javascript Content-Length: 5745 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:25 UTC	5745	IN	Data Raw: 1b 3b 5f 23 03 c1 c6 01 d6 e0 98 05 50 ab 02 bb e1 f6 03 04 4b a8 b5 a2 a0 3a 83 85 ee a4 94 74 1f 57 7d 7b 55 a4 0f b5 f3 8b b5 d5 19 25 97 f1 61 b7 69 6b 3d ab 23 d2 89 b4 22 80 8d 90 64 76 53 35 a7 d5 87 ed 93 e0 23 10 ac 63 4a 2d ac b6 cf a2 c8 93 f9 7d d8 b6 bf f7 75 fa f5 4b ae 29 4f 7a c8 17 9b d9 9a 2a 0b 92 4d c8 d8 64 09 fb 0c 62 c8 ae 65 c3 86 70 4e 52 b6 44 14 02 27 92 26 5d 56 c6 94 ac db fc f3 76 d0 ff 5a a8 b2 97 88 b0 03 c3 25 7a 3f 0b d1 ad d0 0b 75 a5 e6 82 ff 7d ba 72 54 57 ff 8c 05 90 10 c8 75 9d af 6e 41 7e fe df b2 52 29 77 ef 66 c5 39 b2 6f 91 b8 23 c0 97 ec 7c 4f cc 09 1a fb f1 9d fa bf 7e 59 d5 61 bc bd b3 73 d2 ec cc 85 b9 53 08 b9 52 f7 f6 84 4b 29 42 87 8c 42 46 0a d0 04 a4 00 90 19 1c 19 dd 19 0a d9 cc 00 9a da cd b9 42 56 f6 Data Ascii: ;_#PK:tW}{U%aik=#"dvS5#cJ-}uK)Oz*MdbepNRD'&]VvZ%z?u}rTWunA~R)wf9o#\|O~YasSRK)BBFBV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	50304	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:25 UTC	950	OUT	GET /265.dae6f19b57ed9aa7.js HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://reportfraud.ftc.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
2024-04-23 20:34:25 UTC	396	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:26 GMT Cache-Control: no-value Content-Encoding: br Last-Modified: Tue, 19 Mar 2024 13:54:36 GMT Content-Type: application/javascript Content-Length: 9562 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:25 UTC	9562	IN	Data Raw: 1b b7 a4 a2 28 13 b3 f1 88 6a 56 b3 84 45 81 6d cc 1e f4 87 a0 a1 ee f0 d8 f1 72 0d d9 ec 42 b1 db 6a b0 35 47 68 ec 93 dc fb bd 9a 7d 7d 6b d2 50 2a 24 b9 eb 76 8a d7 db ad 14 a5 6b df d3 b1 68 30 e3 02 0a 33 72 89 ee f0 a7 be 5f bf d6 c5 55 ee cc 81 45 92 0e cb 56 94 fd f6 00 9c 50 23 c7 64 17 e9 4d 44 e1 7b d2 b5 aa 3d 52 0c cb f9 6c 10 7b 78 d1 5d eb c0 62 96 e0 df d2 d4 7c bd d3 16 1e ec 90 51 4a a3 35 66 7a 7d f1 04 c4 85 d7 ab 68 a6 66 56 6d c4 b9 61 bc d6 ca 22 fd 9d 0d 1c 8d a2 ce a4 fa 74 ff 9b 8e 44 fe 7f 53 ed 6d 67 24 7e 87 14 aa 8e 32 e8 94 6b 97 2e 7a e1 a5 6b 0d 80 c1 11 00 01 4c a0 02 b5 dc 94 f9 77 f3 7d f7 be 07 61 de 0c f8 41 0c f4 17 8c 5f 9f da dd b3 cb bf 3e 56 74 0a 74 4e 75 6e ea 90 3b 97 65 0a d5 96 2e 6a 57 2e ba d2 60 e9 16 5f Data Ascii: (jVEmrBj5Gh}}kP*$vkh03r_UEVP#dMD{=Rl{x]b\|QJ5fz}hfVma"tDSmg$~2k.zkLw}aA_>VttNun;e.jW.`_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	50306	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:25 UTC	950	OUT	GET /510.30c87c878b76878e.js HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://reportfraud.ftc.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
2024-04-23 20:34:25 UTC	396	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:26 GMT Cache-Control: no-value Content-Encoding: br Last-Modified: Tue, 19 Mar 2024 13:54:36 GMT Content-Type: application/javascript Content-Length: 9258 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:25 UTC	9258	IN	Data Raw: 5b 85 41 31 0b 81 8d 03 80 b4 f1 e2 11 c9 48 ab 30 8a 0a 52 29 a0 7a 3b 6e 0c 11 f0 a0 55 ed 70 0a 8d 26 0f 22 97 2b 0b 56 b1 ce 44 d9 68 6d c4 68 97 b6 7f 30 e2 d0 c6 1d 1a 93 5d 79 8b 3f fa cb 88 e1 bc 62 8b b3 2d 2e ae 4f a5 f1 d1 33 ce a8 be 1c 18 ae 7d 08 d6 c2 49 70 87 86 8f d0 d8 27 b9 97 4d f3 f5 f5 e9 52 a4 99 15 83 28 75 74 29 5c 7a c5 4d 46 6b 77 20 20 dc 79 fc 3e 31 9b 56 45 29 b5 f9 de f7 64 21 08 0f 60 a4 f6 54 4b 30 4f 41 7e 9a aa da 36 c6 cb 2a b7 0e e9 5b 3b c7 44 4c 37 3e 94 30 05 be 27 97 65 94 92 ee 41 b4 b6 b3 68 af 07 94 ba 6b 40 2a 19 fa cf e5 cf 5f a5 73 9b 6c 32 02 1e f7 08 59 e3 fe 01 b2 15 75 07 e2 f9 b6 08 df 9f 56 56 2d e5 e6 bc 4a 2e 63 06 e9 c3 48 02 2f 7e 29 fa 54 81 2a 5d 52 94 aa 2e fb 83 bc 41 63 18 be c5 42 6b 17 2e 27 Data Ascii: [A1H0R)z;nUp&"+VDhmh0]y?b-.O3}Ip'MR(ut)\zMFkw y>1VE)d!`TK0OA~6[;DL7>0'eAhk@_sl2YuVV-J.cH/~)T*]R.AcBk.'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	50310	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:25 UTC	950	OUT	GET /551.2647647041282ed3.js HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://reportfraud.ftc.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
2024-04-23 20:34:25 UTC	397	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:26 GMT Cache-Control: no-value Content-Encoding: br Last-Modified: Tue, 19 Mar 2024 13:54:36 GMT Content-Type: application/javascript Content-Length: 18240 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:25 UTC	8494	IN	Data Raw: 5b 82 2c 31 12 21 94 bb aa 60 da 19 fd 4f f3 51 04 b6 4b 84 d2 0e ff 1b 9a 70 c7 c3 c6 01 e0 79 f7 7b 10 ea ad 40 0b b9 6b ab f6 c0 86 31 26 34 96 5a 5c 5a ad c6 52 27 87 c4 d4 9b 73 2d 2b 37 4f f4 59 38 1a 5e ca a7 59 dc e3 7f c6 2b db f2 36 7b e5 e3 62 78 56 51 6b 09 87 e8 d0 ff 23 cc 8d c5 e7 9a 13 ce c0 b6 b1 7d 92 c9 64 ff cf 9f 66 5f bf f8 e5 0a 3b c3 16 51 b6 fc 9d 0d d8 1d b0 91 2b 37 a7 25 42 60 36 20 39 92 70 89 27 77 ef ab ab af 5f 23 b8 ac f4 18 29 ed e0 c0 59 c1 85 da 42 6b 8a 35 4e 0c b6 e5 b5 c6 29 4b 6c 61 2e 7d 7d 1b 05 55 f4 cc ae 28 c0 e4 10 ea 9a b3 02 04 f5 b9 57 11 75 49 d1 ce 5f 77 26 b9 01 14 80 f2 26 61 61 06 44 39 78 de df 0f 55 b6 1b df e4 34 b9 40 af 20 cc 84 5e d5 10 fc b7 e9 e2 3f 65 2f fe 5f 02 33 0c c0 3a d7 6d b7 42 8b d7 Data Ascii: [,1!`OQKpy{@k1&4Z\ZR's-+7OY8^Y+6{bxVQk#}df_;Q+7%B`6 9p'w_#)YBk5N)Kla.}}U(WuI_w&&aaD9xU4@ ^?e/_3:mB
2024-04-23 20:34:25 UTC	4811	IN	Data Raw: 64 5f 8a 46 0f 63 46 ba e3 8b 03 2d a6 f4 74 f8 60 2f ff 19 f9 d1 7f dc 6f dd a6 f7 6f 51 fb 96 df cc d9 01 db cd 99 01 6c e7 37 73 76 20 ee e6 4d ae fd 33 b0 ed e0 ff a5 5f db 2b a1 f5 f4 2a f9 c3 77 f9 9a df 0e 23 00 26 48 fe 7d 27 68 c9 2f e7 be 45 c3 14 ce f7 40 08 a6 74 04 60 f5 5f 90 64 2e ed c8 97 d8 c6 fb 1e 2b a9 31 c3 59 23 0a ee 76 0b 59 88 a4 38 34 cc f0 28 f4 54 48 1d 95 1c c4 fb 20 47 f6 dc aa 91 52 1e 63 d1 b7 8c c1 96 5c 68 22 53 2a 60 ec 63 98 91 d5 2c be 1c 59 75 63 ae 62 22 11 7f 7a a8 a3 ac c2 f6 f4 c6 ea cd ec 25 db e6 98 bc b6 54 0b 14 51 51 b0 22 89 54 a2 5f ab 90 55 bb 2f f5 17 75 23 cc cd 94 61 20 cd 1d f8 45 5f bf ee aa 4a 63 84 31 78 9d 3c 12 f7 46 8c 44 4b 5d 9f c4 73 5e e7 85 8c ed eb e9 b3 cf 2a 84 d0 a6 aa d4 18 bf 79 69 d7 Data Ascii: d_FcF-t`/ooQl7sv M3_+w#&H}'h/E@t`_d.+1Y#vY84(TH GRc\h"S`c,Yucb"z%TQQ"T_U/u#a E_Jc1x<FDK]s^*yi
2024-04-23 20:34:25 UTC	4935	IN	Data Raw: 45 7f c9 7a 1f e1 9c 21 93 7d 39 34 75 7b 9b e9 27 22 19 d1 33 ee ec d4 10 7c b8 3c a7 56 c3 47 f3 07 9c f2 48 99 fd 77 44 e1 f6 71 90 7d af 5f 20 4e 4b c2 81 ce 77 7e 82 f6 c6 c0 98 ba 7d 16 35 4b e0 26 8b 84 7b 4a 81 7a 73 e4 29 20 a4 18 3a 07 6e 18 9b 78 34 bf a5 cf e9 0b 16 70 a9 99 21 f6 85 e1 68 ba 7e d5 55 36 4d ad 97 aa a9 93 e8 48 e8 0e 9a d1 72 3b f9 37 e5 5b d3 eb 6d b7 ea 47 19 ca 2a 51 0a 77 f3 16 f8 0c b1 ff d4 a5 2a d2 64 a7 55 e5 d1 65 28 f2 b9 56 f3 86 b6 89 71 df 00 a4 7d 16 01 75 f4 f8 1a d8 67 1a 67 b3 4e 79 cf 04 27 ab 9d 93 05 b2 9e f8 d5 0c 7b 55 b2 52 82 29 4d b6 53 96 43 e6 7d 50 97 94 7b 07 1a b3 44 79 80 14 61 d4 02 94 77 a4 81 16 b7 a3 a3 22 b7 c4 22 b0 09 88 4f da ef f9 2a c4 ae 23 8d 60 a0 a7 6b 23 fb ec 3b fc d0 68 94 85 77 Data Ascii: Ez!}94u{'"3\|<VGHwDq}_ NKw~}5K&{Jzs) :nx4p!h~U6MHr;7[mGQwdUe(Vq}uggNy'{UR)MSC}P{Dyaw""O*#`k#;hw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	50312	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:25 UTC	950	OUT	GET /556.ad6a057fee24becb.js HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://reportfraud.ftc.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
2024-04-23 20:34:25 UTC	397	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:26 GMT Cache-Control: no-value Content-Encoding: br Last-Modified: Tue, 19 Mar 2024 13:54:36 GMT Content-Type: application/javascript Content-Length: 95804 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:25 UTC	10531	IN	Data Raw: 5b 65 b4 78 02 37 77 10 b2 95 de 2c 49 d7 4f cc d4 eb bd c0 06 32 84 69 d6 fe af 11 de 6f 80 24 94 7b 99 00 35 ef ef 4b 02 1b b7 0d fe ab 2f 78 41 cb 04 54 55 d5 cc a3 63 0c 37 15 10 cd ba fa aa ea 8f 11 52 35 c9 30 2f 54 2b 5b 40 d8 16 69 b6 88 63 c5 5a 51 15 aa 0d 62 0a 89 2c d8 fc 83 da 83 12 12 c8 08 4c c8 77 c7 01 c7 82 15 42 9d 3a f7 a8 d9 f7 93 fb 0c 5e bb e3 66 2f 31 f6 bc 36 af 8d a4 c3 1a 5e d7 1c 65 c8 87 d2 23 a2 bc cd ec d8 0b 5b c9 d0 b9 78 de 45 0b e7 f3 74 33 d3 45 b5 99 26 19 09 07 67 d2 40 89 90 b8 8a 55 17 18 d6 d0 8a 13 9d 45 2b 17 14 dc 70 a7 d6 0a e4 56 64 e9 4d 61 51 4e bd 92 6e c1 87 85 7f 33 ea 43 0e 87 40 9c 34 c5 b1 5f f4 78 50 2e c7 7e d3 7c a3 e4 a5 2d e0 41 4f f4 a6 fd a7 cd c1 91 5c f0 87 40 92 0d 3e 66 70 70 63 1b 81 33 f4 Data Ascii: [ex7w,IO2io${5K/xATUc7R50/T+[@icZQb,LwB:^f/16^e#[xEt3E&g@UE+pVdMaQNn3C@4_xP.~\|-AO\@>fppc3
2024-04-23 20:34:25 UTC	1289	IN	Data Raw: c7 92 4c ff dc fb 23 22 68 2d e9 1c 68 ec 4a 65 93 f2 7e 62 6d 64 ab 3d d4 0d 3d 04 a9 22 29 91 88 6f f4 74 15 29 72 5c e6 4d 7b e8 c1 1c 0c 4f 4e 49 41 04 56 8d 26 94 82 95 e0 d9 a9 b1 3b c3 8a bc 62 65 44 4c 91 55 58 a2 19 58 1f 13 20 1f d7 81 b8 53 d5 7d 28 ef 3d 27 ce 72 b0 fb c4 cd d7 e0 d5 b3 4a 73 21 34 1e 60 35 f6 0f 75 b7 67 94 16 98 88 3b 49 93 ca df 18 cf 34 e3 bf 6d 17 43 9a 1d 80 12 c5 45 44 7b 12 1e ef a6 b8 65 62 ef a8 10 3a 03 10 5a b6 a3 b6 f8 f5 a1 58 fa 32 e6 13 af 84 f8 91 0e 10 5c b5 35 1d df 27 e2 71 e0 7d 92 1b 0e 07 06 2c a8 f8 4f 90 4b 7e 98 da 35 b8 33 58 53 ec be 40 89 9b 82 7d 70 80 b0 a0 ea be 06 55 69 1a 07 07 5b 9a 97 e8 8a 2f 10 c6 ce c5 a6 c6 19 ab cf 7b 78 c9 2d 42 aa 31 35 c0 c3 c1 04 5e b1 86 64 9f a9 c4 c1 eb bf ee ed Data Ascii: L#"h-hJe~bmd==")ot)r\M{ONIAV&;beDLUXX S}(='rJs!4`5ug;I4mCED{eb:ZX2\5'q},OK~53XS@}pUi[/{x-B15^d
2024-04-23 20:34:25 UTC	5156	IN	Data Raw: 89 9b f7 7d fb 18 f7 59 84 26 94 51 9e 1a 80 c1 0c 02 d8 29 10 aa eb 54 b8 b1 8c ae 88 e7 ca 85 12 6e d4 56 75 b4 68 43 10 78 ec 92 02 26 56 72 1c 0c 09 ce 54 b1 1e 7c c4 84 65 27 61 0b 2c 37 3a 60 4a 02 1d 2c 60 91 72 a7 d0 8d 6b ea b8 68 f4 13 10 11 73 e0 5f 40 ad 8e bf b8 44 0f 6e 6f 8a 9a b6 c0 77 2b 0c 36 7f e3 e9 fa a2 72 63 94 1f 05 10 26 82 7c e0 6f 91 59 e7 9f 5d aa f7 ca 73 ce 74 3b eb c3 5b 1f 98 d2 99 f6 74 7e 2f 41 ab b5 79 43 64 3e de cf 3f de 58 34 e7 36 21 88 29 13 f4 01 eb 43 e5 03 69 c7 0a 4d 86 33 54 3c 6d a6 7c 68 06 27 0a e6 d1 f4 1a 40 7e a5 f1 52 09 8b 7b c8 dd 3e 99 64 21 4e 22 aa a9 6f d3 6b 10 df 0e b2 1a 0f cc ac 56 39 66 d2 c3 de 45 99 0f 62 98 1c ba e1 66 dd 0d bb 2f de c1 a9 e2 f9 34 6a bf f2 bc bb f4 50 0b 6d c4 53 c1 bd fe Data Ascii: }Y&Q)TnVuhCx&VrT\|e'a,7:`J,`rkhs_@Dnow+6rc&\|oY]st;[t~/AyCd>?X46!)CiM3T<m\|h'@~R{>d!N"okV9fEbf/4jPmS
2024-04-23 20:34:25 UTC	16384	IN	Data Raw: 5d bc cc 94 b7 8b 5f 7f eb 77 e4 af eb fd ff f0 2d 50 4d 2d 92 d7 e9 fb 6b fe a8 94 ff a9 47 bd 66 db 2f 88 19 4c 92 2f 38 d4 dd bd f1 c0 c3 df c2 95 10 91 ba 42 c1 d2 e9 64 ce 35 1f 36 58 c3 c6 4e 71 bd 79 5c 8b f5 fc 23 db b4 e0 83 85 4c c0 7d 1f b8 93 d2 e4 98 1e 37 88 26 40 18 b2 79 13 0a 31 9d 83 1f f6 97 de fd a1 29 c4 d3 71 f2 02 fa a4 7e 6b c8 3b 0f ed 44 b8 72 bd 18 eb e5 c3 2d 91 34 e8 d6 20 7b 5b d5 0c 64 02 59 d7 8f 58 ec 90 6a 4e 23 b5 21 01 1b d0 7a ae e3 26 56 88 fb 22 77 cc 5f a8 7a 31 29 ac 58 d6 c5 77 31 a3 9d 40 82 f6 63 57 65 92 c0 3d 20 ab 62 88 46 e6 35 00 ee 21 c2 57 d7 1c 12 b1 38 c2 7d 86 c5 40 18 60 d8 bf 88 80 ac 80 a0 ad 8d 5b 5a 0c 64 c7 b3 88 5d af cc 5e 66 85 52 e3 b7 8a bd 4a be e3 8d bc fc 0c 92 f5 48 0f 0c 5a 1a 01 85 91 Data Ascii: ]_w-PM-kGf/L/8Bd56XNqy\#L}7&@y1)q~k;Dr-4 {[dYXjN#!z&V"w_z1)Xw1@cWe= bF5!W8}@`[Zd]^fRJHZ
2024-04-23 20:34:25 UTC	1007	IN	Data Raw: 32 92 fd 5e a8 c3 71 c4 f2 c9 86 5c ce 37 59 51 96 dc 48 c4 40 9b 52 7a 13 a7 35 ba 57 8c bd 81 08 9e 55 0d 2b ff 6b 0b 29 5f 7d b8 9b fb fb cd bf a0 89 9b 0a e8 23 a7 9c c3 5b 79 10 b8 8e c2 9e 1e 56 da 3e aa c7 e3 9b f4 1a 42 3f e6 5b 66 79 f4 35 ef df fc c5 4a ff df fc b5 64 66 2a b7 f0 7c 2d 24 8f 5d 17 96 cc 90 80 69 15 8e 43 94 88 c0 83 4a 27 4d de 1f d9 32 ad bd 2b b3 a4 97 d9 3e 15 34 60 f8 07 b9 38 d0 ca bc 1f 0c 92 1d 4a a1 a3 c8 be 6e 3d 6d f4 e1 66 54 5e 85 ad d8 de 05 0e 7f 68 fc c4 03 42 da d1 f1 b5 b6 3a b7 16 2e 3b c3 07 3c 85 73 6e 7b 6f 5c f6 7d 59 ee 1c 14 cd 48 78 da 25 a3 44 9f 1a 62 2d d8 cf 10 38 45 f0 ac 46 cb 2f 37 63 02 26 37 38 a3 98 72 31 24 96 4b 3d 4e 86 99 5b 59 3e 31 60 46 d4 74 4c fe 82 4c 98 8e a1 33 dc 41 65 8d 9b 7a c2 Data Ascii: 2^q\7YQH@Rz5WU+k)_}#[yV>B?[fy5Jdf*\|-$]iCJ'M2+>4`8Jn=mfT^hB:.;<sn{o\}YHx%Db-8EF/7c&78r1$K=N[Y>1`FtLL3Aez
2024-04-23 20:34:26 UTC	16384	IN	Data Raw: 03 73 78 ad 31 6c 56 4f 33 6e ee 6d a7 7a b5 5a 44 7c 4a e1 ad 23 d2 13 0f 82 3b 82 2a 5c be c5 84 44 cd a1 18 fc c0 9d 15 8c 34 23 ac 36 e1 ad 35 f0 72 ed 34 20 84 c9 9e 7f 1c 7c d2 a5 ea 03 0f c1 57 da 3b 94 5b bd df 69 62 16 0d 77 54 e7 9b 2e 65 1d 5d 84 fe 9b de 7e 20 d6 06 38 0c 96 ea f9 7f 52 9e 5c e1 48 f7 2c f2 8d 23 a3 81 7c a2 e9 5d 32 f0 42 5b 27 97 9b 99 4b dd 88 dc 04 62 7a ee 41 3a e0 1d e4 62 96 c9 4f 5c 73 f2 f3 54 8f 1c ac 4b bf ce 5f fe 21 5f 1e c4 10 6c cb d0 25 ae 5c d8 0a e2 3c 80 9b 3e 71 ef c4 7d 4f 32 4b 21 e2 66 90 a7 e9 80 8c 72 f3 ed ce 4e 6e d9 f0 f6 12 68 09 fd 70 7a f8 32 67 7e 3e 2e 20 72 66 18 d1 e2 6b 25 6b 73 dd bf ac 91 7f e2 cd 49 09 ae c8 ae ba 07 e8 76 94 c6 d0 63 79 de 41 eb ba fa ad da ac 73 c4 a0 73 2f 30 ea 40 08 Data Ascii: sx1lVO3nmzZD\|J#;*\D4#65r4 \|W;[ibwT.e]~ 8R\H,#\|]2B['KbzA:bO\sTK_!_l%\<>q}O2K!frNnhpz2g~>. rfk%ksIvcyAss/0@
2024-04-23 20:34:26 UTC	8762	IN	Data Raw: 35 aa 04 8a c3 c4 1b d9 43 5e c7 d1 58 a4 4c 91 70 ab 55 3b 50 c8 af c3 8e ad 2e 6c e9 3f 7d b7 51 fd f2 ef 50 c2 a5 0f de e4 a6 2d 14 fc 69 7f 71 0e e5 41 66 ce 4a 44 61 a0 e2 90 0c 5e 75 2c fa d9 7b 4b f4 70 0c 8c 45 8c 5f da 65 08 58 dc c4 0c ce 8a f4 c3 a4 65 ae 5a 78 48 b5 5f d0 e7 24 ce ed 06 fc 9f d3 9c 55 9a f5 7c 3e 07 28 57 13 0a 74 dc c2 ac 17 5e 41 81 e8 16 16 7d 2d 32 19 2e 1a f8 80 f9 f0 9f a1 c1 e7 b8 cf f2 5f c5 f3 80 26 13 e9 ae 52 2d 88 78 81 0c 64 df 2a b4 78 da 64 ca 61 11 ed 70 ff 06 6d 1a 62 e2 93 ff 0c 13 5b 7d 09 7b c2 d8 e6 c4 49 2c 2b 46 69 d5 09 ff af 5a 99 a6 b7 81 bb 07 59 08 ef 36 6f f7 36 b6 72 de 62 05 20 fa 8c 94 53 64 7c b9 a6 7f ea 11 fb 97 c5 59 5d 5f 02 1d f4 a0 c7 29 15 0e 67 43 13 36 f9 b5 cf 60 63 af 57 ad 43 d7 31 Data Ascii: 5C^XLpU;P.l?}QP-iqAfJDa^u,{KpE_eXeZxH_$U\|>(Wt^A}-2._&R-xd*xdapmb[}{I,+FiZY6o6rb Sd\|Y]_)gC6`cWC1
2024-04-23 20:34:26 UTC	16384	IN	Data Raw: 76 69 d7 d9 98 a0 87 69 fa cc b8 a6 af 8c fd b4 b5 da b0 52 1d 57 78 af 12 ad 59 f5 b8 0c 97 3e 75 c3 0a 91 16 ac fa bc 2e 2e 3b 09 00 30 e1 b0 b6 52 23 a7 99 ed 7a d9 69 02 23 01 c5 c8 54 fe 90 e0 4e f7 37 63 2d 13 f1 3a f8 a0 b6 43 82 d1 a3 75 e3 1f ea 43 48 30 92 27 12 2c ab 55 1f 33 43 f0 d3 19 c1 d3 12 af 00 31 3c 08 7d 66 b4 c5 bc 84 97 ac 5c 2b e4 7b 6e 68 38 19 e0 43 ca 8e 56 6b 99 8d c9 74 39 c4 ef 5d b4 56 ec 35 a4 bb fa 3d ef c2 3b 3d c6 42 3f ed 2e 67 b5 38 bc d7 51 67 95 67 b7 03 73 87 d4 aa af 00 cf 35 32 ea 0a 56 4c a6 08 b6 1d 8e 09 21 8f 95 5a 08 53 37 11 28 1b 1b 5d 31 a9 a7 d0 23 6f 5f a7 a5 7f 69 5e f1 28 8d cf a6 c4 d8 0f 74 07 49 97 33 f4 e0 a9 c5 8c 45 c0 2d 7e ed 65 38 87 72 2e f3 84 4d 52 b8 d2 1a e0 c0 f1 5d eb 95 64 b1 8a 63 0b Data Ascii: viiRWxY>u..;0R#zi#TN7c-:CuCH0',U3C1<}f\+{nh8CVkt9]V5=;=B?.g8Qggs52VL!ZS7(]1#o_i^(tI3E-~e8r.MR]dc
2024-04-23 20:34:26 UTC	10685	IN	Data Raw: c8 d8 b8 87 ab c6 aa e5 ac 4d 38 bc 1c bb c2 80 e9 76 53 e5 7a 72 27 61 e6 05 3f 94 f1 61 b6 3f e1 14 2c c0 51 21 99 c9 cd ef 04 b7 cb a5 fd fb 17 cc d9 88 d0 dc 5a 68 e0 92 2e 00 0c 54 50 76 7c 5a 80 f5 6f e8 60 15 34 57 1d d4 5b 0d 7b 08 24 dd bd 2d a2 87 5f ce 05 5e 6b 8a 3c ec 55 5d 93 d0 00 5c 4e d7 48 27 c4 38 31 7a 4c cc 42 c8 e8 27 36 94 13 14 74 d8 8e dd aa c8 1f d6 10 3d 64 8b fc d0 4b ba 7d 61 dc 69 d2 8d 28 6e de dd 1d 50 9c 6f f5 d3 6e 1e 59 23 6e cc d4 3d 80 9f 29 60 62 c7 73 dd 02 79 55 63 32 ce b8 f5 40 10 df 75 d0 c1 34 5e a5 c1 a8 5d 30 0b 55 57 47 46 d8 d9 cb 98 e4 b9 39 4e 41 12 0b 2b 9f 63 01 19 fd 16 06 f1 2c f5 67 28 75 34 66 8f b9 dd 96 97 55 f8 62 85 af a1 d5 b2 ba e7 f4 35 8f 3d 8b c8 c0 10 9c c4 b4 cb 1c ed 5f 93 e3 e5 b6 d7 6a Data Ascii: M8vSzr'a?a?,Q!Zh.TPv\|Zo`4W[{$-_^k<U]\NH'81zLB'6t=dK}ai(nPonY#n=)`bsyUc2@u4^]0UWGF9NA+c,g(u4fUb5=_j
2024-04-23 20:34:26 UTC	9023	IN	Data Raw: 4b ca be a5 56 26 c2 4c 1b e7 ef 35 62 cd 8c 7b 69 17 4c 62 70 76 b7 97 c8 6f 09 50 0f dd 56 cd 72 07 10 1a e6 23 ce d5 ff a2 76 1e 7d ea fd 28 62 7f ce 45 ca f5 e0 ae c4 ad 02 2a 88 fb 4a 36 4d c8 6e 28 7e bf 71 1e dd bb cd 19 4b 92 0d 48 47 7d e1 00 12 8f 7b d5 34 bb 9d 14 da b9 08 fa 1c 64 63 44 24 56 e4 1a 45 04 05 ad ab 50 f1 6f fc 36 fe 7d 1c 53 15 b5 74 5e 3a a9 5d f3 0f cb 20 95 34 9a c1 b0 7e b3 77 e8 80 da d7 78 a8 ab c7 48 4f 78 97 5c 66 88 0f 4c 2c 11 43 ff b4 bf f1 e9 54 52 4e d6 57 fe 77 07 b5 cc 25 35 1e a7 18 c1 46 33 6b 3c 66 52 8a 14 83 46 b7 e6 5f 0a 59 5f ec a1 26 4b 75 d0 67 cb 27 c4 c6 0c 86 30 3c 51 cc 48 2d 13 38 2f b0 c0 86 5e d1 ef 58 ab de d1 23 bd 99 f7 93 a8 c6 2b 6c 9c 6d 89 59 54 68 09 7f 61 48 b9 39 34 bd d7 75 9e df 6b 8c Data Ascii: KV&L5b{iLbpvoPVr#v}(bE*J6Mn(~qKHG}{4dcD$VEPo6}St^:] 4~wxHOx\fL,CTRNWw%5F3k<fRF_Y_&Kug'0<QH-8/^X#+lmYThaH94uk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	50311	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:25 UTC	953	OUT	GET /common.86b9d51e0bdd16a1.js HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://reportfraud.ftc.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
2024-04-23 20:34:25 UTC	396	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:26 GMT Cache-Control: no-value Content-Encoding: br Last-Modified: Tue, 19 Mar 2024 13:54:36 GMT Content-Type: application/javascript Content-Length: 1837 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:25 UTC	1837	IN	Data Raw: 1b 2c 16 00 9c 05 76 cb c7 4f 6d c8 2e 15 d3 97 b9 b1 96 8a 88 14 28 97 4d ed f5 35 3b 37 8c 44 b9 91 9d eb 44 29 b5 53 16 2c 97 15 27 44 4b 80 4f df 6c 55 7d 84 91 ad f5 8e 7a d0 e3 9a 8e 58 5d f8 e4 68 a0 4f 17 7b a5 11 5c 3a 61 44 39 41 60 97 2a 79 f2 bb 8f 50 cd fb 3f 9d ba 4a ee bc 04 b7 8e 83 fd ef eb 64 be 17 9f 64 07 50 56 00 f8 9f ee d2 2a 25 c4 31 30 16 70 eb 34 67 1e fb 18 cd f6 95 2b 05 03 29 af e6 22 9b 7b f0 bd 1d 49 5d 47 b6 a7 35 cd 8b fa 86 f7 4c 5c 67 12 80 ad 02 92 87 88 bb 3f 3f ff fc 9c 97 5f e3 79 be ab a4 b3 d8 6d ee 5b 37 bd 52 e0 5d a1 7e c3 51 f5 6e 54 6a 81 19 dd 72 b6 cf 43 35 4a b9 86 6e e3 81 41 b9 dc 97 1a ba 9e bc f7 a9 d9 4d 03 78 8d 9a 09 8d 0c bd 74 68 d1 c6 6a 2b 7f 2e 1a 1a c8 30 12 ee f8 5d f0 f4 60 55 45 35 70 8c 54 Data Ascii: ,vOm.(M5;7DD)S,'DKOlU}zX]hO{\:aD9A`yP?JddPV%10p4g+)"{I]G5L\g??_ym[7R]~QnTjrC5JnAMxthj+.0]`UE5pT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	50313	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:25 UTC	950	OUT	GET /667.87de367fb3b518c9.js HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://reportfraud.ftc.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
2024-04-23 20:34:25 UTC	397	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:26 GMT Cache-Control: no-value Content-Encoding: br Last-Modified: Tue, 19 Mar 2024 13:54:36 GMT Content-Type: application/javascript Content-Length: 83156 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:25 UTC	11553	IN	Data Raw: 5b 79 d6 78 05 87 32 2c 08 53 f4 c9 75 8e 6d 4b f3 10 c8 25 28 56 77 c8 29 b1 03 fd a6 75 c8 d4 ce d1 be 8e c8 f1 59 ab b1 34 a8 3a b6 07 04 ef 4b 4d 65 eb 70 97 8c d5 ab 47 db 3e a2 aa aa aa 6b 92 89 8c d9 a5 75 97 34 2d 02 58 a4 a8 c0 d4 ed b7 ff 8f a0 5a 72 15 99 0c 95 ee cc 7e 90 2a c6 49 7b f0 c2 33 ea e8 79 22 68 5a a0 20 18 63 30 b8 51 61 a8 01 8a 8a ce 66 64 57 c1 1a b8 2e 7e 9e 98 91 41 6b d2 22 dd 97 d4 56 c2 a7 c0 0d 9a 88 15 09 5a 88 f3 dd 30 3c 58 2b ea 6d 26 36 35 cb 76 bb 8e 8c 6a e5 32 15 37 4c a9 8a 3d 61 67 63 ef 4d 14 39 b8 a2 a2 de 12 8e 9a 8b 9b b9 1a e3 1f de e1 c8 81 cf d0 45 ae 4f a1 03 31 e3 82 4e 6e 2d 78 c7 94 bc 3d cc 86 c7 49 5e 35 7a d1 68 9e d0 d1 b0 c5 1c e1 25 34 49 a2 93 16 30 41 45 52 15 ef af ef 50 de ba 8c d6 fb 9f 25 Data Ascii: [yx2,SumK%(Vw)uY4:KMepG>ku4-XZr~*I{3y"hZ c0QafdW.~Ak"VZ0<X+m&65vj27L=agcM9EO1Nn-x=I^5zh%4I0AERP%
2024-04-23 20:34:25 UTC	12890	IN	Data Raw: d1 d9 8c 61 89 cc a9 6a 1b 82 6c 59 76 40 50 d2 e7 75 99 ae 01 02 aa 46 14 d6 32 6c 5a a8 25 5d c8 0d 73 ca 0b 97 6f 4b ef 94 8b e2 cf 26 71 f2 10 8b a6 fd 06 c3 26 97 99 af 13 a1 85 c7 29 f2 bb 61 ad 35 7a 2c ef bd 78 f9 ec 36 a5 51 96 79 c6 94 47 d8 0f 40 3c 17 f2 d8 5b ef d8 91 51 2d 9d 7a ef e3 1f 63 8f 70 6d 44 6d b4 87 de 16 c4 23 6b c6 8b 55 8b 8d f8 a0 23 5b 2e e5 09 f3 19 ef 83 7e 30 e5 15 cb 5f d8 7e 1a 9e f7 0d 0c 3d d1 6e 6e ec 8c ac 37 09 5a eb a8 58 01 e6 c8 54 f0 87 4c 49 56 ec cd d8 1b d0 2e 0f e9 cd 48 7d b4 f9 26 88 bf 89 f1 f6 2c 9c 59 ee 6e e4 b4 18 c8 71 dd 41 52 62 5c d4 7a 21 a4 36 2e 86 66 fa a7 f6 58 aa 11 64 52 db 6f cd ac 16 f7 03 5e 4f 72 ae 9d a9 af df 4d 6f 70 69 4c 80 cf ae 08 cd 78 ef 5e a8 b1 69 87 45 7a ab 50 3f 06 92 26 Data Ascii: ajlYv@PuF2lZ%]soK&q&)a5z,x6QyG@<[Q-zcpmDm#kU#[.~0_~=nn7ZXTLIV.H}&,YnqARb\z!6.fXdRo^OrMopiLx^iEzP?&
2024-04-23 20:34:25 UTC	6445	IN	Data Raw: fe 90 08 1c 65 eb 24 0e 97 05 31 9b 0c 8c f0 60 af d2 c4 b6 c3 27 e5 06 ff 98 8d 20 58 8a 90 14 b9 76 44 fc 1b 4b 24 4e ce c7 19 25 92 b5 80 40 b9 54 67 cc 84 9a 70 6c 4b 34 45 08 5f 86 58 ba 8e 1d fd 71 42 0e 7e fa 0d c1 34 01 4e a9 7c 0f 5e f0 3e fa ed 48 4f 1e bd 74 ea 5a 31 53 8f 5e 70 5a e2 10 26 96 0a 16 e5 54 59 44 a8 69 51 49 b5 45 0e b5 2c b2 a8 4d e5 03 30 ba 88 6c 3a 6b 81 ae 99 e0 68 7e 1e 23 1e 6b 37 6a e0 21 da 5f e1 23 11 ba ee c4 6c 78 29 a1 f3 7b 2b 04 2c a9 76 3f 1c 60 c9 eb a9 1e 76 0e 8a ad 9d dc 06 82 ad b7 c8 34 a1 63 2a 40 25 d5 3c ae a3 b0 60 72 7b 62 85 9a 4b ec b2 e5 53 a4 be 47 0f 23 0c ad 2a 9d da 76 e8 51 46 f3 22 9d 35 bf eb b1 01 7a b6 a9 fc c3 ae 1c 64 a9 3c 2b 63 04 10 db 82 ac a9 61 ab ea 96 cb b5 d5 36 a6 13 57 3a 6e 43 Data Ascii: e$1`' XvDK$N%@TgplK4E_XqB~4N\|^>HOtZ1S^pZ&TYDiQIE,M0l:kh~#k7j!_#lx){+,v?`v4c@%<`r{bKSG#vQF"5zd<+ca6W:nC
2024-04-23 20:34:26 UTC	16384	IN	Data Raw: 37 25 0d b7 c1 5d 56 51 82 70 92 b1 4b a3 a8 4c f6 4e 7c 83 49 3c ea de 11 93 eb 13 ce c1 82 71 7d db 78 0e 14 1a ba f9 38 d8 0d 76 32 0a d5 25 df c6 bd aa e2 d2 3b 9a da 8b 1c a5 f0 41 3d c1 cf d5 ec 52 d2 2d c2 b4 88 05 f9 3a de f6 30 80 ea 2e ba 98 86 94 47 fc 40 e1 9e 34 ab 25 02 f3 3a 81 b0 7f 06 18 7a 7e 63 20 32 45 e1 d0 6b 90 67 0d 10 1b ca 57 ec 49 14 e6 11 67 d8 2b a1 98 46 8d 9b ce db e5 16 f8 36 2e ca a9 ef 8f 67 d3 e6 09 98 2b b1 e4 c4 80 1d e9 74 7c 45 ab 1c e6 73 60 4c 38 a4 ad 23 dd 94 5e 2f 66 a8 f0 f9 a6 64 ec 14 bf 59 14 2f df 76 20 90 ef ea 4e c6 6c 2e 8b 5d fb c6 46 04 26 b7 d3 07 e6 aa fd 2d c8 f3 95 aa 07 a7 f9 a6 33 35 b9 3b 37 53 d5 7d 67 d9 57 26 bf fa a9 02 75 b3 56 e3 f5 93 eb e0 3e 35 8a 75 3e 02 cf 65 3f e0 34 fc 25 14 e0 9e Data Ascii: 7%]VQpKLN\|I<q}x8v2%;A=R-:0.G@4%:z~c 2EkgWIg+F6.g+t\|Es`L8#^/fdY/v Nl.]F&-35;7S}gW&uV>5u>e?4%
2024-04-23 20:34:26 UTC	14552	IN	Data Raw: 5b 28 8a 7a 6a ad fc 51 1d 8b d7 fe f7 71 3e 2e 05 e1 af e0 59 90 68 26 42 ff f7 02 5b 38 85 c4 56 b4 4c 84 e3 49 10 e3 11 6d 5e 11 0a a5 20 eb 22 8e b6 f5 a0 85 74 f9 50 92 c2 c6 5f 1a 33 52 e4 9a 61 d1 8b 63 28 b9 01 c4 ba 5c ad 1f 94 81 db 3e 15 73 11 f2 a4 73 41 61 0f 7f 95 af 8b a0 60 66 d3 7d 97 71 5f 00 dd 8c 8d fc 38 3a 9a df 0c d3 a7 2e df 84 3a 37 e2 f8 bd fd 93 78 12 85 9a 68 00 9e 1c fc 5a 76 10 a0 fb ad 87 b9 5a 99 a5 40 84 96 6c f7 5d 15 c0 d3 ce 6d 23 0f 9b 89 77 c8 73 c2 0d a0 59 cf 53 9e d4 bd d3 b3 0a fc 2b e5 b8 d3 6c 18 1e 0f fa f2 41 c5 fa 13 9d 86 22 ab 53 33 d5 11 be de 59 e7 f3 41 59 1c 73 a5 2a 04 23 0e bb 6b e6 65 3a fe 13 98 62 33 0d 00 8c d2 ff e7 6a 6b 73 34 0f db 99 4d c9 4c 2c 88 4f 41 77 b7 f9 1b b3 e8 fe b3 82 13 1c 65 54 Data Ascii: [(zjQq>.Yh&B[8VLIm^ "tP_3Rac(\>ssAa`f}q_8:.:7xhZvZ@l]m#wsYS+lA"S3YAYs*#ke:b3jks4ML,OAweT
2024-04-23 20:34:26 UTC	10312	IN	Data Raw: 5c fb 85 e0 40 58 ae f0 0a 61 9f 42 12 bf dc 79 44 4e 05 27 70 c8 11 36 8d 00 86 c6 fd 8b 1e 7a 4d 17 30 79 6a 0f 33 70 d9 26 d5 b3 ad cd 96 a5 35 45 96 fd 42 2d 38 15 2d 08 58 2b f8 80 93 de 21 ac 91 38 78 b5 57 8b c4 dd 7b d9 10 71 3c f6 ed 46 b6 02 36 f3 6d db e8 fc a7 a7 84 b9 4e 86 37 af 9e 55 bb 08 56 5b 4e 64 ab b5 40 9b 4b 04 fb d2 c7 ed 42 f5 fe fa a3 95 ab 66 8e ce 4e 66 03 72 7f 46 01 91 af f6 eb 2e cc fb 1e 1a fd f4 e3 c1 4f a7 61 b0 56 b4 f5 c8 88 7f b5 49 47 eb 96 53 9f 2e 63 a3 ba 52 fb 22 dd 81 c2 72 b3 1f e6 3b ee 54 88 55 0f df 59 a3 7e 77 82 c3 16 ea d3 79 c6 0b 82 95 eb 8d cb 78 39 a5 3a ad 8e 1f 96 1c a9 cd 7b 34 90 ba 10 fa 21 5a 12 c7 8a 4d ce f4 2a 02 3a 59 62 d8 c6 50 ac 7a be d3 4e 39 c1 ad 32 e4 39 39 be b4 64 2c de 00 98 d2 39 Data Ascii: \@XaByDN'p6zM0yj3p&5EB-8-X+!8xW{q<F6mN7UV[Nd@KBfNfrF.OaVIGS.cR"r;TUY~wyx9:{4!ZM*:YbPzN9299d,9
2024-04-23 20:34:26 UTC	2578	IN	Data Raw: 72 5b 5b 9f 31 1f 08 d6 65 07 a0 f4 6c b3 2d 5e e2 30 20 81 a7 ac fc 72 6b bc 58 cf 49 b8 fc b4 2b f9 86 0a bf b5 f8 71 5a ba 2a a4 02 6f 25 cb ff 8a fb 85 23 85 e3 c8 df 60 32 26 3e c2 6d 71 9e 02 d4 73 2c 6b 8c 63 a8 2d 1a 55 aa 17 cc e6 c5 ab 5c d1 9f 54 e6 2c 6c 04 92 8e 91 58 56 8e 84 07 c4 2a a7 d7 27 fe 4c 3f 89 44 fd f9 30 31 d9 11 ba 49 ce cb e9 0b ae 15 ca 71 27 6b ca 8a 6a 20 ac 28 b0 90 b9 06 92 6f c4 f0 28 68 98 5b c7 f3 8c 37 e2 7c 74 7d aa ba 44 0f 83 cf b2 70 fd 2a 7e 36 13 3b 77 fd 45 1a b6 7a c3 62 85 18 d1 b7 f8 eb 04 8c a2 f3 9b fc 3f 84 83 fb 4a 24 c7 96 7d aa 78 e8 a2 75 a5 b7 66 dc b3 ad d5 77 58 f3 3f 5f 4c b5 30 df 75 d3 10 a6 c5 97 ec 77 cc db 3b 81 37 09 de 6d d1 a2 24 53 e3 93 23 12 2e 60 6f fb 1e a6 2a f0 2b f8 c7 95 26 f9 df Data Ascii: r[[1el-^0 rkXI+qZo%#`2&>mqs,kc-U\T,lXV'L?D01Iq'kj (o(h[7\|t}Dp~6;wEzb?J$}xufwX?_L0uw;7m$S#.`o+&
2024-04-23 20:34:26 UTC	7734	IN	Data Raw: cc 7d 17 ba 8b b9 8b b9 d0 9c b0 b0 03 d2 79 87 6a b7 9a 28 d8 d1 b5 45 2e 2f 4f 17 04 e5 85 88 ca 45 85 c2 9f 02 7c 60 c3 79 fe 51 d2 e2 dd e9 f8 bf 39 09 6c ac a7 bc 60 de e1 3a a8 62 bb 97 a8 f9 0c ef 17 01 bd 57 ff e5 9c 57 ed ce 02 fe b1 80 af 98 ab cd fd 16 fa 15 73 be b9 97 b9 fb c2 ae b1 e8 51 19 9f f5 65 87 ee 5c a9 07 fb 9a 92 84 99 33 0b 3e 3d 4b 66 fc ad 59 7d bb 77 61 c3 07 bf 16 a5 32 72 f6 2c 43 90 e5 9d 74 26 c2 32 db 8a 25 bf 31 cd 00 fd c5 69 14 9c 9f 7a db 46 5c 8f 73 6e d3 f1 c4 c3 6e a9 ec 2a 8b 36 fe fa 0f 4a 3f 24 92 e1 83 f6 56 07 ed 8d 12 a1 31 85 aa d4 f2 68 41 28 49 a1 21 85 70 6a f5 98 d0 6f 5c 24 b5 14 c3 3d 86 67 58 c1 7a eb 33 2c 67 0d 4b 6d 17 14 22 07 ac 59 f2 74 6e 03 cb de 2e 13 49 e8 3b ce b9 9a 85 61 1e c3 3a 4c 65 bc Data Ascii: }yj(E./OE\|`yQ9l`:bWWsQe\3>=KfY}wa2r,Ct&2%1izF\snn*6J?$V1hA(I!pjo\$=gXz3,gKm"Ytn.I;a:Le
2024-04-23 20:34:26 UTC	708	IN	Data Raw: 89 8d 56 e1 32 f4 8a ac 42 c6 86 a0 c7 cf 01 20 12 32 81 a7 52 29 55 75 5c 05 8e 6d 14 6b ed 9c 35 39 4d 70 17 b3 2d 4a 28 2e 4b 18 1d c9 7c 38 e6 7f ef a8 a9 45 3f 99 fa e8 ff cc 13 c1 fb 32 19 05 e1 f2 cd 07 ea fd ac 9b 97 a6 2d 83 4f d6 e1 15 7a 09 5c 51 2c 5b ee 9b 74 57 2f 85 5b ca c0 e6 75 81 12 1e 9c 43 04 f6 01 80 22 34 ab 23 85 27 a9 95 c2 b7 ce 63 e2 d0 03 88 99 28 8f 75 02 78 80 02 44 cd d7 4d 9e 01 fc 44 3d ea d6 78 3d 16 08 bf 5a dd b0 05 03 40 b1 7a 6c ae a0 a1 73 eb 84 09 13 8e 2d f3 78 ce cc 7b 24 01 b1 4c 29 03 2a ad 4a 8f 7d e1 5f d8 03 7f c8 33 17 2e 7f 9e b3 76 a4 aa 3f aa 7f 1d 75 c0 10 d9 62 6d 40 e3 03 ff fe 97 95 40 24 82 99 59 42 c8 44 a0 b5 02 a1 08 3b 87 23 20 42 2c 3c d5 20 46 2a 4e 00 8a a0 95 fa a7 1e 9b 08 5e 80 f5 2c 33 e7 Data Ascii: V2B 2R)Uu\mk59Mp-J(.K\|8E?2-Oz\Q,[tW/[uC"4#'c(uxDMD=x=Z@zls-x{$L)J}_3.v?ubm@@$YBD;# B,< FN^,3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	50314	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:25 UTC	797	OUT	GET /assets/images/search-solid.svg HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
2024-04-23 20:34:25 UTC	364	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:26 GMT Cache-Control: no-cache Last-Modified: Fri, 13 Nov 2020 15:33:48 GMT Content-Type: image/svg+xml Content-Length: 577 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:25 UTC	577	IN	Data Raw: 3c 73 76 67 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 66 6f 63 75 73 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 64 61 74 61 2d 70 72 65 66 69 78 3d 22 66 61 73 22 20 64 61 74 61 2d 69 63 6f 6e 3d 22 73 65 61 72 63 68 22 20 63 6c 61 73 73 3d 22 73 76 67 2d 69 6e 6c 69 6e 65 2d 2d 66 61 20 66 61 2d 73 65 61 72 63 68 20 66 61 2d 77 2d 31 36 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 20 64 3d 22 4d 35 30 35 20 34 34 32 2e 37 4c 34 30 35 2e 33 20 33 34 33 63 2d 34 2e 35 2d 34 2e 35 2d 31 30 2e 36 2d 37 2d 31 Data Ascii: <svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="search" class="svg-inline--fa fa-search fa-w-16" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path fill="currentColor" d="M505 442.7L405.3 343c-4.5-4.5-10.6-7-1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	50315	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:25 UTC	811	OUT	GET /assets/images/topSplashButtonArrow-white.png HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
2024-04-23 20:34:25 UTC	361	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:26 GMT Cache-Control: no-cache Last-Modified: Fri, 13 Nov 2020 15:33:49 GMT Content-Type: image/png Content-Length: 1234 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:25 UTC	1234	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 b0 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da ed 97 5b 92 e4 28 0c 45 ff 59 c5 2c c1 42 08 89 e5 f0 8c 98 1d cc f2 fb 82 a9 7c 55 76 57 57 56 fd 74 4c 9b 48 0b 84 10 42 07 63 a7 eb ff fd 3b dc 3f b8 fc 91 82 0b a2 16 53 8c 07 ae 90 42 f2 19 15 3b ce eb 94 74 84 75 5f 97 df 5d 68 df e9 dd a5 c3 43 c5 90 7c 36 63 df f6 19 7a b9 0e d0 b0 f5 e5 5e ef b4 6e 3f b6 1d ed 8e 37 87 3c 67 9e b3 6d 3b db 8e d8 9f 7a da 6d 97 f6 b8 1c 6e 96 b3 7f a5 6d 9d 9c e2 b1 1d 14 c9 68 02 7f ec 9d ef 4c 7c e0 6e 73 16 3e 7f 79 c9 79 c7 c4 e8 67 d4 85 23 ee cc f6 3c 77 ee 52 7d 48 de a5 f6 90 bb 23 6f 3d df a7 c2 1d 71 1b c4 87 Data Ascii: PNGIHDR szzzTXtRaw profile type exifx[(EY,B\|UvWWVtLHBc;?SB;tu_]hC\|6cz^n?7<gm;zmnmhL\|ns>yyg#<wR}H#o=q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	50316	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:25 UTC	950	OUT	GET /106.f9ef06dce04acc21.js HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://reportfraud.ftc.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
2024-04-23 20:34:25 UTC	397	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:26 GMT Cache-Control: no-value Content-Encoding: br Last-Modified: Tue, 19 Mar 2024 13:54:36 GMT Content-Type: application/javascript Content-Length: 43676 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:25 UTC	10766	IN	Data Raw: 5b 3c b2 53 32 dd dc 81 72 3b 98 b7 e6 76 c1 cd 46 d8 7a b3 4a 85 0c 7c ba e4 80 ea d6 0c 2e e8 6e 25 2a 42 30 1c 40 55 cd 48 3a c6 90 61 6d 00 66 f6 fe 8f 50 54 88 49 42 35 64 73 16 0a 49 68 4c 98 ca 8c b0 29 01 79 8e eb 3c 81 6a 35 2f a7 66 61 34 c8 d6 00 8b dd 24 ed ee d8 18 96 7b 80 b8 ca 84 1a 9d 6b 64 59 5e 7c a4 65 1f 66 82 2c a0 de af b7 61 6f bc 4d 5e 5b d8 fb 05 75 a2 1c 92 b6 1f 78 2a ac 48 7b 43 83 f4 3e 03 d3 d7 10 e1 77 a8 fe ce ef 80 77 a8 20 9c 02 fa 4f 03 a6 5c ff 02 28 69 94 51 32 09 6b a3 07 bd e8 93 4f 90 6c 32 e7 96 ce 4c e0 1b 9c aa 3d cc 09 12 f8 ff fd b5 b7 af ef de 7a 5a 6d 67 31 c1 a5 7e 3d 17 c4 7d 9b 79 54 42 80 08 24 98 84 4d 4f af 6c 66 51 ba d5 c6 ad ea b1 ba 79 c6 0f 80 99 7f eb b5 f8 24 30 e8 ee 9e 14 64 c9 5d b6 b4 5e 5f Data Ascii: [<S2r;vFzJ\|.n%B0@UH:amfPTIB5dsIhL)y<j5/fa4${kdY^\|ef,aoM^[uxH{C>ww O\(iQ2kOl2L=zZmg1~=}yTB$MOlfQy$0d]^_
2024-04-23 20:34:25 UTC	16384	IN	Data Raw: 2c 30 d1 0e ca da a8 95 9e 2c 33 d7 16 69 23 58 72 13 6c 6a 46 e2 6f 40 53 49 21 25 e8 ee a7 9b 66 9a 87 43 5f 4a 84 85 22 1b f6 66 57 4e 75 ae 02 f4 96 2b b3 08 45 b5 34 50 0b da 76 db 59 1c 3b 28 70 06 13 33 28 c1 14 fa 6b db a6 0b 0a 79 fa 73 03 76 7a 41 31 7c 9c a3 77 94 7f 87 41 78 79 24 bc dd 86 e4 fd 3b f8 c8 20 77 5d ae 15 b5 05 b4 e6 0a a5 5f 5b 5b fe 22 a2 91 df 70 62 45 a9 1d 58 ec 06 db 45 e3 d6 48 23 97 b3 e1 fd 29 2a 5b fd 85 a6 1e a6 60 bf 31 6a 96 89 c5 84 46 b2 48 94 6f 7c 73 25 33 b3 99 1d 62 8f e5 f9 dc fb 50 e6 7c a6 ed 2c d1 61 e2 f3 57 e7 63 b0 51 e1 3c 87 07 ff 73 ed 11 a8 6e b3 ba c6 49 70 b3 4c f0 36 58 bf ca cb ae 75 54 22 dc 03 83 57 d5 a6 c8 04 3d 58 76 f9 cc 32 0f ae 2c 03 9c 07 3b 6e 1e ae 48 8f 01 ce 9f cf b0 e7 bb a1 50 55 Data Ascii: ,0,3i#XrljFo@SI!%fC_J"fWNu+E4PvY;(p3(kysvzA1\|wAxy$; w]_[["pbEXEH#)*[`1jFHo\|s%3bP\|,aWcQ<snIpL6XuT"W=Xv2,;nHPU
2024-04-23 20:34:25 UTC	7687	IN	Data Raw: 62 65 f5 3e b3 b6 57 e7 b6 7e 8e 08 65 1c 96 f2 ac 66 41 82 d6 56 22 8b ac 4f 4a a3 90 17 8f e7 8e 6d 84 36 e8 26 7a 0d b1 23 bf 04 15 ea f5 01 41 dc cb 9e c0 65 e3 09 d8 4b 6c 8e b8 38 d5 b8 b6 12 c3 45 4d 89 52 ff 6b 66 3a a5 72 e8 6d b8 6c d8 a4 8b a4 fd 30 03 62 8a 46 7d 34 4b 25 32 b7 ce a6 c6 50 25 34 49 86 59 a9 e7 0b 97 9e b2 f2 d6 73 92 d1 36 4c 33 06 00 69 dc 9f 28 7f 1a dd a7 bf 40 1a b3 22 4e 4e 46 49 9c 91 c2 c3 e4 b0 ac 2b 83 12 cb 91 6b b6 c1 57 f9 9d 70 21 a5 d6 49 2e 1b 5d 85 e3 7b 4d 63 79 84 2a 42 21 99 59 7a e3 a2 8c 7f 2f 6d 57 a0 33 d2 31 df fb 54 dc 3f 73 47 b6 cb 64 c8 18 cf 40 2c ca 36 23 4e bc 34 05 46 51 7b 93 e0 ae 6b 33 1f bd f4 a8 91 98 43 5b 2d a3 a5 47 6c 7d 66 a7 09 e8 a3 66 11 c0 90 90 86 70 8e f9 1b d1 8a 7a 32 76 e1 4a Data Ascii: be>W~efAV"OJm6&z#AeKl8EMRkf:rml0bF}4K%2P%4IYs6L3i(@"NNFI+kWp!I.]{Mcy*B!Yz/mW31T?sGd@,6#N4FQ{k3C[-Gl}ffpz2vJ
2024-04-23 20:34:25 UTC	7734	IN	Data Raw: 81 27 32 51 38 05 1e f9 c9 00 24 84 06 ff b5 3b 48 72 44 ca fb 7a d5 69 48 54 fd 6b a9 44 2d d9 4f 2d bc a2 d9 99 9a a0 85 c6 bd 74 7a f8 e8 0e e7 0c 4c d4 6a 41 16 b2 ad 56 60 ee 21 61 0d 9f 3a d4 a8 c3 b2 cd 87 98 6e 8b 53 e2 78 4a 5f f4 0e b7 2e b3 e7 de 8e 60 6e 64 5e aa c4 83 de 21 61 dd e5 71 3f 9e a4 7c 28 d3 e2 e8 84 24 21 7c 6a 34 f2 0e ce 5a ce 8c 5e 71 e6 95 cf a5 98 95 6d 07 cf 81 2d f3 66 06 9b cb 52 5b ae 25 f1 84 8d eb 55 25 42 4e fc 88 e6 e1 19 79 23 cb a7 0e 13 49 2d 52 79 ff a9 d4 8f 48 32 88 a8 7a e6 9e f3 97 b1 59 ba db bb a2 7b d0 f3 1d ee 3e cc d4 b9 bb 0a 0c 60 68 71 77 16 4d 4e cb 73 ce a2 15 e0 49 e5 98 26 3b 56 e9 c4 21 d8 78 18 91 38 cb 56 28 e8 9e 08 21 c9 15 67 7f 7f 88 8f 59 65 bb f6 17 c3 19 2e b1 78 28 fc 87 82 f3 bc 71 f7 Data Ascii: '2Q8$;HrDziHTkD-O-tzLjAV`!a:nSxJ_.`nd^!aq?\|($!\|j4Z^qm-fR[%U%BNy#I-RyH2zY{>`hqwMNsI&;V!x8V(!gYe.x(q
2024-04-23 20:34:26 UTC	1105	IN	Data Raw: 8a b4 64 2c 35 1a d3 7c d5 2c a6 dd f6 96 ce d0 66 77 4d 2b 65 7c 6e 8f 43 83 00 8c 57 78 52 ae 0f 89 50 94 3d ae 8e 4d 00 36 1b 74 53 b2 76 c0 7b a8 37 1c 3c af 92 4c c7 52 39 71 c8 b0 cf e1 e5 62 d5 48 0c 11 a6 c6 59 9b 79 61 90 64 76 44 54 d8 05 31 0f e4 5a 15 06 ce e3 c7 d1 ab fa d0 c4 34 12 e4 5f 52 f4 58 60 e5 51 27 12 0e 8b 68 cb 0f 72 00 38 5e 3c c4 20 15 5e 79 fb 6b 2f ed 2e bf e9 12 22 a6 c3 97 ff 03 c5 0a 0d 1a a7 af 68 26 08 fa b1 80 0b b0 c3 6b 0c a8 ea d0 2e 88 ad 39 6b f8 70 c6 f2 f7 1f 89 5b b6 d4 89 20 48 ea 49 b9 2c 68 63 58 47 1d 98 21 38 5b c7 73 a1 0b 43 2b d4 c4 a9 55 88 c2 d0 a3 2e 8f 54 f6 c1 d1 6f e1 21 b0 76 2a 8f d5 c7 c9 b0 e2 98 db 09 cc b3 8d 06 22 5e 82 04 02 f9 ab b4 98 b4 2b c2 77 f8 81 cc af 45 b3 22 4d 5d d5 23 33 6d 76 Data Ascii: d,5\|,fwM+e\|nCWxRP=M6tSv{7<LR9qbHYyadvDT1Z4_RX`Q'hr8^< ^yk/."h&k.9kp[ HI,hcXG!8[sC+U.To!v*"^+wE"M]#3mv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	50317	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:25 UTC	799	OUT	GET /assets/images/USFlag-Icon-2x.png HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
2024-04-23 20:34:25 UTC	335	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:26 GMT Last-Modified: Thu, 09 Nov 2023 15:12:28 GMT Content-Type: image/png Content-Length: 144 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:25 UTC	144	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2e 00 00 00 1a 02 03 00 00 00 b5 3c 86 1f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 09 50 4c 54 45 00 28 68 bf 0a 30 ff ff ff 40 10 f5 13 00 00 00 35 49 44 41 54 18 57 63 60 00 02 d6 50 30 08 60 40 e1 70 81 c0 2a 30 58 80 ca c1 ad 87 61 c1 82 05 08 65 28 1c aa da b3 0a 01 16 a0 72 42 11 20 00 95 43 27 3d 00 ab ba 7a 3b eb 6e 66 15 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR.<sRGBPLTE(h0@5IDATWc`P0`@p*0Xae(rB C'=z;nfIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	50318	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:25 UTC	950	OUT	GET /189.55854287e34e0293.js HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://reportfraud.ftc.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
2024-04-23 20:34:25 UTC	396	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:26 GMT Cache-Control: no-value Content-Encoding: br Last-Modified: Tue, 19 Mar 2024 13:54:36 GMT Content-Type: application/javascript Content-Length: 3560 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:25 UTC	3560	IN	Data Raw: 1b b6 43 23 11 c2 c6 01 88 f7 b6 3e 80 5a 1e d8 64 38 2c d9 fb 95 c2 8e 63 47 f6 cc c2 5e 74 2c 76 4c df c2 0f b2 b1 23 3c df 17 c5 e2 1d ff d8 d4 f0 82 d8 a2 a1 3a 42 92 d9 bf fd b4 be 7e 1d ae e1 0c 10 d1 f4 1b b7 37 73 d5 ec 64 51 9f c6 5b 01 4f b0 6c 23 6a 4d 54 3e 26 39 18 42 75 9e 40 85 8f 3e a1 0a 2d d5 c7 fa 8d 7d a9 f2 4b d8 10 f8 62 de 35 87 4e 5a 59 6a 6c 85 ea c3 a1 2a 1b d7 ed c3 4f 85 99 d1 0b 04 64 fb 85 34 d5 b1 55 ac 30 de 5d 6b 2a 1a 72 b8 82 fc 0c b0 bf 74 f9 26 ac 33 ea d3 05 b8 e9 52 b4 a6 5d 8f 1c a8 10 8a 16 f5 f6 ed ee f8 24 19 75 77 06 3c 07 08 24 ad 74 f7 89 a1 0a 60 89 20 07 aa 96 b8 6a 52 74 76 19 40 28 77 07 bf 92 b1 0a b3 8c 69 c9 5f d3 b5 65 84 21 4a 48 70 f4 5f 06 b5 06 1c 63 9b 32 b5 68 61 54 72 ac 87 c4 e3 b7 1d 6e 5b f5 Data Ascii: C#>Zd8,cG^t,vL#<:B~7sdQ[Ol#jMT>&9Bu@>-}Kb5NZYjlOd4U0]krt&3R]$uw<$t` jRtv@(wi_e!JHp_c2haTrn[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	50320	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:25 UTC	792	OUT	GET /assets/images/wh-icon.png HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
2024-04-23 20:34:25 UTC	335	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:26 GMT Last-Modified: Thu, 09 Nov 2023 15:12:28 GMT Content-Type: image/png Content-Length: 980 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:25 UTC	980	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 03 00 00 00 b9 cf 02 9f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 50 a0 03 00 04 00 00 00 01 00 00 00 50 00 00 00 00 12 28 6e 75 00 00 00 57 50 4c 54 45 00 00 00 20 70 bf 20 78 c7 20 75 c5 20 79 c2 20 78 c3 20 77 c2 23 76 c2 23 79 c4 23 78 c2 22 77 c3 22 76 c4 22 78 c3 22 78 c3 22 77 c2 22 77 c3 22 78 c2 23 78 c2 23 77 c3 23 77 c2 23 78 c3 23 78 c3 22 77 c3 22 77 c3 22 78 c2 22 78 c3 22 77 c2 22 77 c2 23 78 c3 e5 2c ed 98 00 00 00 1c 74 52 4e 53 00 10 20 30 3f 40 4f 50 5f 60 6f 70 7f 80 8f 90 9f a0 af b0 bf c0 cf d0 df e0 ef f0 42 ab b9 f4 00 00 Data Ascii: PNGIHDRPPsRGB8eXIfMM*iPP(nuWPLTE p x u y x w#v#y#x"w"v"x"x"w"w"x#x#w#w#x#x"w"w"x"x"w"w#x,tRNS 0?@OP_`opB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	50319	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:25 UTC	794	OUT	GET /assets/images/lock-icon.png HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
2024-04-23 20:34:25 UTC	335	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:26 GMT Last-Modified: Thu, 09 Nov 2023 15:12:27 GMT Content-Type: image/png Content-Length: 987 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:25 UTC	987	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 03 00 00 00 b9 cf 02 9f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 50 a0 03 00 04 00 00 00 01 00 00 00 50 00 00 00 00 12 28 6e 75 00 00 00 57 50 4c 54 45 00 00 00 70 9f 20 70 9f 28 70 9f 2b 71 9e 28 70 9f 28 71 9e 2a 70 9f 29 71 9e 28 70 9f 28 71 9f 29 70 9f 29 70 9f 2a 70 9f 2a 70 9f 29 71 9f 29 70 9f 2a 71 9e 29 70 9f 29 71 9e 2a 70 9f 29 71 9e 29 70 9f 2a 71 9e 2a 70 9f 29 71 9e 29 70 9f 2a 71 9e 29 71 9f 2a 24 87 8f 88 00 00 00 1c 74 52 4e 53 00 10 20 30 3f 40 4f 50 5f 60 6f 70 7f 80 8f 90 9f a0 af b0 bf c0 cf d0 df e0 ef f0 42 ab b9 f4 00 00 Data Ascii: PNGIHDRPPsRGB8eXIfMMiPP(nuWPLTEp p(p+q(p(qp)q(p(q)p)ppp)q)pq)p)qp)q)pqp)q)pq)q$tRNS 0?@OP_`opB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	50323	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:26 UTC	950	OUT	GET /225.0130806582458f70.js HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://reportfraud.ftc.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
2024-04-23 20:34:26 UTC	396	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:27 GMT Cache-Control: no-value Content-Encoding: br Last-Modified: Tue, 19 Mar 2024 13:54:36 GMT Content-Type: application/javascript Content-Length: 7905 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:26 UTC	7905	IN	Data Raw: 1b 80 8b 23 11 f6 94 ca 3d 17 51 d1 2a 03 a0 96 05 bc 21 7d d4 5f 50 98 ba 53 1c e7 ed 2e 0f e5 78 c7 c0 6e 5c c7 f1 cc 97 55 19 78 c9 1f 6b ad 56 ed 29 5f bd 43 75 16 d1 1d b0 7c 54 1c 96 08 1d a1 c7 ce 49 cd 6f bf 54 f6 5e d4 41 db bf 33 a1 4d 59 13 38 26 07 f8 bf 2d f7 bf da a6 f7 bf 8f c9 31 cd 23 74 52 7c d1 df 69 d0 b9 4e d5 53 11 d2 12 a5 84 07 a1 b6 22 8b dd e6 db b7 26 ef e9 6a cc 35 2b bf d5 f6 10 44 32 b4 29 b6 4c 92 25 a5 0b 2a 1d 34 e5 5f 90 db 30 5c 7c 2f 25 08 83 46 55 22 30 8f 40 96 f1 df 5f fb f7 95 2f 4f 72 f2 ba 60 63 51 29 a0 49 ed 47 79 93 08 f2 d3 ff 7f 53 d3 e3 6e 66 b9 08 dc 40 50 72 88 a7 b7 9b 0e 24 28 0a 1b 9c 72 51 b9 e8 96 ef fe 3f ef 68 30 18 7a 01 06 2d d3 1e 91 87 4a d4 2a 50 29 cd 9f f7 67 08 02 14 05 02 f4 8a 0a 31 95 4e Data Ascii: #=Q!}_PS.xn\UxkV)_Cu\|TIoT^A3MY8&-1#tR\|iNS"&j5+D2)L%4_0\\|/%FU"0@_/Or`cQ)IGySnf@Pr$(rQ?h0z-J*P)g1N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	50324	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:26 UTC	983	OUT	GET /assets/images/ftc-dnc-logo.jpg HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
2024-04-23 20:34:26 UTC	371	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:27 GMT Cache-Control: max-age=31536000 Last-Modified: Tue, 13 Sep 2022 19:46:36 GMT Content-Type: image/jpeg Content-Length: 30654 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:26 UTC	10591	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 12 84 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 07 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 62 00 00 00 1b 01 05 00 01 00 00 00 6a 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 0d 00 00 00 72 00 00 00 32 01 02 00 14 00 00 00 80 00 00 00 69 87 04 00 01 00 00 00 94 00 00 00 a6 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 47 49 4d 50 20 32 2e 31 30 2e 32 32 00 00 32 30 32 31 3a 30 33 3a 31 38 20 31 34 3a 34 31 3a 34 31 00 01 00 01 a0 03 00 01 00 00 00 01 00 00 00 00 00 00 00 08 00 00 01 04 00 01 00 00 00 00 01 00 00 01 01 04 00 01 00 00 00 3e 00 00 00 02 01 03 00 03 00 00 00 0c 01 00 00 03 01 03 00 01 00 00 00 06 00 00 00 06 01 03 00 01 00 00 00 06 Data Ascii: JFIFHHExifII*bj(1r2iHHGIMP 2.10.222021:03:18 14:41:41>
2024-04-23 20:34:26 UTC	5824	IN	Data Raw: de 86 83 a9 5d 32 f6 5a 5a 22 b5 74 cb d9 67 5d d2 a3 8d 6a 3f 37 ea 5b 3d f7 df 2c f9 5a af f3 ee 88 b0 5c e9 18 5a bf 55 59 ef d4 f4 55 76 2f cb c1 2c ea 90 8f 73 f1 6d 36 f4 63 63 85 ed 35 69 00 01 1e db 1b 53 ef ae c3 78 b2 8c 61 25 63 ec b0 df 2f 23 64 54 d9 9b a3 e8 aa 55 bb 2f dc e6 b8 ce d0 d0 95 6f 9c 7c b8 e5 ec 75 c7 04 45 35 0d 57 eb 4b 5f d1 39 22 a9 f3 be ac b4 fd 03 45 a3 96 86 82 a8 f5 c5 ab e8 5c 95 56 f9 f5 f1 39 6b 90 6f ed e4 fa b7 cf 7d 7d cf ac 2d 3f 41 e4 da b7 cf 7a 66 c9 79 80 70 44 46 b9 f8 6f 29 9b 57 30 d7 28 bd 59 67 bf 6d 76 6f a5 61 eb 75 a4 74 17 43 4f dc 71 b1 c6 a3 8a ae d8 d2 13 75 1c 4d 73 a1 e7 ee 3c c9 5b a2 f4 9d 8e ef 43 c1 d4 ee 99 7b 2d 2d 11 5a ba 25 ec de f9 ec 91 74 75 f2 65 57 e7 bd 1f 63 bb 65 65 b3 99 2b 34 Data Ascii: ]2ZZ"tg]j?7[=,Z\ZUYUv/,sm6cc5iSxa%c/#dTU/o\|uE5WK_9"E\V9ko}}-?AzfypDFo)W0(YgmvoautCOquMs<[C{--Z%tueWcee+4
2024-04-23 20:34:26 UTC	12222	IN	Data Raw: 22 a0 6e 39 00 e1 56 dc 71 15 48 6d 30 53 f2 9c a9 b9 a3 8d 50 fb e2 a8 5d 78 bb 1b 27 57 01 cb 09 b5 ff 00 18 55 05 a6 43 6d 94 1c a0 ab 39 c5 52 72 42 ac e7 15 49 c9 1c 65 37 90 95 0c 62 36 d9 48 d0 f6 90 54 5c c1 e4 ab 0d a2 2a 96 31 24 9a ed c2 be 31 83 1a a0 3f 78 42 af 8e ed c7 dc a8 1f 62 58 ab df b3 17 a3 e3 dd fd b8 e7 63 37 29 fe 91 a4 2d f6 8d fe 40 af 59 53 30 7b 18 af e4 9b 5e 2a 74 23 5f fd fe 7f 03 d6 19 3f 75 86 f6 f1 fe 17 db b1 f4 b2 bd d7 a4 37 0a 81 cd 6d ee 56 74 5f 17 d5 54 56 00 2d 16 e9 8c 32 3a c1 06 00 dc 08 83 1b bc 42 8a 51 28 b8 55 33 08 9b f3 54 cc c7 28 e1 53 cd 2a 8f 92 14 b1 89 1b 62 9e c3 19 b1 51 73 07 92 91 98 9a 5a 9a e3 1b bc 42 65 44 4e 17 ba ab a9 69 6e 06 6a a8 63 bc 98 fb 94 fc a7 28 1e 19 20 25 07 b5 fb 1e 15 d0 Data Ascii: "n9VqHm0SP]x'WUCm9RrBIe7b6HT\1$1?xBbXc7)-@YS0{^t#_?u7mVt_TV-2:BQ(U3T(S*bQsZBeDNinjc( %
2024-04-23 20:34:26 UTC	1289	IN	Data Raw: 0e 43 13 09 10 2e 8b d9 3a 19 5a 76 c9 ce 03 9b 68 44 1b d4 e5 ef 46 4a 42 a5 58 98 fb 59 3f e8 d8 74 cc e9 c8 28 75 f4 41 81 8d 05 d2 70 98 11 a6 9a f8 dd e7 34 04 80 f0 88 c4 c1 30 0c d3 ac 73 50 8b 75 e8 1e e8 68 7e 11 8d 0d a0 c7 cb 63 c0 c8 f4 93 03 79 12 9f ac 14 10 c8 39 40 7d b2 60 71 cc 1d 04 75 2f 5e 7d 17 5f 5e 03 a0 47 9e b9 23 d9 5e 99 12 c9 bf a9 a6 38 d1 1b 52 00 31 8a f4 f6 ba 02 57 e8 93 bc 25 79 42 1d f5 80 49 35 20 f8 cb eb 0b ef 11 df e0 c1 5a 79 ab ba 34 27 64 fa 9d 13 03 7e 13 04 53 78 ec ce 08 79 3c 26 da e7 1d 13 03 7e 13 04 53 78 e8 d6 3e e3 82 6d ae 7f b7 91 d0 81 c8 82 65 74 06 48 01 ab 6a 4c c8 1b 1c 22 28 40 5d e4 b0 55 ce 7b 80 2c fc cb cc 32 00 10 c1 8e 00 a3 39 fc 6a e3 7c 21 cf 4e 72 02 22 ce b7 60 be 4f 9f 3a 80 1e d0 25 Data Ascii: C.:ZvhDFJBXY?t(uAp40sPuh~cy9@}`qu/^}_^G#^8R1W%yBI5 Zy4'd~Sxy<&~Sx>metHjL"(@]U{,29j\|!Nr"`O:%
2024-04-23 20:34:26 UTC	728	IN	Data Raw: 74 b1 2c 98 b7 d0 75 a7 c5 0f d8 99 62 8f 02 ba 2d 23 c7 06 2a 16 59 1f 46 60 f8 5c 40 b4 91 9a ef 31 7b b9 32 1d d4 cb 54 ce 97 3e d8 2e 95 5d a9 42 26 00 e2 8d a8 2a 12 f3 aa 0c 28 2b 67 c1 63 ee cf 6c d8 e1 5e a4 83 3e df f9 fd 21 5b 85 2f 05 c8 a9 fb 0b 50 2a e3 78 35 f7 88 c9 b0 36 27 47 21 78 d0 ea 49 f9 16 02 c0 f4 83 8e b3 64 9e d8 2a 8f f2 e0 8d e2 5b 5a f4 9a d4 b6 c8 45 af 9e 43 56 22 c9 06 14 f7 60 82 ad 20 a6 46 0a 38 61 64 94 b3 27 a6 27 24 9d 68 28 f6 91 85 c4 8e b7 05 0e e3 66 7b b4 09 20 f6 c4 33 91 f1 72 51 47 54 26 3a e3 78 d9 ff 00 59 24 3b 7d 43 09 17 39 3f ee 26 13 1d 04 c5 2b af 13 7c 4e 6c 89 5b 16 9e 0f e7 0c 60 d5 28 18 2a 27 71 c2 3a 04 7f 84 67 07 88 88 10 9b a6 49 12 37 65 f7 19 c0 8b 34 06 4a 58 0c 0f e8 07 b7 05 86 95 21 4d Data Ascii: t,ub-#YF`\@1{2T>.]B&(+gcl^>![/Px56'G!xId[ZECV"` F8ad''$h(f{ 3rQGT&:xY$;}C9?&+\|Nl[`(*'q:gI7e4JX!M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	50325	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:26 UTC	979	OUT	GET /assets/images/idt-logo.png HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
2024-04-23 20:34:26 UTC	370	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:27 GMT Cache-Control: max-age=31536000 Last-Modified: Tue, 13 Sep 2022 19:47:15 GMT Content-Type: image/png Content-Length: 25653 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:26 UTC	8014	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 03 00 00 00 90 08 06 00 00 00 54 38 b7 53 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 63 d7 49 44 41 54 78 da ec bd 0d 94 1c 57 79 e7 5d 78 bd c9 09 7b 24 3a c1 f1 49 8e 66 a3 d6 6b 3b 2f f2 89 f1 98 8f 58 09 76 d4 22 96 4e c0 31 1a 5b 0e 98 8f 8d 7a b4 c1 c0 12 98 51 f0 47 02 86 99 01 3b 6f 0c ec 99 19 27 2c 86 2c 9e 11 98 60 40 f2 8c 4c 6c 16 49 d9 69 2d ce 46 7a 13 a3 11 06 29 7c 18 b5 60 74 12 08 89 da 12 38 fb 6e b2 47 6f fd aa ee 33 73 e7 4e 55 75 55 77 75 4f f7 cc f3 3f 2e f7 a8 bb ea d6 ad 5b 5f ff ff 73 9f 0f cf 53 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 Data Ascii: PNGIHDRT8StEXtSoftwareAdobe ImageReadyqe<cIDATxWy]x{$:Ifk;/Xv"N1[zQG;o',,`@LlIi-Fz)\|`t8nGo3sNUuUwuO?.[_sS(BP(BP(BP(BP(BP
2024-04-23 20:34:26 UTC	16384	IN	Data Raw: 20 d4 04 0d 9f 0b aa 01 ef 5a 44 34 a3 00 81 86 b0 de 7d c7 9d c1 36 12 44 1c e7 8e 93 15 b8 c9 00 88 bf 10 63 21 f5 92 65 c7 25 f5 08 1b 9b d4 43 90 c3 63 98 98 df 3e 4a 44 c4 f9 e9 27 f5 25 0f d0 e7 b9 a0 12 f3 44 e0 0a c4 a7 dd 3e 63 cb 31 50 97 80 18 01 01 b1 0f b6 db 12 9f 9c 3b 62 3b 4e 7d e7 3b 33 5e a5 72 cd 33 a7 ab 2a 0a 14 0a 85 42 a1 50 28 14 8b 71 d9 fa 62 df 1b 5e 77 5b 09 77 17 d7 35 05 57 14 dc 61 c8 71 2f 15 74 71 41 71 dd 53 a4 b2 2f ee 2b b8 e1 c8 22 ee 2d cd ba 09 51 b5 97 3e d0 26 9f 8d 42 da 90 a5 91 6a c7 79 f5 c5 76 ff 91 f1 91 7e 31 e6 52 37 c0 76 83 12 17 a9 a8 3e d1 86 7d 5e c4 ad 68 7a 6a ea 94 ba 0a 29 14 0a 85 42 a1 50 ac 3e a4 4e 2d 7a ed a6 4d 3b a3 32 00 61 7d ae 3c f9 e5 c0 4a 8d 4b 4e 68 69 5f eb bd e7 7d ef 5d b4 9e 04 Data Ascii: ZD4}6Dc!e%Cc>JD'%D>c1P;b;N};3^r3*BP(qb^w[w5Waq/tqAqS/+"-Q>&Bjyv~1R7v>}^hzj)BP>N-zM;2a}<JKNhi_}]
2024-04-23 20:34:26 UTC	373	IN	Data Raw: 20 05 9a 4e 54 a1 58 d9 88 2b e4 a5 50 31 d0 36 61 30 fc d0 7f fd 04 2f 9f c3 ef f9 83 3f 28 fc ec cf 5e 3a f4 0b bf f0 ef 8b 58 f1 21 dd 04 fc 82 a8 e2 60 cc 00 84 81 c1 5b 03 72 4f 0a 53 99 3d 80 b8 c7 a5 1b 0d d3 96 6e f5 ee ba e3 ce c0 2d 68 cd 89 b5 f3 e4 1d b0 1d c2 e4 35 af be 31 e8 03 84 5e 80 48 c0 ca ef 82 6d d8 bf 64 07 a2 bf 04 2f fb e2 a4 fa 67 0f 3f 3c fb c3 1f fe b0 5f 67 01 14 0a 45 87 23 aa be 80 ba 08 29 14 ab eb be af aa 18 50 31 b0 1c 82 a0 c2 e7 17 1f 7f 02 51 d0 ff 73 3f ff f3 db 7f e3 55 af 82 60 0f 62 f9 97 a2 5d 58 d8 25 b6 80 bf 25 8d a7 64 02 0a b2 10 59 a4 9d 85 99 02 88 bf 54 35 0e db b8 32 a8 7e bc 76 ed 07 82 6d 6d 21 20 d9 8c 00 eb 32 7b 80 fb 91 5d f3 40 fe 66 9f fc 7e ee dc f9 79 01 c1 f6 87 2b 95 da c9 13 27 a7 8f 1e 39 Data Ascii: NTX+P16a0/?(^:X!`[rOS=n-h51^Hmd/g?<_gE#)P1Qs?U`b]X%%dYT52~vmm! 2{]@f~y+'9
2024-04-23 20:34:26 UTC	882	IN	Data Raw: 16 0a 3b 19 cc 58 30 13 c0 3e d8 b6 ef a6 d7 d4 1e fe d4 a7 66 1f f9 b3 cf d4 fe f6 e4 c9 11 73 3c fa 12 55 28 14 dd 82 a8 aa ab 4a 0a 14 8a e5 01 a9 42 c9 58 42 5d 99 fe 16 ee 23 6a 36 70 52 87 7f 65 e1 79 dd 7e 00 97 ad 2f 96 cd 9f 57 bf fb 9e 7b bc c7 f6 ef 2f ff f1 47 fe c4 fb f7 bf f0 0b 05 66 0b 6e 08 82 85 4f fa 84 7c 4d 20 10 98 39 90 42 64 cc 1c 08 d1 4f 03 a9 80 1c d6 02 38 18 88 0d 29 3c c6 6f b8 0b 21 24 98 49 40 48 bc 7f 78 a4 4a f8 c3 3f fe e3 3f 56 be f6 f4 d3 d4 09 08 f2 fa aa 3b 90 42 a1 e8 26 98 59 01 d2 87 da 79 ca c9 23 bf 41 47 47 a1 68 3b b8 0f 67 bc 85 1a 32 d3 5e fe 55 83 8b 66 1f 45 e7 7b 8c 99 c3 7a 0a 56 16 2e ee f6 03 f0 89 f5 a4 11 05 85 3f bc f7 5e 6e 8c 3d 5b 7e 6d f3 c0 2f 5d 75 95 f7 dc 8f 7f dc 7b ff 87 3f 34 fb dc 73 cf Data Ascii: ;X0>fs<U(JBXB]#j6pRey~/W{/GfnO\|M 9BdO8)<o!$I@HxJ??V;B&Yy#AGGh;g2^UfE{zV.?^n=[~m/]u{?4s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	50326	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:26 UTC	997	OUT	GET /assets/images/exclamation-triangle-solid.svg HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011
2024-04-23 20:34:26 UTC	364	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:27 GMT Cache-Control: no-cache Last-Modified: Fri, 13 Nov 2020 15:33:48 GMT Content-Type: image/svg+xml Content-Length: 703 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:26 UTC	703	IN	Data Raw: 3c 73 76 67 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 66 6f 63 75 73 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 64 61 74 61 2d 70 72 65 66 69 78 3d 22 66 61 73 22 20 64 61 74 61 2d 69 63 6f 6e 3d 22 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 22 20 63 6c 61 73 73 3d 22 73 76 67 2d 69 6e 6c 69 6e 65 2d 2d 66 61 20 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 20 66 61 2d 77 2d 31 38 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 37 36 20 35 31 32 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 20 64 3d 22 4d 35 36 39 2e 35 31 37 20 34 34 30 2e 30 31 33 43 Data Ascii: <svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="exclamation-triangle" class="svg-inline--fa fa-exclamation-triangle fa-w-18" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512"><path fill="white" d="M569.517 440.013C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	50327	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:26 UTC	927	OUT	GET /assets/images/RF-Logo-Seal-NEW-01.svg HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z
2024-04-23 20:34:26 UTC	367	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:27 GMT Cache-Control: no-cache Last-Modified: Fri, 13 Nov 2020 15:33:45 GMT Content-Type: image/svg+xml Content-Length: 121060 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:26 UTC	11583	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 39 35 2e 37 20 31 31 37 2e 39 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 31 2c 2e 63 6c 73 2d 34 7b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 7d 2e 63 6c 73 2d 32 2c 2e 63 6c 73 2d 34 7b 66 69 6c 6c 3a 23 32 34 34 38 37 33 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a 23 32 33 31 66 32 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 36 32 2c 31 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 495.7 117.9"><defs><style>.cls-1{fill:#fff;}.cls-1,.cls-4{fill-rule:evenodd;}.cls-2,.cls-4{fill:#244873;}.cls-3{fill:#231f20;}</style></defs><path class="cls-1" d="M62,1
2024-04-23 20:34:26 UTC	16384	IN	Data Raw: 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 31 39 2e 34 2c 33 36 61 31 2e 34 32 2c 31 2e 34 32 2c 30 2c 30 2c 31 2d 2e 36 2d 2e 32 2c 31 2e 31 35 2c 31 2e 31 35 2c 30 2c 30 2c 31 2d 2e 35 2d 31 2e 36 2c 31 2e 33 31 2c 31 2e 33 31 2c 30 2c 30 2c 31 2c 31 2e 37 2d 2e 35 2c 31 2e 32 38 2c 31 2e 32 38 2c 30 2c 30 2c 31 2c 2e 35 2c 31 2e 37 2c 31 2e 33 34 2c 31 2e 33 34 2c 30 2c 30 2c 31 2d 2e 37 2e 36 5a 6d 2d 2e 31 2d 32 61 2e 37 35 2e 37 35 2c 30 2c 30 2c 30 2d 2e 37 2e 34 2c 31 2e 32 37 2c 31 2e 32 37 2c 30 2c 30 2c 30 2d 2e 31 2e 36 2c 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 30 2c 2e 33 2e 35 2c 31 2e 32 37 2c 31 2e 32 37 2c 30 2c 30 2c 30 2c 2e 36 2e 31 2c 31 2c 31 2c 30 2c 30 2c 30 2c 2e 35 2d 2e 34 68 30 61 2e 36 39 2e 36 39 2c 30 2c 30 2c 30 2d 2e 33 2d Data Ascii: ="cls-2" d="M19.4,36a1.42,1.42,0,0,1-.6-.2,1.15,1.15,0,0,1-.5-1.6,1.31,1.31,0,0,1,1.7-.5,1.28,1.28,0,0,1,.5,1.7,1.34,1.34,0,0,1-.7.6Zm-.1-2a.75.75,0,0,0-.7.4,1.27,1.27,0,0,0-.1.6,2.19,2.19,0,0,0,.3.5,1.27,1.27,0,0,0,.6.1,1,1,0,0,0,.5-.4h0a.69.69,0,0,0-.3-
2024-04-23 20:34:26 UTC	4240	IN	Data Raw: 30 2c 31 2c 2e 31 2e 39 2c 31 2e 32 38 2c 31 2e 32 38 2c 30 2c 30 2c 31 2d 2e 35 2e 37 41 2e 39 31 2e 39 31 2c 30 2c 30 2c 31 2c 34 39 2e 33 2c 31 30 37 2e 34 5a 6d 30 2d 32 61 2e 37 33 2e 37 33 2c 30 2c 30 2c 30 2d 2e 37 2e 36 2e 37 32 2e 37 32 2c 30 2c 30 2c 30 2c 2e 35 2e 39 2e 36 31 2e 36 31 2c 30 2c 30 2c 30 2c 2e 36 2d 2e 31 2e 35 35 2e 35 35 2c 30 2c 30 2c 30 2c 2e 33 2d 2e 35 2e 36 36 2e 36 36 2c 30 2c 30 2c 30 2d 2e 31 2d 2e 36 2e 35 35 2e 35 35 2c 30 2c 30 2c 30 2d 2e 35 2d 2e 33 68 2d 2e 31 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 35 31 2e 36 2c 31 30 35 2e 37 61 31 2c 31 2c 30 2c 30 2c 30 2d 31 2e 32 2e 38 2c 31 2c 31 2c 30 2c 30 2c 30 2c 2e 38 2c 31 2e 32 2c 31 2c 31 2c 30 2c 30 2c 30 2c 31 2e 32 2d Data Ascii: 0,1,.1.9,1.28,1.28,0,0,1-.5.7A.91.91,0,0,1,49.3,107.4Zm0-2a.73.73,0,0,0-.7.6.72.72,0,0,0,.5.9.61.61,0,0,0,.6-.1.55.55,0,0,0,.3-.5.66.66,0,0,0-.1-.6.55.55,0,0,0-.5-.3h-.1Z"/><path class="cls-1" d="M51.6,105.7a1,1,0,0,0-1.2.8,1,1,0,0,0,.8,1.2,1,1,0,0,0,1.2-
2024-04-23 20:34:27 UTC	16384	IN	Data Raw: 30 39 2c 30 2c 30 2c 30 2d 2e 31 2e 35 2e 38 35 2e 38 35 2c 30 2c 30 2c 30 2c 2e 33 2e 35 2c 31 2e 32 37 2c 31 2e 32 37 2c 30 2c 30 2c 30 2c 2e 36 2e 31 2e 38 33 2e 38 33 2c 30 2c 30 2c 30 2c 2e 36 2d 31 2c 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 30 2d 2e 33 2d 2e 35 41 2e 37 36 2e 37 36 2c 30 2c 30 2c 31 2c 37 32 2e 36 2c 31 30 35 2e 38 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 37 34 2e 33 2c 31 30 35 2e 31 61 31 2c 31 2c 30 2c 30 2c 30 2d 2e 37 2c 31 2e 32 2c 31 2c 31 2c 30 2c 30 2c 30 2c 31 2e 33 2e 37 2c 31 2c 31 2c 30 2c 30 2c 30 2c 2e 37 2d 31 2e 32 2c 31 2c 31 2c 30 2c 30 2c 30 2d 31 2e 33 2d 2e 37 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 37 34 2e 36 2c 31 30 37 Data Ascii: 09,0,0,0-.1.5.85.85,0,0,0,.3.5,1.27,1.27,0,0,0,.6.1.83.83,0,0,0,.6-1,2.19,2.19,0,0,0-.3-.5A.76.76,0,0,1,72.6,105.8Z"/><path class="cls-1" d="M74.3,105.1a1,1,0,0,0-.7,1.2,1,1,0,0,0,1.3.7,1,1,0,0,0,.7-1.2,1,1,0,0,0-1.3-.7Z"/><path class="cls-2" d="M74.6,107
2024-04-23 20:34:27 UTC	5529	IN	Data Raw: 34 2c 31 2c 31 2c 30 2c 30 2c 30 2d 31 2d 31 2e 38 2c 31 2c 31 2c 30 2c 30 2c 30 2d 2e 34 2c 31 2e 34 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 31 30 33 2e 39 2c 33 35 2e 35 61 31 2e 32 35 2c 31 2e 32 35 2c 30 2c 30 2c 31 2d 31 2e 31 2d 2e 36 2c 31 2e 32 33 2c 31 2e 32 33 2c 30 2c 31 2c 31 2c 31 2e 37 2e 34 41 2e 37 33 2e 37 33 2c 30 2c 30 2c 31 2c 31 30 33 2e 39 2c 33 35 2e 35 5a 6d 30 2d 32 61 2e 36 2e 36 2c 30 2c 30 2c 30 2d 2e 34 2e 31 2e 38 31 2e 38 31 2c 30 2c 30 2c 30 2d 2e 33 2c 31 68 30 61 2e 38 2e 38 2c 30 2c 30 2c 30 2c 31 2e 31 2e 33 2e 39 31 2e 39 31 2c 30 2c 30 2c 30 2c 2e 33 2d 31 2e 31 41 31 2e 34 39 2c 31 2e 34 39 2c 30 2c 30 2c 30 2c 31 30 33 2e 39 2c 33 33 2e 35 5a 22 2f 3e 3c 70 61 74 68 20 63 Data Ascii: 4,1,1,0,0,0-1-1.8,1,1,0,0,0-.4,1.4Z"/><path class="cls-2" d="M103.9,35.5a1.25,1.25,0,0,1-1.1-.6,1.23,1.23,0,1,1,1.7.4A.73.73,0,0,1,103.9,35.5Zm0-2a.6.6,0,0,0-.4.1.81.81,0,0,0-.3,1h0a.8.8,0,0,0,1.1.3.91.91,0,0,0,.3-1.1A1.49,1.49,0,0,0,103.9,33.5Z"/><path c
2024-04-23 20:34:27 UTC	3867	IN	Data Raw: 3d 22 4d 37 39 2e 38 2c 31 34 2e 37 61 31 2c 31 2c 30 2c 30 2c 30 2c 31 2e 33 2d 2e 36 2c 31 2c 31 2c 30 2c 30 2c 30 2d 2e 35 2d 31 2e 33 2c 31 2c 31 2c 30 2c 30 2c 30 2d 31 2e 33 2e 36 63 2d 2e 33 2e 35 2c 30 2c 31 2c 2e 35 2c 31 2e 33 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 38 30 2e 32 2c 31 35 61 2e 39 2e 39 2c 30 2c 30 2c 31 2d 2e 35 2d 2e 31 68 30 61 31 2e 33 35 2c 31 2e 33 35 2c 30 2c 30 2c 31 2d 2e 37 2d 31 2e 36 2c 31 2e 32 31 2c 31 2e 32 31 2c 30 2c 30 2c 31 2c 2e 37 2d 2e 37 2c 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2c 31 2c 30 2c 2e 38 38 2e 38 38 2c 30 2c 30 2c 31 2c 2e 36 2e 37 2c 31 2e 33 39 2c 31 2e 33 39 2c 30 2c 30 2c 31 2c 30 2c 2e 39 2c 31 2e 30 36 2c 31 2e 30 36 2c 30 2c 30 2c 31 2d 2e 36 2e Data Ascii: ="M79.8,14.7a1,1,0,0,0,1.3-.6,1,1,0,0,0-.5-1.3,1,1,0,0,0-1.3.6c-.3.5,0,1,.5,1.3Z"/><path class="cls-2" d="M80.2,15a.9.9,0,0,1-.5-.1h0a1.35,1.35,0,0,1-.7-1.6,1.21,1.21,0,0,1,.7-.7,1.7,1.7,0,0,1,1,0,.88.88,0,0,1,.6.7,1.39,1.39,0,0,1,0,.9,1.06,1.06,0,0,1-.6.
2024-04-23 20:34:27 UTC	16384	IN	Data Raw: 33 33 2c 34 2e 33 33 2c 30 2c 30 2c 30 2d 31 2e 36 2d 32 43 35 32 2e 31 2c 39 31 2e 32 2c 35 31 2e 33 2c 38 39 2e 32 2c 35 30 2e 39 2c 38 38 2e 31 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 35 32 2e 31 2c 38 38 2e 35 73 2d 32 2e 31 2d 32 2e 34 2d 35 2e 34 2e 37 63 30 2c 30 2c 35 2e 32 2c 32 2e 36 2c 35 2e 34 2d 2e 37 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 35 30 2e 32 2c 39 30 2e 34 61 38 2e 37 2c 38 2e 37 2c 30 2c 30 2c 31 2d 33 2e 36 2d 31 6c 2d 2e 33 2d 2e 31 2e 32 2d 2e 32 61 35 2c 35 2c 30 2c 30 2c 31 2c 33 2e 36 2d 31 2e 36 2c 33 2e 35 37 2c 33 2e 35 37 2c 30 2c 30 2c 31 2c 32 2e 31 2e 39 6c 2e 31 2e 31 76 2e 31 61 32 2c 32 2c 30 2c 30 2c 31 2d 2e 39 2c 31 2e 36 41 Data Ascii: 33,4.33,0,0,0-1.6-2C52.1,91.2,51.3,89.2,50.9,88.1Z"/><path class="cls-1" d="M52.1,88.5s-2.1-2.4-5.4.7c0,0,5.2,2.6,5.4-.7Z"/><path class="cls-2" d="M50.2,90.4a8.7,8.7,0,0,1-3.6-1l-.3-.1.2-.2a5,5,0,0,1,3.6-1.6,3.57,3.57,0,0,1,2.1.9l.1.1v.1a2,2,0,0,1-.9,1.6A
2024-04-23 20:34:27 UTC	1662	IN	Data Raw: 36 2d 32 2e 36 6c 2d 2e 32 2d 2e 32 2e 39 2d 2e 34 68 2e 31 41 31 30 2e 33 37 2c 31 30 2e 33 37 2c 30 2c 30 2c 31 2c 36 37 2e 39 2c 37 35 63 2e 33 2e 33 2e 38 2e 38 2e 36 2c 31 2e 32 41 2e 38 34 2e 38 34 2c 30 2c 30 2c 31 2c 36 37 2e 38 2c 37 36 2e 36 5a 6d 2d 32 2e 33 2d 32 2e 37 61 38 2e 38 2c 38 2e 38 2c 30 2c 30 2c 30 2c 32 2e 31 2c 32 2e 32 63 2e 33 2c 30 2c 2e 35 2c 30 2c 2e 35 2d 2e 31 73 30 2d 2e 32 2d 2e 35 2d 2e 37 61 31 31 2c 31 31 2c 30 2c 30 2c 30 2d 32 2d 31 2e 35 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 36 35 2e 39 2c 37 33 2e 36 73 32 2e 34 2c 32 2e 38 2c 33 2e 33 2c 32 2e 37 2c 31 2e 33 2d 2e 34 2e 33 2d 2e 37 61 31 38 2e 36 31 2c 31 38 2e 36 31 2c 30 2c 30 2c 31 2d 33 2e 31 2d 32 5a 22 2f 3e 3c Data Ascii: 6-2.6l-.2-.2.9-.4h.1A10.37,10.37,0,0,1,67.9,75c.3.3.8.8.6,1.2A.84.84,0,0,1,67.8,76.6Zm-2.3-2.7a8.8,8.8,0,0,0,2.1,2.2c.3,0,.5,0,.5-.1s0-.2-.5-.7a11,11,0,0,0-2-1.5Z"/><path class="cls-1" d="M65.9,73.6s2.4,2.8,3.3,2.7,1.3-.4.3-.7a18.61,18.61,0,0,1-3.1-2Z"/><
2024-04-23 20:34:27 UTC	16384	IN	Data Raw: 32 2d 31 2e 38 43 37 36 2e 34 2c 37 31 2e 36 2c 37 33 2e 38 2c 37 32 2e 35 2c 37 32 2e 36 2c 37 32 2e 33 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 37 32 2e 39 2c 37 31 6c 2d 2e 34 2c 31 2e 32 73 36 2e 32 2d 2e 31 2c 36 2e 36 2d 32 2e 38 63 2e 31 2c 30 2d 34 2e 36 2c 32 2e 31 2d 36 2e 32 2c 31 2e 36 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 37 32 2e 32 2c 37 32 2e 34 6c 2e 36 2d 31 2e 37 2e 32 2e 31 63 31 2e 32 2e 34 2c 34 2e 38 2d 31 2c 36 2e 31 2d 31 2e 36 6c 2e 34 2d 2e 32 2d 2e 31 2e 34 63 2d 2e 35 2c 32 2e 38 2d 36 2e 36 2c 33 2d 36 2e 39 2c 33 5a 6d 2e 39 2d 31 2e 31 2d 2e 32 2e 36 63 31 2e 32 2d 2e 31 2c 35 2e 31 2d 2e 34 2c 35 2e 39 2d 32 2e 31 43 37 37 2e 36 2c 37 Data Ascii: 2-1.8C76.4,71.6,73.8,72.5,72.6,72.3Z"/><path class="cls-1" d="M72.9,71l-.4,1.2s6.2-.1,6.6-2.8c.1,0-4.6,2.1-6.2,1.6Z"/><path class="cls-2" d="M72.2,72.4l.6-1.7.2.1c1.2.4,4.8-1,6.1-1.6l.4-.2-.1.4c-.5,2.8-6.6,3-6.9,3Zm.9-1.1-.2.6c1.2-.1,5.1-.4,5.9-2.1C77.6,7
2024-04-23 20:34:27 UTC	6818	IN	Data Raw: 2c 30 2c 30 2c 31 2d 31 2e 36 2d 2e 39 63 2d 2e 31 2d 2e 31 2d 2e 33 2d 2e 36 2d 2e 31 2d 2e 38 2e 34 2d 2e 34 2c 31 2e 38 2e 31 2c 32 2e 36 2e 35 68 2e 31 6c 2e 37 2e 37 2d 2e 33 2e 31 41 32 2e 33 2c 32 2e 33 2c 30 2c 30 2c 31 2c 35 33 2e 33 2c 37 33 5a 6d 2d 31 2e 34 2d 31 2e 34 61 2e 37 37 2e 37 37 2c 30 2c 30 2c 30 2c 2e 31 2e 33 2c 31 2e 36 32 2c 31 2e 36 32 2c 30 2c 30 2c 30 2c 32 2e 31 2e 35 6c 2d 2e 32 2d 2e 32 41 34 2e 38 35 2c 34 2e 38 35 2c 30 2c 30 2c 30 2c 35 31 2e 39 2c 37 31 2e 36 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 35 34 2c 37 32 73 2d 32 2e 38 2d 2e 31 2d 32 2e 39 2d 31 2c 32 2e 33 2d 2e 31 2c 33 2c 2e 33 2d 2e 31 2e 37 2d 2e 31 2e 37 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c Data Ascii: ,0,0,1-1.6-.9c-.1-.1-.3-.6-.1-.8.4-.4,1.8.1,2.6.5h.1l.7.7-.3.1A2.3,2.3,0,0,1,53.3,73Zm-1.4-1.4a.77.77,0,0,0,.1.3,1.62,1.62,0,0,0,2.1.5l-.2-.2A4.85,4.85,0,0,0,51.9,71.6Z"/><path class="cls-1" d="M54,72s-2.8-.1-2.9-1,2.3-.1,3,.3-.1.7-.1.7Z"/><path class="cl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	50328	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:26 UTC	1036	OUT	GET /assets/images/arrow-11-64.png HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
2024-04-23 20:34:26 UTC	360	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:27 GMT Cache-Control: no-cache Last-Modified: Fri, 13 Nov 2020 15:33:47 GMT Content-Type: image/png Content-Length: 709 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:26 UTC	709	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 02 77 49 44 41 54 78 9c ed d8 4f a8 8c 51 18 c7 f1 cf bd 49 6a 24 0b c9 0a 49 56 0a a1 24 f9 93 ad 52 56 b3 41 44 ec 44 51 16 94 a5 05 6b 91 c2 ea 6c 48 b1 55 94 28 12 ca 4a c2 c2 c2 c2 4a 4e 49 9a 2c 8e d1 74 5d 66 ee cc 3b f7 9e 79 e7 7c 97 ef 7b ce f3 bc e7 37 bf 73 9e e7 0c 85 42 a1 50 28 14 0a 85 c2 9c 10 83 e5 31 58 3b 57 f9 27 e7 2a 71 07 4b f1 22 06 67 62 98 fd ef c9 41 00 98 8f 8b 78 14 83 55 b3 99 38 17 01 da 6c c3 eb 18 1c 99 ad 84 b9 09 00 0b 71 2d 06 f7 62 b0 6c d8 c9 72 14 a0 cd 1e c9 0d fb 86 99 24 67 01 48 07 e4 ed 18 dc 8c c1 e2 61 24 c8 5d 80 36 07 f0 32 06 3b ab 0e 3c 2a Data Ascii: PNGIHDR@@iqpHYs+wIDATxOQIj$IV$RVADDQklHU(JJNI,t]f;y\|{7sBP(1X;W'qK"gbAxU8lq-blr$gHa$]62;<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	50330	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:26 UTC	1030	OUT	GET /assets/images/To-Do.svg HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
2024-04-23 20:34:27 UTC	365	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:27 GMT Cache-Control: no-cache Last-Modified: Fri, 13 Nov 2020 15:33:47 GMT Content-Type: image/svg+xml Content-Length: 2306 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:27 UTC	2306	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 33 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	50332	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:27 UTC	1038	OUT	GET /assets/images/helpStopFraud.svg HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
2024-04-23 20:34:27 UTC	365	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:28 GMT Cache-Control: no-cache Last-Modified: Fri, 13 Nov 2020 15:33:48 GMT Content-Type: image/svg+xml Content-Length: 1490 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:27 UTC	1490	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 30 20 39 33 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 63 6c 73 2d 32 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 63 6c 69 70 2d 70 61 74 68 29 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a 23 32 34 34 61 37 33 3b 7d 2e 63 6c 73 2d 34 7b 66 69 6c 6c 3a 23 66 35 61 38 30 30 3b 7d 2e 63 6c 73 2d 35 7b 66 69 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 1080 938"><defs><style>.cls-1{fill:none;}.cls-2{clip-path:url(#clip-path);}.cls-3{fill:#244a73;}.cls-4{fill:#f5a800;}.cls-5{fi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	50333	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:27 UTC	1049	OUT	GET /assets/images/tellUsWhatHappenedNoDots.svg HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reportfraud.ftc.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
2024-04-23 20:34:27 UTC	365	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:28 GMT Cache-Control: no-cache Last-Modified: Fri, 13 Nov 2020 15:33:48 GMT Content-Type: image/svg+xml Content-Length: 1900 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:27 UTC	1900	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 33 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	50335	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:27 UTC	797	OUT	GET /assets/images/ftc-dnc-logo.jpg HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
2024-04-23 20:34:27 UTC	371	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:28 GMT Cache-Control: max-age=31536000 Last-Modified: Tue, 13 Sep 2022 19:46:36 GMT Content-Type: image/jpeg Content-Length: 30654 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:27 UTC	16013	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 12 84 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 07 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 62 00 00 00 1b 01 05 00 01 00 00 00 6a 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 0d 00 00 00 72 00 00 00 32 01 02 00 14 00 00 00 80 00 00 00 69 87 04 00 01 00 00 00 94 00 00 00 a6 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 47 49 4d 50 20 32 2e 31 30 2e 32 32 00 00 32 30 32 31 3a 30 33 3a 31 38 20 31 34 3a 34 31 3a 34 31 00 01 00 01 a0 03 00 01 00 00 00 01 00 00 00 00 00 00 00 08 00 00 01 04 00 01 00 00 00 00 01 00 00 01 01 04 00 01 00 00 00 3e 00 00 00 02 01 03 00 03 00 00 00 0c 01 00 00 03 01 03 00 01 00 00 00 06 00 00 00 06 01 03 00 01 00 00 00 06 Data Ascii: JFIFHHExifII*bj(1r2iHHGIMP 2.10.222021:03:18 14:41:41>
2024-04-23 20:34:27 UTC	14641	IN	Data Raw: cd 8e dd ba 9e 69 4d 71 61 b8 50 ca 26 6d d5 47 29 ca 2e 60 f2 e2 5c 06 e5 03 7e 13 c8 dc b2 2f aa a7 20 4a 2e 9a f6 bf dd 3c 2a 66 c9 6f 8a f6 a4 7f 79 29 b4 0e 3b 94 fa 07 01 a1 ba 85 ee 8d da 6e 86 a3 b3 59 ce 2a 93 92 15 67 38 aa 4e 48 fc b4 0a b0 b7 2c 77 a6 3b 1b 41 e1 24 cd 8f 75 35 53 a4 db 4e c3 25 92 3d 8a 6d 77 c6 10 95 b2 6c 9c 53 f7 5e 91 dc 2f 47 ff 00 57 97 02 2f a2 91 98 1c 47 72 a5 76 28 82 a9 ab c0 70 33 75 79 64 f1 41 f2 c3 e0 a9 aa 73 74 3b f0 a9 e6 94 60 fb 91 23 7c d5 3c d9 2e bf 45 31 bc 24 a8 b9 83 cb 85 45 59 71 c2 c4 da 69 5e 2e 02 22 48 0f 71 54 b5 19 c2 c7 75 53 04 85 e5 f6 d1 31 a5 e7 0b 77 54 90 49 1b ee f1 c2 b5 d7 97 e4 a8 63 d3 1f 10 d0 0d f8 3e a2 69 0d 86 9f 24 5b 36 f6 3f 55 15 5c 91 9d 75 08 6b aa ac e7 15 49 c9 0a b3 Data Ascii: iMqaP&mG).`\~/ J.<foy);nYg8NH,w;A$u5SN%=mwlS^/GW/Grv(p3uydAst;`#\|<.E1$EYqi^."HqTuS1wTIc>i$[6?U\ukI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	50334	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:27 UTC	811	OUT	GET /assets/images/exclamation-triangle-solid.svg HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
2024-04-23 20:34:27 UTC	364	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:28 GMT Cache-Control: no-cache Last-Modified: Fri, 13 Nov 2020 15:33:48 GMT Content-Type: image/svg+xml Content-Length: 703 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:27 UTC	703	IN	Data Raw: 3c 73 76 67 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 66 6f 63 75 73 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 64 61 74 61 2d 70 72 65 66 69 78 3d 22 66 61 73 22 20 64 61 74 61 2d 69 63 6f 6e 3d 22 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 22 20 63 6c 61 73 73 3d 22 73 76 67 2d 69 6e 6c 69 6e 65 2d 2d 66 61 20 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 20 66 61 2d 77 2d 31 38 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 37 36 20 35 31 32 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 20 64 3d 22 4d 35 36 39 2e 35 31 37 20 34 34 30 2e 30 31 33 43 Data Ascii: <svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="exclamation-triangle" class="svg-inline--fa fa-exclamation-triangle fa-w-18" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512"><path fill="white" d="M569.517 440.013C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	50336	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:27 UTC	796	OUT	GET /assets/images/arrow-11-64.png HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
2024-04-23 20:34:27 UTC	360	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:28 GMT Cache-Control: no-cache Last-Modified: Fri, 13 Nov 2020 15:33:47 GMT Content-Type: image/png Content-Length: 709 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:27 UTC	709	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 02 77 49 44 41 54 78 9c ed d8 4f a8 8c 51 18 c7 f1 cf bd 49 6a 24 0b c9 0a 49 56 0a a1 24 f9 93 ad 52 56 b3 41 44 ec 44 51 16 94 a5 05 6b 91 c2 ea 6c 48 b1 55 94 28 12 ca 4a c2 c2 c2 c2 4a 4e 49 9a 2c 8e d1 74 5d 66 ee cc 3b f7 9e 79 e7 7c 97 ef 7b ce f3 bc e7 37 bf 73 9e e7 0c 85 42 a1 50 28 14 0a 85 c2 9c 10 83 e5 31 58 3b 57 f9 27 e7 2a 71 07 4b f1 22 06 67 62 98 fd ef c9 41 00 98 8f 8b 78 14 83 55 b3 99 38 17 01 da 6c c3 eb 18 1c 99 ad 84 b9 09 00 0b 71 2d 06 f7 62 b0 6c d8 c9 72 14 a0 cd 1e c9 0d fb 86 99 24 67 01 48 07 e4 ed 18 dc 8c c1 e2 61 24 c8 5d 80 36 07 f0 32 06 3b ab 0e 3c 2a Data Ascii: PNGIHDR@@iqpHYs+wIDATxOQIj$IV$RVADDQklHU(JJNI,t]f;y\|{7sBP(1X;W'qK"gbAxU8lq-blr$gHa$]62;<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	50337	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:27 UTC	793	OUT	GET /assets/images/idt-logo.png HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
2024-04-23 20:34:27 UTC	370	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:28 GMT Cache-Control: max-age=31536000 Last-Modified: Tue, 13 Sep 2022 19:47:15 GMT Content-Type: image/png Content-Length: 25653 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:27 UTC	10344	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 03 00 00 00 90 08 06 00 00 00 54 38 b7 53 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 63 d7 49 44 41 54 78 da ec bd 0d 94 1c 57 79 e7 5d 78 bd c9 09 7b 24 3a c1 f1 49 8e 66 a3 d6 6b 3b 2f f2 89 f1 98 8f 58 09 76 d4 22 96 4e c0 31 1a 5b 0e 98 8f 8d 7a b4 c1 c0 12 98 51 f0 47 02 86 99 01 3b 6f 0c ec 99 19 27 2c 86 2c 9e 11 98 60 40 f2 8c 4c 6c 16 49 d9 69 2d ce 46 7a 13 a3 11 06 29 7c 18 b5 60 74 12 08 89 da 12 38 fb 6e b2 47 6f fd aa ee 33 73 e7 4e 55 75 55 77 75 4f f7 cc f3 3f 2e f7 a8 bb ea d6 ad 5b 5f ff ff 73 9f 0f cf 53 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 Data Ascii: PNGIHDRT8StEXtSoftwareAdobe ImageReadyqe<cIDATxWy]x{$:Ifk;/Xv"N1[zQG;o',,`@LlIi-Fz)\|`t8nGo3sNUuUwuO?.[_sS(BP(BP(BP(BP(BP
2024-04-23 20:34:27 UTC	1289	IN	Data Raw: c6 9a 05 40 40 31 2b f1 92 17 5f 3d bf 4e d6 3e 03 ce 2b c2 82 4c 4f 5f 7b fa e9 e3 7a 6b 28 14 0a 85 62 25 e0 af 47 76 15 bd c5 05 35 67 5f 3e f4 50 4d 47 46 a1 48 21 06 46 86 86 4a 57 5c f1 8b f3 b9 e9 41 54 80 af 1b 2f 20 95 72 a3 80 08 60 76 80 9c fb e2 2e 24 59 87 10 09 61 e1 ac a5 01 c9 cb 81 20 dd a9 77 74 59 f6 cd 2c 4a d9 d4 2d 60 6c e8 0b 59 9d 10 4f 22 a4 98 95 61 cc 18 6f 39 3f f5 32 32 51 b0 4c 84 06 f1 1e 2e f8 ce 5f 67 fb 33 a7 ab 63 1d f2 10 2f 3b 0f 71 cf 7f 88 0f 77 d1 4b c8 ed eb a4 df ff aa 3e 7a 14 8a 25 64 ad dc e1 dd ac f8 f7 6e 45 ef f9 ae b9 a6 48 84 b1 d3 5f fa 62 7e e7 9c 4c fb cb b8 9e 1f 85 8a 81 04 fc f1 47 3e 32 fb c0 d8 78 29 24 99 27 03 c2 79 c6 f8 f7 0b f1 94 0c 40 95 27 bf 3c bf 5d 52 d5 5f 88 2d 0b 64 9f ed 85 98 3e 30 Data Ascii: @@1+_=N>+LO_{zk(b%Gv5g_>PMGFH!FJW\AT/ r`v.$Ya wtY,J-`lYO"ao9?22QL._g3c/;qwK>z%dnEH_b~LG>2x)$'y@'<]R_-d>0
2024-04-23 20:34:27 UTC	12890	IN	Data Raw: f0 1b e7 93 73 c4 39 43 1c 3c f5 d7 7f 53 d5 5b 43 a1 c8 0f 58 fe 4d 2a c3 a2 f3 53 55 03 89 15 8a a6 e1 a6 0f 1d 57 97 1e 85 22 3d 92 66 06 0e 6f f9 b5 cd 4b 82 db b0 da 43 1c 21 9b 10 7a d2 5f 4a 36 1e 9b 6c 8b 55 9f 4f 66 14 ee 33 b9 f1 59 20 9d af f1 bf 83 bc 8a 08 90 ca c3 73 c6 12 cf 3e f8 44 38 d4 cb 56 b4 12 c0 31 32 4e 8c 9d 54 1d 66 2c 18 af b0 ee c2 d6 60 ac 18 27 d6 13 21 80 0b 51 58 d5 f9 c8 fc d8 bb 58 9b 30 cb e2 ae 8f 10 f9 99 17 be b0 a0 b7 86 42 91 3b 6e f6 16 fb 9d 57 cd 77 0a 85 a2 41 44 c4 cf 00 b5 f6 2b 14 19 90 18 33 30 f3 3f 0e 8f fb 84 7d a8 5e b0 2c bf cd 39 e9 2a 71 43 11 8b 35 2e 40 58 b7 c9 88 f3 a8 89 39 00 10 7d 02 87 c9 2e b4 d6 f8 c9 83 30 75 e7 a6 f9 ed 71 55 c2 62 cd 6c 41 ab 82 76 97 0b e2 fa 23 a4 5d 32 16 3d 6a be 23 Data Ascii: s9C<S[CXMSUW"=foKC!z_J6lUOf3Y s>D8V12NTf,`'!QXX0B;nWwAD+30?}^,9qC5.@X9}.0uqUblAv#]2=j#
2024-04-23 20:34:27 UTC	1130	IN	Data Raw: 1f fe b0 5f 67 01 14 0a 45 87 23 aa be 80 ba 08 29 14 ab eb be af aa 18 50 31 b0 1c 82 a0 c2 e7 17 1f 7f 02 51 d0 ff 73 3f ff f3 db 7f e3 55 af 82 60 0f 62 f9 97 a2 5d 58 d8 25 b6 80 bf 25 8d a7 64 02 0a b2 10 59 a4 9d 85 99 02 88 bf 54 35 0e db b8 32 a8 7e bc 76 ed 07 82 6d 6d 21 20 d9 8c 00 eb 32 7b 80 fb 91 5d f3 40 fe 66 9f fc 7e ee dc f9 79 01 c1 f6 87 2b 95 da c9 13 27 a7 8f 1e 39 72 fc cf 3e fb c8 98 5e 86 0a 85 a2 d3 61 b2 a9 94 9d af 2b 9a 91 4a a1 58 36 60 b1 6f 75 06 2f 8a 81 15 9d ef f6 e8 d0 ab 18 58 76 51 00 ae fb 95 5f 45 18 8c fd e5 97 9f 3c fe a3 1f ff 68 60 cd da b5 bd 90 79 2c f5 58 df 21 e0 32 33 40 00 30 c4 5d d2 7d 0a 24 2d 28 29 42 b1 e6 b3 0e 64 1d 17 22 08 be ac 3f 2f 24 fc 76 59 c4 bd 88 59 03 71 53 12 e2 1f 16 0a 3b 19 cc 58 30 Data Ascii: _gE#)P1Qs?U`b]X%%dYT52~vmm! 2{]@f~y+'9r>^a+JX6`ou/XvQ_E<h`y,X!23@0]}$-()Bd"?/$vYYqS;X0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	50340	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:27 UTC	790	OUT	GET /assets/images/To-Do.svg HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
2024-04-23 20:34:28 UTC	365	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:28 GMT Cache-Control: no-cache Last-Modified: Fri, 13 Nov 2020 15:33:47 GMT Content-Type: image/svg+xml Content-Length: 2306 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:28 UTC	2306	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 33 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	50342	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:27 UTC	804	OUT	GET /assets/images/RF-Logo-Seal-NEW-01.svg HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
2024-04-23 20:34:28 UTC	367	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:28 GMT Cache-Control: no-cache Last-Modified: Fri, 13 Nov 2020 15:33:45 GMT Content-Type: image/svg+xml Content-Length: 121060 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:28 UTC	6694	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 39 35 2e 37 20 31 31 37 2e 39 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 31 2c 2e 63 6c 73 2d 34 7b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 7d 2e 63 6c 73 2d 32 2c 2e 63 6c 73 2d 34 7b 66 69 6c 6c 3a 23 32 34 34 38 37 33 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a 23 32 33 31 66 32 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 36 32 2c 31 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 495.7 117.9"><defs><style>.cls-1{fill:#fff;}.cls-1,.cls-4{fill-rule:evenodd;}.cls-2,.cls-4{fill:#244873;}.cls-3{fill:#231f20;}</style></defs><path class="cls-1" d="M62,1
2024-04-23 20:34:28 UTC	3867	IN	Data Raw: 31 2d 2e 37 2e 38 41 2e 37 35 2e 37 35 2c 30 2c 30 2c 31 2c 33 39 2c 31 37 5a 6d 30 2d 32 61 2e 33 37 2e 33 37 2c 30 2c 30 2c 30 2d 2e 33 2e 31 2e 38 2e 38 2c 30 2c 30 2c 30 2d 2e 33 2c 31 2e 31 2c 31 2c 31 2c 30 2c 30 2c 30 2c 2e 35 2e 34 2e 34 34 2e 34 34 2c 30 2c 30 2c 30 2c 2e 35 2d 2e 31 68 30 61 2e 36 36 2e 36 36 2c 30 2c 30 2c 30 2c 2e 34 2d 2e 35 2e 34 34 2e 34 34 2c 30 2c 30 2c 30 2d 2e 31 2d 2e 35 41 2e 36 34 2e 36 34 2c 30 2c 30 2c 30 2c 33 39 2c 31 35 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 33 37 2e 36 2c 31 37 2e 37 61 31 2c 31 2c 30 2c 30 2c 30 2c 2e 34 2d 31 2e 34 2c 31 2e 31 31 2c 31 2e 31 31 2c 30 2c 30 2c 30 2d 31 2e 34 2d 2e 34 2c 31 2c 31 2c 30 2c 30 2c 30 2d 2e 34 2c 31 2e 34 2c 31 2e 31 37 Data Ascii: 1-.7.8A.75.75,0,0,1,39,17Zm0-2a.37.37,0,0,0-.3.1.8.8,0,0,0-.3,1.1,1,1,0,0,0,.5.4.44.44,0,0,0,.5-.1h0a.66.66,0,0,0,.4-.5.44.44,0,0,0-.1-.5A.64.64,0,0,0,39,15Z"/><path class="cls-1" d="M37.6,17.7a1,1,0,0,0,.4-1.4,1.11,1.11,0,0,0-1.4-.4,1,1,0,0,0-.4,1.4,1.17
2024-04-23 20:34:28 UTC	6445	IN	Data Raw: 2e 37 31 2e 37 31 2c 30 2c 30 2c 30 2d 2e 36 2e 33 2c 31 2e 34 32 2c 31 2e 34 32 2c 30 2c 30 2c 30 2d 2e 32 2e 36 2e 35 35 2e 35 35 2c 30 2c 30 2c 30 2c 2e 33 2e 35 2c 31 2e 34 32 2c 31 2e 34 32 2c 30 2c 30 2c 30 2c 2e 36 2e 32 2e 35 35 2e 35 35 2c 30 2c 30 2c 30 2c 2e 35 2d 2e 33 68 30 61 31 2e 34 32 2c 31 2e 34 32 2c 30 2c 30 2c 30 2c 2e 32 2d 2e 36 2e 35 35 2e 35 35 2c 30 2c 30 2c 30 2d 2e 33 2d 2e 35 43 32 33 2e 32 2c 32 38 2e 37 2c 32 33 2e 31 2c 32 38 2e 36 2c 32 32 2e 39 2c 32 38 2e 36 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 32 2e 35 2c 33 31 2e 37 61 31 2c 31 2c 30 2c 30 2c 30 2d 2e 33 2d 31 2e 34 2c 31 2e 30 36 2c 31 2e 30 36 2c 30 2c 30 2c 30 2d 31 2e 34 2e 32 41 31 2e 31 39 2c 31 2e 31 39 2c 30 2c Data Ascii: .71.71,0,0,0-.6.3,1.42,1.42,0,0,0-.2.6.55.55,0,0,0,.3.5,1.42,1.42,0,0,0,.6.2.55.55,0,0,0,.5-.3h0a1.42,1.42,0,0,0,.2-.6.55.55,0,0,0-.3-.5C23.2,28.7,23.1,28.6,22.9,28.6Z"/><path class="cls-1" d="M22.5,31.7a1,1,0,0,0-.3-1.4,1.06,1.06,0,0,0-1.4.2A1.19,1.19,0,
2024-04-23 20:34:28 UTC	6445	IN	Data Raw: 30 61 2e 37 31 2e 37 31 2c 30 2c 30 2c 30 2d 2e 36 2e 33 63 2d 2e 31 2e 32 2d 2e 32 2e 33 2d 2e 32 2e 35 61 2e 35 35 2e 35 35 2c 30 2c 30 2c 30 2c 2e 33 2e 35 2e 38 35 2e 38 35 2c 30 2c 30 2c 30 2c 2e 36 2e 32 2e 37 35 2e 37 35 2c 30 2c 30 2c 30 2d 2e 31 2d 31 2e 35 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 34 2e 34 2c 36 35 2e 34 61 31 2c 31 2c 30 2c 30 2c 30 2d 31 2e 32 2d 2e 39 2c 31 2c 31 2c 30 2c 30 2c 30 2d 2e 38 2c 31 2e 31 2c 31 2e 30 37 2c 31 2e 30 37 2c 30 2c 30 2c 30 2c 31 2e 31 2e 39 2e 39 2e 39 2c 30 2c 30 2c 30 2c 2e 39 2d 31 2e 31 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 31 33 2e 34 2c 36 36 2e 38 61 2e 39 31 2e 39 31 2c 30 2c 30 2c 31 2d 2e 37 2d 2e 33 Data Ascii: 0a.71.71,0,0,0-.6.3c-.1.2-.2.3-.2.5a.55.55,0,0,0,.3.5.85.85,0,0,0,.6.2.75.75,0,0,0-.1-1.5Z"/><path class="cls-1" d="M14.4,65.4a1,1,0,0,0-1.2-.9,1,1,0,0,0-.8,1.1,1.07,1.07,0,0,0,1.1.9.9.9,0,0,0,.9-1.1Z"/><path class="cls-2" d="M13.4,66.8a.91.91,0,0,1-.7-.3
2024-04-23 20:34:28 UTC	6445	IN	Data Raw: 63 2e 34 2d 2e 33 2e 33 2d 31 2d 2e 31 2d 31 2e 34 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 32 39 2c 39 36 2e 33 61 31 2e 31 34 2c 31 2e 31 34 2c 30 2c 30 2c 31 2d 2e 38 2d 2e 33 2c 31 2e 32 33 2c 31 2e 32 33 2c 30 2c 30 2c 31 2d 2e 34 2d 2e 38 2c 31 2e 34 2c 31 2e 34 2c 30 2c 30 2c 31 2c 2e 33 2d 2e 39 2c 31 2e 32 33 2c 31 2e 32 33 2c 30 2c 30 2c 31 2c 2e 38 2d 2e 34 2c 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2c 2e 39 2e 33 2c 31 2c 31 2c 30 2c 30 2c 31 2c 2e 34 2e 39 2c 31 2e 34 2c 31 2e 34 2c 30 2c 30 2c 31 2d 2e 33 2e 39 41 31 2e 36 31 2c 31 2e 36 31 2c 30 2c 30 2c 31 2c 32 39 2c 39 36 2e 33 5a 6d 30 2d 32 61 31 2e 34 32 2c 31 2e 34 32 2c 30 2c 30 2c 30 2d 2e 36 2e 32 2e 37 33 2e 37 33 2c 30 2c 30 2c 30 Data Ascii: c.4-.3.3-1-.1-1.4Z"/><path class="cls-2" d="M29,96.3a1.14,1.14,0,0,1-.8-.3,1.23,1.23,0,0,1-.4-.8,1.4,1.4,0,0,1,.3-.9,1.23,1.23,0,0,1,.8-.4,1.61,1.61,0,0,1,.9.3,1,1,0,0,1,.4.9,1.4,1.4,0,0,1-.3.9A1.61,1.61,0,0,1,29,96.3Zm0-2a1.42,1.42,0,0,0-.6.2.73.73,0,0,0
2024-04-23 20:34:28 UTC	15468	IN	Data Raw: 2c 31 30 38 2e 39 5a 6d 30 2d 32 61 2e 36 38 2e 36 38 2c 30 2c 30 2c 30 2d 2e 37 2e 37 2c 31 2e 34 32 2c 31 2e 34 32 2c 30 2c 30 2c 30 2c 2e 32 2e 36 2e 37 33 2e 37 33 2c 30 2c 30 2c 30 2c 31 2c 30 2c 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 30 2c 2e 33 2d 2e 35 2e 37 31 2e 37 31 2c 30 2c 30 2c 30 2d 2e 38 2d 2e 38 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 36 32 2c 31 30 36 2e 37 61 31 2e 30 38 2c 31 2e 30 38 2c 30 2c 30 2c 30 2d 31 2c 31 2c 31 2c 31 2c 30 2c 30 2c 30 2c 31 2c 31 2c 31 2c 31 2c 30 2c 30 2c 30 2c 30 2d 32 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 36 32 2c 31 30 39 61 31 2e 33 2c 31 2e 33 2c 30 2c 31 2c 31 2c 31 2e 32 2d 31 2e 33 41 31 2e 33 2c 31 2e 33 2c Data Ascii: ,108.9Zm0-2a.68.68,0,0,0-.7.7,1.42,1.42,0,0,0,.2.6.73.73,0,0,0,1,0,2.19,2.19,0,0,0,.3-.5.71.71,0,0,0-.8-.8Z"/><path class="cls-1" d="M62,106.7a1.08,1.08,0,0,0-1,1,1,1,0,0,0,1,1,1,1,0,0,0,0-2Z"/><path class="cls-2" d="M62,109a1.3,1.3,0,1,1,1.2-1.3A1.3,1.3,
2024-04-23 20:34:28 UTC	10312	IN	Data Raw: 37 2d 2e 32 2c 31 2e 33 37 2c 31 2e 33 37 2c 30 2c 30 2c 31 2d 2e 35 2d 2e 38 2c 31 2e 32 31 2c 31 2e 32 31 2c 30 2c 30 2c 31 2c 31 2d 31 2e 34 2c 31 2e 32 32 2c 31 2e 32 32 2c 30 2c 30 2c 31 2c 31 2e 34 2c 31 2c 31 2e 31 37 2c 31 2e 31 37 2c 30 2c 30 2c 31 2d 31 2c 31 2e 34 5a 6d 30 2d 31 2e 39 68 2d 2e 31 61 2e 38 35 2e 38 35 2c 30 2c 30 2c 30 2d 2e 35 2e 33 2e 39 2e 39 2c 30 2c 30 2c 30 2d 2e 31 2e 35 68 30 61 2e 35 35 2e 35 35 2c 30 2c 30 2c 30 2c 2e 33 2e 35 2e 36 36 2e 36 36 2c 30 2c 30 2c 30 2c 2e 36 2e 31 2e 37 38 2e 37 38 2c 30 2c 30 2c 30 2c 2e 36 2d 2e 39 41 2e 38 39 2e 38 39 2c 30 2c 30 2c 30 2c 31 30 39 2e 38 2c 34 39 2e 35 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 30 38 2e 34 2c 34 38 2e 33 61 31 Data Ascii: 7-.2,1.37,1.37,0,0,1-.5-.8,1.21,1.21,0,0,1,1-1.4,1.22,1.22,0,0,1,1.4,1,1.17,1.17,0,0,1-1,1.4Zm0-1.9h-.1a.85.85,0,0,0-.5.3.9.9,0,0,0-.1.5h0a.55.55,0,0,0,.3.5.66.66,0,0,0,.6.1.78.78,0,0,0,.6-.9A.89.89,0,0,0,109.8,49.5Z"/><path class="cls-1" d="M108.4,48.3a1
2024-04-23 20:34:28 UTC	16384	IN	Data Raw: 35 34 2c 30 2c 30 2c 30 2c 2e 33 2d 2e 34 2e 38 33 2e 38 33 2c 30 2c 30 2c 30 2d 2e 35 2d 31 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 37 31 2e 38 2c 31 32 2e 32 61 31 2c 31 2c 30 2c 31 2c 30 2c 2e 34 2d 32 2c 31 2c 31 2c 30 2c 30 2c 30 2d 2e 34 2c 32 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 37 32 2c 31 32 2e 34 68 2d 2e 32 61 31 2e 35 36 2c 31 2e 35 36 2c 30 2c 30 2c 31 2d 2e 38 2d 2e 36 2c 31 2e 31 35 2c 31 2e 31 35 2c 30 2c 30 2c 31 2d 2e 31 2d 31 2c 31 2e 32 31 2c 31 2e 32 31 2c 30 2c 30 2c 31 2c 31 2e 35 2d 2e 39 2c 31 2e 31 38 2c 31 2e 31 38 2c 30 2c 30 2c 31 2c 2e 39 2c 31 2e 35 41 31 2e 32 37 2c 31 2e 32 37 2c 30 2c 30 2c 31 2c 37 32 2c 31 32 2e 34 5a 6d 2d 2e 31 Data Ascii: 54,0,0,0,.3-.4.83.83,0,0,0-.5-1Z"/><path class="cls-1" d="M71.8,12.2a1,1,0,1,0,.4-2,1,1,0,0,0-.4,2Z"/><path class="cls-2" d="M72,12.4h-.2a1.56,1.56,0,0,1-.8-.6,1.15,1.15,0,0,1-.1-1,1.21,1.21,0,0,1,1.5-.9,1.18,1.18,0,0,1,.9,1.5A1.27,1.27,0,0,1,72,12.4Zm-.1
2024-04-23 20:34:28 UTC	373	IN	Data Raw: 32 2d 32 30 2e 36 76 2d 2e 32 68 2e 32 63 31 30 2e 32 2c 31 2e 33 2c 32 37 2e 37 2d 31 31 2e 36 2c 32 37 2e 39 2d 31 31 2e 38 68 2e 33 6c 2e 31 2e 31 63 2e 31 2e 31 2c 31 34 2e 39 2c 31 32 2e 31 2c 32 38 2c 31 31 2e 37 48 39 30 76 2e 32 61 36 34 2e 33 37 2c 36 34 2e 33 37 2c 30 2c 30 2c 31 2d 32 2e 33 2c 32 30 2e 34 41 37 33 2e 39 33 2c 37 33 2e 39 33 2c 30 2c 30 2c 31 2c 36 31 2e 38 2c 39 34 2e 37 5a 6d 2d 32 38 2d 35 39 2e 33 41 36 38 2e 34 31 2c 36 38 2e 34 31 2c 30 2c 30 2c 30 2c 33 36 2c 35 35 2e 37 2c 37 30 2e 39 2c 37 30 2e 39 2c 30 2c 30 2c 30 2c 36 31 2e 37 2c 39 34 2e 32 2c 37 33 2e 35 33 2c 37 33 2e 35 33 2c 30 2c 30 2c 30 2c 38 37 2e 33 2c 35 35 2e 34 61 36 34 2e 38 36 2c 36 34 2e 38 36 2c 30 2c 30 2c 30 2c 32 2e 33 2d 32 30 68 2d 2e 34 63 2d Data Ascii: 2-20.6v-.2h.2c10.2,1.3,27.7-11.6,27.9-11.8h.3l.1.1c.1.1,14.9,12.1,28,11.7H90v.2a64.37,64.37,0,0,1-2.3,20.4A73.93,73.93,0,0,1,61.8,94.7Zm-28-59.3A68.41,68.41,0,0,0,36,55.7,70.9,70.9,0,0,0,61.7,94.2,73.53,73.53,0,0,0,87.3,55.4a64.86,64.86,0,0,0,2.3-20h-.4c-
2024-04-23 20:34:28 UTC	10312	IN	Data Raw: 6c 2d 2e 35 2e 34 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 36 31 2e 39 2c 37 37 2e 39 63 2d 2e 32 2c 30 2d 2e 33 2d 2e 31 2d 2e 34 2d 2e 31 2d 2e 36 2d 2e 34 2d 2e 34 2d 32 2d 2e 34 2d 32 2e 33 76 2d 2e 31 6c 2e 38 2d 2e 36 2e 31 2e 33 61 32 2e 31 39 2c 32 2e 31 39 2c 30 2c 30 2c 30 2c 2e 33 2e 35 63 2e 34 2e 38 2e 36 2c 31 2e 33 2e 35 2c 31 2e 37 61 31 2e 37 2c 31 2e 37 2c 30 2c 30 2c 31 2d 2e 36 2e 36 5a 6d 2d 2e 33 2d 32 2e 32 61 33 2e 31 39 2c 33 2e 31 39 2c 30 2c 30 2c 30 2c 2e 32 2c 31 2e 38 48 36 32 61 31 2e 33 38 2c 31 2e 33 38 2c 30 2c 30 2c 30 2c 2e 34 2d 2e 33 63 2e 31 2d 2e 32 2d 2e 31 2d 2e 37 2d 2e 35 2d 31 2e 33 2c 30 2d 2e 31 2d 2e 31 2d 2e 32 2d 2e 31 2d 2e 33 5a 22 2f 3e 3c 70 61 74 68 20 63 6c Data Ascii: l-.5.4Z"/><path class="cls-2" d="M61.9,77.9c-.2,0-.3-.1-.4-.1-.6-.4-.4-2-.4-2.3v-.1l.8-.6.1.3a2.19,2.19,0,0,0,.3.5c.4.8.6,1.3.5,1.7a1.7,1.7,0,0,1-.6.6Zm-.3-2.2a3.19,3.19,0,0,0,.2,1.8H62a1.38,1.38,0,0,0,.4-.3c.1-.2-.1-.7-.5-1.3,0-.1-.1-.2-.1-.3Z"/><path cl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	50343	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:27 UTC	798	OUT	GET /assets/images/helpStopFraud.svg HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
2024-04-23 20:34:28 UTC	365	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:28 GMT Cache-Control: no-cache Last-Modified: Fri, 13 Nov 2020 15:33:48 GMT Content-Type: image/svg+xml Content-Length: 1490 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:28 UTC	1490	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 30 20 39 33 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 63 6c 73 2d 32 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 63 6c 69 70 2d 70 61 74 68 29 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a 23 32 34 34 61 37 33 3b 7d 2e 63 6c 73 2d 34 7b 66 69 6c 6c 3a 23 66 35 61 38 30 30 3b 7d 2e 63 6c 73 2d 35 7b 66 69 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 1080 938"><defs><style>.cls-1{fill:none;}.cls-2{clip-path:url(#clip-path);}.cls-3{fill:#244a73;}.cls-4{fill:#f5a800;}.cls-5{fi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	50344	107.21.11.164	443	7808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:34:27 UTC	809	OUT	GET /assets/images/tellUsWhatHappenedNoDots.svg HTTP/1.1 Host: reportfraud.ftc.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1488306903.1713904341; _ga=GA1.1.1455269847.1713904340; _ga_B59RVWNH5N=GS1.1.1713904340.1.1.1713904456.0.0.0; _ga=GA1.3.1455269847.1713904340; _gid=GA1.3.1488306903.1713904341; _ga_CSLL4ZEK4L=GS1.1.1713904340.1.1.1713904459.0.0.0; ai_user=hWio874g7e8cuX5iVJiWti\|2024-04-23T20:34:21.713Z; ai_session=1NS9AkMA2Pui9WBIV1s8tv\|1713904462011\|1713904462011; _ga_GWC5V51YNF=GS1.1.1713904463.1.0.1713904463.0.0.0
2024-04-23 20:34:28 UTC	365	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:34:28 GMT Cache-Control: no-cache Last-Modified: Fri, 13 Nov 2020 15:33:48 GMT Content-Type: image/svg+xml Content-Length: 1900 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-23 20:34:28 UTC	1900	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 33 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Target ID:	0
Start time:	22:31:38
Start date:	23/04/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\DNCREGCONF.pdf"
Imagebase:	0x7ff6bc1b0000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	22:31:39
Start date:	23/04/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	22:31:39
Start date:	23/04/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2088 --field-trial-handle=1552,i,16758632931669318689,2895981579886307693,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	22:32:03
Start date:	23/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://www.donotcall.gov/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	22:32:03
Start date:	23/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1996,i,8102230674122585108,12077789046849465771,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report DNCREGCONF.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\345a725b-c5e4-4f0a-b5ef-da148dec2269.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240423203143Z-160.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.7104

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Windows Analysis Report
DNCREGCONF.pdf