Edit tour

Windows Analysis Report
https://lokicollective.org/project/

Overview

General Information

Sample URL:	https://lokicollective.org/project/
Analysis ID:	1430847
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1828 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1948 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2168,i,13060034692085098184,4281837526702625336,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7144 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://lokicollective.org/project/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.google.com/sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadsafe%3Dlow%26adtest%3Doff%26psid%3D7949183650%26pcsa%3Dfalse%26channel%3Dnon-expiry%26domain_name%3Dlokicollective.org%26client%3Ddp-godaddy1_xml%26r%3Dm%26rpbu%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-oo-1885714186540894%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300002%252C17301437%252C17301439%252C17301442%26client_gdprApplies%3D0%26format%3Dr3%26nocache%3D421713945521519%26num%3D0%26output%3Dafd_ads%26v%3D3%26bsl%3D8%26pac%3D2%26u_his%3D1%26u_tz%3D120%26dt%3D1713945521522%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D907%26frm%3D0%26uio%3D-%26cont%3DrelatedLinks%26drt%3D0%26jsid%3Dcaf%26nfp%3D1%26jsv%3D625314022%26rurl%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26referer%3Dhttps%253A%252F%252Flokicollective.org%252Fproject%252F&q=EgSaEGkkGLT3orEGIjASKWvf3s_h17mP-Uc4UVzAQloNiIqRSy-JFjke5NIPT7PON1RaNAY9q1P-D0LQKt8yAXJKGVNPU...	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadsafe%3Dlow%26adtest%3Doff%26psid%3D7949183650%26pcsa%3Dfalse%26channel%3Dnon-expiry%26domain_name%3Dlokicollective.org%26client%3Ddp-godaddy1_xml%26r%3Dm%26rpbu%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-oo-1885714186540894%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300002%252C17301437%252C17301439%252C17301442%26client_gdprApplies%3D0%26format%3Dr3%26nocache%3D421713945521519%26num%3D0%26output%3Dafd_ads%26v%3D3%26bsl%3D8%26pac%3D2%26u_his%3D1%26u_tz%3D120%26dt%3D1713945521522%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D907%26frm%3D0%26uio%3D-%26cont%3DrelatedLinks%26drt%3D0%26jsid%3Dcaf%26nfp%3D1%26jsv%3D625314022%26rurl%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26referer%3Dhttps%253A%252F%252Flokicollective.org%252Fproject%252F&q=EgSaEGkkGLT3orEGIjASKWvf3s_h17mP-Uc4UVzAQloNiIqRSy-JFjke5NIPT7PON1RaNAY9q1P-D0LQKt8yAXJKGVNPU...	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&s=HvyRYTb8JCTIQsjTBmWcfxZwavGlIxZBHYwtWjX603zvKXD_wY85wI_xUZJ9bvr2ySTHHyI_Fj41ha_HbTru4FzDvb6nUcXBIfrGjGh8LOa3GvsH9_G6KGNjRTqL1xJiA4k6bcgCRnxnXJbZWqQLvVTDG-p5hbGniG2FrKKtcxLpMtSjvZJypIG1HN8uuezkjA8Ij7MezmHUz52odH3bTqfkXDX4Lh6V7IWFJs9TCYucM5RVoK768hM9FZIzLNcHZvuKQOn_k4gB6OCLx8sbJ7TzXaY5nAE&cb=o8d72n2u6tuf	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	HTTP Parser: No favicon
Source: https://www.godaddy.com/domainfind/v1/redirect?key=parkweb&utm_source=godaddy&utm_medium=parkedpages&utm_campaign=x_dom-broker_parkedpages_x_x_invest_001&tmskey=dpp_dbs&domainToCheck=lokicollective.org&isc=GPPTCOM&itc=parkedpage_landers	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.206.6.29:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.206.6.29:443 -> 192.168.2.6:49721 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /project/ HTTP/1.1Host: lokicollective.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lander HTTP/1.1Host: lokicollective.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://lokicollective.org/project/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&gdabp=true HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://lokicollective.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag?o=5097926782615552&upapi=true HTTP/1.1Host: btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://lokicollective.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag?o=5097926782615552&upapi=true HTTP/1.1Host: btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://lokicollective.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"99d9767dcb7d8390d77625c402e08999"If-Modified-Since: Wed, 24 Apr 2024 07:21:18 GMT
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://lokicollective.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.6066674524460127 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://lokicollective.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mw/state?bt_env=prod HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://lokicollective.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://lokicollective.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://lokicollective.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.6066674524460127 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/parking/landers/lokicollective.org?trafficTarget=reseller&abp=1&gdabp=true HTTP/1.1Host: api.aws.parking.godaddy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Request-Id: 56d7852b-2394-475c-af04-42543a818fbcsec-ch-ua-platform: "Windows"Accept: /Origin: https://lokicollective.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://lokicollective.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/parking/landers/lokicollective.org?trafficTarget=reseller&abp=1&gdabp=true HTTP/1.1Host: api.aws.parking.godaddy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adsafe=low&adtest=off&psid=7949183650&pcsa=false&channel=non-expiry&domain_name=lokicollective.org&client=dp-godaddy1_xml&r=m&rpbu=https%3A%2F%2Flokicollective.org%2Flander&type=3&uiopt=true&swp=as-drid-oo-1885714186540894&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=r3&nocache=421713945521519&num=0&output=afd_ads&v=3&bsl=8&pac=2&u_his=1&u_tz=120&dt=1713945521522&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=907&frm=0&uio=-&cont=relatedLinks&drt=0&jsid=caf&nfp=1&jsv=625314022&rurl=https%3A%2F%2Flokicollective.org%2Flander&referer=https%3A%2F%2Flokicollective.org%2Fproject%2F HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://lokicollective.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadsafe%3Dlow%26adtest%3Doff%26psid%3D7949183650%26pcsa%3Dfalse%26channel%3Dnon-expiry%26domain_name%3Dlokicollective.org%26client%3Ddp-godaddy1_xml%26r%3Dm%26rpbu%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-oo-1885714186540894%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300002%252C17301437%252C17301439%252C17301442%26client_gdprApplies%3D0%26format%3Dr3%26nocache%3D421713945521519%26num%3D0%26output%3Dafd_ads%26v%3D3%26bsl%3D8%26pac%3D2%26u_his%3D1%26u_tz%3D120%26dt%3D1713945521522%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D907%26frm%3D0%26uio%3D-%26cont%3DrelatedLinks%26drt%3D0%26jsid%3Dcaf%26nfp%3D1%26jsv%3D625314022%26rurl%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26referer%3Dhttps%253A%252F%252Flokicollective.org%252Fproject%252F&q=EgSaEGkkGLT3orEGIjASKWvf3s_h17mP-Uc4UVzAQloNiIqRSy-JFjke5NIPT7PON1RaNAY9q1P-D0LQKt8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://lokicollective.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadsafe%3Dlow%26adtest%3Doff%26psid%3D7949183650%26pcsa%3Dfalse%26channel%3Dnon-expiry%26domain_name%3Dlokicollective.org%26client%3Ddp-godaddy1_xml%26r%3Dm%26rpbu%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-oo-1885714186540894%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300002%252C17301437%252C17301439%252C17301442%26client_gdprApplies%3D0%26format%3Dr3%26nocache%3D421713945521519%26num%3D0%26output%3Dafd_ads%26v%3D3%26bsl%3D8%26pac%3D2%26u_his%3D1%26u_tz%3D120%26dt%3D1713945521522%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D907%26frm%3D0%26uio%3D-%26cont%3DrelatedLinks%26drt%3D0%26jsid%3Dcaf%26nfp%3D1%26jsv%3D625314022%26rurl%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26referer%3Dhttps%253A%252F%252Flokicollective.org%252Fproject%252F&q=EgSaEGkkGLT3orEGIjASKWvf3s_h17mP-Uc4UVzAQloNiIqRSy-JFjke5NIPT7PON1RaNAY9q1P-D0LQKt8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&s=HvyRYTb8JCTIQsjTBmWcfxZwavGlIxZBHYwtWjX603zvKXD_wY85wI_xUZJ9bvr2ySTHHyI_Fj41ha_HbTru4FzDvb6nUcXBIfrGjGh8LOa3GvsH9_G6KGNjRTqL1xJiA4k6bcgCRnxnXJbZWqQLvVTDG-p5hbGniG2FrKKtcxLpMtSjvZJypIG1HN8uuezkjA8Ij7MezmHUz52odH3bTqfkXDX4Lh6V7IWFJs9TCYucM5RVoK768hM9FZIzLNcHZvuKQOn_k4gB6OCLx8sbJ7TzXaY5nAE&cb=o8d72n2u6tuf HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadsafe%3Dlow%26adtest%3Doff%26psid%3D7949183650%26pcsa%3Dfalse%26channel%3Dnon-expiry%26domain_name%3Dlokicollective.org%26client%3Ddp-godaddy1_xml%26r%3Dm%26rpbu%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-oo-1885714186540894%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300002%252C17301437%252C17301439%252C17301442%26client_gdprApplies%3D0%26format%3Dr3%26nocache%3D421713945521519%26num%3D0%26output%3Dafd_ads%26v%3D3%26bsl%3D8%26pac%3D2%26u_his%3D1%26u_tz%3D120%26dt%3D1713945521522%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D907%26frm%3D0%26uio%3D-%26cont%3DrelatedLinks%26drt%3D0%26jsid%3Dcaf%26nfp%3D1%26jsv%3D625314022%26rurl%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26referer%3Dhttps%253A%252F%252Flokicollective.org%252Fproject%252F&q=EgSaEGkkGLT3orEGIjASKWvf3s_h17mP-Uc4UVzAQloNiIqRSy-JFjke5NIPT7PON1RaNAY9q1P-D0LQKt8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&s=HvyRYTb8JCTIQsjTBmWcfxZwavGlIxZBHYwtWjX603zvKXD_wY85wI_xUZJ9bvr2ySTHHyI_Fj41ha_HbTru4FzDvb6nUcXBIfrGjGh8LOa3GvsH9_G6KGNjRTqL1xJiA4k6bcgCRnxnXJbZWqQLvVTDG-p5hbGniG2FrKKtcxLpMtSjvZJypIG1HN8uuezkjA8Ij7MezmHUz52odH3bTqfkXDX4Lh6V7IWFJs9TCYucM5RVoK768hM9FZIzLNcHZvuKQOn_k4gB6OCLx8sbJ7TzXaY5nAE&cb=o8d72n2u6tufAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/6JK7PkhQPjgGeBZqyHKCSWuJKD5ZJmF_kzmP9QlV1DY.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&s=HvyRYTb8JCTIQsjTBmWcfxZwavGlIxZBHYwtWjX603zvKXD_wY85wI_xUZJ9bvr2ySTHHyI_Fj41ha_HbTru4FzDvb6nUcXBIfrGjGh8LOa3GvsH9_G6KGNjRTqL1xJiA4k6bcgCRnxnXJbZWqQLvVTDG-p5hbGniG2FrKKtcxLpMtSjvZJypIG1HN8uuezkjA8Ij7MezmHUz52odH3bTqfkXDX4Lh6V7IWFJs9TCYucM5RVoK768hM9FZIzLNcHZvuKQOn_k4gB6OCLx8sbJ7TzXaY5nAE&cb=o8d72n2u6tufAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadsafe%3Dlow%26adtest%3Doff%26psid%3D7949183650%26pcsa%3Dfalse%26channel%3Dnon-expiry%26domain_name%3Dlokicollective.org%26client%3Ddp-godaddy1_xml%26r%3Dm%26rpbu%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-oo-1885714186540894%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300002%252C17301437%252C17301439%252C17301442%26client_gdprApplies%3D0%26format%3Dr3%26nocache%3D421713945521519%26num%3D0%26output%3Dafd_ads%26v%3D3%26bsl%3D8%26pac%3D2%26u_his%3D1%26u_tz%3D120%26dt%3D1713945521522%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D907%26frm%3D0%26uio%3D-%26cont%3DrelatedLinks%26drt%3D0%26jsid%3Dcaf%26nfp%3D1%26jsv%3D625314022%26rurl%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26referer%3Dhttps%253A%252F%252Flokicollective.org%252Fproject%252F&q=EgSaEGkkGLT3orEGIjASKWvf3s_h17mP-Uc4UVzAQloNiIqRSy-JFjke5NIPT7PON1RaNAY9q1P-D0LQKt8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: lokicollective.org

Source: chromecache_74.2.dr	String found in binary or memory: https://btloader.com/tag?o=5097926782615552&upapi=true
Source: chromecache_67.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_67.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_67.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_67.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_67.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_74.2.dr	String found in binary or memory: https://img1.wsimg.com/parking-lander/static/css/main.8a1d19af.css
Source: chromecache_74.2.dr	String found in binary or memory: https://img1.wsimg.com/parking-lander/static/js/main.93aa74bd.js
Source: chromecache_60.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_60.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_67.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_67.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_67.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_67.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_67.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_67.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_60.2.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_67.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_78.2.dr, chromecache_66.2.dr	String found in binary or memory: https://www.godaddy.com/domainfind/v1/redirect?key=parkweb
Source: chromecache_74.2.dr	String found in binary or memory: https://www.google.com/adsense/domains/caf.js?abp=1&gdabp=true
Source: chromecache_59.2.dr, chromecache_67.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_67.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.
Source: chromecache_59.2.dr, chromecache_76.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 23.206.6.29:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.206.6.29:443 -> 192.168.2.6:49721 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@19/47@36/13

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2168,i,13060034692085098184,4281837526702625336,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://lokicollective.org/project/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2168,i,13060034692085098184,4281837526702625336,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://lokicollective.org/project/	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://api.btloader.com/mw/state?bt_env=prod	0%	URL Reputation	safe
https://syndicatedsearch.goog	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe
https://ad-delivery.net/px.gif?ch=2	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
https://btloader.com/tag?o=5097926782615552&upapi=true	0%	Avira URL Cloud	safe
https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.	0%	Avira URL Cloud	safe
https://ad-delivery.net/px.gif?ch=1&e=0.6066674524460127	0%	Avira URL Cloud	safe
https://btloader.com/tag?o=5097926782615552&upapi=true	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
gddomainparking.com	52.32.46.203	true	false	unknown
www3.l.google.com	74.125.137.100	true	false	high
api.btloader.com	130.211.23.194	true	false	unknown
lokicollective.org	76.223.67.189	true	false	unknown
ad.doubleclick.net	142.251.2.148	true	false	high
www.google.com	142.250.141.106	true	false	high
btloader.com	104.22.74.216	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
ad-delivery.net	172.67.69.19	true	false	unknown
img1.wsimg.com	unknown	unknown	false	high
api.aws.parking.godaddy.com	unknown	unknown	false	high
www.godaddy.com	unknown	unknown	false	high
www.adsensecustomsearchads.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://btloader.com/tag?o=5097926782615552&upapi=true	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://api.btloader.com/mw/state?bt_env=prod	false	URL Reputation: safe	unknown
https://lokicollective.org/project/	false		unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&s=HvyRYTb8JCTIQsjTBmWcfxZwavGlIxZBHYwtWjX603zvKXD_wY85wI_xUZJ9bvr2ySTHHyI_Fj41ha_HbTru4FzDvb6nUcXBIfrGjGh8LOa3GvsH9_G6KGNjRTqL1xJiA4k6bcgCRnxnXJbZWqQLvVTDG-p5hbGniG2FrKKtcxLpMtSjvZJypIG1HN8uuezkjA8Ij7MezmHUz52odH3bTqfkXDX4Lh6V7IWFJs9TCYucM5RVoK768hM9FZIzLNcHZvuKQOn_k4gB6OCLx8sbJ7TzXaY5nAE&cb=o8d72n2u6tuf	false		high
https://www.godaddy.com/domainfind/v1/redirect?key=parkweb&utm_source=godaddy&utm_medium=parkedpages&utm_campaign=x_dom-broker_parkedpages_x_x_invest_001&tmskey=dpp_dbs&domainToCheck=lokicollective.org&isc=GPPTCOM&itc=parkedpage_landers	false		high
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC	false		high
about:blank	false	Avira URL Cloud: safe	low
https://www.google.com/js/bg/6JK7PkhQPjgGeBZqyHKCSWuJKD5ZJmF_kzmP9QlV1DY.js	false		high
https://ad-delivery.net/px.gif?ch=1&e=0.6066674524460127	false	Avira URL Cloud: safe	unknown
https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250	false		high
https://ad-delivery.net/px.gif?ch=2	false	URL Reputation: safe	unknown
https://lokicollective.org/lander	false		unknown
https://www.google.com/recaptcha/api.js	false		high
https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false		high
https://api.aws.parking.godaddy.com/v1/parking/landers/lokicollective.org?trafficTarget=reseller&abp=1&gdabp=true	false		high
https://www.google.com/adsense/domains/caf.js?abp=1&gdabp=true	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://img1.wsimg.com/parking-lander/static/css/main.8a1d19af.css	chromecache_74.2.dr	false		high
https://img1.wsimg.com/parking-lander/static/js/main.93aa74bd.js	chromecache_74.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_67.2.dr	false		high
https://syndicatedsearch.goog	chromecache_60.2.dr	false	URL Reputation: safe	unknown
https://www.godaddy.com/domainfind/v1/redirect?key=parkweb	chromecache_78.2.dr, chromecache_66.2.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_67.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_67.2.dr	false		high
https://recaptcha.net	chromecache_67.2.dr	false	URL Reputation: safe	unknown
https://www.apache.org/licenses/	chromecache_67.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.	chromecache_67.2.dr	false	Avira URL Cloud: safe	low
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_67.2.dr	false		high
https://cloud.google.com/contact	chromecache_67.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_67.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_67.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_67.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_67.2.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_59.2.dr, chromecache_67.2.dr	false		high
https://support.google.com/recaptcha	chromecache_67.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
76.223.67.189	lokicollective.org	United States	16509	AMAZON-02US	false
142.250.141.99	unknown	United States	15169	GOOGLEUS	false
172.67.69.19	ad-delivery.net	United States	13335	CLOUDFLARENETUS	false
52.32.46.203	gddomainparking.com	United States	16509	AMAZON-02US	false
74.125.137.100	www3.l.google.com	United States	15169	GOOGLEUS	false
130.211.23.194	api.btloader.com	United States	15169	GOOGLEUS	false
142.251.2.149	unknown	United States	15169	GOOGLEUS	false
142.251.2.148	ad.doubleclick.net	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.22.74.216	btloader.com	United States	13335	CLOUDFLARENETUS	false
142.250.141.105	unknown	United States	15169	GOOGLEUS	false
142.250.141.106	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1430847
Start date and time:	2024-04-24 09:57:39 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://lokicollective.org/project/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@19/47@36/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.godaddy.com/domainfind/v1/redirect?key=parkweb&utm_source=godaddy&utm_medium=parkedpages&utm_campaign=x_dom-broker_parkedpages_x_x_invest_001&tmskey=dpp_dbs&domainToCheck=lokicollective.org&isc=GPPTCOM&itc=parkedpage_landers

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 74.125.137.94, 142.251.2.138, 142.251.2.100, 142.251.2.102, 142.251.2.139, 142.251.2.101, 142.251.2.113, 142.251.2.84, 34.104.35.123, 23.60.168.73, 184.50.26.136, 142.251.2.156, 142.251.2.155, 142.251.2.154, 142.251.2.157, 142.251.2.94, 20.12.23.50, 23.1.234.24, 23.1.234.57, 142.251.2.95, 74.125.137.95, 142.250.141.95, 192.229.211.108, 20.242.39.171, 23.42.87.11
Excluded domains from analysis (whitelisted): e40258.g.akamaiedge.net, slscr.update.microsoft.com, e6001.dscx.akamaiedge.net, partner.googleadservices.com, clientservices.googleapis.com, a767.dspw65.akamai.net, partner46.googleadservices.com, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, global-wildcard.wsimg.com.sni-only.edgekey.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, wildcard-ipv6.godaddy.com.edgekey.net, edgedl.me.gvt1.com, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=2
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	5.306543582984092
Encrypted:	false
SSDEEP:	6:wBqWekiTakpxxdGztoIhS3EaXqnRCsDPLCmKhTVPDn4R2bcaS3jfU0cMdTVPDnHE:dkK9dg5qEaXSchTxSjfLTxzM
MD5:	DC869978477F0AB44CA7C92B54760992
SHA1:	B14C1CA4328A68F093ACE1A7E7AC5019A259616B
SHA-256:	0EC76501F13FFFDBC6012AABF90DCF64A80F9E19DA1D85A40CD5DB30942B555D
SHA-512:	2915C9B19BBFC2700331E27A1CB5032DFCBCE3D0FFC64AF39E148CD56884BD9142DB72B8122BECC91B5B5E41BC0EE73EF48AF64C5ACDBA7BB819E4E8BDB24CEC
Malicious:	false
Reputation:	low
URL:	https://www.godaddy.com/favicon.ico
Preview:	<HTML><HEAD>.<TITLE>Access Denied</TITLE>.</HEAD><BODY>.<H1>Access Denied</H1>. .You don't have permission to access "http://www.godaddy.com/favicon.ico" on this server.<P>.Reference #18.e52c817.1713945536.2b996fcf.<P>https://errors.edgesuite.net/18.e52c817.1713945536.2b996fcf</P>.</BODY>.</HTML>.

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (390), with no line terminators
Category:	downloaded
Size (bytes):	390
Entropy (8bit):	5.452206121452059
Encrypted:	false
SSDEEP:	12:xWkuiEClSXhxX5MG7HdpiECVhxhxX5MG7n:FhlyhPMGzdohVhxhPMG7n
MD5:	5E419C663EAFBB22476958CC98F8F2E9
SHA1:	79E8517B4C665207792330651BA829126839F3E7
SHA-256:	C70ACFC5B657D304078786829A4B217949120DAD29C360DEA879BBC8885016B7
SHA-512:	AB2BF63ED2B017C70FEB0FB3649F6AC967DC2416FD89DB93308C7B815B567F4FB74E8EC0CF86D92D1AECC7F3F98D9473D16F3692E8454DAB0283F8834F8419E9
Malicious:	false
Reputation:	low
URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=lokicollective.org&client=dp-godaddy1_xml&product=SAS&callback=__sasCookie
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=584c2865410e810c:T=1713945524:RT=1713945524:S=ALNI_Maa0z7O5YxlHib-PhKoLdbRDfPYcg","_expires_":1747641524,"_path_":"/","_domain_":"lokicollective.org","_version_":1},{"_value_":"UID=00000decd8327cd5:T=1713945524:RT=1713945524:S=ALNI_Ma2VH3_adU1OEfYZmOfcezHQNoKYA","_expires_":1747641524,"_path_":"/","_domain_":"lokicollective.org","_version_":2}]});

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.820160639060783
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWtX5l1A4fsLqo40RWUnYN:VKEctKonR3evtTA8h1mLrwUnG
MD5:	E9AD011280352C75C6F9CF212C42AACD
SHA1:	05A41AC3A9E296E1D9E6251E6908EABFE9697D04
SHA-256:	B5E1FFD95251B13685BD867DFB1759CEB8DE9E5FB874E052C856022B29DDA862
SHA-512:	3FEFD42D4070B6BCDBC59C54CF45D48273B740604E3AE4428DA23E092709C970575204DA64D19EBC14A555ADD41CA32D2CE3912B043FEC51017FD901E3EC5D9B
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-A236J/ZUgU+0/O6b/VC6BQicPcdW8QQ1ITyp6reT

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2247)
Category:	downloaded
Size (bytes):	190570
Entropy (8bit):	5.671817982490716
Encrypted:	false
SSDEEP:	3072:4IGRDZpFmafXFUX38XqXGJjQYKnBk6qfkJ:4Z1IOwXEjDKBk65
MD5:	D4949377D933654F20623FAC5B393286
SHA1:	F7FB09F1A8BA0C3FAA7A05EAFA5D4D0CC5162017
SHA-256:	00EE9E9008373561A50ED528754A5C81C3BD547862C99F1ACD44350CEFFBDD34
SHA-512:	24F5A71ABDBBDCEF2D8E8DAFFE8FEB6A05E436DB84BC8B7B39A0FBF05F0FACE9B43C7FB91A21FF0C4A7D756AD3C248072A6A7598A25CF05189B66356F6AED784
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/domains/caf.js?abp=1&gdabp=true
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"296391904020312482",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,17301439,17301442",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:""}};var m;function da(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ea="function"==typeof Object.defineProperties?Object.defi

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	downloaded
Size (bytes):	643697
Entropy (8bit):	5.622723461519557
Encrypted:	false
SSDEEP:	12288:u/11YqkQYnlQYnoYDUk4f0WTI4WY+MiqFVRFE0bSb:u/11PkQYnlQYnoq
MD5:	9E0C2ACC6884700DEF88042217CE0E2D
SHA1:	21176E4AE7B69BAF2939B14FFBDC04352281A432
SHA-256:	9B5D7CF50FA1B5D3F15913AD67116CAD2E0760E9EFA514CE0FF6A89AF51346CB
SHA-512:	7D55EE755C44A84C380723F61C06E25F368B0956C090A0466BBE43C5121CC96FA16CE2D1ED9CDC740BA2CBF967B3B22DAF9FA8033C20B1BD6EEF7EBE40890B89
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/parking-lander/static/js/main.93aa74bd.js
Preview:	/! For license information please see main.93aa74bd.js.LICENSE.txt /.(()=>{var e={7142:(e,t,n)=>{"use strict";n.d(t,{N:()=>r,_:()=>o});const r="abp=1&gdabp=true",o="abp=2&gdabp=true"},9040:(e,t,n)=>{"use strict";function r(e){return!0===e\|\|"true"===e\|\|1===e\|\|"1"===e\|\|!1!==e&&"false"!==e&&0!==e&&"0"!==e&&null}n.d(t,{g:()=>r})},9631:(e,t,n)=>{"use strict";n.d(t,{A:()=>i,U:()=>a});var r=n(7142),o=n(947);function i(e){let t;try{t=JSON.stringify(e,((e,t)=>{if(null!==t&&"undefined"!==typeof t&&""!==t)return t}))}catch(n){o.Z.error(n)}return o.Z.debug("lander event: "+t),t}function a(e,t){const n=i(t);return e+="?"+r.N,fetch(e,{method:"POST",credentials:"omit",body:n,headers:{"Content-Type":"application/json"}}).then((e=>{e.ok\|\|o.Z.error("error publishing event - HTTP Status: "+e.status)})).catch((e=>{o.Z.error("error publishing event - "+e.toString())}))}},947:(e,t,n)=>{"use strict";n.d(t,{B:()=>o,Z:()=>r});class r{static logMessage(e,t){if(r.Severity[r.level]>=r.Severity[e]){let n="warn";

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (56290)
Category:	downloaded
Size (bytes):	56291
Entropy (8bit):	5.403684695685341
Encrypted:	false
SSDEEP:	768:bemBuCcWs7PraSAHVofy1a7ea6OwfbWqIziUW94jdx6yTcCVQWNWXtI6XSHkCEbP:zurFbGiia7eaQmjx6sIfXSHkNP
MD5:	6B46202888665C62F3CD2316918BFEAA
SHA1:	A6A9E9192FF41967BC0B3F7353A1D2661ABF719B
SHA-256:	843147E8FE42B68B85F87AB0D4FE7AC4756A48901BA617AC96F292C444F174E2
SHA-512:	1710AC80E6604FB5D68BAABD0603F65A15E97177F079E94CA9BCD282846C4E05308DB1278B7135AAA46C0BF72A35E624507BB3D5ED99E36F0BBE34236E43C04D
Malicious:	false
Reputation:	low
URL:	https://btloader.com/tag?o=5097926782615552&upapi=true
Preview:	!function(){"use strict";var e=function(){return e=Object.assign\|\|function(e){for(var t,n=1,s=arguments.length;n<s;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},e.apply(this,arguments)};function t(e,t,n,s){return new(n\|\|(n=Promise))((function(r,i){function o(e){try{c(s.next(e))}catch(e){i(e)}}function a(e){try{c(s.throw(e))}catch(e){i(e)}}function c(e){var t;e.done?r(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,a)}c((s=s.apply(e,t\|\|[])).next())}))}function n(e,t){var n,s,r,i,o={label:0,sent:function(){if(1&r[0])throw r[1];return r[1]},trys:[],ops:[]};return i={next:a(0),throw:a(1),return:a(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function a(i){return function(a){return function(i){if(n)throw new TypeError("Generator is already executing.");for(;o;)try{if(n=1,s&&(r=2&i[0]?s.return:i[0]?s.throw\|\|((r=s.return)&&r.call(s),0):s.next)&&!(r=r.call(s,i[1])).done)return r;switch(s=

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors
Category:	downloaded
Size (bytes):	1078
Entropy (8bit):	1.240940859118772
Encrypted:	false
SSDEEP:	3:etFEh9HYflvlNl/AXll1pe/WNN00000000000000000000000000000000000001:QNtY6+lKY6
MD5:	4123CE1E1732F202F60292941FF1487D
SHA1:	9F12B11BDE582DAE37CE8C160537D919C561C464
SHA-256:	D961B08E4321250926DE6F79087594975FE20AD1518DE8F91EB711AF5D1A6EF8
SHA-512:	11B24C2E622C408E4774FAE120B719A21A0B2ACFA53230126C35AD6CA57D33D4DE79CBE11D296CFBDE9613CAA03D66B721BD20CF4EE030CF75F5A1FD8A286DA9
Malicious:	false
Reputation:	low
URL:	https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
Preview:	..............(...&... ..........N...(....... ...............................................................................................................................................................................................................................................................................................(... ...@.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	979
Entropy (8bit):	5.203691435744328
Encrypted:	false
SSDEEP:	24:Yh3LQz9wuX8T1cfkdcJozSktu1IR+siBAVj7:Yh3LwzecfkcJYSUR+siaN
MD5:	0FA0B6241D7E757BA54E6607F92B23CA
SHA1:	68D0A8A0E0DFE5B1891F5E073FF0703AF12A7ADF
SHA-256:	BFA3902DF876348A14435FD8864834408ED4FF96434B6F6819A1FFAF80874D4E
SHA-512:	8A5B1D7596FB7B79F1623942232B1FF7AA7E01A640912BDBCBD0DBD9F52E69B138B1A1AB65FDB971761DC6349C5497942ABE1A6C53348828479A7A1E86D61107
Malicious:	false
Reputation:	low
Preview:	{"untargeted":{"system":"PW","displayType":"ADS","dataSource":"INVENTORY","adSense":{"drid":"as-drid-oo-1885714186540894","channel":"non-expiry","pubId":"dp-godaddy1_xml"},"adTile":{"searchResultCode":"NONE"},"domain":{"rootDomain":"lokicollective.org","rootDomainFromBrowser":"lokicollective.org","rootDomainDisplayText":"lokicollective.org","expired":false,"expiresAt":"","status":{"internal":"ACTIVE"},"hasAuction":false},"lander":{"template":"PARK_WEB","banner":{"show":true,"link":"https://www.godaddy.com/domainfind/v1/redirect?key=parkweb\u0026utm_source=godaddy\u0026utm_medium=parkedpages\u0026utm_campaign=x_dom-broker_parkedpages_x_x_invest_001\u0026tmskey=dpp_dbs\u0026domainToCheck=lokicollective.org\u0026isc=GPPTCOM\u0026itc=parkedpage_landers","type":"DBS"},"ads":{"show":true},"i18n":true,"showDomain":false},"experiment":{"experiment":"parking_parkweb_ab_03","cohort":"pw_treatment","start":"2024-04-17T00:00:00Z","end":"2024-05-17T00:00:00Z","enabled":true}}}.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (597)
Category:	downloaded
Size (bytes):	518479
Entropy (8bit):	5.683759340720687
Encrypted:	false
SSDEEP:	12288:wTJtYdv7tmjTEyw+Z8ML8Vo1ukBO1N34PS+H7wIqBG7iIXXON2R+:kEcLVuN2R+
MD5:	8326C23D6B3EED35BC3E62F3294587FD
SHA1:	EDDA17E74E53E85073E5EAC9CB6BE2163DBFA23C
SHA-256:	57F03D3BA66117EDC152646341120DD3A1D7D71B9A98A3723AF5A8AE61BCB3AB
SHA-512:	F63FAEEA0ACCAC3FA74CF6168B319D901EDE869A83E7E6129158A120008E70E5B239BBBFF3159917F8AEEFCF997916A778AE21900B22035657E05AAAE9EBAAC0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=1&e=0.6066674524460127
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAk8dqZYMe7mkRIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17683)
Category:	downloaded
Size (bytes):	18278
Entropy (8bit):	5.623496272234338
Encrypted:	false
SSDEEP:	384:6CVlOu+6ONczau5v4yDb44f5wMZI/P+teaexfDIcrnOY4wb:6O+gt4yDbvf5wsIBaezrnOYtb
MD5:	7D07C2BBCB789E8A63340B6F449416E0
SHA1:	44856381D2A46155517776ADBB8B21B5EFE41FFD
SHA-256:	E892BB3E48503E380678166AC87282496B89283E5926617F93398FF50955D436
SHA-512:	6530BC8A5E56FEE5546CF6A3797D9EF0769A18DC92424E82273E80F39F29B79E905B3C8B65DE6B791EE466D502477D3CFEDD7139D917F3A9E4BA73F8562A4515
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/6JK7PkhQPjgGeBZqyHKCSWuJKD5ZJmF_kzmP9QlV1DY.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var R=this\|\|self,L=function(n){return n},D=function(n,Y){if(!(Y=(n=null,R.trustedTypes),Y)\|\|!Y.createPolicy)return n;try{n=Y.createPolicy("bg",{createHTML:L,createScript:L,createScriptURL:L})}catch(d){R.console&&R.console.error(d.message)}return n};(0,eval)(function(n,Y){return(Y=D())&&1===n.eval(Y.createScript("1"))?function(d){return Y.createScript(d)}:function(d){return""+d}}(R)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var nW=function(n,Y){return Y=0,function(){return Y<n.length?{done:false,value:n[Y++]}:{done:true}}},YK=function(n,Y){return(n=n.create().shift(),Y.A).create().length\|\|Y.C.create().length\|\|(Y.A=void 0,Y.C=void 0),n},d4=function(n,Y){function R(){this.I=(this.n=0,[])}return[function(L){n.iS(L),Y.iS(L)},(Y=(R.prototype.dX=(R.prototype.iS=function(L,m){(this.n++,50)>this.I.length?this.I.push(L):(m=Math.f

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (619)
Category:	downloaded
Size (bytes):	620
Entropy (8bit):	5.134716678073845
Encrypted:	false
SSDEEP:	12:qTE0L26zFtAiSTFzU1UgYTJ5HSQQ9WSPD3LAVe2KPD3LqhTbk:0E0LRzKTFjpn49WSoVpKSh/k
MD5:	259417E1F9EE538515E103E06552310A
SHA1:	2FC35CFAF0CEA7F5121114DF7E9D41A21A434EE3
SHA-256:	6CE85C22DDE60FC6C6781F1495BC88DE7B906F2A2036CAF811739FDAFDE686E6
SHA-512:	DC0866BB42A8A6FC03EC777376ED720E91E30B3E171314DD8D7155A7CD826CFA125E586B2B548A6167696CDD41EA29721A46BE320A7FC156B8C06EA1D15920E9
Malicious:	false
Reputation:	low
URL:	https://lokicollective.org/lander
Preview:	<!doctype html><html lang="en"><head><meta charset="UTF-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="data:,"/><script src="https://www.google.com/adsense/domains/caf.js?abp=1&gdabp=true"></script><script src="https://btloader.com/tag?o=5097926782615552&upapi=true" async></script><script>window.LANDER_SYSTEM="PW"</script><script defer="defer" src="https://img1.wsimg.com/parking-lander/static/js/main.93aa74bd.js"></script><link href="https://img1.wsimg.com/parking-lander/static/css/main.8a1d19af.css" rel="stylesheet"></head><body><div id="root"></div></body></html>.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.476409765557392
Encrypted:	false
SSDEEP:	3:H0hCkuWthHeTn:UUkuqxeT
MD5:	A3144EE887752BC84252FAACD4DFFD83
SHA1:	172430F70BAEDA54BB9F533293E0E80A2DA5835D
SHA-256:	8B87CFF79D0F8142D02D4A5991C83A5D59A7733BCB0EBEDD0DE57E559C6EAEFB
SHA-512:	E366210709098991B8B21140DF48E50CD650E115A30A8A5EEC016B98B077C6DA3FEE972BA219409AD72E85BF575A033E1E9AAC7931B727E4BA15644AAC5349D3
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAnk29qo-IFWZRIFDVNaR8USEAk8dqZYMe7mkRIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgAKCQoHDVNaR8UaAA==

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.928019308351512
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKSbtQP5mwjWaee:PLKdXNQK+QP51L
MD5:	C193745DEB63FE67F3AA6B578C40DD99
SHA1:	8A3ECC2696074E71D3B011C99B98CB25229E1A31
SHA-256:	D41E076366E4207D57A5FD1725C2024F751C43AE4A3A8E93CC46DFB8462A3E5B
SHA-512:	A2FD9573CF80C9D14F9DCEAA1940407E88F7B35BDD01B1FF34891929DC5528A134E851B29CC2205EF8CE5F81A8DFAFED5D7A6A93A304C7B8844981844BA73A8E
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js');

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56412), with no line terminators
Category:	downloaded
Size (bytes):	56412
Entropy (8bit):	5.907540404138125
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBblxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0BbchXwW49z2
MD5:	2C00B9F417B688224937053CD0C284A5
SHA1:	17B4C18EBC129055DD25F214C3F11E03E9DF2D82
SHA-256:	1E754B107428162C65A26D399B66DB3DAAEA09616BF8620D9DE4BC689CE48EED
SHA-512:	8DC644D4C8E6DA600C751975AC4A9E620E26179167A4021DDB1DA81B452ECF420E459DD1C23D1F2E177685B4E1006DBC5C8736024C447D0FF65F75838A785F57
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	977
Entropy (8bit):	5.2069478251282595
Encrypted:	false
SSDEEP:	24:Yh3LQz9wuX8T1cfkdcJozSktu1IR+siBAg7:Yh3LwzecfkcJYSUR+siay
MD5:	D16FCE6DBDB3A1CC18224EDCC9DE9670
SHA1:	EA91F4FC915DDE2C48D83B5C0050CD342B9D7EE3
SHA-256:	5E394055C531A2A15E61B044902F3C3AC2DB9B924864EA24547C1EADDAB2F4AE
SHA-512:	C0D39B61469527323B4D34CEC58511A9C9917C7D279690EB9859E81AE0B19E2DABEDA63A11777A9ADB3EA717EFFB59B28079BAFC491B46BDD1E378EC59D05D15
Malicious:	false
Reputation:	low
URL:	https://api.aws.parking.godaddy.com/v1/parking/landers/lokicollective.org?trafficTarget=reseller&abp=1&gdabp=true
Preview:	{"untargeted":{"system":"PW","displayType":"ADS","dataSource":"INVENTORY","adSense":{"drid":"as-drid-oo-1885714186540894","channel":"non-expiry","pubId":"dp-godaddy1_xml"},"adTile":{"searchResultCode":"NONE"},"domain":{"rootDomain":"lokicollective.org","rootDomainFromBrowser":"lokicollective.org","rootDomainDisplayText":"lokicollective.org","expired":false,"expiresAt":"","status":{"internal":"ACTIVE"},"hasAuction":false},"lander":{"template":"PARK_WEB","banner":{"show":true,"link":"https://www.godaddy.com/domainfind/v1/redirect?key=parkweb\u0026utm_source=godaddy\u0026utm_medium=parkedpages\u0026utm_campaign=x_dom-broker_parkedpages_x_x_invest_001\u0026tmskey=dpp_dbs\u0026domainToCheck=lokicollective.org\u0026isc=GPPTCOM\u0026itc=parkedpage_landers","type":"DBS"},"ads":{"show":true},"i18n":true,"showDomain":false},"experiment":{"experiment":"parking_parkweb_ab_03","cohort":"pw_control","start":"2024-04-17T00:00:00Z","end":"2024-05-17T00:00:00Z","enabled":true}}}.

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	114
Entropy (8bit):	4.802925647778009
Encrypted:	false
SSDEEP:	3:PouVIZx/XMn30EEBuvFfD0OkADYyT0NV9kBbZWM:hax/XW3/p5mmYyT0NVuB9d
MD5:	E89F75F918DBDCEE28604D4E09DD71D7
SHA1:	F9D9055E9878723A12063B47D4A1A5F58C3EB1E9
SHA-256:	6DC9C7FC93BB488BB0520A6C780A8D3C0FB5486A4711ACA49B4C53FAC7393023
SHA-512:	8DF0AB2E3679B64A6174DEFF4259AE5680F88E3AE307E0EA2DFFF88EC4BA14F3477C9FE3A5AA5DA3A8E857601170A5108ED75F6D6975958AC7A314E4A336AED0
Malicious:	false
Reputation:	low
URL:	https://lokicollective.org/project/
Preview:	<!DOCTYPE html><html><head><script>window.onload=function(){window.location.href="/lander"}</script></head></html>

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2736)
Category:	downloaded
Size (bytes):	2781
Entropy (8bit):	4.938953500722623
Encrypted:	false
SSDEEP:	24:rdBxw4Vq8dB2sd7BsrufaMy6dLyn1t5xfyOA/8XAE7ybzdy2B8dyVyC3eRY4Bir3:Jw8quKbMy5FeJtuR/BiiKyxKq2Cq5
MD5:	E2009D689266387017B6648142516BD9
SHA1:	15535120C37EAB27B129C344A9DAC737D45844BB
SHA-256:	0FE514C7010C6D8B9E44F011EEA7497F7E482A60E1498CE324F99729948D048D
SHA-512:	91D19CEF15807C03D9F15B7742F950444415BDE32AB22D4584DEA02D6DCB3E019FA8D55CDCF99693A200F495CA1ED51DE94A8F3B268BCDEC8280523FFB2C2413
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/parking-lander/static/css/main.8a1d19af.css
Preview:	.Banner_banner__G1ca3{margin-bottom:5%}.trustArc_parkingTrustArcBanner__Ijwo0 .trustarc-banner-wrapper{box-shadow:none;box-sizing:border-box;height:100%;margin:0;max-width:100%;padding-top:1rem}.trustArc_parkingTrustArcBanner__Ijwo0 .trustarc-banner-wrapper>*{margin:auto;max-width:40rem}.trustArc_parkingTrustArcBanner__Ijwo0 .trustarc-banner-background{background-color:#0000!important}.trustArc_parkingTrustArcBanner__Ijwo0 .trustarc-banner-container{background-color:#fff;border-left:1px solid #e0e0e0;border-radius:15px 15px 0 0;border-right:1px solid #e0e0e0;border-top:1px solid #e0e0e0;box-sizing:border-box;display:flex;flex-direction:column;padding:1rem}.trustArc_parkingTrustArcBanner__Ijwo0 .trustarc-banner-container .banner-details-container{margin:0}.trustArc_parkingTrustArcBanner__Ijwo0 .trustarc-banner-container .banner-details-container .description-group{display:flex;flex-direction:row;gap:1rem}@media screen and (max-width:640px){.trustArc_parkingTrustArcBanner__Ijwo0 .trustar

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors
Category:	dropped
Size (bytes):	1078
Entropy (8bit):	1.240940859118772
Encrypted:	false
SSDEEP:	3:etFEh9HYflvlNl/AXll1pe/WNN00000000000000000000000000000000000001:QNtY6+lKY6
MD5:	4123CE1E1732F202F60292941FF1487D
SHA1:	9F12B11BDE582DAE37CE8C160537D919C561C464
SHA-256:	D961B08E4321250926DE6F79087594975FE20AD1518DE8F91EB711AF5D1A6EF8
SHA-512:	11B24C2E622C408E4774FAE120B719A21A0B2ACFA53230126C35AD6CA57D33D4DE79CBE11D296CFBDE9613CAA03D66B721BD20CF4EE030CF75F5A1FD8A286DA9
Malicious:	false
Reputation:	low
Preview:	..............(...&... ..........N...(....... ...............................................................................................................................................................................................................................................................................................(... ...@.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 09:58:27.222774029 CEST	49674	443	192.168.2.6	173.222.162.64
Apr 24, 2024 09:58:27.222775936 CEST	49673	443	192.168.2.6	173.222.162.64
Apr 24, 2024 09:58:27.550841093 CEST	49672	443	192.168.2.6	173.222.162.64
Apr 24, 2024 09:58:34.645657063 CEST	49705	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:34.645690918 CEST	443	49705	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:34.645787001 CEST	49705	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:34.647144079 CEST	49706	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:34.647152901 CEST	443	49706	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:34.647233963 CEST	49706	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:34.647489071 CEST	49706	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:34.647501945 CEST	443	49706	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:34.647620916 CEST	49705	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:34.647641897 CEST	443	49705	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.007791042 CEST	443	49705	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.008069038 CEST	49705	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.008081913 CEST	443	49705	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.009687901 CEST	443	49705	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.009769917 CEST	49705	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.013207912 CEST	49705	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.013369083 CEST	443	49705	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.013417006 CEST	49705	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.013421059 CEST	443	49706	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.013657093 CEST	49706	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.013674974 CEST	443	49706	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.014909029 CEST	443	49706	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.014980078 CEST	49706	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.015748024 CEST	49706	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.015815020 CEST	443	49706	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.060108900 CEST	443	49705	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.065392971 CEST	49706	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.065396070 CEST	49705	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.065402031 CEST	443	49706	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.065413952 CEST	443	49705	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.079541922 CEST	49708	443	192.168.2.6	142.250.141.106
Apr 24, 2024 09:58:35.079588890 CEST	443	49708	142.250.141.106	192.168.2.6
Apr 24, 2024 09:58:35.079655886 CEST	49708	443	192.168.2.6	142.250.141.106
Apr 24, 2024 09:58:35.079874039 CEST	49708	443	192.168.2.6	142.250.141.106
Apr 24, 2024 09:58:35.079891920 CEST	443	49708	142.250.141.106	192.168.2.6
Apr 24, 2024 09:58:35.111964941 CEST	49706	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.111972094 CEST	49705	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.390376091 CEST	443	49705	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.390585899 CEST	443	49705	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.390789986 CEST	49705	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.404246092 CEST	49705	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.404256105 CEST	443	49705	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.439100981 CEST	443	49708	142.250.141.106	192.168.2.6
Apr 24, 2024 09:58:35.443058968 CEST	49708	443	192.168.2.6	142.250.141.106
Apr 24, 2024 09:58:35.443103075 CEST	443	49708	142.250.141.106	192.168.2.6
Apr 24, 2024 09:58:35.443953037 CEST	443	49708	142.250.141.106	192.168.2.6
Apr 24, 2024 09:58:35.444026947 CEST	49708	443	192.168.2.6	142.250.141.106
Apr 24, 2024 09:58:35.456434965 CEST	49708	443	192.168.2.6	142.250.141.106
Apr 24, 2024 09:58:35.456497908 CEST	443	49708	142.250.141.106	192.168.2.6
Apr 24, 2024 09:58:35.478432894 CEST	49709	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.478477001 CEST	443	49709	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.478555918 CEST	49709	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.480351925 CEST	49709	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.480365992 CEST	443	49709	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.494107008 CEST	49706	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.503787994 CEST	49708	443	192.168.2.6	142.250.141.106
Apr 24, 2024 09:58:35.503802061 CEST	443	49708	142.250.141.106	192.168.2.6
Apr 24, 2024 09:58:35.536119938 CEST	443	49706	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.548858881 CEST	49708	443	192.168.2.6	142.250.141.106
Apr 24, 2024 09:58:35.680989981 CEST	443	49706	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.681261063 CEST	443	49706	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.681375027 CEST	49706	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.682543039 CEST	49706	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.682554007 CEST	443	49706	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.836899996 CEST	443	49709	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.837810993 CEST	49709	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.837843895 CEST	443	49709	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.839040041 CEST	443	49709	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.840032101 CEST	49709	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.840235949 CEST	443	49709	76.223.67.189	192.168.2.6
Apr 24, 2024 09:58:35.857767105 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:35.857799053 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:35.857861042 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:35.858361006 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:35.858376026 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:35.894490004 CEST	49709	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:58:35.910701036 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:35.910739899 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:35.910797119 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:35.913805008 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:35.913820028 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.213994980 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.214657068 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.214673042 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.215681076 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.215734959 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.219109058 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.219188929 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.221386909 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.221395016 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.230536938 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.230851889 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.230865002 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.231863022 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.231918097 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.233455896 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.233515024 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.233866930 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.233874083 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.268822908 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.284513950 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.576572895 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.576626062 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.576659918 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.576668024 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.576693058 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.576726913 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.576735020 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.576760054 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.576792002 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.576800108 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.579901934 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.579956055 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.579993010 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.579993963 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.580005884 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.580046892 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.580058098 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.580080032 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.580121040 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.580127954 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.580579042 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.580606937 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.580622911 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.580629110 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.580687046 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.581347942 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.581430912 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.581456900 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.581471920 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.581479073 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.581520081 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.582216024 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.582285881 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.582317114 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.582325935 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.582330942 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.582366943 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.583107948 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.583168983 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.583206892 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.583213091 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.585833073 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.585887909 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.585896015 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.586200953 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.586246967 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.586253881 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.586445093 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.586481094 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.586494923 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.586499929 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.586539030 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.586545944 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.586899996 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.586929083 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.586945057 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.586951017 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.586985111 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.587007046 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.587044954 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.587069035 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.587070942 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.587130070 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.587160110 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.587168932 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.587173939 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.587229967 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.587337971 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.587413073 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.587441921 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.587450027 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.587455988 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.587491989 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.588483095 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.588525057 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.588567019 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.588572025 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.588637114 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.588680029 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.589200974 CEST	49711	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:36.589217901 CEST	443	49711	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:36.598514080 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.598649025 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.598670959 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.610929012 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.611118078 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.611141920 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.653125048 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.653145075 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.701251984 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.754808903 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.759604931 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.759632111 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.759661913 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.759686947 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.760138035 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.772051096 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.784735918 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.784825087 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.784851074 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.784862041 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.784967899 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.796988964 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.808594942 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.808677912 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.808880091 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.808888912 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.808959961 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.821049929 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.832232952 CEST	49673	443	192.168.2.6	173.222.162.64
Apr 24, 2024 09:58:36.833271027 CEST	49674	443	192.168.2.6	173.222.162.64
Apr 24, 2024 09:58:36.834528923 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.834619999 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.834657907 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.834666967 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.834759951 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.845268965 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.857631922 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.857714891 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.857722998 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.867887974 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.867944002 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.867950916 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.879342079 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.879431963 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.879439116 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.889025927 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.889297962 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.889414072 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.889421940 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.895304918 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.900305033 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.930135965 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.930239916 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.930310011 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.930320024 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.930454969 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.938440084 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.944058895 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.944154024 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.944328070 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.944336891 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.944406033 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.951883078 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.961395979 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.961482048 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.961518049 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.961529016 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.961646080 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.969172955 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.979288101 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.979363918 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.979914904 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.979933023 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.980129957 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.985094070 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.993458986 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.993554115 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.993573904 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:36.993583918 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:36.993634939 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.001373053 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.010277033 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.010813951 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.010822058 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.013783932 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.015263081 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.015270948 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.021336079 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.021459103 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.021466017 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.029587030 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.033714056 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.033720970 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.038147926 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.038266897 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.038274050 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.045296907 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.045696020 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.045702934 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.057111025 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.057225943 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.057233095 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.063343048 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.065323114 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.065330029 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.074253082 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.077477932 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.077485085 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.079197884 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.079375029 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.079381943 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.086292028 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.086374044 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.086381912 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.092968941 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.093056917 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.093065023 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.100130081 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.100253105 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.100263119 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.100672007 CEST	49713	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:37.100714922 CEST	443	49713	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:37.101157904 CEST	49713	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:37.103598118 CEST	49713	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:37.103615046 CEST	443	49713	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:37.110563993 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.110649109 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.110650063 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.110677004 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.110783100 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.117851019 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.124078989 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.124192953 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.124197006 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.124219894 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.124264002 CEST	49715	443	192.168.2.6	23.206.6.29
Apr 24, 2024 09:58:37.124291897 CEST	443	49715	23.206.6.29	192.168.2.6
Apr 24, 2024 09:58:37.124361038 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.124366045 CEST	49715	443	192.168.2.6	23.206.6.29
Apr 24, 2024 09:58:37.127960920 CEST	49715	443	192.168.2.6	23.206.6.29
Apr 24, 2024 09:58:37.127976894 CEST	443	49715	23.206.6.29	192.168.2.6
Apr 24, 2024 09:58:37.129426003 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.136204958 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.136337042 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.136347055 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.138088942 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.138211012 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.138338089 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.138345957 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.138463974 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.142656088 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.146990061 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.147077084 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.147274971 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.147283077 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.147336006 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.151906013 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.155113935 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.155194998 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.155225039 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.155237913 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.155400991 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.159890890 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.161097050 CEST	49672	443	192.168.2.6	173.222.162.64
Apr 24, 2024 09:58:37.164787054 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.164864063 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.164896965 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.164913893 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.165087938 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.167654037 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.170489073 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.170614958 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.170630932 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.173516035 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.173638105 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.173651934 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.179390907 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.179497004 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.179513931 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.182120085 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.182213068 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.182224989 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.185090065 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.185189962 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.185203075 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.189441919 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.189553976 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.189564943 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.193955898 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.194127083 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.194140911 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.196094036 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.196579933 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.196589947 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.200915098 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.201210976 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.201225996 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.208431005 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.208509922 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.208666086 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.208679914 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.208794117 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.212007046 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.215295076 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.215444088 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.215461969 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.219959021 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.220136881 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.220158100 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.221214056 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.221673012 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.221683025 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.224724054 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.226314068 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.226321936 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.228519917 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.229486942 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.229496002 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.231942892 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.233690977 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.233699083 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.236890078 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.237327099 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.237334967 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.238415003 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.242491007 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.242506027 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.242831945 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.242975950 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.243176937 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.243185997 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.243242025 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.243313074 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.243443012 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.243869066 CEST	49710	443	192.168.2.6	142.250.141.99
Apr 24, 2024 09:58:37.243881941 CEST	443	49710	142.250.141.99	192.168.2.6
Apr 24, 2024 09:58:37.287350893 CEST	49716	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:37.287373066 CEST	443	49716	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:37.287509918 CEST	49716	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:37.289386034 CEST	49716	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:37.289398909 CEST	443	49716	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:37.438313007 CEST	49717	443	192.168.2.6	130.211.23.194
Apr 24, 2024 09:58:37.438361883 CEST	443	49717	130.211.23.194	192.168.2.6
Apr 24, 2024 09:58:37.438510895 CEST	49717	443	192.168.2.6	130.211.23.194
Apr 24, 2024 09:58:37.439116001 CEST	49717	443	192.168.2.6	130.211.23.194
Apr 24, 2024 09:58:37.439145088 CEST	443	49717	130.211.23.194	192.168.2.6
Apr 24, 2024 09:58:37.439770937 CEST	49718	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:37.439805984 CEST	443	49718	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:37.439874887 CEST	49718	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:37.440015078 CEST	49719	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:37.440052986 CEST	443	49719	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:37.440171957 CEST	49719	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:37.441255093 CEST	49718	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:37.441256046 CEST	49720	443	192.168.2.6	142.251.2.148
Apr 24, 2024 09:58:37.441274881 CEST	443	49718	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:37.441284895 CEST	443	49720	142.251.2.148	192.168.2.6
Apr 24, 2024 09:58:37.441514015 CEST	49720	443	192.168.2.6	142.251.2.148
Apr 24, 2024 09:58:37.441879988 CEST	49719	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:37.441883087 CEST	49720	443	192.168.2.6	142.251.2.148
Apr 24, 2024 09:58:37.441893101 CEST	443	49720	142.251.2.148	192.168.2.6
Apr 24, 2024 09:58:37.441895962 CEST	443	49719	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:37.495466948 CEST	443	49715	23.206.6.29	192.168.2.6
Apr 24, 2024 09:58:37.495676994 CEST	49715	443	192.168.2.6	23.206.6.29
Apr 24, 2024 09:58:37.501321077 CEST	49715	443	192.168.2.6	23.206.6.29
Apr 24, 2024 09:58:37.501341105 CEST	443	49715	23.206.6.29	192.168.2.6
Apr 24, 2024 09:58:37.501532078 CEST	443	49715	23.206.6.29	192.168.2.6
Apr 24, 2024 09:58:37.502899885 CEST	443	49713	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:37.509841919 CEST	49713	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:37.509854078 CEST	443	49713	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:37.510416985 CEST	443	49713	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:37.510440111 CEST	443	49713	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:37.510535955 CEST	49713	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:37.510544062 CEST	443	49713	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:37.510581017 CEST	49713	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:37.510724068 CEST	49713	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:37.511142969 CEST	443	49713	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:37.519668102 CEST	49713	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:37.519846916 CEST	443	49713	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:37.548691034 CEST	49715	443	192.168.2.6	23.206.6.29
Apr 24, 2024 09:58:37.571218967 CEST	49713	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:37.571230888 CEST	443	49713	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:37.585453033 CEST	49715	443	192.168.2.6	23.206.6.29
Apr 24, 2024 09:58:37.607011080 CEST	443	49716	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:37.607513905 CEST	49716	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:37.607538939 CEST	443	49716	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:37.607904911 CEST	443	49716	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:37.608760118 CEST	49716	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:37.608829975 CEST	443	49716	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:37.609627962 CEST	49716	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:37.612917900 CEST	49713	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:37.628159046 CEST	443	49715	23.206.6.29	192.168.2.6
Apr 24, 2024 09:58:37.656121969 CEST	443	49716	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:37.780921936 CEST	443	49718	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:37.785026073 CEST	49718	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:37.785046101 CEST	443	49718	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:37.785775900 CEST	443	49719	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:37.786309004 CEST	49719	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:37.786326885 CEST	443	49719	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:37.786499977 CEST	443	49718	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:37.786562920 CEST	49718	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:37.787986040 CEST	443	49719	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:37.788069963 CEST	49719	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:37.789776087 CEST	49718	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:37.789957047 CEST	443	49718	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:37.789993048 CEST	49719	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:37.790081978 CEST	443	49719	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:37.790105104 CEST	49718	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:37.790117025 CEST	443	49718	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:37.790188074 CEST	49719	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:37.790194035 CEST	443	49719	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:37.803097010 CEST	443	49717	130.211.23.194	192.168.2.6
Apr 24, 2024 09:58:37.803502083 CEST	49717	443	192.168.2.6	130.211.23.194
Apr 24, 2024 09:58:37.803515911 CEST	443	49717	130.211.23.194	192.168.2.6
Apr 24, 2024 09:58:37.804759979 CEST	443	49717	130.211.23.194	192.168.2.6
Apr 24, 2024 09:58:37.804933071 CEST	49717	443	192.168.2.6	130.211.23.194
Apr 24, 2024 09:58:37.806297064 CEST	49717	443	192.168.2.6	130.211.23.194
Apr 24, 2024 09:58:37.806369066 CEST	443	49717	130.211.23.194	192.168.2.6
Apr 24, 2024 09:58:37.806485891 CEST	49717	443	192.168.2.6	130.211.23.194
Apr 24, 2024 09:58:37.806493044 CEST	443	49717	130.211.23.194	192.168.2.6
Apr 24, 2024 09:58:37.808773994 CEST	443	49720	142.251.2.148	192.168.2.6
Apr 24, 2024 09:58:37.809052944 CEST	49720	443	192.168.2.6	142.251.2.148
Apr 24, 2024 09:58:37.809073925 CEST	443	49720	142.251.2.148	192.168.2.6
Apr 24, 2024 09:58:37.810096025 CEST	443	49720	142.251.2.148	192.168.2.6
Apr 24, 2024 09:58:37.810168028 CEST	49720	443	192.168.2.6	142.251.2.148
Apr 24, 2024 09:58:37.811510086 CEST	49720	443	192.168.2.6	142.251.2.148
Apr 24, 2024 09:58:37.811568975 CEST	443	49720	142.251.2.148	192.168.2.6
Apr 24, 2024 09:58:37.811971903 CEST	49720	443	192.168.2.6	142.251.2.148
Apr 24, 2024 09:58:37.811979055 CEST	443	49720	142.251.2.148	192.168.2.6
Apr 24, 2024 09:58:37.831856966 CEST	49719	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:37.831861973 CEST	49718	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:37.835675955 CEST	443	49715	23.206.6.29	192.168.2.6
Apr 24, 2024 09:58:37.835722923 CEST	443	49715	23.206.6.29	192.168.2.6
Apr 24, 2024 09:58:37.835766077 CEST	49715	443	192.168.2.6	23.206.6.29
Apr 24, 2024 09:58:37.835895061 CEST	49715	443	192.168.2.6	23.206.6.29
Apr 24, 2024 09:58:37.835917950 CEST	443	49715	23.206.6.29	192.168.2.6
Apr 24, 2024 09:58:37.835932016 CEST	49715	443	192.168.2.6	23.206.6.29
Apr 24, 2024 09:58:37.835937977 CEST	443	49715	23.206.6.29	192.168.2.6
Apr 24, 2024 09:58:37.847170115 CEST	49717	443	192.168.2.6	130.211.23.194
Apr 24, 2024 09:58:37.862993956 CEST	49720	443	192.168.2.6	142.251.2.148
Apr 24, 2024 09:58:37.887240887 CEST	49721	443	192.168.2.6	23.206.6.29
Apr 24, 2024 09:58:37.887281895 CEST	443	49721	23.206.6.29	192.168.2.6
Apr 24, 2024 09:58:37.887346983 CEST	49721	443	192.168.2.6	23.206.6.29
Apr 24, 2024 09:58:37.887993097 CEST	49721	443	192.168.2.6	23.206.6.29
Apr 24, 2024 09:58:37.888009071 CEST	443	49721	23.206.6.29	192.168.2.6
Apr 24, 2024 09:58:37.963299990 CEST	443	49716	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:37.963458061 CEST	443	49716	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:37.963517904 CEST	49716	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:37.964154959 CEST	49716	443	192.168.2.6	104.22.74.216
Apr 24, 2024 09:58:37.964167118 CEST	443	49716	104.22.74.216	192.168.2.6
Apr 24, 2024 09:58:38.143248081 CEST	443	49718	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:38.143341064 CEST	443	49718	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:38.143384933 CEST	49718	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:38.144114971 CEST	49718	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:38.144139051 CEST	443	49718	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:38.150532961 CEST	443	49719	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:38.150763988 CEST	443	49719	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:38.150811911 CEST	49719	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:38.151304960 CEST	49719	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:38.151321888 CEST	443	49719	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:38.167181015 CEST	443	49720	142.251.2.148	192.168.2.6
Apr 24, 2024 09:58:38.167726994 CEST	443	49720	142.251.2.148	192.168.2.6
Apr 24, 2024 09:58:38.167787075 CEST	49720	443	192.168.2.6	142.251.2.148
Apr 24, 2024 09:58:38.167974949 CEST	49720	443	192.168.2.6	142.251.2.148
Apr 24, 2024 09:58:38.168004036 CEST	443	49720	142.251.2.148	192.168.2.6
Apr 24, 2024 09:58:38.188571930 CEST	443	49717	130.211.23.194	192.168.2.6
Apr 24, 2024 09:58:38.188677073 CEST	443	49717	130.211.23.194	192.168.2.6
Apr 24, 2024 09:58:38.188728094 CEST	49717	443	192.168.2.6	130.211.23.194
Apr 24, 2024 09:58:38.189086914 CEST	49717	443	192.168.2.6	130.211.23.194
Apr 24, 2024 09:58:38.189086914 CEST	49717	443	192.168.2.6	130.211.23.194
Apr 24, 2024 09:58:38.189100981 CEST	443	49717	130.211.23.194	192.168.2.6
Apr 24, 2024 09:58:38.189171076 CEST	49717	443	192.168.2.6	130.211.23.194
Apr 24, 2024 09:58:38.230984926 CEST	443	49721	23.206.6.29	192.168.2.6
Apr 24, 2024 09:58:38.231062889 CEST	49721	443	192.168.2.6	23.206.6.29
Apr 24, 2024 09:58:38.232448101 CEST	49721	443	192.168.2.6	23.206.6.29
Apr 24, 2024 09:58:38.232466936 CEST	443	49721	23.206.6.29	192.168.2.6
Apr 24, 2024 09:58:38.232687950 CEST	443	49721	23.206.6.29	192.168.2.6
Apr 24, 2024 09:58:38.233761072 CEST	49721	443	192.168.2.6	23.206.6.29
Apr 24, 2024 09:58:38.276122093 CEST	443	49721	23.206.6.29	192.168.2.6
Apr 24, 2024 09:58:38.574388027 CEST	443	49721	23.206.6.29	192.168.2.6
Apr 24, 2024 09:58:38.574446917 CEST	443	49721	23.206.6.29	192.168.2.6
Apr 24, 2024 09:58:38.574500084 CEST	49721	443	192.168.2.6	23.206.6.29
Apr 24, 2024 09:58:38.583936930 CEST	49721	443	192.168.2.6	23.206.6.29
Apr 24, 2024 09:58:38.583956003 CEST	443	49721	23.206.6.29	192.168.2.6
Apr 24, 2024 09:58:38.587773085 CEST	443	49698	173.222.162.64	192.168.2.6
Apr 24, 2024 09:58:38.587857962 CEST	49698	443	192.168.2.6	173.222.162.64
Apr 24, 2024 09:58:38.672169924 CEST	49722	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:38.672199965 CEST	443	49722	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:38.672400951 CEST	49722	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:38.672569990 CEST	49723	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:38.672600985 CEST	443	49723	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:38.672717094 CEST	49723	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:38.672904015 CEST	49722	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:38.672918081 CEST	443	49722	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:38.673110008 CEST	49723	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:38.673125982 CEST	443	49723	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:38.694991112 CEST	49724	443	192.168.2.6	142.251.2.149
Apr 24, 2024 09:58:38.695014954 CEST	443	49724	142.251.2.149	192.168.2.6
Apr 24, 2024 09:58:38.695081949 CEST	49724	443	192.168.2.6	142.251.2.149
Apr 24, 2024 09:58:38.700678110 CEST	49724	443	192.168.2.6	142.251.2.149
Apr 24, 2024 09:58:38.700687885 CEST	443	49724	142.251.2.149	192.168.2.6
Apr 24, 2024 09:58:39.004554987 CEST	443	49723	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:39.004998922 CEST	49723	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:39.005031109 CEST	443	49723	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:39.005177975 CEST	443	49722	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:39.005744934 CEST	49722	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:39.005764961 CEST	443	49722	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:39.006266117 CEST	443	49723	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:39.006328106 CEST	49723	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:39.006814957 CEST	443	49722	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:39.006871939 CEST	49722	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:39.007107973 CEST	49723	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:39.007193089 CEST	443	49723	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:39.008260965 CEST	49722	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:39.008331060 CEST	443	49722	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:39.008438110 CEST	49723	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:39.008447886 CEST	443	49723	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:39.008480072 CEST	49722	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:39.008487940 CEST	443	49722	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:39.050203085 CEST	49722	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:39.050206900 CEST	49723	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:39.056545973 CEST	443	49724	142.251.2.149	192.168.2.6
Apr 24, 2024 09:58:39.056853056 CEST	49724	443	192.168.2.6	142.251.2.149
Apr 24, 2024 09:58:39.056869030 CEST	443	49724	142.251.2.149	192.168.2.6
Apr 24, 2024 09:58:39.058306932 CEST	443	49724	142.251.2.149	192.168.2.6
Apr 24, 2024 09:58:39.058432102 CEST	49724	443	192.168.2.6	142.251.2.149
Apr 24, 2024 09:58:39.059072018 CEST	49724	443	192.168.2.6	142.251.2.149
Apr 24, 2024 09:58:39.059158087 CEST	443	49724	142.251.2.149	192.168.2.6
Apr 24, 2024 09:58:39.059329987 CEST	49724	443	192.168.2.6	142.251.2.149
Apr 24, 2024 09:58:39.059336901 CEST	443	49724	142.251.2.149	192.168.2.6
Apr 24, 2024 09:58:39.104615927 CEST	49724	443	192.168.2.6	142.251.2.149
Apr 24, 2024 09:58:39.107984066 CEST	49726	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:39.108092070 CEST	443	49726	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:39.108184099 CEST	49726	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:39.108566046 CEST	49726	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:39.108602047 CEST	443	49726	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:39.375366926 CEST	443	49722	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:39.375454903 CEST	443	49722	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:39.375523090 CEST	49722	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:39.376245975 CEST	443	49723	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:39.376307011 CEST	443	49723	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:39.376385927 CEST	49723	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:39.377227068 CEST	49722	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:39.377243042 CEST	443	49722	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:39.380578995 CEST	49723	443	192.168.2.6	172.67.69.19
Apr 24, 2024 09:58:39.380594969 CEST	443	49723	172.67.69.19	192.168.2.6
Apr 24, 2024 09:58:39.411638975 CEST	443	49724	142.251.2.149	192.168.2.6
Apr 24, 2024 09:58:39.412012100 CEST	443	49724	142.251.2.149	192.168.2.6
Apr 24, 2024 09:58:39.412069082 CEST	49724	443	192.168.2.6	142.251.2.149
Apr 24, 2024 09:58:39.445280075 CEST	49724	443	192.168.2.6	142.251.2.149
Apr 24, 2024 09:58:39.445295095 CEST	443	49724	142.251.2.149	192.168.2.6
Apr 24, 2024 09:58:39.692675114 CEST	443	49726	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:39.693039894 CEST	49726	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:39.693061113 CEST	443	49726	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:39.694825888 CEST	443	49726	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:39.694888115 CEST	49726	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:40.123619080 CEST	49726	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:40.123831034 CEST	443	49726	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:40.123879910 CEST	49726	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:40.168126106 CEST	443	49726	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:40.174097061 CEST	49726	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:40.174137115 CEST	443	49726	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:40.220942020 CEST	49726	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:40.318288088 CEST	443	49726	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:40.318339109 CEST	443	49726	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:40.318444967 CEST	49726	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:40.358133078 CEST	49726	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:40.358174086 CEST	443	49726	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:40.359565020 CEST	49731	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:40.359591961 CEST	443	49731	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:40.359724998 CEST	49731	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:40.360008001 CEST	49731	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:40.360018969 CEST	443	49731	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:41.765582085 CEST	443	49731	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:41.766047001 CEST	49731	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:41.766062021 CEST	443	49731	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:41.766352892 CEST	443	49731	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:41.766906023 CEST	49731	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:41.766956091 CEST	443	49731	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:41.767287016 CEST	49731	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:41.812108040 CEST	443	49731	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:42.145433903 CEST	443	49731	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:42.145525932 CEST	443	49731	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:42.145633936 CEST	49731	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:42.291546106 CEST	49731	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:42.291554928 CEST	443	49731	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:42.480853081 CEST	49733	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:42.480884075 CEST	443	49733	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:42.481133938 CEST	49733	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:42.482064962 CEST	49733	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:42.482081890 CEST	443	49733	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:42.863033056 CEST	443	49733	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:42.908273935 CEST	49733	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:43.731307030 CEST	49734	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:43.731352091 CEST	443	49734	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:43.731420040 CEST	49734	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:43.731964111 CEST	49733	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:43.731992006 CEST	443	49733	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:43.732454062 CEST	49734	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:43.732467890 CEST	443	49734	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:43.733788013 CEST	443	49733	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:43.733865976 CEST	49733	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:43.734327078 CEST	49733	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:43.734427929 CEST	443	49733	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:43.734466076 CEST	49733	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:43.780116081 CEST	443	49733	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:43.783559084 CEST	49733	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:43.783574104 CEST	443	49733	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:43.830461979 CEST	49733	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:43.935426950 CEST	443	49733	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:43.935534000 CEST	443	49733	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:43.935621977 CEST	49733	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:43.937139034 CEST	49733	443	192.168.2.6	52.32.46.203
Apr 24, 2024 09:58:43.937158108 CEST	443	49733	52.32.46.203	192.168.2.6
Apr 24, 2024 09:58:44.091425896 CEST	443	49734	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:44.128777981 CEST	49734	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:44.128809929 CEST	443	49734	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:44.129617929 CEST	443	49734	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:44.129633904 CEST	443	49734	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:44.129695892 CEST	49734	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:44.129703999 CEST	443	49734	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:44.129755974 CEST	49734	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:44.130461931 CEST	443	49734	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:44.132402897 CEST	49734	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:44.132513046 CEST	443	49734	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:44.133367062 CEST	49734	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:44.133378029 CEST	443	49734	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:44.174751043 CEST	49734	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:44.875673056 CEST	443	49734	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:44.875742912 CEST	49734	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:44.876614094 CEST	49734	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:44.876657009 CEST	443	49734	74.125.137.100	192.168.2.6
Apr 24, 2024 09:58:44.876712084 CEST	49734	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:58:45.036506891 CEST	49736	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:45.036560059 CEST	443	49736	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:45.036741972 CEST	49736	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:45.037101984 CEST	49736	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:45.037120104 CEST	443	49736	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:45.398288012 CEST	443	49736	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:45.398535013 CEST	49736	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:45.398557901 CEST	443	49736	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:45.399589062 CEST	443	49736	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:45.399643898 CEST	49736	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:45.400186062 CEST	49736	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:45.400249004 CEST	443	49736	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:45.400368929 CEST	49736	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:45.400379896 CEST	443	49736	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:45.440244913 CEST	49736	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:45.495568991 CEST	443	49708	142.250.141.106	192.168.2.6
Apr 24, 2024 09:58:45.495712042 CEST	443	49708	142.250.141.106	192.168.2.6
Apr 24, 2024 09:58:45.495883942 CEST	49708	443	192.168.2.6	142.250.141.106
Apr 24, 2024 09:58:45.757105112 CEST	443	49736	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:45.757241011 CEST	443	49736	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:45.757335901 CEST	443	49736	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:45.757396936 CEST	49736	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:45.757431030 CEST	443	49736	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:45.757471085 CEST	49736	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:45.757478952 CEST	443	49736	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:45.759777069 CEST	443	49736	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:45.760184050 CEST	49736	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:45.799053907 CEST	49736	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:45.799098015 CEST	443	49736	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:45.808980942 CEST	49708	443	192.168.2.6	142.250.141.106
Apr 24, 2024 09:58:45.809015989 CEST	443	49708	142.250.141.106	192.168.2.6
Apr 24, 2024 09:58:45.809535027 CEST	49737	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:45.809566975 CEST	443	49737	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:45.809614897 CEST	49737	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:45.810122967 CEST	49737	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:45.810148001 CEST	443	49737	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:46.170948982 CEST	443	49737	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:46.171253920 CEST	49737	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:46.171268940 CEST	443	49737	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:46.171601057 CEST	443	49737	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:46.172004938 CEST	49737	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:46.172074080 CEST	443	49737	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:46.172143936 CEST	49737	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:46.172171116 CEST	443	49737	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:46.234333038 CEST	49737	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:46.554410934 CEST	443	49737	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:46.554575920 CEST	443	49737	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:46.554757118 CEST	49737	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:46.555746078 CEST	49737	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:46.555768967 CEST	443	49737	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:48.378302097 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:48.378375053 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:48.378443956 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:48.378701925 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:48.378730059 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:48.742325068 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:48.742590904 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:48.742614985 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:48.743858099 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:48.744405985 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:48.744580984 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:48.744582891 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:48.744693041 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:48.799349070 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.148118973 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.148292065 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.148329973 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.148396015 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.148399115 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.148442030 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.148472071 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.163223028 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.163286924 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.163304090 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.173039913 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.173151970 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.173156023 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.173172951 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.173228025 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.181345940 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.193723917 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.193789005 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.193803072 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.236829042 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.324237108 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.330277920 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.330326080 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.330338955 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.330375910 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.330470085 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.342727900 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.355112076 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.355226994 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.355248928 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.367898941 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.367942095 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.367980957 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.367997885 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.368053913 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.379822016 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.392136097 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.392185926 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.392321110 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.392385006 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.392553091 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.403419971 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.414664984 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.414710045 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.414746046 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.414809942 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.414966106 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.425993919 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.437267065 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.437311888 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.437330008 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.437352896 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.437460899 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.448647022 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.448723078 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.448929071 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.448990107 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.465550900 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.465646982 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.465667963 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.465753078 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:49.465812922 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.466507912 CEST	49742	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:49.466542959 CEST	443	49742	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:50.290608883 CEST	49751	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:50.290690899 CEST	443	49751	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:50.290766001 CEST	49751	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:50.290977955 CEST	49751	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:50.291012049 CEST	443	49751	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:50.307852983 CEST	49752	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:50.307887077 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:50.308056116 CEST	49752	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:50.308324099 CEST	49752	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:50.308346033 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:50.649636030 CEST	443	49751	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:50.649905920 CEST	49751	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:50.649930954 CEST	443	49751	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:50.650221109 CEST	443	49751	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:50.650625944 CEST	49751	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:50.650686979 CEST	443	49751	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:50.650842905 CEST	49751	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:50.660936117 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:50.661211014 CEST	49752	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:50.661227942 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:50.661554098 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:50.661967039 CEST	49752	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:50.662029982 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:50.662158012 CEST	49752	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:50.692156076 CEST	443	49751	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:50.708127975 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.025485992 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.025620937 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.025713921 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.025732994 CEST	49752	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:51.025755882 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.025846958 CEST	49752	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:51.025855064 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.025934935 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.026010990 CEST	49752	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:51.026017904 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.036068916 CEST	443	49751	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.036206961 CEST	443	49751	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.036262989 CEST	49751	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:51.037399054 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.037401915 CEST	49751	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:51.037425041 CEST	443	49751	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.037503004 CEST	49752	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:51.037518024 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.049365997 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.049673080 CEST	49752	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:51.049690008 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.061619997 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.061716080 CEST	49752	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:51.061729908 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.111747980 CEST	49752	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:51.111766100 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.158502102 CEST	49752	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:51.201548100 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.206763029 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.206823111 CEST	49752	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:51.206840992 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.206964016 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.207014084 CEST	49752	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:51.207252026 CEST	49752	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:51.207266092 CEST	443	49752	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.415860891 CEST	49755	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:51.415914059 CEST	443	49755	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.415998936 CEST	49755	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:51.416346073 CEST	49755	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:51.416378975 CEST	443	49755	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.775194883 CEST	443	49755	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.775546074 CEST	49755	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:51.775578022 CEST	443	49755	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.776051998 CEST	443	49755	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.778002024 CEST	49755	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:51.778094053 CEST	443	49755	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:51.778296947 CEST	49755	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:51.778335094 CEST	443	49755	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:52.315547943 CEST	443	49755	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:52.315588951 CEST	443	49755	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:52.315615892 CEST	443	49755	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:52.315634012 CEST	49755	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:52.315665007 CEST	443	49755	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:52.315709114 CEST	49755	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:52.315722942 CEST	443	49755	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:52.325340033 CEST	443	49755	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:52.325404882 CEST	49755	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:52.325424910 CEST	443	49755	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:52.333842993 CEST	443	49755	142.250.141.105	192.168.2.6
Apr 24, 2024 09:58:52.333924055 CEST	49755	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:52.334012032 CEST	49755	443	192.168.2.6	142.250.141.105
Apr 24, 2024 09:58:52.334027052 CEST	443	49755	142.250.141.105	192.168.2.6
Apr 24, 2024 09:59:20.845977068 CEST	49709	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:59:20.846019983 CEST	443	49709	76.223.67.189	192.168.2.6
Apr 24, 2024 09:59:22.580378056 CEST	49713	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:59:22.580395937 CEST	443	49713	74.125.137.100	192.168.2.6
Apr 24, 2024 09:59:34.978039980 CEST	49760	443	192.168.2.6	142.250.141.106
Apr 24, 2024 09:59:34.978064060 CEST	443	49760	142.250.141.106	192.168.2.6
Apr 24, 2024 09:59:34.978131056 CEST	49760	443	192.168.2.6	142.250.141.106
Apr 24, 2024 09:59:34.979903936 CEST	49760	443	192.168.2.6	142.250.141.106
Apr 24, 2024 09:59:34.979916096 CEST	443	49760	142.250.141.106	192.168.2.6
Apr 24, 2024 09:59:35.336869955 CEST	443	49760	142.250.141.106	192.168.2.6
Apr 24, 2024 09:59:35.357726097 CEST	49760	443	192.168.2.6	142.250.141.106
Apr 24, 2024 09:59:35.357744932 CEST	443	49760	142.250.141.106	192.168.2.6
Apr 24, 2024 09:59:35.358212948 CEST	443	49760	142.250.141.106	192.168.2.6
Apr 24, 2024 09:59:35.359849930 CEST	49760	443	192.168.2.6	142.250.141.106
Apr 24, 2024 09:59:35.359915972 CEST	443	49760	142.250.141.106	192.168.2.6
Apr 24, 2024 09:59:35.408480883 CEST	49760	443	192.168.2.6	142.250.141.106
Apr 24, 2024 09:59:36.583513021 CEST	49709	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:59:36.584444046 CEST	443	49709	76.223.67.189	192.168.2.6
Apr 24, 2024 09:59:36.584543943 CEST	49709	443	192.168.2.6	76.223.67.189
Apr 24, 2024 09:59:38.579700947 CEST	49713	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:59:38.579822063 CEST	443	49713	74.125.137.100	192.168.2.6
Apr 24, 2024 09:59:38.579884052 CEST	49713	443	192.168.2.6	74.125.137.100
Apr 24, 2024 09:59:45.365852118 CEST	443	49760	142.250.141.106	192.168.2.6
Apr 24, 2024 09:59:45.365927935 CEST	443	49760	142.250.141.106	192.168.2.6
Apr 24, 2024 09:59:45.365986109 CEST	49760	443	192.168.2.6	142.250.141.106
Apr 24, 2024 09:59:46.855308056 CEST	49760	443	192.168.2.6	142.250.141.106
Apr 24, 2024 09:59:46.855335951 CEST	443	49760	142.250.141.106	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 09:58:32.300302982 CEST	53	51770	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:32.355393887 CEST	53	53507	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:33.365889072 CEST	53	59491	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:34.388022900 CEST	54853	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:34.388592958 CEST	60569	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:34.644804001 CEST	53	54853	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:34.644928932 CEST	53	60569	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:34.925126076 CEST	62871	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:34.925277948 CEST	52268	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:35.078557014 CEST	53	62871	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:35.078608036 CEST	53	52268	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:35.703339100 CEST	53117	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:35.703557968 CEST	56901	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:35.752836943 CEST	55789	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:35.753299952 CEST	59283	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:35.754714966 CEST	64429	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:35.755248070 CEST	52919	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:35.856482983 CEST	53	56901	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:35.856539011 CEST	53	53117	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:35.906682014 CEST	53	55789	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:35.906697035 CEST	53	59283	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:36.939122915 CEST	62882	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:36.939122915 CEST	59672	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:37.098741055 CEST	53	59672	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:37.098788023 CEST	53	62882	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:37.282515049 CEST	50978	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:37.282515049 CEST	49778	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:37.283766031 CEST	62504	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:37.284276009 CEST	51667	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:37.285707951 CEST	54067	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:37.285993099 CEST	55534	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:37.436778069 CEST	53	49778	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:37.436815977 CEST	53	50978	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:37.438246012 CEST	53	62504	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:37.439038038 CEST	53	51667	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:37.439439058 CEST	53	54067	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:37.439843893 CEST	53	55534	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:38.516700983 CEST	62933	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:38.517131090 CEST	55172	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:38.520611048 CEST	59535	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:38.521084070 CEST	63254	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:38.670521021 CEST	53	62933	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:38.671778917 CEST	53	55172	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:38.674086094 CEST	53	59535	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:38.674326897 CEST	53	63254	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:38.939135075 CEST	61230	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:38.940190077 CEST	63070	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:39.106388092 CEST	53	61230	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:39.106523037 CEST	53	63070	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:40.143253088 CEST	61049	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:40.143953085 CEST	51892	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:42.311872005 CEST	63748	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:42.312207937 CEST	61834	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:42.465719938 CEST	53	63748	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:42.467394114 CEST	53	61834	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:42.541641951 CEST	56692	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:42.542077065 CEST	50230	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:42.696058035 CEST	53	56692	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:42.696242094 CEST	53	50230	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:43.730076075 CEST	63180	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:43.730205059 CEST	60661	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:43.885061979 CEST	53	63180	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:43.885073900 CEST	53	60661	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:44.882358074 CEST	54115	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:44.882498026 CEST	57556	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:45.035665989 CEST	53	54115	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:45.036045074 CEST	53	57556	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:46.714816093 CEST	53	59801	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:48.650197983 CEST	53	56905	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:48.753180027 CEST	53	49901	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:50.358488083 CEST	53	60197	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:50.460119963 CEST	53	49168	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:51.162216902 CEST	53	62879	1.1.1.1	192.168.2.6
Apr 24, 2024 09:58:54.714215994 CEST	52860	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:58:54.714646101 CEST	56863	53	192.168.2.6	1.1.1.1
Apr 24, 2024 09:59:10.076555967 CEST	53	57389	1.1.1.1	192.168.2.6
Apr 24, 2024 09:59:32.144669056 CEST	53	58814	1.1.1.1	192.168.2.6
Apr 24, 2024 09:59:33.451431036 CEST	53	50192	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 24, 2024 09:58:43.885050058 CEST	192.168.2.6	1.1.1.1	c24c	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 24, 2024 09:58:34.388022900 CEST	192.168.2.6	1.1.1.1	0x8106	Standard query (0)	lokicollective.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:34.388592958 CEST	192.168.2.6	1.1.1.1	0xe057	Standard query (0)	lokicollective.org	65	IN (0x0001)	false
Apr 24, 2024 09:58:34.925126076 CEST	192.168.2.6	1.1.1.1	0xd44c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:34.925277948 CEST	192.168.2.6	1.1.1.1	0xe9cb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 09:58:35.703339100 CEST	192.168.2.6	1.1.1.1	0x9544	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:35.703557968 CEST	192.168.2.6	1.1.1.1	0x96b1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 09:58:35.752836943 CEST	192.168.2.6	1.1.1.1	0x9213	Standard query (0)	btloader.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:35.753299952 CEST	192.168.2.6	1.1.1.1	0x9992	Standard query (0)	btloader.com	65	IN (0x0001)	false
Apr 24, 2024 09:58:35.754714966 CEST	192.168.2.6	1.1.1.1	0xe7e1	Standard query (0)	img1.wsimg.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:35.755248070 CEST	192.168.2.6	1.1.1.1	0x1691	Standard query (0)	img1.wsimg.com	65	IN (0x0001)	false
Apr 24, 2024 09:58:36.939122915 CEST	192.168.2.6	1.1.1.1	0x14c1	Standard query (0)	www.adsensecustomsearchads.com	65	IN (0x0001)	false
Apr 24, 2024 09:58:36.939122915 CEST	192.168.2.6	1.1.1.1	0x2b26	Standard query (0)	www.adsensecustomsearchads.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:37.282515049 CEST	192.168.2.6	1.1.1.1	0x7e1e	Standard query (0)	api.btloader.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:37.282515049 CEST	192.168.2.6	1.1.1.1	0x462e	Standard query (0)	api.btloader.com	65	IN (0x0001)	false
Apr 24, 2024 09:58:37.283766031 CEST	192.168.2.6	1.1.1.1	0x1b5e	Standard query (0)	ad-delivery.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:37.284276009 CEST	192.168.2.6	1.1.1.1	0x86de	Standard query (0)	ad-delivery.net	65	IN (0x0001)	false
Apr 24, 2024 09:58:37.285707951 CEST	192.168.2.6	1.1.1.1	0x6525	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:37.285993099 CEST	192.168.2.6	1.1.1.1	0x6b38	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 09:58:38.516700983 CEST	192.168.2.6	1.1.1.1	0x1053	Standard query (0)	ad-delivery.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:38.517131090 CEST	192.168.2.6	1.1.1.1	0x7a16	Standard query (0)	ad-delivery.net	65	IN (0x0001)	false
Apr 24, 2024 09:58:38.520611048 CEST	192.168.2.6	1.1.1.1	0x3965	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:38.521084070 CEST	192.168.2.6	1.1.1.1	0xff23	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 09:58:38.939135075 CEST	192.168.2.6	1.1.1.1	0xa0e3	Standard query (0)	api.aws.parking.godaddy.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:38.940190077 CEST	192.168.2.6	1.1.1.1	0xed2a	Standard query (0)	api.aws.parking.godaddy.com	65	IN (0x0001)	false
Apr 24, 2024 09:58:40.143253088 CEST	192.168.2.6	1.1.1.1	0x4722	Standard query (0)	img1.wsimg.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:40.143953085 CEST	192.168.2.6	1.1.1.1	0xf820	Standard query (0)	img1.wsimg.com	65	IN (0x0001)	false
Apr 24, 2024 09:58:42.311872005 CEST	192.168.2.6	1.1.1.1	0x8d12	Standard query (0)	api.aws.parking.godaddy.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:42.312207937 CEST	192.168.2.6	1.1.1.1	0x57c6	Standard query (0)	api.aws.parking.godaddy.com	65	IN (0x0001)	false
Apr 24, 2024 09:58:42.541641951 CEST	192.168.2.6	1.1.1.1	0x1fca	Standard query (0)	www.adsensecustomsearchads.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:42.542077065 CEST	192.168.2.6	1.1.1.1	0xaaa6	Standard query (0)	www.adsensecustomsearchads.com	65	IN (0x0001)	false
Apr 24, 2024 09:58:43.730076075 CEST	192.168.2.6	1.1.1.1	0xa0de	Standard query (0)	www.adsensecustomsearchads.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:43.730205059 CEST	192.168.2.6	1.1.1.1	0x5fa	Standard query (0)	www.adsensecustomsearchads.com	65	IN (0x0001)	false
Apr 24, 2024 09:58:44.882358074 CEST	192.168.2.6	1.1.1.1	0xbf05	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:44.882498026 CEST	192.168.2.6	1.1.1.1	0x2660	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 09:58:54.714215994 CEST	192.168.2.6	1.1.1.1	0xc0db	Standard query (0)	www.godaddy.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:54.714646101 CEST	192.168.2.6	1.1.1.1	0xa8ec	Standard query (0)	www.godaddy.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 24, 2024 09:58:34.644804001 CEST	1.1.1.1	192.168.2.6	0x8106	No error (0)	lokicollective.org		76.223.67.189	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:34.644804001 CEST	1.1.1.1	192.168.2.6	0x8106	No error (0)	lokicollective.org		13.248.213.45	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:35.078557014 CEST	1.1.1.1	192.168.2.6	0xd44c	No error (0)	www.google.com		142.250.141.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:35.078557014 CEST	1.1.1.1	192.168.2.6	0xd44c	No error (0)	www.google.com		142.250.141.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:35.078557014 CEST	1.1.1.1	192.168.2.6	0xd44c	No error (0)	www.google.com		142.250.141.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:35.078557014 CEST	1.1.1.1	192.168.2.6	0xd44c	No error (0)	www.google.com		142.250.141.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:35.078557014 CEST	1.1.1.1	192.168.2.6	0xd44c	No error (0)	www.google.com		142.250.141.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:35.078557014 CEST	1.1.1.1	192.168.2.6	0xd44c	No error (0)	www.google.com		142.250.141.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:35.078608036 CEST	1.1.1.1	192.168.2.6	0xe9cb	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 09:58:35.856482983 CEST	1.1.1.1	192.168.2.6	0x96b1	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 09:58:35.856539011 CEST	1.1.1.1	192.168.2.6	0x9544	No error (0)	www.google.com		142.250.141.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:35.856539011 CEST	1.1.1.1	192.168.2.6	0x9544	No error (0)	www.google.com		142.250.141.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:35.856539011 CEST	1.1.1.1	192.168.2.6	0x9544	No error (0)	www.google.com		142.250.141.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:35.856539011 CEST	1.1.1.1	192.168.2.6	0x9544	No error (0)	www.google.com		142.250.141.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:35.856539011 CEST	1.1.1.1	192.168.2.6	0x9544	No error (0)	www.google.com		142.250.141.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:35.856539011 CEST	1.1.1.1	192.168.2.6	0x9544	No error (0)	www.google.com		142.250.141.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:35.906682014 CEST	1.1.1.1	192.168.2.6	0x9213	No error (0)	btloader.com		104.22.74.216	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:35.906682014 CEST	1.1.1.1	192.168.2.6	0x9213	No error (0)	btloader.com		172.67.41.60	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:35.906682014 CEST	1.1.1.1	192.168.2.6	0x9213	No error (0)	btloader.com		104.22.75.216	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:35.906697035 CEST	1.1.1.1	192.168.2.6	0x9992	No error (0)	btloader.com			65	IN (0x0001)	false
Apr 24, 2024 09:58:35.909461975 CEST	1.1.1.1	192.168.2.6	0x1691	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 09:58:35.915815115 CEST	1.1.1.1	192.168.2.6	0xe7e1	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 09:58:37.098741055 CEST	1.1.1.1	192.168.2.6	0x2b26	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 09:58:37.098741055 CEST	1.1.1.1	192.168.2.6	0x2b26	No error (0)	www3.l.google.com		74.125.137.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:37.098741055 CEST	1.1.1.1	192.168.2.6	0x2b26	No error (0)	www3.l.google.com		74.125.137.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:37.098741055 CEST	1.1.1.1	192.168.2.6	0x2b26	No error (0)	www3.l.google.com		74.125.137.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:37.098741055 CEST	1.1.1.1	192.168.2.6	0x2b26	No error (0)	www3.l.google.com		74.125.137.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:37.098741055 CEST	1.1.1.1	192.168.2.6	0x2b26	No error (0)	www3.l.google.com		74.125.137.102	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:37.098741055 CEST	1.1.1.1	192.168.2.6	0x2b26	No error (0)	www3.l.google.com		74.125.137.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:37.098788023 CEST	1.1.1.1	192.168.2.6	0x14c1	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 09:58:37.436815977 CEST	1.1.1.1	192.168.2.6	0x7e1e	No error (0)	api.btloader.com		130.211.23.194	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:37.438246012 CEST	1.1.1.1	192.168.2.6	0x1b5e	No error (0)	ad-delivery.net		172.67.69.19	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:37.438246012 CEST	1.1.1.1	192.168.2.6	0x1b5e	No error (0)	ad-delivery.net		104.26.2.70	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:37.438246012 CEST	1.1.1.1	192.168.2.6	0x1b5e	No error (0)	ad-delivery.net		104.26.3.70	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:37.439038038 CEST	1.1.1.1	192.168.2.6	0x86de	No error (0)	ad-delivery.net			65	IN (0x0001)	false
Apr 24, 2024 09:58:37.439439058 CEST	1.1.1.1	192.168.2.6	0x6525	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:37.439439058 CEST	1.1.1.1	192.168.2.6	0x6525	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:37.439843893 CEST	1.1.1.1	192.168.2.6	0x6b38	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 09:58:38.670521021 CEST	1.1.1.1	192.168.2.6	0x1053	No error (0)	ad-delivery.net		172.67.69.19	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:38.670521021 CEST	1.1.1.1	192.168.2.6	0x1053	No error (0)	ad-delivery.net		104.26.2.70	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:38.670521021 CEST	1.1.1.1	192.168.2.6	0x1053	No error (0)	ad-delivery.net		104.26.3.70	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:38.671778917 CEST	1.1.1.1	192.168.2.6	0x7a16	No error (0)	ad-delivery.net			65	IN (0x0001)	false
Apr 24, 2024 09:58:38.674086094 CEST	1.1.1.1	192.168.2.6	0x3965	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:38.674086094 CEST	1.1.1.1	192.168.2.6	0x3965	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:38.674326897 CEST	1.1.1.1	192.168.2.6	0xff23	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 09:58:39.106388092 CEST	1.1.1.1	192.168.2.6	0xa0e3	No error (0)	api.aws.parking.godaddy.com	gddomainparking.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 09:58:39.106388092 CEST	1.1.1.1	192.168.2.6	0xa0e3	No error (0)	gddomainparking.com		52.32.46.203	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:39.106388092 CEST	1.1.1.1	192.168.2.6	0xa0e3	No error (0)	gddomainparking.com		35.167.118.102	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:39.106523037 CEST	1.1.1.1	192.168.2.6	0xed2a	No error (0)	api.aws.parking.godaddy.com	gddomainparking.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 09:58:40.297173023 CEST	1.1.1.1	192.168.2.6	0x4722	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 09:58:40.297595024 CEST	1.1.1.1	192.168.2.6	0xf820	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 09:58:42.465719938 CEST	1.1.1.1	192.168.2.6	0x8d12	No error (0)	api.aws.parking.godaddy.com	gddomainparking.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 09:58:42.465719938 CEST	1.1.1.1	192.168.2.6	0x8d12	No error (0)	gddomainparking.com		52.32.46.203	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:42.465719938 CEST	1.1.1.1	192.168.2.6	0x8d12	No error (0)	gddomainparking.com		35.167.118.102	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:42.467394114 CEST	1.1.1.1	192.168.2.6	0x57c6	No error (0)	api.aws.parking.godaddy.com	gddomainparking.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 09:58:42.696058035 CEST	1.1.1.1	192.168.2.6	0x1fca	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 09:58:42.696058035 CEST	1.1.1.1	192.168.2.6	0x1fca	No error (0)	www3.l.google.com		74.125.137.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:42.696058035 CEST	1.1.1.1	192.168.2.6	0x1fca	No error (0)	www3.l.google.com		74.125.137.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:42.696058035 CEST	1.1.1.1	192.168.2.6	0x1fca	No error (0)	www3.l.google.com		74.125.137.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:42.696058035 CEST	1.1.1.1	192.168.2.6	0x1fca	No error (0)	www3.l.google.com		74.125.137.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:42.696058035 CEST	1.1.1.1	192.168.2.6	0x1fca	No error (0)	www3.l.google.com		74.125.137.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:42.696058035 CEST	1.1.1.1	192.168.2.6	0x1fca	No error (0)	www3.l.google.com		74.125.137.102	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:42.696242094 CEST	1.1.1.1	192.168.2.6	0xaaa6	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 09:58:43.885061979 CEST	1.1.1.1	192.168.2.6	0xa0de	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 09:58:43.885061979 CEST	1.1.1.1	192.168.2.6	0xa0de	No error (0)	www3.l.google.com		74.125.137.102	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:43.885061979 CEST	1.1.1.1	192.168.2.6	0xa0de	No error (0)	www3.l.google.com		74.125.137.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:43.885061979 CEST	1.1.1.1	192.168.2.6	0xa0de	No error (0)	www3.l.google.com		74.125.137.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:43.885061979 CEST	1.1.1.1	192.168.2.6	0xa0de	No error (0)	www3.l.google.com		74.125.137.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:43.885061979 CEST	1.1.1.1	192.168.2.6	0xa0de	No error (0)	www3.l.google.com		74.125.137.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:43.885061979 CEST	1.1.1.1	192.168.2.6	0xa0de	No error (0)	www3.l.google.com		74.125.137.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:43.885073900 CEST	1.1.1.1	192.168.2.6	0x5fa	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 09:58:45.035665989 CEST	1.1.1.1	192.168.2.6	0xbf05	No error (0)	www.google.com		142.250.141.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:45.035665989 CEST	1.1.1.1	192.168.2.6	0xbf05	No error (0)	www.google.com		142.250.141.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:45.035665989 CEST	1.1.1.1	192.168.2.6	0xbf05	No error (0)	www.google.com		142.250.141.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:45.035665989 CEST	1.1.1.1	192.168.2.6	0xbf05	No error (0)	www.google.com		142.250.141.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:45.035665989 CEST	1.1.1.1	192.168.2.6	0xbf05	No error (0)	www.google.com		142.250.141.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:45.035665989 CEST	1.1.1.1	192.168.2.6	0xbf05	No error (0)	www.google.com		142.250.141.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:45.036045074 CEST	1.1.1.1	192.168.2.6	0x2660	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 09:58:48.654562950 CEST	1.1.1.1	192.168.2.6	0xb61a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 09:58:48.654562950 CEST	1.1.1.1	192.168.2.6	0xb61a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:58:54.868896008 CEST	1.1.1.1	192.168.2.6	0xc0db	No error (0)	www.godaddy.com	wildcard-ipv6.godaddy.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 09:58:54.891205072 CEST	1.1.1.1	192.168.2.6	0xa8ec	No error (0)	www.godaddy.com	wildcard-ipv6.godaddy.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 09:59:01.680566072 CEST	1.1.1.1	192.168.2.6	0x4bf6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 09:59:01.680566072 CEST	1.1.1.1	192.168.2.6	0x4bf6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:59:25.752064943 CEST	1.1.1.1	192.168.2.6	0x9b6a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 09:59:25.752064943 CEST	1.1.1.1	192.168.2.6	0x9b6a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 09:59:45.142873049 CEST	1.1.1.1	192.168.2.6	0x18f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 09:59:45.142873049 CEST	1.1.1.1	192.168.2.6	0x18f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

lokicollective.org

https:

www.google.com

btloader.com

ad-delivery.net

api.btloader.com

ad.doubleclick.net

api.aws.parking.godaddy.com

www.adsensecustomsearchads.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49705	76.223.67.189	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:35 UTC	669	OUT	GET /project/ HTTP/1.1 Host: lokicollective.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:35 UTC	121	IN	HTTP/1.1 200 OK Content-Type: text/html Date: Wed, 24 Apr 2024 07:58:35 GMT Content-Length: 114 Connection: close
2024-04-24 07:58:35 UTC	114	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 22 2f 6c 61 6e 64 65 72 22 7d 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head><script>window.onload=function(){window.location.href="/lander"}</script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49706	76.223.67.189	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:35 UTC	700	OUT	GET /lander HTTP/1.1 Host: lokicollective.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://lokicollective.org/project/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:35 UTC	728	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=86400 Content-Type: text/html Date: Wed, 24 Apr 2024 07:58:35 GMT Server: openresty Set-Cookie: traffic_target=reseller; Path=/; Max-Age=86400 Set-Cookie: caf_ipaddr=154.16.105.36; Path=/; Max-Age=86400 Set-Cookie: country=US; Path=/; Max-Age=86400 Set-Cookie: city=Las%20Vegas; Path=/; Max-Age=86400 Set-Cookie: lander_type=parkweb-reseller; Path=/; Max-Age=86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_EL2IPrhnEHYgssgw50hZbFYxUH0Vngwx3aWtZI3ejehdUnGOLpDZwXy/rfXc5S/gAxXtVfGup2WI1XlsGDC2lw X-Content-Type-Options: nosniff Content-Length: 620 Connection: close
2024-04-24 07:58:35 UTC	458	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 2c 22 2f 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 26 67 64 61 62 70 3d 74 72 75 65 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 Data Ascii: <!doctype html><html lang="en"><head><meta charset="UTF-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="data:,"/><script src="https://www.google.com/adsense/domains/caf.js?abp=1&gdabp=true"></script><script s
2024-04-24 07:58:35 UTC	162	IN	Data Raw: 62 64 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 70 61 72 6b 69 6e 67 2d 6c 61 6e 64 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 6d 61 69 6e 2e 38 61 31 64 31 39 61 66 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: bd.js"></script><link href="https://img1.wsimg.com/parking-lander/static/css/main.8a1d19af.css" rel="stylesheet"></head><body><div id="root"></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49710	142.250.141.99	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:36 UTC	632	OUT	GET /adsense/domains/caf.js?abp=1&gdabp=true HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://lokicollective.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:36 UTC	854	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 190570 Date: Wed, 24 Apr 2024 07:58:36 GMT Expires: Wed, 24 Apr 2024 07:58:36 GMT Cache-Control: private, max-age=3600 ETag: "16579995215746609435" X-Content-Type-Options: nosniff Link: <https://www.adsensecustomsearchads.com>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 07:58:36 UTC	401	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 32 39 36 33 39 31 39 30 34 30 32 30 33 31 32 34 38 32 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 34 33 37 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"296391904020312482",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,17301
2024-04-24 07:58:36 UTC	1255	IN	Data Raw: 74 72 61 74 65 67 79 22 3a 74 72 75 65 2c 22 5f 66 69 78 43 74 63 4c 69 6e 6b 73 4f 6e 49 6f 73 22 3a 74 72 75 65 2c 22 5f 67 6f 6f 67 45 6e 61 62 6c 65 51 75 70 22 3a 74 72 75 65 2c 22 5f 73 77 69 74 63 68 47 77 73 52 65 71 75 65 73 74 54 6f 55 73 65 41 64 73 65 6e 73 65 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 75 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 Data Ascii: trategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:180
2024-04-24 07:58:36 UTC	1255	IN	Data Raw: 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 62 65 3d 66 3b 65 61 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 31 45 39 2a Data Ascii: ew TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.be=f;ea(this,"description",{configurable:!0,writable:!0,value:g})}if(a)return a;c.prototype.toString=function(){return this.be};var d="jscomp_symbol_"+(1E9*
2024-04-24 07:58:36 UTC	1255	IN	Data Raw: 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 29 6e 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6f 61 3b 61 3a 7b 76 61 72 20 70 61 3d 7b 61 3a 21 30 7d 2c 71 61 3d 7b 7d 3b 74 72 79 7b 71 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 70 61 3b 6f 61 3d 71 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6f 61 3d 21 31 7d 6e 61 3d 6f 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c Data Ascii: n"==typeof Object.setPrototypeOf)na=Object.setPrototypeOf;else{var oa;a:{var pa={a:!0},qa={};try{qa.__proto__=pa;oa=qa.a;break a}catch(a){}oa=!1}na=oa?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:nul
2024-04-24 07:58:36 UTC	1255	IN	Data Raw: 2e 43 2e 66 61 29 72 65 74 75 72 6e 20 78 61 28 74 68 69 73 2c 74 68 69 73 2e 43 2e 66 61 5b 22 74 68 72 6f 77 22 5d 2c 61 2c 74 68 69 73 2e 43 2e 53 61 29 3b 74 68 69 73 2e 43 2e 58 61 28 61 29 3b 72 65 74 75 72 6e 20 79 61 28 74 68 69 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 2c 62 2c 63 2c 64 29 7b 74 72 79 7b 76 61 72 20 65 3d 62 2e 63 61 6c 6c 28 61 2e 43 2e 66 61 2c 63 29 3b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 65 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 65 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 61 2e 43 2e 4e 61 3d 21 31 2c 65 3b 76 61 72 20 66 3d Data Ascii: .C.fa)return xa(this,this.C.fa["throw"],a,this.C.Sa);this.C.Xa(a);return ya(this)};function xa(a,b,c,d){try{var e=b.call(a.C.fa,c);if(!(e instanceof Object))throw new TypeError("Iterator result "+e+" is not an object");if(!e.done)return a.C.Na=!1,e;var f=
2024-04-24 07:58:36 UTC	1255	IN	Data Raw: 6f 6e 20 64 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 3f 67 3a 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 67 29 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 2e 62 61 29 7b 74 68 69 73 2e 62 61 3d 5b 5d 3b 76 61 72 20 68 3d 74 68 69 73 3b 74 68 69 73 2e 6e 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 57 65 28 29 7d 29 7d 74 68 69 73 2e 62 61 2e 70 75 73 68 28 67 29 7d 3b 76 61 72 20 65 3d 68 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 65 28 67 2c 30 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 57 65 3d 66 75 Data Ascii: on d(g){return g instanceof b?g:new b(function(h){h(g)})}if(a)return a;c.prototype.md=function(g){if(null==this.ba){this.ba=[];var h=this;this.nd(function(){h.We()})}this.ba.push(g)};var e=ha.setTimeout;c.prototype.nd=function(g){e(g,0)};c.prototype.We=fu
2024-04-24 07:58:36 UTC	1255	IN	Data Raw: 68 69 73 2e 58 65 28 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 2e 44 66 28 29 29 7b 76 61 72 20 68 3d 68 61 2e 63 6f 6e 73 6f 6c 65 3b 0a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 68 26 26 68 2e 65 72 72 6f 72 28 67 2e 57 61 29 7d 7d 2c 31 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 44 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 42 64 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 67 3d 68 61 2e 43 75 73 74 6f 6d 45 76 65 6e 74 2c 68 3d 68 61 2e 45 76 65 6e 74 2c 6b 3d 68 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 6b Data Ascii: his.Xe()};b.prototype.Uf=function(){var g=this;e(function(){if(g.Df()){var h=ha.console;"undefined"!==typeof h&&h.error(g.Wa)}},1)};b.prototype.Df=function(){if(this.Bd)return!1;var g=ha.CustomEvent,h=ha.Event,k=ha.dispatchEvent;if("undefined"===typeof k
2024-04-24 07:58:36 UTC	1255	IN	Data Raw: 68 69 73 2e 42 61 2e 70 75 73 68 28 6b 29 3b 74 68 69 73 2e 42 64 3d 21 30 7d 3b 62 2e 72 65 73 6f 6c 76 65 3d 64 3b 62 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 6b 28 67 29 7d 29 7d 3b 62 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 77 28 67 29 2c 6e 3d 6c 2e 6e 65 78 74 28 29 3b 21 6e 2e 64 6f 6e 65 3b 6e 3d 6c 2e 6e 65 78 74 28 29 29 64 28 6e 2e 76 61 6c 75 65 29 2e 6a 62 28 68 2c 6b 29 7d 29 7d 3b 62 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 77 28 67 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 Data Ascii: his.Ba.push(k);this.Bd=!0};b.resolve=d;b.reject=function(g){return new b(function(h,k){k(g)})};b.race=function(g){return new b(function(h,k){for(var l=w(g),n=l.next();!n.done;n=l.next())d(n.value).jb(h,k)})};b.all=function(g){var h=w(g),k=h.next();return
2024-04-24 07:58:36 UTC	1255	IN	Data Raw: 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 67 2c 66 2c 64 29 29 7b 62 3d 67 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 46 61 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 26 26 63 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d Data Ascii: (b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var g=d[f];if(b.call(c,g,f,d)){b=g;break a}}b=void 0}return b}});function Fa(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){var f=
2024-04-24 07:58:36 UTC	1255	IN	Data Raw: 3d 3d 3d 63 3f 30 21 3d 3d 62 7c 7c 31 2f 62 3d 3d 3d 31 2f 63 3a 62 21 3d 3d 62 26 26 63 21 3d 3d 63 7d 7d 29 3b 0a 70 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 3b 63 3d 63 7c 7c 30 3b 66 6f 72 28 30 3e 63 26 26 28 63 3d 4d 61 74 68 2e 6d 61 78 28 63 2b 65 2c 30 29 29 3b 63 3c 65 3b 63 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 63 5d 3b 69 66 28 66 3d 3d 3d 62 7c 7c 4f 62 6a 65 63 74 2e 69 73 28 66 2c 62 29 29 72 65 74 75 72 6e 21 30 Data Ascii: ===c?0!==b\|\|1/b===1/c:b!==b&&c!==c}});p("Array.prototype.includes",function(a){return a?a:function(b,c){var d=this;d instanceof String&&(d=String(d));var e=d.length;c=c\|\|0;for(0>c&&(c=Math.max(c+e,0));c<e;c++){var f=d[c];if(f===b\|\|Object.is(f,b))return!0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49711	104.22.74.216	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:36 UTC	547	OUT	GET /tag?o=5097926782615552&upapi=true HTTP/1.1 Host: btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://lokicollective.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:36 UTC	447	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 07:58:36 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300 Etag: W/"99d9767dcb7d8390d77625c402e08999" Last-Modified: Wed, 24 Apr 2024 07:21:18 GMT Vary: Origin Via: 1.1 google CF-Cache-Status: HIT Age: 2100 Server: cloudflare CF-RAY: 87948c961c2b09f7-LAS
2024-04-24 07:58:36 UTC	922	IN	Data Raw: 37 64 65 32 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 73 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 Data Ascii: 7de2!function(){"use strict";var e=function(){return e=Object.assign\|\|function(e){for(var t,n=1,s=arguments.length;n<s;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},e.apply(this,arguments)};function t(e
2024-04-24 07:58:36 UTC	1369	IN	Data Raw: 6f 77 7c 7c 28 28 72 3d 73 2e 72 65 74 75 72 6e 29 26 26 72 2e 63 61 6c 6c 28 73 29 2c 30 29 3a 73 2e 6e 65 78 74 29 26 26 21 28 72 3d 72 2e 63 61 6c 6c 28 73 2c 69 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 72 3b 73 77 69 74 63 68 28 73 3d 30 2c 72 26 26 28 69 3d 5b 32 26 69 5b 30 5d 2c 72 2e 76 61 6c 75 65 5d 29 2c 69 5b 30 5d 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 3a 72 3d 69 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 6f 2e 6c 61 62 65 6c 2b 2b 2c 7b 76 61 6c 75 65 3a 69 5b 31 5d 2c 64 6f 6e 65 3a 21 31 7d 3b 63 61 73 65 20 35 3a 6f 2e 6c 61 62 65 6c 2b 2b 2c 73 3d 69 5b 31 5d 2c 69 3d 5b 30 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 20 37 3a 69 3d 6f 2e 6f 70 73 2e 70 6f 70 28 29 2c 6f 2e 74 72 79 73 2e 70 6f 70 Data Ascii: ow\|\|((r=s.return)&&r.call(s),0):s.next)&&!(r=r.call(s,i[1])).done)return r;switch(s=0,r&&(i=[2&i[0],r.value]),i[0]){case 0:case 1:r=i;break;case 4:return o.label++,{value:i[1],done:!1};case 5:o.label++,s=i[1],i=[0];continue;case 7:i=o.ops.pop(),o.trys.pop
2024-04-24 07:58:36 UTC	1369	IN	Data Raw: 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 69 2c 61 2c 63 3b 72 65 74 75 72 6e 20 6e 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 77 69 74 63 68 28 6e 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 2e 74 72 79 73 2e 70 75 73 68 28 5b 30 2c 33 2c 2c 34 5d 29 2c 77 69 6e 64 6f 77 2e 5f 5f 62 74 3d 77 69 6e 64 6f 77 2e 5f 5f 62 74 7c 7c 7b 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 5f 5f 62 74 2e 63 75 73 74 6f 6d 44 65 74 65 63 74 41 64 42 6c 6f 63 6b 3f 5b 33 2c 32 5d 3a 5b 34 2c 77 69 6e 64 6f 77 2e 5f 5f 62 74 2e 63 75 73 74 6f 6d 44 65 74 65 63 74 41 64 42 6c 6f 63 6b 28 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 5b 32 2c 6e 2e 73 65 Data Ascii: void 0,(function(){var e,t,i,a,c;return n(this,(function(n){switch(n.label){case 0:return n.trys.push([0,3,,4]),window.__bt=window.__bt\|\|{},"function"!=typeof window.__bt.customDetectAdBlock?[3,2]:[4,window.__bt.customDetectAdBlock()];case 1:return[2,n.se
2024-04-24 07:58:36 UTC	1369	IN	Data Raw: 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 28 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 7d 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 3b 74 72 79 7b 69 66 28 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 20 74 6f 70 7d 63 61 74 63 68 28 65 29 7b 7d 74 72 79 7b 66 6f 72 28 3b 65 2e 70 61 72 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 3b 29 65 3d 65 2e 70 61 72 65 6e 74 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 65 7d 28 29 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 22 22 21 3d 3d Data Ascii: ))}))}function l(e){(window.document.body\|\|window.document.documentElement).removeChild(e)}var u=function(){var e=window;try{if(top.document)return top}catch(e){}try{for(;e.parent.document;)e=e.parent}catch(e){}return e}();var d=function(){try{return""!==
2024-04-24 07:58:36 UTC	1369	IN	Data Raw: 22 6c 6f 67 6f 22 3a 22 22 2c 20 22 6e 61 6d 65 22 3a 22 22 2c 20 22 76 69 65 77 22 3a 22 22 2c 20 22 73 69 6e 67 6c 65 5f 63 6c 69 63 6b 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 20 22 70 61 67 65 5f 76 69 65 77 73 5f 74 6f 5f 72 65 6e 64 65 72 22 3a 22 30 22 2c 20 22 70 72 65 6d 69 75 6d 5f 62 79 70 61 73 73 5f 6d 6f 64 65 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 20 22 68 61 72 64 5f 6d 65 73 73 61 67 65 5f 77 61 6c 6c 5f 6d 6f 64 65 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 20 22 61 6c 6c 6f 77 5f 72 65 6e 64 65 72 5f 74 6f 5f 61 61 5f 75 73 65 72 73 22 3a 66 61 6c 73 65 2c 20 22 6c 61 6e 64 69 6e 67 5f 74 65 78 74 5f 65 6e 22 3a 22 22 2c 20 22 63 74 61 5f 62 75 74 74 6f 6e 5f 63 6f 6c 6f 72 22 3a 22 22 2c 20 22 66 6f 6e 74 5f 74 79 Data Ascii: "logo":"", "name":"", "view":"", "single_click_enabled":false, "page_views_to_render":"0", "premium_bypass_mode_enabled":false, "hard_message_wall_mode_enabled":false, "allow_render_to_aa_users":false, "landing_text_en":"", "cta_button_color":"", "font_ty
2024-04-24 07:58:36 UTC	1369	IN	Data Raw: 38 36 39 33 36 32 37 35 30 32 35 39 32 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 6e 79 65 64 61 2e 63 6f 6d 22 3a 7b 22 63 65 22 3a 66 61 6c 73 65 2c 22 6d 65 22 3a 66 61 6c 73 65 2c 22 77 22 3a 22 35 31 31 34 36 32 39 34 34 31 34 35 34 30 38 30 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 6f 73 63 6e 2e 63 6f 6d 22 3a 7b 22 63 65 22 3a 66 61 6c 73 65 2c 22 6d 65 22 3a 66 61 6c 73 65 2c 22 77 22 3a 22 35 31 38 31 34 38 35 35 37 33 34 37 32 32 35 36 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 70 68 6f 74 6f 63 68 72 6f 6e 69 63 6c 65 73 2e 63 6f 6d 22 3a 7b 22 63 65 22 3a 66 61 6c 73 65 2c 22 6d 65 22 3a 66 61 6c 73 65 2c 22 77 Data Ascii: 8693627502592","widget":false,"a":false},"nyeda.com":{"ce":false,"me":false,"w":"5114629441454080","widget":false,"a":false},"oscn.com":{"ce":false,"me":false,"w":"5181485573472256","widget":false,"a":false},"photochronicles.com":{"ce":false,"me":false,"w
2024-04-24 07:58:36 UTC	1369	IN	Data Raw: 2c 74 29 7b 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 5b 5c 5d 5d 2f 67 2c 22 5c 5c 24 26 22 29 3b 76 61 72 20 6e 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5b 3f 26 5d 22 2b 65 2b 22 28 3d 28 5b 5e 26 23 5d 2a 29 7c 26 7c 23 7c 24 29 22 29 2e 65 78 65 63 28 74 29 3b 72 65 74 75 72 6e 20 6e 3f 6e 5b 32 5d 3f 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 5b 32 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 22 20 22 29 29 3a 22 22 3a 6e 75 6c 6c 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 5f 5f 62 74 3d 77 69 6e 64 6f 77 2e 5f 5f 62 74 7c 7c 7b 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 5f 5f 62 74 2e 63 75 73 74 6f 6d 44 65 74 65 63 74 44 6f 6d 61 69 6e 29 72 Data Ascii: ,t){e=e.replace(/[\[\]]/g,"\\$&");var n=new RegExp("[?&]"+e+"(=([^&#]*)\|&\|#\|$)").exec(t);return n?n[2]?decodeURIComponent(n[2].replace(/\+/g," ")):"":null},g=function(){try{if(window.__bt=window.__bt\|\|{},"function"==typeof window.__bt.customDetectDomain)r
2024-04-24 07:58:36 UTC	1369	IN	Data Raw: 3d 69 3f 69 3a 4c 2e 6d 6f 62 69 6c 65 5f 63 6f 6e 74 65 6e 74 5f 65 6e 61 62 6c 65 64 2c 74 2e 77 69 64 67 65 74 3d 6e 75 6c 6c 21 3d 3d 28 6f 3d 4c 2e 77 69 64 67 65 74 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 26 26 6f 2c 6d 3d 21 30 3b 65 6c 73 65 20 66 6f 72 28 45 20 69 6e 20 43 29 28 67 2e 69 6e 64 65 78 4f 66 28 45 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3e 2d 31 7c 7c 75 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 45 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3e 2d 31 29 26 26 28 6d 3d 21 30 2c 4c 3d 43 5b 45 5d 2c 74 2e 77 65 62 73 69 74 65 49 44 3d 6e 75 6c 6c 21 3d 3d 28 61 3d 4c 2e 77 29 26 26 76 6f 69 64 20 30 21 3d 3d 61 3f 61 3a 4c 2e 77 65 62 73 69 74 65 5f 69 64 2c 74 2e 63 6f 6e 74 65 6e 74 45 6e Data Ascii: =i?i:L.mobile_content_enabled,t.widget=null!==(o=L.widget)&&void 0!==o&&o,m=!0;else for(E in C)(g.indexOf(E.toLowerCase())>-1\|\|u.location.hostname.indexOf(E.toLowerCase())>-1)&&(m=!0,L=C[E],t.websiteID=null!==(a=L.w)&&void 0!==a?a:L.website_id,t.contentEn
2024-04-24 07:58:36 UTC	1369	IN	Data Raw: 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 65 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 22 7d 7d 63 6c 61 73 73 20 4e 20 65 78 74 65 6e 64 73 20 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 65 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 45 6e 63 6f 64 69 6e 67 45 72 72 6f 72 22 7d 7d 63 6c 61 73 73 20 55 20 65 78 74 65 6e 64 73 20 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 65 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 47 56 4c 45 72 72 6f 72 22 7d 7d 63 6c 61 73 73 20 46 20 65 78 74 65 6e 64 73 20 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 29 7b 73 75 70 65 72 28 60 69 6e 76 61 6c 69 64 20 76 61 6c Data Ascii: Error{constructor(e){super(e),this.name="DecodingError"}}class N extends Error{constructor(e){super(e),this.name="EncodingError"}}class U extends Error{constructor(e){super(e),this.name="GVLError"}}class F extends Error{constructor(e,t){super(`invalid val
2024-04-24 07:58:36 UTC	1369	IN	Data Raw: 6e 65 77 20 78 28 22 49 6e 76 61 6c 69 64 6c 79 20 65 6e 63 6f 64 65 64 20 42 61 73 65 36 34 55 52 4c 20 73 74 72 69 6e 67 22 29 3b 6c 65 74 20 74 3d 22 22 3b 66 6f 72 28 6c 65 74 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 63 6f 6e 73 74 20 73 3d 74 68 69 73 2e 52 45 56 45 52 53 45 5f 44 49 43 54 2e 67 65 74 28 65 5b 6e 5d 29 2e 74 6f 53 74 72 69 6e 67 28 32 29 3b 74 2b 3d 22 30 22 2e 72 65 70 65 61 74 28 74 68 69 73 2e 42 41 53 49 53 2d 73 2e 6c 65 6e 67 74 68 29 2b 73 7d 72 65 74 75 72 6e 20 74 7d 7d 63 6c 61 73 73 20 42 7b 63 6c 6f 6e 65 28 29 7b 63 6f 6e 73 74 20 65 3d 6e 65 77 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 29 2e 66 6f 72 45 61 63 68 28 28 Data Ascii: new x("Invalidly encoded Base64URL string");let t="";for(let n=0;n<e.length;n++){const s=this.REVERSE_DICT.get(e[n]).toString(2);t+="0".repeat(this.BASIS-s.length)+s}return t}}class B{clone(){const e=new this.constructor;return Object.keys(this).forEach((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49715	23.206.6.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:37 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 07:58:37 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2518) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=255911 Date: Wed, 24 Apr 2024 07:58:37 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49716	104.22.74.216	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:37 UTC	650	OUT	GET /tag?o=5097926782615552&upapi=true HTTP/1.1 Host: btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://lokicollective.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"99d9767dcb7d8390d77625c402e08999" If-Modified-Since: Wed, 24 Apr 2024 07:21:18 GMT
2024-04-24 07:58:37 UTC	389	IN	HTTP/1.1 304 Not Modified Date: Wed, 24 Apr 2024 07:58:37 GMT Connection: close Cache-Control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300 Etag: "99d9767dcb7d8390d77625c402e08999" Last-Modified: Wed, 24 Apr 2024 07:21:18 GMT Vary: Origin Via: 1.1 google CF-Cache-Status: HIT Age: 2101 Server: cloudflare CF-RAY: 87948c9ecad80acd-LAS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49718	172.67.69.19	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:37 UTC	588	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://lokicollective.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:38 UTC	1230	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 07:58:38 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPra9d8_1cAUA1puYgPaDlSF3jxVddoyAk-EtkXyHJkJZG-bxPqX7Ma8N1zwawfflvspzxc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Wed, 17 Apr 2024 14:45:44 GMT Cache-Control: public, max-age=86400 Age: 583142 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F3cG5NEL%2B6jaQHX65KvQ3gtx%2BXMqX4B%2B9INi9jwYOpqh7vd8ntMEJdbAuCY7DtLQ5QQM3zo7EoMIAi8GoLtQqNiOgKbK3STOBfsj%2Fo3K9oUsIl3%2B4QWpZCfLWwEOt%2B%2B8Rw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87948c9fd96e091a-LAX
2024-04-24 07:58:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49719	172.67.69.19	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:37 UTC	609	OUT	GET /px.gif?ch=1&e=0.6066674524460127 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://lokicollective.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:38 UTC	1222	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 07:58:38 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPra9d8_1cAUA1puYgPaDlSF3jxVddoyAk-EtkXyHJkJZG-bxPqX7Ma8N1zwawfflvspzxc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Wed, 17 Apr 2024 14:45:44 GMT Cache-Control: public, max-age=86400 Age: 583142 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NsUx6u41yoOZfCmrqni9PmXRFr5hZO0jq32Eh0HLBcJRrQ3Mo9l9K5orPgbXeJSFxNnpn0bDtEueg6ZAsvgh%2F408Fx7tJ7cn5kNz7cc9kSREroG%2FypF%2BDnfIzcYBJfYehg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87948c9fd8728403-LAX
2024-04-24 07:58:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49717	130.211.23.194	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:37 UTC	570	OUT	GET /mw/state?bt_env=prod HTTP/1.1 Host: api.btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://lokicollective.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://lokicollective.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:38 UTC	203	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Vary: Origin Date: Wed, 24 Apr 2024 07:58:38 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49720	142.251.2.148	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:37 UTC	719	OUT	GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://lokicollective.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:38 UTC	734	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/x-icon Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 1078 Date: Wed, 24 Apr 2024 07:58:38 GMT Expires: Thu, 25 Apr 2024 07:58:38 GMT Cache-Control: public, max-age=86400 Last-Modified: Tue, 08 May 2012 13:08:06 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 07:58:38 UTC	521	IN	Data Raw: 00 00 01 00 02 00 10 10 10 00 00 00 00 00 28 01 00 00 26 00 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 4e 01 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: (& N(
2024-04-24 07:58:38 UTC	557	IN	Data Raw: 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49721	23.206.6.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:38 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 07:58:38 UTC	531	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0Fz4RYwAAAACZW8dCTzveR7lI76J6Z2l5U0pDRURHRTA1MTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=255903 Date: Wed, 24 Apr 2024 07:58:38 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-24 07:58:38 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49723	172.67.69.19	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:39 UTC	350	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:39 UTC	1224	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 07:58:39 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPra9d8_1cAUA1puYgPaDlSF3jxVddoyAk-EtkXyHJkJZG-bxPqX7Ma8N1zwawfflvspzxc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Wed, 17 Apr 2024 14:45:44 GMT Cache-Control: public, max-age=86400 Age: 583143 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Gt0JrXsjckeXWh%2BKER7fTAe22zuwcmyNx3XiC3XmPe6ha2qBswLNJ9kGTqZ9UF0WVZmIsNhL%2FLeoMReJdoVQtHdubaOkswYy4TlOaNS%2FLDUkF7%2FwMx72JPVIGs82lCvqA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87948ca78f1d0910-LAX
2024-04-24 07:58:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49722	172.67.69.19	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:39 UTC	371	OUT	GET /px.gif?ch=1&e=0.6066674524460127 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:39 UTC	1222	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 07:58:39 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPra9d8_1cAUA1puYgPaDlSF3jxVddoyAk-EtkXyHJkJZG-bxPqX7Ma8N1zwawfflvspzxc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Wed, 17 Apr 2024 14:45:44 GMT Cache-Control: public, max-age=86400 Age: 583143 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6UR5iWLe0YPTNhMgaCrwuurN4Ajbm4XPMIYEBZnGA9gOl0FdtOktFcIIfw0P9yIIatCqEcyvzrBy1%2FnHulzL%2BhNxhLCFdXm%2BGXkKEh92rb0w5akKknXflHIxM6fjWkjsLw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87948ca78f1b2b9b-LAX
2024-04-24 07:58:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49724	142.251.2.149	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:39 UTC	481	OUT	GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:39 UTC	742	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 1078 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 24 Apr 2024 07:58:38 GMT Expires: Thu, 25 Apr 2024 07:58:38 GMT Cache-Control: public, max-age=86400 Last-Modified: Tue, 08 May 2012 13:08:06 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 07:58:39 UTC	513	IN	Data Raw: 00 00 01 00 02 00 10 10 10 00 00 00 00 00 28 01 00 00 26 00 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 4e 01 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: (& N(
2024-04-24 07:58:39 UTC	565	IN	Data Raw: 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49726	52.32.46.203	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:40 UTC	594	OUT	OPTIONS /v1/parking/landers/lokicollective.org?trafficTarget=reseller&abp=1&gdabp=true HTTP/1.1 Host: api.aws.parking.godaddy.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-request-id Origin: https://lokicollective.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://lokicollective.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:40 UTC	749	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 07:58:40 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=C28UoVR9M2QskiKEc6zMaP/rFmkDAjrequ833s29HArAb3uv7xEglVB0hLBbdWo3S/ti+BJXHtCobyDL797kZlnpkrAzNdT/FEqE4C9SvnC1wFbBjtM8iyVL93x6; Expires=Wed, 01 May 2024 07:58:40 GMT; Path=/ Set-Cookie: AWSALBCORS=C28UoVR9M2QskiKEc6zMaP/rFmkDAjrequ833s29HArAb3uv7xEglVB0hLBbdWo3S/ti+BJXHtCobyDL797kZlnpkrAzNdT/FEqE4C9SvnC1wFbBjtM8iyVL93x6; Expires=Wed, 01 May 2024 07:58:40 GMT; Path=/; SameSite=None; Secure access-control-allow-credentials: true access-control-allow-headers: X-Request-Id access-control-allow-methods: GET, HEAD, OPTIONS access-control-allow-origin: https://lokicollective.org access-control-max-age: 600 x-request-id: _qy5Qj5X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49731	52.32.46.203	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:41 UTC	690	OUT	GET /v1/parking/landers/lokicollective.org?trafficTarget=reseller&abp=1&gdabp=true HTTP/1.1 Host: api.aws.parking.godaddy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Request-Id: 56d7852b-2394-475c-af04-42543a818fbc sec-ch-ua-platform: "Windows" Accept: / Origin: https://lokicollective.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://lokicollective.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:42 UTC	885	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 07:58:42 GMT Content-Type: application/json Content-Length: 977 Connection: close Set-Cookie: AWSALB=RE7LlV85AjH1+qOt9AxD1RqGTPoI6hNJKQN759rLhlvKXmK02vlLMbhZW/CY/+AAeZ3ldagMzfnqnLqphR0QcLnca+O5NnxSiJauEK0oFgfpNI0v1A6df+te6/L7; Expires=Wed, 01 May 2024 07:58:42 GMT; Path=/ Set-Cookie: AWSALBCORS=RE7LlV85AjH1+qOt9AxD1RqGTPoI6hNJKQN759rLhlvKXmK02vlLMbhZW/CY/+AAeZ3ldagMzfnqnLqphR0QcLnca+O5NnxSiJauEK0oFgfpNI0v1A6df+te6/L7; Expires=Wed, 01 May 2024 07:58:42 GMT; Path=/; SameSite=None; Secure access-control-allow-credentials: true access-control-allow-origin: https://lokicollective.org access-control-max-age: 600 cache-control: Private,max-age=86400 set-cookie: pwvisitor=daed569e-28e8-4a09-855c-186895a12468; Path=/; Expires=Fri, 24 May 2024 07:58:42 GMT; Secure; SameSite=None x-request-id: 56d7852b-2394-475c-af04-42543a818fbc
2024-04-24 07:58:42 UTC	977	IN	Data Raw: 7b 22 75 6e 74 61 72 67 65 74 65 64 22 3a 7b 22 73 79 73 74 65 6d 22 3a 22 50 57 22 2c 22 64 69 73 70 6c 61 79 54 79 70 65 22 3a 22 41 44 53 22 2c 22 64 61 74 61 53 6f 75 72 63 65 22 3a 22 49 4e 56 45 4e 54 4f 52 59 22 2c 22 61 64 53 65 6e 73 65 22 3a 7b 22 64 72 69 64 22 3a 22 61 73 2d 64 72 69 64 2d 6f 6f 2d 31 38 38 35 37 31 34 31 38 36 35 34 30 38 39 34 22 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 6e 6f 6e 2d 65 78 70 69 72 79 22 2c 22 70 75 62 49 64 22 3a 22 64 70 2d 67 6f 64 61 64 64 79 31 5f 78 6d 6c 22 7d 2c 22 61 64 54 69 6c 65 22 3a 7b 22 73 65 61 72 63 68 52 65 73 75 6c 74 43 6f 64 65 22 3a 22 4e 4f 4e 45 22 7d 2c 22 64 6f 6d 61 69 6e 22 3a 7b 22 72 6f 6f 74 44 6f 6d 61 69 6e 22 3a 22 6c 6f 6b 69 63 6f 6c 6c 65 63 74 69 76 65 2e 6f 72 67 22 2c 22 72 Data Ascii: {"untargeted":{"system":"PW","displayType":"ADS","dataSource":"INVENTORY","adSense":{"drid":"as-drid-oo-1885714186540894","channel":"non-expiry","pubId":"dp-godaddy1_xml"},"adTile":{"searchResultCode":"NONE"},"domain":{"rootDomain":"lokicollective.org","r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49733	52.32.46.203	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:43 UTC	428	OUT	GET /v1/parking/landers/lokicollective.org?trafficTarget=reseller&abp=1&gdabp=true HTTP/1.1 Host: api.aws.parking.godaddy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:43 UTC	731	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 07:58:43 GMT Content-Type: application/json Content-Length: 979 Connection: close Set-Cookie: AWSALB=S1uJuv5ci6rp54OYJ1ljLFDCNOeG7TBQ+l6DZKxH837mtiar4VHvezYvD7mnOaDd/zOvgX916lAhWzVL+TQBDP3ZnjbcXg7liLCr7DFiHminnZBuc1q/HhobipFe; Expires=Wed, 01 May 2024 07:58:43 GMT; Path=/ Set-Cookie: AWSALBCORS=S1uJuv5ci6rp54OYJ1ljLFDCNOeG7TBQ+l6DZKxH837mtiar4VHvezYvD7mnOaDd/zOvgX916lAhWzVL+TQBDP3ZnjbcXg7liLCr7DFiHminnZBuc1q/HhobipFe; Expires=Wed, 01 May 2024 07:58:43 GMT; Path=/; SameSite=None; Secure cache-control: Private,max-age=86400 set-cookie: pwvisitor=877fdf22-76a2-41cb-a891-03097557820b; Path=/; Expires=Fri, 24 May 2024 07:58:43 GMT; Secure; SameSite=None x-request-id: EXrS3JB6
2024-04-24 07:58:43 UTC	979	IN	Data Raw: 7b 22 75 6e 74 61 72 67 65 74 65 64 22 3a 7b 22 73 79 73 74 65 6d 22 3a 22 50 57 22 2c 22 64 69 73 70 6c 61 79 54 79 70 65 22 3a 22 41 44 53 22 2c 22 64 61 74 61 53 6f 75 72 63 65 22 3a 22 49 4e 56 45 4e 54 4f 52 59 22 2c 22 61 64 53 65 6e 73 65 22 3a 7b 22 64 72 69 64 22 3a 22 61 73 2d 64 72 69 64 2d 6f 6f 2d 31 38 38 35 37 31 34 31 38 36 35 34 30 38 39 34 22 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 6e 6f 6e 2d 65 78 70 69 72 79 22 2c 22 70 75 62 49 64 22 3a 22 64 70 2d 67 6f 64 61 64 64 79 31 5f 78 6d 6c 22 7d 2c 22 61 64 54 69 6c 65 22 3a 7b 22 73 65 61 72 63 68 52 65 73 75 6c 74 43 6f 64 65 22 3a 22 4e 4f 4e 45 22 7d 2c 22 64 6f 6d 61 69 6e 22 3a 7b 22 72 6f 6f 74 44 6f 6d 61 69 6e 22 3a 22 6c 6f 6b 69 63 6f 6c 6c 65 63 74 69 76 65 2e 6f 72 67 22 2c 22 72 Data Ascii: {"untargeted":{"system":"PW","displayType":"ADS","dataSource":"INVENTORY","adSense":{"drid":"as-drid-oo-1885714186540894","channel":"non-expiry","pubId":"dp-godaddy1_xml"},"adTile":{"searchResultCode":"NONE"},"domain":{"rootDomain":"lokicollective.org","r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49734	74.125.137.100	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:44 UTC	1342	OUT	GET /afs/ads?adsafe=low&adtest=off&psid=7949183650&pcsa=false&channel=non-expiry&domain_name=lokicollective.org&client=dp-godaddy1_xml&r=m&rpbu=https%3A%2F%2Flokicollective.org%2Flander&type=3&uiopt=true&swp=as-drid-oo-1885714186540894&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=r3&nocache=421713945521519&num=0&output=afd_ads&v=3&bsl=8&pac=2&u_his=1&u_tz=120&dt=1713945521522&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=907&frm=0&uio=-&cont=relatedLinks&drt=0&jsid=caf&nfp=1&jsv=625314022&rurl=https%3A%2F%2Flokicollective.org%2Flander&referer=https%3A%2F%2Flokicollective.org%2Fproject%2F HTTP/1.1 Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://lokicollective.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:44 UTC	1806	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadsafe%3Dlow%26adtest%3Doff%26psid%3D7949183650%26pcsa%3Dfalse%26channel%3Dnon-expiry%26domain_name%3Dlokicollective.org%26client%3Ddp-godaddy1_xml%26r%3Dm%26rpbu%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-oo-1885714186540894%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300002%252C17301437%252C17301439%252C17301442%26client_gdprApplies%3D0%26format%3Dr3%26nocache%3D421713945521519%26num%3D0%26output%3Dafd_ads%26v%3D3%26bsl%3D8%26pac%3D2%26u_his%3D1%26u_tz%3D120%26dt%3D1713945521522%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D907%26frm%3D0%26uio%3D-%26cont%3DrelatedLinks%26drt%3D0%26jsid%3Dcaf%26nfp%3D1%26jsv%3D625314022%26rurl%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26referer%3Dhttps%253A%252F%252Flokicollective.org%252Fproject%252F&q=EgSaEGkkGLT3orEGIjASKWvf3s_h17mP-Uc4UVzAQloNiIqRSy-JFjke5NIPT7PON1RaNAY9q1P-D0LQKt8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwItPeisQYQqN2R6wISBJoQaSQ Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-SL_7X8YiM0HNt60sLCquzA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Date: Wed, 24 Apr 2024 07:58:44 GMT Server: gws Content-Length: 1259 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49736	142.250.141.105	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:45 UTC	1714	OUT	GET /sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadsafe%3Dlow%26adtest%3Doff%26psid%3D7949183650%26pcsa%3Dfalse%26channel%3Dnon-expiry%26domain_name%3Dlokicollective.org%26client%3Ddp-godaddy1_xml%26r%3Dm%26rpbu%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-oo-1885714186540894%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300002%252C17301437%252C17301439%252C17301442%26client_gdprApplies%3D0%26format%3Dr3%26nocache%3D421713945521519%26num%3D0%26output%3Dafd_ads%26v%3D3%26bsl%3D8%26pac%3D2%26u_his%3D1%26u_tz%3D120%26dt%3D1713945521522%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D907%26frm%3D0%26uio%3D-%26cont%3DrelatedLinks%26drt%3D0%26jsid%3Dcaf%26nfp%3D1%26jsv%3D625314022%26rurl%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26referer%3Dhttps%253A%252F%252Flokicollective.org%252Fproject%252F&q=EgSaEGkkGLT3orEGIjASKWvf3s_h17mP-Uc4UVzAQloNiIqRSy-JFjke5NIPT7PON1RaNAY9q1P-D0LQKt8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://lokicollective.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:45 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Wed, 24 Apr 2024 07:58:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 5524 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 07:58:45 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 64 73 65 6e 73 65 63 75 73 74 6f 6d 73 65 61 72 63 68 61 64 73 2e 63 6f 6d 2f 61 66 73 2f 61 64 73 3f 61 64 73 61 66 65 3d 6c 6f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.adsensecustomsearchads.com/afs/ads?adsafe=lo
2024-04-24 07:58:45 UTC	1255	IN	Data Raw: 3b 6a 73 69 64 3d 63 61 66 26 61 6d 70 3b 6e 66 70 3d 31 26 61 6d 70 3b 6a 73 76 3d 36 32 35 33 31 34 30 32 32 26 61 6d 70 3b 72 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6c 6f 6b 69 63 6f 6c 6c 65 63 74 69 76 65 2e 6f 72 67 25 32 46 6c 61 6e 64 65 72 26 61 6d 70 3b 72 65 66 65 72 65 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6c 6f 6b 69 63 6f 6c 6c 65 63 74 69 76 65 2e 6f 72 67 25 32 46 70 72 6f 6a 65 63 74 25 32 46 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 70 61 64 64 69 6e 67 3a 32 30 70 Data Ascii: ;jsid=caf&nfp=1&jsv=625314022&rurl=https%3A%2F%2Flokicollective.org%2Flander&referer=https%3A%2F%2Flokicollective.org%2Fproject%2F</title></head><body style="font-family: arial, sans-serif; background-color: #fff; color: #000; padding:20p
2024-04-24 07:58:45 UTC	1255	IN	Data Raw: 73 39 54 43 59 75 63 4d 35 52 56 6f 4b 37 36 38 68 4d 39 46 5a 49 7a 4c 4e 63 48 5a 76 75 4b 51 4f 6e 5f 6b 34 67 42 36 4f 43 4c 78 38 73 62 4a 37 54 7a 58 61 59 35 6e 41 45 22 3e 3c 2f 64 69 76 3e 0a 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 27 68 69 64 64 65 6e 27 20 6e 61 6d 65 3d 27 71 27 20 76 61 6c 75 65 3d 27 45 67 53 61 45 47 6b 6b 47 4c 54 33 6f 72 45 47 49 6a 41 53 4b 57 76 66 33 73 5f 68 31 37 6d 50 2d 55 63 34 55 56 7a 41 51 6c 6f 4e 69 49 71 52 53 79 2d 4a 46 6a 6b 65 35 4e 49 50 54 37 50 4f 4e 31 52 61 4e 41 59 39 71 31 50 2d 44 30 4c 51 4b 74 38 79 41 58 4a 4b 47 56 4e 50 55 6c 4a 5a 58 30 46 43 56 56 4e 4a 56 6b 56 66 54 6b 56 55 58 30 31 46 55 31 4e 42 52 30 56 61 41 55 4d 27 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 Data Ascii: s9TCYucM5RVoK768hM9FZIzLNcHZvuKQOn_k4gB6OCLx8sbJ7TzXaY5nAE"></div><input type='hidden' name='q' value='EgSaEGkkGLT3orEGIjASKWvf3s_h17mP-Uc4UVzAQloNiIqRSy-JFjke5NIPT7PON1RaNAY9q1P-D0LQKt8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM'><input type="hidden"
2024-04-24 07:58:45 UTC	1255	IN	Data Raw: 72 3e 3c 62 72 3e 0a 54 68 69 73 20 6e 65 74 77 6f 72 6b 20 69 73 20 62 6c 6f 63 6b 65 64 20 64 75 65 20 74 6f 20 75 6e 61 64 64 72 65 73 73 65 64 20 61 62 75 73 65 20 63 6f 6d 70 6c 61 69 6e 74 73 20 61 62 6f 75 74 20 6d 61 6c 69 63 69 6f 75 73 20 62 65 68 61 76 69 6f 72 2e 20 54 68 69 73 20 70 61 67 65 20 63 68 65 63 6b 73 20 74 6f 20 73 65 65 20 69 66 20 69 74 27 73 20 72 65 61 6c 6c 79 20 61 20 68 75 6d 61 6e 20 73 65 6e 64 69 6e 67 20 74 68 65 20 72 65 71 75 65 73 74 73 20 61 6e 64 20 6e 6f 74 20 61 20 72 6f 62 6f 74 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 74 68 69 73 20 6e 65 74 77 6f 72 6b 2e 20 3c 62 72 3e 3c 62 72 3e 0a 3c 64 69 76 20 69 64 3d 22 69 6e 66 6f 44 69 76 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 62 61 63 6b Data Ascii: r><br>This network is blocked due to unaddressed abuse complaints about malicious behavior. This page checks to see if it's really a human sending the requests and not a robot coming from this network. <br><br><div id="infoDiv" style="display:none; back
2024-04-24 07:58:45 UTC	860	IN	Data Raw: 73 74 6f 6d 73 65 61 72 63 68 61 64 73 2e 63 6f 6d 2f 61 66 73 2f 61 64 73 3f 61 64 73 61 66 65 3d 6c 6f 77 26 61 6d 70 3b 61 64 74 65 73 74 3d 6f 66 66 26 61 6d 70 3b 70 73 69 64 3d 37 39 34 39 31 38 33 36 35 30 26 61 6d 70 3b 70 63 73 61 3d 66 61 6c 73 65 26 61 6d 70 3b 63 68 61 6e 6e 65 6c 3d 6e 6f 6e 2d 65 78 70 69 72 79 26 61 6d 70 3b 64 6f 6d 61 69 6e 5f 6e 61 6d 65 3d 6c 6f 6b 69 63 6f 6c 6c 65 63 74 69 76 65 2e 6f 72 67 26 61 6d 70 3b 63 6c 69 65 6e 74 3d 64 70 2d 67 6f 64 61 64 64 79 31 5f 78 6d 6c 26 61 6d 70 3b 72 3d 6d 26 61 6d 70 3b 72 70 62 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6c 6f 6b 69 63 6f 6c 6c 65 63 74 69 76 65 2e 6f 72 67 25 32 46 6c 61 6e 64 65 72 26 61 6d 70 3b 74 79 70 65 3d 33 26 61 6d 70 3b 75 69 6f 70 74 3d 74 72 75 Data Ascii: stomsearchads.com/afs/ads?adsafe=low&adtest=off&psid=7949183650&pcsa=false&channel=non-expiry&domain_name=lokicollective.org&client=dp-godaddy1_xml&r=m&rpbu=https%3A%2F%2Flokicollective.org%2Flander&type=3&uiopt=tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49737	142.250.141.105	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:46 UTC	1641	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadsafe%3Dlow%26adtest%3Doff%26psid%3D7949183650%26pcsa%3Dfalse%26channel%3Dnon-expiry%26domain_name%3Dlokicollective.org%26client%3Ddp-godaddy1_xml%26r%3Dm%26rpbu%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-oo-1885714186540894%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300002%252C17301437%252C17301439%252C17301442%26client_gdprApplies%3D0%26format%3Dr3%26nocache%3D421713945521519%26num%3D0%26output%3Dafd_ads%26v%3D3%26bsl%3D8%26pac%3D2%26u_his%3D1%26u_tz%3D120%26dt%3D1713945521522%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D907%26frm%3D0%26uio%3D-%26cont%3DrelatedLinks%26drt%3D0%26jsid%3Dcaf%26nfp%3D1%26jsv%3D625314022%26rurl%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26referer%3Dhttps%253A%252F%252Flokicollective.org%252Fproject%252F&q=EgSaEGkkGLT3orEGIjASKWvf3s_h17mP-Uc4UVzAQloNiIqRSy-JFjke5NIPT7PON1RaNAY9q1P-D0LQKt8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:46 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 24 Apr 2024 07:58:46 GMT Date: Wed, 24 Apr 2024 07:58:46 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 07:58:46 UTC	727	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-24 07:58:46 UTC	502	IN	Data Raw: 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 41 32 33 36 4a 2f 5a 55 67 55 2b 30 2f 4f 36 62 2f Data Ascii: cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-A236J/ZUgU+0/O6b/
2024-04-24 07:58:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49742	142.250.141.105	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:48 UTC	2248	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&s=HvyRYTb8JCTIQsjTBmWcfxZwavGlIxZBHYwtWjX603zvKXD_wY85wI_xUZJ9bvr2ySTHHyI_Fj41ha_HbTru4FzDvb6nUcXBIfrGjGh8LOa3GvsH9_G6KGNjRTqL1xJiA4k6bcgCRnxnXJbZWqQLvVTDG-p5hbGniG2FrKKtcxLpMtSjvZJypIG1HN8uuezkjA8Ij7MezmHUz52odH3bTqfkXDX4Lh6V7IWFJs9TCYucM5RVoK768hM9FZIzLNcHZvuKQOn_k4gB6OCLx8sbJ7TzXaY5nAE&cb=o8d72n2u6tuf HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadsafe%3Dlow%26adtest%3Doff%26psid%3D7949183650%26pcsa%3Dfalse%26channel%3Dnon-expiry%26domain_name%3Dlokicollective.org%26client%3Ddp-godaddy1_xml%26r%3Dm%26rpbu%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-oo-1885714186540894%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300002%252C17301437%252C17301439%252C17301442%26client_gdprApplies%3D0%26format%3Dr3%26nocache%3D421713945521519%26num%3D0%26output%3Dafd_ads%26v%3D3%26bsl%3D8%26pac%3D2%26u_his%3D1%26u_tz%3D120%26dt%3D1713945521522%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D907%26frm%3D0%26uio%3D-%26cont%3DrelatedLinks%26drt%3D0%26jsid%3Dcaf%26nfp%3D1%26jsv%3D625314022%26rurl%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26referer%3Dhttps%253A%252F%252Flokicollective.org%252Fproject%252F&q=EgSaEGkkGLT3orEGIjASKWvf3s_h17mP-Uc4UVzAQloNiIqRSy-JFjke5NIPT7PON1RaNAY9q1P-D0LQKt8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:49 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 07:58:49 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-W6kuxLllEuQl9w9TYqovaQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 07:58:49 UTC	364	IN	Data Raw: 32 61 65 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2aeb<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-24 07:58:49 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-24 07:58:49 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-24 07:58:49 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-24 07:58:49 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-24 07:58:49 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-24 07:58:49 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 57 36 6b 75 78 4c 6c 6c 45 75 51 6c 39 77 39 54 59 71 6f 76 61 51 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="W6kuxLllEuQl9w9TYqovaQ" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-24 07:58:49 UTC	1255	IN	Data Raw: 65 6a 39 4e 6b 58 37 4f 4a 54 39 78 72 31 64 49 74 44 4a 59 65 6d 6f 5f 42 4c 52 5a 4e 4d 55 50 6e 43 6f 5f 4c 74 6d 32 44 6a 49 59 4c 6e 38 52 48 2d 65 36 6e 72 6c 77 62 73 49 42 4c 45 73 4a 57 31 30 51 43 51 66 53 6b 47 4a 62 55 48 72 44 58 31 34 78 47 51 51 33 76 6c 2d 65 75 43 6e 30 69 52 71 7a 46 6a 5a 47 6c 65 39 6b 6d 67 54 2d 73 74 47 72 76 56 6c 42 43 43 72 30 5f 43 53 39 71 31 42 71 4c 35 78 44 51 52 53 70 47 65 51 4b 49 68 46 4e 42 52 78 62 6f 6d 68 79 56 4c 58 5a 52 66 50 64 6b 56 54 53 2d 44 39 66 6f 7a 61 6a 71 34 61 7a 47 37 46 6c 35 62 58 7a 42 5a 2d 76 54 4f 59 41 31 2d 4f 67 5f 64 64 78 52 7a 57 74 55 6c 37 63 7a 7a 74 33 32 6f 30 58 76 42 72 59 76 30 50 6d 49 4c 63 7a 47 54 52 4b 4b 6a 65 73 36 46 47 6a 6b 33 53 45 4f 58 4c 31 76 5f 36 Data Ascii: ej9NkX7OJT9xr1dItDJYemo_BLRZNMUPnCo_Ltm2DjIYLn8RH-e6nrlwbsIBLEsJW10QCQfSkGJbUHrDX14xGQQ3vl-euCn0iRqzFjZGle9kmgT-stGrvVlBCCr0_CS9q1BqL5xDQRSpGeQKIhFNBRxbomhyVLXZRfPdkVTS-D9fozajq4azG7Fl5bXzBZ-vTOYA1-Og_ddxRzWtUl7czzt32o0XvBrYv0PmILczGTRKKjes6FGjk3SEOXL1v_6
2024-04-24 07:58:49 UTC	1255	IN	Data Raw: 59 62 30 59 69 30 44 5f 6c 4c 36 5a 33 52 73 69 77 77 48 5a 54 50 49 6d 4f 48 79 43 77 79 48 50 72 6f 2d 37 72 57 69 33 6b 64 32 4e 63 47 4d 4a 48 37 4c 4b 52 55 56 2d 44 78 58 41 31 62 70 36 4d 4d 76 59 38 6e 46 44 4e 70 75 51 79 6c 4d 70 66 4b 75 33 4b 63 63 43 37 31 4b 47 30 46 55 45 41 55 41 49 4f 77 5a 48 4f 54 4c 61 6d 6a 6a 44 31 2d 4e 63 69 31 37 34 7a 32 5f 5a 6b 6f 65 39 4c 72 6b 45 4d 4d 7a 35 51 34 2d 71 56 43 64 5a 43 48 57 66 7a 43 66 4b 73 43 2d 67 6a 78 7a 55 38 56 6b 47 47 58 6e 64 79 6e 77 63 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 57 36 6b 75 78 4c 6c 6c 45 75 51 6c 39 77 39 54 59 71 6f 76 61 51 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 Data Ascii: Yb0Yi0D_lL6Z3RsiwwHZTPImOHyCwyHPro-7rWi3kd2NcGMJH7LKRUV-DxXA1bp6MMvY8nFDNpuQylMpfKu3KccC71KG0FUEAUAIOwZHOTLamjjD1-Nci174z2_Zkoe9LrkEMMz5Q4-qVCdZCHWfzCfKsC-gjxzU8VkGGXndynwc"><script type="text/javascript" nonce="W6kuxLllEuQl9w9TYqovaQ"> recaptcha.a
2024-04-24 07:58:49 UTC	591	IN	Data Raw: 56 70 61 54 55 6c 6f 62 6b 64 53 63 30 68 43 55 44 52 6a 64 30 4e 7a 59 57 30 77 5a 7a 56 4d 55 6d 52 52 59 54 67 33 65 46 63 77 54 6d 70 54 57 6d 64 42 53 6a 46 44 4e 58 68 68 4e 31 68 4f 55 56 46 57 4f 57 31 4b 65 6d 5a 32 54 58 6c 42 54 32 4a 33 56 69 38 76 54 45 74 45 4d 30 68 6d 64 47 5a 59 63 43 39 73 63 6d 51 77 63 55 70 5a 4f 56 5a 32 4d 45 78 7a 52 6b 70 71 57 6b 56 6b 56 6b 56 61 51 33 51 32 5a 57 52 48 59 57 56 69 51 7a 56 6e 56 47 74 45 54 44 64 36 62 44 6b 7a 4d 58 4a 6e 5a 7a 4a 35 53 33 70 74 56 32 78 59 63 56 56 61 62 48 5a 6f 51 55 55 76 57 55 56 72 56 6e 64 6f 53 32 31 42 61 31 46 4c 53 6c 4e 79 57 55 6c 5a 5a 31 5a 30 56 46 64 45 55 44 4a 45 54 33 70 52 5a 6e 55 31 63 47 4e 61 51 30 39 79 64 54 5a 68 57 57 56 46 64 6e 5a 4d 63 45 74 75 Data Ascii: VpaTUlobkdSc0hCUDRjd0NzYW0wZzVMUmRRYTg3eFcwTmpTWmdBSjFDNXhhN1hOUVFWOW1KemZ2TXlBT2J3Vi8vTEtEM0hmdGZYcC9scmQwcUpZOVZ2MExzRkpqWkVkVkVaQ3Q2ZWRHYWViQzVnVGtETDd6bDkzMXJnZzJ5S3ptV2xYcVVabHZoQUUvWUVrVndoS21Ba1FLSlNyWUlZZ1Z0VFdEUDJET3pRZnU1cGNaQ09ydTZhWWVFdnZMcEtu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49751	142.250.141.105	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:50 UTC	1114	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&s=HvyRYTb8JCTIQsjTBmWcfxZwavGlIxZBHYwtWjX603zvKXD_wY85wI_xUZJ9bvr2ySTHHyI_Fj41ha_HbTru4FzDvb6nUcXBIfrGjGh8LOa3GvsH9_G6KGNjRTqL1xJiA4k6bcgCRnxnXJbZWqQLvVTDG-p5hbGniG2FrKKtcxLpMtSjvZJypIG1HN8uuezkjA8Ij7MezmHUz52odH3bTqfkXDX4Lh6V7IWFJs9TCYucM5RVoK768hM9FZIzLNcHZvuKQOn_k4gB6OCLx8sbJ7TzXaY5nAE&cb=o8d72n2u6tuf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:51 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Wed, 24 Apr 2024 07:58:50 GMT Date: Wed, 24 Apr 2024 07:58:50 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 07:58:51 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js');
2024-04-24 07:58:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49752	142.250.141.105	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:50 UTC	1102	OUT	GET /js/bg/6JK7PkhQPjgGeBZqyHKCSWuJKD5ZJmF_kzmP9QlV1DY.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&s=HvyRYTb8JCTIQsjTBmWcfxZwavGlIxZBHYwtWjX603zvKXD_wY85wI_xUZJ9bvr2ySTHHyI_Fj41ha_HbTru4FzDvb6nUcXBIfrGjGh8LOa3GvsH9_G6KGNjRTqL1xJiA4k6bcgCRnxnXJbZWqQLvVTDG-p5hbGniG2FrKKtcxLpMtSjvZJypIG1HN8uuezkjA8Ij7MezmHUz52odH3bTqfkXDX4Lh6V7IWFJs9TCYucM5RVoK768hM9FZIzLNcHZvuKQOn_k4gB6OCLx8sbJ7TzXaY5nAE&cb=o8d72n2u6tuf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:51 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18278 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 23 Apr 2024 17:27:34 GMT Expires: Wed, 23 Apr 2025 17:27:34 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 13:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 52276 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 07:58:51 UTC	444	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 52 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 7d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 29 7b 69 66 28 21 28 59 3d 28 6e 3d 6e 75 6c 6c 2c 52 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 59 29 7c 7c 21 59 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 6e 3b 74 72 79 7b 6e 3d 59 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var R=this\|\|self,L=function(n){return n},D=function(n,Y){if(!(Y=(n=null,R.trustedTypes),Y)\|\|!Y.createPolicy)return n;try{n=Y.createPolicy("bg",{createHTM
2024-04-24 07:58:51 UTC	1255	IN	Data Raw: 65 61 74 65 53 63 72 69 70 74 28 64 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 22 22 2b 64 7d 7d 28 52 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 6e 57 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 29 7b 72 65 74 75 72 6e 20 59 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 59 3c 6e 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 6e 5b 59 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d 7d 2c 59 4b Data Ascii: eateScript(d)}:function(d){return""+d}}(R)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var nW=function(n,Y){return Y=0,function(){return Y<n.length?{done:false,value:n[Y++]}:{done:true}}},YK
2024-04-24 07:58:51 UTC	1255	IN	Data Raw: 61 6c 73 65 29 7d 2c 28 6e 2e 56 3d 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 57 29 7b 72 65 74 75 72 6e 20 6e 2e 7a 5a 28 57 29 7d 29 29 7d 65 6c 73 65 7b 69 66 28 6d 3d 3d 6d 47 29 72 65 74 75 72 6e 20 52 3d 59 5b 32 5d 2c 7a 28 33 38 38 2c 6e 2c 59 5b 36 5d 29 2c 7a 28 34 30 39 2c 6e 2c 52 29 2c 6e 2e 58 28 59 29 3b 6d 3d 3d 69 71 3f 28 6e 2e 54 3d 6e 75 6c 6c 2c 6e 2e 52 67 3d 5b 5d 2c 6e 2e 4e 3d 5b 5d 29 3a 6d 3d 3d 68 53 26 26 22 6c 6f 61 64 69 6e 67 22 3d 3d 3d 75 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 26 26 28 6e 2e 4a 3d 66 75 6e 63 74 69 6f 6e 28 57 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 72 7c 7c 28 72 3d 74 72 75 65 2c 57 28 29 29 7d 28 72 3d 66 61 6c 73 65 2c 75 2e 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 Data Ascii: alse)},(n.V=[],function(W){return n.zZ(W)}))}else{if(m==mG)return R=Y[2],z(388,n,Y[6]),z(409,n,R),n.X(Y);m==iq?(n.T=null,n.Rg=[],n.N=[]):m==hS&&"loading"===u.document.readyState&&(n.J=function(W,r){function d(){r\|\|(r=true,W())}(r=false,u.document.addEvent
2024-04-24 07:58:51 UTC	1255	IN	Data Raw: 74 69 6f 6e 28 29 7b 71 28 74 72 75 65 2c 6e 2c 74 72 75 65 29 7d 29 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 4c 7d 2c 6b 4b 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 2c 4c 29 7b 77 28 28 4c 3d 62 28 6e 29 2c 52 3d 62 28 6e 29 2c 52 29 2c 56 28 59 2c 5a 28 4c 2c 6e 29 29 2c 6e 29 7d 2c 53 5f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 29 7b 72 65 74 75 72 6e 20 4e 5b 59 5d 28 4e 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 70 61 72 65 6e 74 3a 6e 2c 66 6c 6f 6f 72 3a 6e 2c 70 72 6f 74 6f 74 79 70 65 3a 6e 2c 73 70 6c 69 63 65 3a 6e 2c 64 6f 63 75 6d 65 6e 74 3a 6e 2c 63 6f 6e 73 6f 6c 65 3a 6e 2c 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 3a 6e 2c 72 65 70 6c 61 63 65 3a 6e 2c 70 6f 70 3a 6e 2c 63 61 6c 6c 3a 6e 2c 73 74 61 63 6b 3a 6e 2c 6c 65 Data Ascii: tion(){q(true,n,true)});break}}return L},kK=function(n,Y,R,L){w((L=b(n),R=b(n),R),V(Y,Z(L,n)),n)},S_=function(n,Y){return N[Y](N.prototype,{parent:n,floor:n,prototype:n,splice:n,document:n,console:n,propertyIsEnumerable:n,replace:n,pop:n,call:n,stack:n,le
2024-04-24 07:58:51 UTC	1255	IN	Data Raw: 31 39 36 3d 3d 6e 3f 59 2e 54 5b 6e 5d 7c 7c 28 59 2e 54 5b 6e 5d 3d 4a 53 28 6e 2c 38 36 2c 52 2c 59 29 29 3a 59 2e 54 5b 6e 5d 3d 4a 53 28 6e 2c 35 37 2c 52 2c 59 29 7d 34 35 38 3d 3d 6e 26 26 28 59 2e 6c 3d 58 28 59 2c 33 32 2c 66 61 6c 73 65 29 2c 59 2e 59 3d 76 6f 69 64 20 30 29 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 2c 4c 29 7b 66 6f 72 28 52 3d 28 28 4c 3d 5b 5d 2c 6e 29 7c 30 29 2d 31 3b 30 3c 3d 52 3b 52 2d 2d 29 4c 5b 28 6e 7c 30 29 2d 31 2d 28 52 7c 30 29 5d 3d 59 3e 3e 38 2a 52 26 32 35 35 3b 72 65 74 75 72 6e 20 4c 7d 2c 73 55 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 2c 4c 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 57 28 29 7b 7d 72 65 74 75 72 6e 7b 69 6e 76 6f 6b 65 3a 28 52 3d 28 4c 3d 28 6e 3d 57 62 28 6e 2c 66 75 6e 63 74 Data Ascii: 196==n?Y.T[n]\|\|(Y.T[n]=JS(n,86,R,Y)):Y.T[n]=JS(n,57,R,Y)}458==n&&(Y.l=X(Y,32,false),Y.Y=void 0)},V=function(n,Y,R,L){for(R=((L=[],n)\|0)-1;0<=R;R--)L[(n\|0)-1-(R\|0)]=Y>>8*R&255;return L},sU=function(n,Y,R,L,m){function W(){}return{invoke:(R=(L=(n=Wb(n,funct
2024-04-24 07:58:51 UTC	1255	IN	Data Raw: 20 6e 2e 41 3f 59 4b 28 6e 2e 43 2c 6e 29 3a 58 28 6e 2c 38 2c 74 72 75 65 29 7d 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 2c 4c 2c 6d 29 7b 6d 3d 74 68 69 73 3b 74 72 79 7b 51 4c 28 74 68 69 73 2c 59 2c 52 2c 4c 2c 6e 29 7d 63 61 74 63 68 28 57 29 7b 61 28 74 68 69 73 2c 57 29 2c 52 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 28 6d 2e 68 29 7d 29 7d 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 29 7b 28 7a 28 59 2c 6e 2c 52 29 2c 52 29 5b 68 53 5d 3d 32 37 39 36 7d 2c 41 53 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 2c 4c 2c 6d 2c 57 29 7b 69 66 28 21 59 2e 68 29 7b 59 2e 75 2b 2b 3b 74 72 79 7b 66 6f 72 28 4c 3d 76 6f 69 64 20 30 2c 52 3d 30 2c 6d 3d 59 2e 4f 3b 2d 2d 6e 3b 29 74 72 79 7b 69 66 28 28 57 3d 76 6f 69 64 20 30 2c 59 29 2e Data Ascii: n.A?YK(n.C,n):X(n,8,true)},U=function(n,Y,R,L,m){m=this;try{QL(this,Y,R,L,n)}catch(W){a(this,W),R(function(r){r(m.h)})}},T=function(n,Y,R){(z(Y,n,R),R)[hS]=2796},AS=function(n,Y,R,L,m,W){if(!Y.h){Y.u++;try{for(L=void 0,R=0,m=Y.O;--n;)try{if((W=void 0,Y).
2024-04-24 07:58:51 UTC	1255	IN	Data Raw: 6c 5e 3d 6d 2a 28 44 3c 3c 32 29 29 2c 52 29 2e 52 3d 6d 7c 7c 52 2e 52 2c 52 29 2e 47 2b 3d 6d 2c 57 29 7c 7c 72 29 52 2e 57 3d 30 2c 52 2e 46 3d 64 3b 69 66 28 21 72 7c 7c 64 2d 52 2e 44 3c 52 2e 68 7a 2d 28 4c 3f 32 35 35 3a 6e 3f 35 3a 32 29 29 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 72 65 74 75 72 6e 21 28 52 2e 4a 3d 28 28 7a 28 34 35 34 2c 52 2c 28 52 2e 6b 66 3d 59 2c 4c 3d 5a 28 6e 3f 37 35 3a 34 35 34 2c 52 29 2c 52 29 2e 4f 29 2c 52 2e 69 29 2e 70 75 73 68 28 5b 52 31 2c 4c 2c 6e 3f 59 2b 31 3a 59 2c 52 2e 53 2c 52 2e 48 2c 52 2e 76 2c 52 2e 42 5d 29 2c 6c 71 29 2c 30 29 7d 2c 76 62 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 29 7b 72 65 74 75 72 6e 20 6e 2e 54 5a 28 66 75 6e 63 74 69 6f 6e 28 4c 29 7b 52 3d 4c 7d 2c 66 61 6c 73 65 2c 59 29 2c Data Ascii: l^=m*(D<<2)),R).R=m\|\|R.R,R).G+=m,W)\|\|r)R.W=0,R.F=d;if(!r\|\|d-R.D<R.hz-(L?255:n?5:2))return false;return!(R.J=((z(454,R,(R.kf=Y,L=Z(n?75:454,R),R).O),R.i).push([R1,L,n?Y+1:Y,R.S,R.H,R.v,R.B]),lq),0)},vb=function(n,Y,R){return n.TZ(function(L){R=L},false,Y),
2024-04-24 07:58:51 UTC	1255	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 63 61 74 28 29 7d 7d 2c 28 6e 2e 46 39 3d 4e 53 2c 6e 2e 4e 49 3d 28 6e 2e 63 24 3d 6e 5b 53 5d 2c 5a 59 29 2c 6e 2e 5a 29 29 2c 6e 29 2e 6d 6b 3d 4e 5b 6e 2e 5a 5d 28 6e 2e 59 66 2c 7b 76 61 6c 75 65 3a 7b 76 61 6c 75 65 3a 7b 7d 7d 7d 29 2c 30 29 2c 5b 5d 29 3b 33 34 36 3e 72 3b 72 2b 2b 29 57 5b 72 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 72 29 3b 71 28 74 72 75 65 2c 6e 2c 28 6c 28 28 6c 28 5b 28 28 54 28 6e 2c 32 39 37 2c 28 54 28 6e 2c 28 7a 28 31 39 36 2c 6e 2c 28 7a 28 34 30 39 2c 28 54 28 6e 2c 28 54 28 6e 2c 32 35 35 2c 28 54 28 28 7a 28 33 35 33 2c 6e 2c 28 54 28 6e 2c 28 7a 28 31 38 36 2c 6e 2c 28 7a 28 31 37 37 2c 28 54 28 6e 2c 32 38 37 2c 28 7a 28 34 Data Ascii: tion(){return this.concat()}},(n.F9=NS,n.NI=(n.c$=n[S],ZY),n.Z)),n).mk=N[n.Z](n.Yf,{value:{value:{}}}),0),[]);346>r;r++)W[r]=String.fromCharCode(r);q(true,n,(l((l([((T(n,297,(T(n,(z(196,n,(z(409,(T(n,(T(n,255,(T((z(353,n,(T(n,(z(186,n,(z(177,(T(n,287,(z(4
2024-04-24 07:58:51 UTC	1255	IN	Data Raw: 64 29 2c 64 29 29 3b 54 28 64 2c 46 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 4b 2c 70 2c 63 29 7b 66 6f 72 28 65 3d 28 70 3d 5b 5d 2c 30 29 2c 4b 3d 5b 5d 3b 65 3c 6b 3b 65 2b 2b 29 7b 69 66 28 21 28 63 3d 44 5b 65 5d 2c 66 5b 65 5d 29 29 7b 66 6f 72 28 3b 63 3e 3d 70 2e 6c 65 6e 67 74 68 3b 29 70 2e 70 75 73 68 28 62 28 74 29 29 3b 63 3d 70 5b 63 5d 7d 4b 2e 70 75 73 68 28 63 29 7d 74 2e 43 3d 28 74 2e 41 3d 66 57 28 45 2e 73 6c 69 63 65 28 29 2c 74 29 2c 66 57 28 4b 2c 74 29 29 7d 29 7d 29 2c 33 31 31 29 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 44 2c 68 2c 50 2c 6b 29 7b 28 44 3d 28 50 3d 5a 28 28 68 3d 28 6b 3d 5a 28 28 50 3d 62 28 28 68 3d 62 28 28 44 3d 28 6b 3d 62 28 64 29 2c 62 29 28 64 29 2c 64 29 29 2c 64 29 29 2c 6b 29 2c 64 2e 52 29 2c 5a 29 28 68 Data Ascii: d),d));T(d,F,function(t,e,K,p,c){for(e=(p=[],0),K=[];e<k;e++){if(!(c=D[e],f[e])){for(;c>=p.length;)p.push(b(t));c=p[c]}K.push(c)}t.C=(t.A=fW(E.slice(),t),fW(K,t))})}),311),function(d,D,h,P,k){(D=(P=Z((h=(k=Z((P=b((h=b((D=(k=b(d),b)(d),d)),d)),k),d.R),Z)(h
2024-04-24 07:58:51 UTC	1255	IN	Data Raw: 29 7b 45 55 28 64 2c 33 29 7d 29 29 2c 6e 29 2c 5b 5d 29 2c 5b 5d 29 29 2c 49 28 34 29 29 29 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 44 2c 68 2c 50 29 7b 21 4f 28 74 72 75 65 2c 44 2c 64 2c 66 61 6c 73 65 29 26 26 28 44 3d 42 62 28 64 29 2c 50 3d 44 2e 4f 5f 2c 68 3d 44 2e 6c 53 2c 64 2e 52 3d 3d 64 7c 7c 50 3d 3d 64 2e 45 5f 26 26 68 3d 3d 64 29 26 26 28 7a 28 44 2e 4a 7a 2c 64 2c 50 2e 61 70 70 6c 79 28 68 2c 44 2e 73 29 29 2c 64 2e 46 3d 64 2e 4b 28 29 29 7d 29 29 2c 5b 31 36 30 2c 30 2c 30 5d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 44 2c 68 29 7b 44 3d 62 28 28 68 3d 62 28 64 29 2c 64 29 29 2c 7a 28 44 2c 64 2c 22 22 2b 5a 28 68 2c 64 29 29 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 44 2c 68 2c 50 29 7b 7a 28 28 50 3d 5a 28 28 44 3d 28 44 3d 62 28 28 Data Ascii: ){EU(d,3)})),n),[]),[])),I(4))),function(d,D,h,P){!O(true,D,d,false)&&(D=Bb(d),P=D.O_,h=D.lS,d.R==d\|\|P==d.E_&&h==d)&&(z(D.Jz,d,P.apply(h,D.s)),d.F=d.K())})),[160,0,0])),function(d,D,h){D=b((h=b(d),d)),z(D,d,""+Z(h,d))})),function(d,D,h,P){z((P=Z((D=(D=b((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49755	142.250.141.105	443	1948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 07:58:51 UTC	1885	OUT	GET /recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadsafe%3Dlow%26adtest%3Doff%26psid%3D7949183650%26pcsa%3Dfalse%26channel%3Dnon-expiry%26domain_name%3Dlokicollective.org%26client%3Ddp-godaddy1_xml%26r%3Dm%26rpbu%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-oo-1885714186540894%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300002%252C17301437%252C17301439%252C17301442%26client_gdprApplies%3D0%26format%3Dr3%26nocache%3D421713945521519%26num%3D0%26output%3Dafd_ads%26v%3D3%26bsl%3D8%26pac%3D2%26u_his%3D1%26u_tz%3D120%26dt%3D1713945521522%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D907%26frm%3D0%26uio%3D-%26cont%3DrelatedLinks%26drt%3D0%26jsid%3Dcaf%26nfp%3D1%26jsv%3D625314022%26rurl%3Dhttps%253A%252F%252Flokicollective.org%252Flander%26referer%3Dhttps%253A%252F%252Flokicollective.org%252Fproject%252F&q=EgSaEGkkGLT3orEGIjASKWvf3s_h17mP-Uc4UVzAQloNiIqRSy-JFjke5NIPT7PON1RaNAY9q1P-D0LQKt8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 07:58:52 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 07:58:52 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-6_jhw1uUHJjcE1Uz2zJJKw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 07:58:52 UTC	364	IN	Data Raw: 31 64 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-24 07:58:52 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-24 07:58:52 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-24 07:58:52 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-24 07:58:52 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-24 07:58:52 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-24 07:58:52 UTC	813	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 5f 6a 68 77 31 75 55 48 4a 6a 63 45 31 55 7a 32 7a 4a 4a 4b 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="6_jhw1uUHJjcE1Uz2zJJKw" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-04-24 07:58:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1828, Parent PID: 3040

General

Target ID:	0
Start time:	09:58:26
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1948, Parent PID: 1828

General

Target ID:	2
Start time:	09:58:30
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2168,i,13060034692085098184,4281837526702625336,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7144, Parent PID: 3040

General

Target ID:	3
Start time:	09:58:33
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://lokicollective.org/project/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://lokicollective.org/project/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Static File Info

Network Behavior

Network Port Distribution

Windows Analysis Report
https://lokicollective.org/project/